CVEs published in September 2023
2,233 vulnerabilities, 282 critical, 23 exploited.
- frangoteam fuxaFUXA vulnerable to Local File Inclusion7.5 High
- contaoContao Cross-site Scripting vulnerabililty6.1 Medium
- getcomposer composerComposer allows cache poisoning from other projects built on the same host8.8 High
- yiiframework yiiYii2 allows attackers to execute any local .php file via a relative path in the view parameter9.8 Critical
- contribsys faktoryFaktory Web Dashboard can lead to denial of service(DOS) via malicious user input7.5 High
- oracle linux, vm, vm server +2 moreIn the Unbreakable Enterprise Kernel (UEK), the RDS module in UEK has two setsockopt(2) options,...5.5 Medium
- ibm robotic process automation, robotic process automation for cloud pak +1 moreIBM Robotic Process Automation information disclosure3.7 Low
- ibm person communicationsIBM Personal Communications privilege escalation8.4 High
- red hat openstack platform 13.0 (queens) for rhel 7.6 eus, openstack platform 13.0 - els, redhat openstack platform +2 moreInstack-undercloud: rsync leaks information to undercloud7.5 High
- ibm storage protect, storage protect client, storage protect for space management +1 more +3 moreIBM Storage Protect information disclosure4.4 Medium
skopeoSUSESecurity update for skopeoNo score- amd epyc™ embedded 7003, ryzen™ embedded 5000, ryzen™ embedded v2000 +112 more +114 moreImproper initialization of variables in the DXE driver may allow a privileged user to leak...5.5 Medium
- amd 3rd gen amd epyc™ processors, ryzen™ embedded 7000, ryzen™ embedded v3000 +139 more +141 moreImproper initialization of variables in the DXE driver may allow a privileged user to leak...4.4 Medium
- drupal core, drupal +1 moreDrupal core - Critical - Cache poisoning - SA-CORE-2023-0067.5 High
- progress moveit transferMOVEit Transfer Reflected XSS6.1 Medium
- jenkinsJenkins temporary uploaded file created with insecure permissions8.1 High
- jenkins build failure analyzer, jenkins project build failure analyzer plugin +1 moreJenkins Build Failure Analyzer Plugin Cross-Site Request Forgery vulnerability4.3 Medium
- jenkins build failure analyzer, jenkins project build failure analyzer plugin +1 moreJenkins Build Failure Analyzer Plugin missing permission check6.5 Medium
- jenkins build failure analyzer, jenkins project build failure analyzer plugin +1 moreJenkins Build Failure Analyzer Plugin Cross-Site Request Forgery vulnerability8.8 High
- jenkins build failure analyzer, jenkins project build failure analyzer plugin +1 moreJenkins Build Failure Analyzer Plugin Cross-site Scripting vulnerability5.4 Medium
- jenkinsJenkins temporary uploaded file created with insecure permissions8.1 High
- jenkinsJenkins temporary plugin file created with insecure permissions8.8 High
- jenkinsJenkins Cross-site Scripting vulnerability5.4 Medium
- jenkinsJenkins does not exclude sensitive build variables from search4.3 Medium
- progress moveit transferMOVEit Transfer System Administrator SQL Injection7.2 High
- ovn open virtual network, fedora, red hat fast datapath for rhel 7 +6 more +8 moreService monitor mac flow is not rate limited5.3 Medium
- progress moveit transferMOVEit Transfer Machine Interface SQL Injection8.8 High
- d-link d-view 8Authentication Bypass in D-Link D-View 89.8 Critical
- rockwell auotmation 1756-en2tpxt series a, rockwell automation 1756-en2f series a, b, 1756-en2f series c +52 more +54 moreRockwell Automation Select Logix Communication Modules Vulnerable to Email Object Buffer Overflow9.8 Critical
- papercut mf/ng mobility print, papercut mobility print server +1 moreCSRF in PaperCutNG Mobility Print leads to sophisticated phishing5.3 Medium
- lf-edge, zededa eve os, linuxfoundation edge virtualization engine +1 moreVault Key Sealed With SHA1 PCRs8.8 High
- lf-edge, zededa eve os, linuxfoundation edge virtualization engine +1 moreRootfs Not Protected8.8 High
- lf-edge, zededa eve os, linuxfoundation edge virtualization engine +1 moreConfig Partition Not Measured From 2 Fronts8.8 High
mrab-regexPyPIUNKNOWN READ in bytes1_char_atNo scoreluceneOSS-FuzzSecurity exception in org.apache.lucene.util.ArrayUtil.copyOfSubArrayNo score- theforeman foreman, red hat satellite 6, redhat satellite +2 moreArbitrary code execution through yaml global parameters8.0 High
- theforeman foreman, red hat satellite 6.11 for rhel 7, satellite 6.11 for rhel 8 +4 more +6 moreForeman: arbitrary code execution through templates9.1 Critical
- telstra arcadyan lh1000, smart modem gen 2 (arcadyan lh1000), arcadyan lh1000 firmware +2 moreUnauthenticated configuration restore and firmware update8.8 High
- telstra arcadyan lh1000, smart modem gen 2 (arcadyan lh1000), arcadyan lh1000 firmware +2 morePost-Auth Command Injection in Telstra Smart Modem Gen 2 (Arcadyan LH1000)6.8 Medium
- pleskCross-Site Scripting (XSS) vulnerability in Plesk8.8 High
- prestashop m4 pdf plugin, m4 pdf +1 moreCross-site Scripting in M4 PDF plugin for Prestashop sites3.5 Low
- openprinting cups, libppd, debian linux +1 more +3 moreOpenPrinting CUPS/libppd Postscript Parsing Heap Overflow7.0 High
- acronis cyber protect home office, true image oem +1 moreSensitive information disclosure due to insecure folder permissions. The following products are...5.5 Medium
- hestiacp, hestiacp hestiacp/hestiacp +1 moreCross-site Scripting (XSS) - Reflected in hestiacp/hestiacp3.9 Low
- quarkus, red hat openshift serverless 1 on rhel 8, build of optaplanner 8 +20 more +22 moreQuarkus: http security policy bypass8.1 High
- prestashop m4 pdf plugin, m4 pdf +1 morePath Traversal in M4 PDF plugin for Prestashop sites6.5 Medium
- spring for graphql, vmware spring for graphql +1 moreExposure of data and identity to wrong session in Spring for GraphQL3.1 Low
- jtekt kostac plc, jtekt electronics corporation kostac plc programming software +1 moreDouble free issue exists in Kostac PLC Programming Software Version 1.6.11.0 and earlier....7.8 High
- jtekt kostac plc, jtekt electronics corporation kostac plc programming software +1 moreUse after free vulnerability exists in Kostac PLC Programming Software Version 1.6.11.0....7.8 High
- ormazabal ekorccp, ekorccp firmware, ekorrci +1 more +3 moreAllocation of Resources Without Limits or Throttling in Ormazabal products7.5 High
- Show moreLoading…