CVEs published in September 2023
2,233 vulnerabilities, 282 critical, 23 exploited.
plone-restapiPyPIplone.restapi vulnerable to Stored Cross Site Scripting with SVG image in user portrait3.7 Low- sebhildebrandt systeminformationsysteminformation SSID Command Injection Vulnerability9.8 Critical
CefSharp.CommonNuGet,CefSharp.Common.NETCoreNuGet +1 moreCefSharp affected by heap buffer overflow in WebPNo scorecryptographyPyPIVulnerable OpenSSL included in cryptography wheelsNo score- input-output-hk hydraSnapshot signature not including HeadID will allow replay attacks6.5 Medium
- frappe learning, lms +1 moreFrappe LMS SQL Injection Issue on People Page6.3 Medium
- zopeZope vulnerable to Stored Cross Site Scripting with SVG images3.7 Low
- memorysafety sudo, sudo-rs +1 moresudo-rs Session File Relative Path Traversal vulnerability3.3 Low
- plone plone.rest, rest +1 moreplone.rest vulnerable to Denial of Service when ++api++ is used many times7.5 High
- plone namedfile, plone.namedfile +1 moreplone.namedfile vulnerable to Stored Cross Site Scripting with SVG images3.7 Low
- dataeaseDataEase has a vulnerability to obtain user cookies7.5 High
libdwarfOSS-FuzzHeap-use-after-free in dwarf_deallocNo score- lfedge eve, lf-edge, zededa eve os, linuxfoundation edge virtualization engine +2 moreVault Key Partially Predetermined7.8 High
- lf-edge, zededa eve os, linuxfoundation edge virtualization engine +1 moreSSH as Root Unlockable Without Triggering Measured Boot8.8 High
- lfedge eve, lf-edge, zededa eve os, linuxfoundation edge virtualization engine +2 moreFreely Allocate Buffer on The Stack With Data From Socket9.0 Critical
- lf-edge, zededa eve os, lfedge eve +1 moreDebug Functions Unlockable Without Triggering Measured Boot8.8 High
- lf-edge, zededa eve os, lfedge eve +1 moreConfig Partition Not Protected by Measured Boot8.8 High
- quinn-rs quinnquinn-proto Denial of Service vulnerability7.5 High
- openatom openharmonyOpenHarmony v3.2.1 and prior version has a system call function usage error3.9 Low
- nocodb, nocodb nocodb/nocodb +1 moreImproper Input Validation in nocodb/nocodb5.7 Medium
- eclipse foundation rap, eclipse remote application platform +1 moreRemote Code Execution in Eclipse RAP on Windows7.6 High
- frauscher fds101 for fadc/fadci, diagnostic system 101 +1 moreFrauscher FDS101 for FAdC/FAdCi SQL injection vulnerability5.3 Medium
- frauscher fds101 for fadc/fadci, diagnostic system 101 +1 moreFrauscher FDS101 for FAdC/FAdCi path traversal vulnerability7.5 High
- frauscher fds101 for fadc/fadci, diagnostic system 101 +1 moreFrauscher FDS101 for FAdC/FAdCi remote code execution vulnerability9.8 Critical
- dell policy manager for secure connect gateway, secure connect gateway (scg) policy manager +1 moreDell SCG Policy Manager 5.16.00.14 contains a broken cryptographic algorithm vulnerability. A...5.9 Medium
- snapview tungstenite, fedoraproject fedora +1 moreTungstenite allows remote attackers to cause a denial of service7.5 High
- webminThere is a stored cross-site scripting (XSS) vulnerability in Webmin 2.002 and below via the...4.8 Medium
- phpjabbers php shopping cartPhpjabbers PHP Shopping Cart 4.2 is vulnerable to SQL Injection via the id parameter.7.5 High
- dlink dir-816 a2 firmware, dir-816a2 firmware +1 moreD-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter...9.8 Critical
- d-link dir-823g, dlink dir-823g firmware +1 moreD-Link DIR-823G v1.0.2B05 was discovered to contain a stack overflow via parameter TXPower and...9.8 Critical
- d-link dir-816 a2, dlink dir-816 a2 firmware +1 moreD-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter sip_address...9.8 Critical
- dlink dir-816 a2 firmwareD-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter flag_5G in...9.8 Critical
- dlink dir-816 a2 firmwareD-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter nvmacaddr...9.8 Critical
- dlink dir-816 a2 firmwareD-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter macCloneMac...9.8 Critical
- dlink dir-816 a2 firmwareD-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter...9.8 Critical
- d-link dir-823g, dlink dir-823g firmware +1 moreD-Link DIR-823G v1.0.2B05 was discovered to contain a stack overflow via parameter StartTime and...9.8 Critical
- d-link dir-806 1200m11ac, dir806a1 fw100cnb11, dlink dir-806 firmware +2 moreD-LINK DIR-806 1200M11AC wireless router DIR806A1_FW100CNb11 is vulnerable to command injection...9.8 Critical
- samsung exynos 2200, exynos 2200 firmware +1 moreSamsung Mobile Processor Exynos 2200 allows a GPU Use After Free.4.7 Medium
- springernature mee-adminmee-admin 1.5 is vulnerable to Directory Traversal. The download method in the...7.5 High
- iteachyou dreamer cmsDreamer CMS 4.1.3 is vulnerable to SQL Injection.9.8 Critical
- opensecurity mobile security frameworkWithdrawn Advisory: Mobile Security Framework (MobSF) Vulnerable to Insecure Permissions7.5 High
- student management system project management systemA reflected cross-site scripting (XSS) vulnerability in the Search Student function of Student...4.8 Medium
- phpgurukul zoo management systemA stored cross-site scripting (XSS) vulnerability in the Add Animal Details function of Zoo...4.8 Medium
- ivanti endpoint managerAn issue was discovered in Ivanti Endpoint Manager before 2022 SU4. A file disclosure...6.5 Medium
- ivanti endpoint managerAn XXE (XML external entity injection) vulnerability exists in the CSEP component of Ivanti...7.5 High
- planned popup project popupSQL injection vulnerability in Prestashop opartplannedpopup 1.4.11 and earlier allows remote...9.8 Critical
- store-opart op\'art product faqSQL injection vulnerability in updatepos.php in PrestaShop opartfaq through 1.0.3 allows remote...9.8 Critical
- frangoteam fuxaFUXA SQL Injection vulnerability9.8 Critical
- frangoteam fuxaFUXA local file inclusion vulnerability7.5 High
- frangoteam fuxaFUXA SQL Injection vulnerability7.5 High
- Show moreLoading…