CVEs published in September 2023
2,233 vulnerabilities, 282 critical, 23 exploited.
- huawei emui, harmonyos +1 moreVulnerability of missing authorization in the kernel module. Successful exploitation of this...9.1 Critical
- huawei emui, harmonyos +1 moreVulnerability of improper permission management in the displayengine module. Successful...5.3 Medium
- huawei harmonyosThe DP module has a service hijacking vulnerability.Successful exploitation of this vulnerability...9.8 Critical
- huawei emui, harmonyos +1 moreDoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the...7.5 High
- huawei emui, harmonyos +1 moreDoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the...7.5 High
- huawei harmonyosThe Watchkit has a risk of unauthorized file access.Successful exploitation of this vulnerability...9.1 Critical
- d-link dar-8000, dlink dar-8000 firmware +1 moreD-Link DAR-8000 changelogo.php unrestricted upload6.3 Medium
- d-link dar-8000, dlink dar-7000 firmware +1 moreD-Link DAR-8000 querysql.php sql injection6.3 Medium
- d-link dar-7000, dar-8000, dlink dar-7000 firmware +1 more +3 moreD-Link DAR-7000/DAR-8000 importexport.php sql injection6.3 Medium
- d-link dar-8000, dlink dar-8000 firmware +1 moreD-Link DAR-8000 autheditpwd.php sql injection6.3 Medium
- d-link dar-7000, dar-8000, dlink dar-7000 firmware +1 more +3 moreD-Link DAR-7000/DAR-8000 web.php unrestricted upload6.3 Medium
- xtemos woodmartWordPress WoodMart Theme <= 7.2.4 is vulnerable to Cross Site Scripting (XSS)7.1 High
- d-link dar-7000, dlink dar-7000 firmware +1 moreD-Link DAR-7000 userattestation.php unrestricted upload6.3 Medium
- d-link dar-7000, dar-8000, dlink dar-7000 firmware +1 more +3 moreD-Link DAR-7000/DAR-8000 uploadfile.php unrestricted upload6.3 Medium
- tyche softwares order delivery date for woocommerceWordPress Order Delivery Date for WooCommerce Plugin <= 3.20.0 is vulnerable to Cross Site Scripting (XSS)7.1 High
- christoph rado cookie notice & consent, christophrado cookie notice \& consent +1 moreWordPress Cookie Notice & Consent Plugin <= 1.6.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- avirtum ifoldersWordPress iFolders Plugin <= 1.5.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- d-link dar-7000, dlink dar-7000 firmware +1 moreD-Link DAR-7000 updateos.php unrestricted upload6.3 Medium
- d-link dar-7000, dar-8000, dlink dar-7000 firmware +1 more +3 moreD-Link DAR-7000/DAR-8000 updatelib.php unrestricted upload6.3 Medium
- resort reservation system project reservation system, sourcecodester resort reservation system +1 moreCross Site Scripting (XSS) vulnerability in Resort Reservation System v.1.0 allows a remote...5.4 Medium
- oretnom23 service provider management systemAn issue in Service Provider Management System v.1.0 allows a remote attacker to gain privileges...9.8 Critical
- oretnom23 service provider management systemCross Site Scripting vulnerability in Service Provider Management System v.1.0 allows a remote...5.4 Medium
- iteachyou dreamer cmsDirectory Traversal vulnerability in itechyou dreamer CMS v.4.1.3 allows a remote attacker to...8.8 High
- cmsmadesimple cms made simpleCross-Site Scripting (XSS) vulnerability in cmsmadesimple v.2.2.18 allows a local attacker to...6.1 Medium
- moosocialmooSocial v3.1.8 was discovered to contain a cross-site scripting (XSS) vulnerability via the...6.1 Medium
- moosocialA reflected cross-site scripting (XSS) vulnerability in the data[redirect_url] parameter of...6.1 Medium
- icewarp webclientCross Site Scripting (XSS) vulnerability in the Sign-In page of IceWarp WebClient 10.3.5 allows...6.1 Medium
- seacmsA Cross-Site Request Forgery (CSRF) in admin_manager.php of Seacms up to v12.8 allows attackers...8.8 High
- gladysassistant gladys assistantA path traversal in Gladys Assistant v4.26.1 and below allows authenticated attackers to extract...6.5 Medium
- totolink a3700r, n600r, a3700r firmware +1 more +3 moreTOTOLINK A3700R V9.1.2u.6134_B20201202 and N600R V5.3c.5137 are vulnerable to Incorrect Access...9.8 Critical
- szvone vmqphpszvone vmqphp <=1.13 is vulnerable to SQL Injection. Unauthorized remote users can use sql...6.5 Medium
- maxiguvenlik general device managerGeneral Device Manager 2.5.2.2 is vulnerable to Buffer Overflow.9.8 Critical
- froala editorCross-site scripting (XSS) vulnerability in Froala Froala Editor v.4.1.1 allows remote attackers...6.1 Medium
- geventGevent allows remote attacker to escalate privileges9.8 Critical
- uplight cookie lawUpLight cookiebanner before 1.5.1 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- tp-link tapo, tapo l530e firmware +1 moreAn issue in TPLink Smart bulb Tapo series L530 v.1.0.0 and Tapo Application v.2.8.14 allows a...7.5 High
- multibit hdMultiBit HD before 0.1.2 allows attackers to conduct bit-flipping attacks that insert unspendable...5.3 Medium
- d-link dar-7000, dlink dar-7000 firmware, dar-8000 firmware +2 moreD-Link DAR-7000 licence.php unrestricted upload6.3 Medium
- d-link dar-7000, dar-8000, dlink dar-7000 firmware +1 more +3 moreD-Link DAR-7000/DAR-8000 updateos.php unrestricted upload6.3 Medium
- d-link dar-7000, dlink dar-7000 firmware +1 moreD-Link DAR-7000 webmailattach.php Privilege Escalation6.3 Medium
- h3c er2100n, er2200g2, er3200g2 +27 more +29 moreH3C ER6300G2 Config File userLogin.asp path traversal3.7 Low
icuOSS-FuzzSegv on unknown address in icu_74::UnicodeString::copyFromNo score- openstack barbican, rdo openstack rdo, red hat openstack platform 13 (queens) +4 more +6 moreInsecure barbican configuration file leaking credential6.6 Medium
- openstack barbican, rdo openstack rdo, red hat openstack platform 13 (queens) +4 more +6 moreIncomplete container isolation6.0 Medium
- kubernetes kube-apiserver, red hat openshift container platform 4, openshift container platform 4.10 +5 more +7 moreKube-apiserver: privesc8.0 High
- kiali, red hat openshift service mesh 2.1, openshift service mesh 2.3 for rhel 8 +1 more +3 moreKiali: error message spoofing in kiali ui4.3 Medium
net-snmpOSS-FuzzHeap-double-free in snmp_e2e_fuzzer.cNo scoreicuOSS-FuzzUNKNOWN READ in icu_74::RelativeDateTimeFormatter::formatRelativeImplNo scoreopenscOSS-FuzzHeap-buffer-overflow in cosm_create_keyNo scoremongooseOSS-FuzzUNKNOWN READ in deliver_chunked_chunksNo score- Show moreLoading…