CVEs published in September 2023
2,233 vulnerabilities, 282 critical, 23 exploited.
- codehaus-plexus plexus-utils, red hat a-mq clients 2, a-mq online +28 more +30 moreCodehaus-plexus: directory traversal7.5 High
- sagernet sing-boxImproper authentication in the SOCKS5 inbound in sing-box9.1 Critical
- pepro dev. group peprodev cf7 database, peprodev cf7 database +1 moreWordPress PeproDev CF7 Database Plugin <= 1.7.0 is vulnerable to Cross Site Scripting (XSS)7.1 High
- acymailingWordPress AcyMailing SMTP Newsletter Plugin <= 8.6.2 is vulnerable to Cross Site Scripting (XSS)7.1 High
- arjunsharda searchorSearchor CLI's Search vulnerable to Arbitrary Code using Eval9.8 Critical
- codestag stagtoolsWordPress Stagtools Plugin <= 2.3.7 is vulnerable to Cross Site Scripting (XSS)7.1 High
- ays pro poll maker, poll maker team maker +1 moreWordPress Poll Maker Plugin <= 4.7.0 is vulnerable to Cross Site Scripting (XSS)7.1 High
- xerial snappy-javaMissing upper bound check on chunk length in snappy-java7.5 High
- pimcore admin-ui-classic-bundle, admin classic bundle +1 moreCross-site Scripting (XSS) in pimcore admin-ui-classic-bundle translations5.4 Medium
- yt-dlpyt-dlp command injection when using `%q` in `--exec` on Windows8.4 High
- unknown dologin securityDoLogin Security < 3.7 - Unauthenticated Stored Cross-Site Scripting6.1 Medium
- plainware locatoraid, locatoraid store locator +1 moreLocatoraid Store Locator < 3.9.24 - Reflected XSS6.1 Medium
- gtranslate translate wordpress with gtranslateTranslate WordPress with GTranslate < 3.0.4 - Admin+ Stored XSS4.8 Medium
- fileorganizerFileOrganizer <= 1.0.2 - Admin+ Arbitrary File Access7.2 High
- all in one b2b for woocommerce project in one b2b for woocommerce, unknown all in one b2b for woocommerce +1 moreAll in One B2B for WooCommerce <= 1.0.3 - Multiple CSRF8.8 High
- unknown dologin securityDoLogin Security < 3.7 - IP Spoofing5.3 Medium
- metaphorcreations dittyDitty < 3.1.25 - Reflected XSS6.1 Medium
- mooveagency import xml and rss feedsImport XML and RSS Feeds < 2.1.5 - Unauthenticated RCE9.8 Critical
- activity log project log, unknown activity log +1 moreActivity Log < 2.8.8 - IP Spoofing5.3 Medium
- unknown wp job portalWP Job Portal < 2.0.6 - Unauthenticated SQLi9.8 Critical
- miniorange prevent files / folders access, prevent files \/ folders access +1 morePrevent files / folders access < 2.5.2 - Admin+ Arbitrary File Upload7.2 High
- ghozylab popup builderPopup Builder < 4.2.0 - Admin+ Stored Cross-Site Scripting4.8 Medium
- mooveagency import xml and rss feedsImport XML and RSS Feeds < 2.1.4 - Admin+ Arbitrary File Upload7.2 High
- sismics teedyTeedy v1.11 - Stored cross-site scripting (XSS)5.7 Medium
- linux kernel, fedora, red hat enterprise linux 6 +3 more +5 morePossible dos from guest to host invringh_kiov_advance in vhost driver at drivers/vhost/vringh.c6.5 Medium
- gnu glibc, red hat enterprise linux 6, enterprise linux 7 +6 more +8 moreGlibc: dos due to memory leak in getaddrinfo.c7.5 High
- docker desktopIn Docker Desktop on Windows before 4.12.0 an argument injection to installer may result in LPE7.2 High
- docker desktopDocker Desktop 4.11.x allows --no-windows-containers flag bypass6.7 Medium
- docker desktopDocker Desktop before 4.12.0 is vulnerable to RCE via query parameters in message-box route8.0 High
- docker desktopDocker Desktop before 4.12.0 is vulnerable to RCE via a crafted extension description or changelog8.0 High
- docker desktopDocker Desktop before 4.23.0 allows Access Token theft via a crafted extension icon URL8.0 High
- docker desktopDocker Desktop before 4.23.0 allows Enhanced Container Isolation bypass via debug shell7.1 High
- accusoft imagegearA stack-based buffer overflow vulnerability exists in the tif_processing_dng_channel_count...5.6 Medium
- accusoft imagegearA heap-based buffer overflow vulnerability exists in the CreateDIBfromPict functionality of...8.1 High
- accusoft imagegearA heap-based buffer overflow vulnerability exists in the pictwread functionality of Accusoft...9.8 Critical
- accusoft imagegearA heap-based buffer overflow vulnerability exists in the create_png_object functionality of...7.0 High
- accusoft imagegearAn out-of-bounds write vulnerability exists in the tiff_planar_adobe functionality of Accusoft...8.1 High
- accusoft imagegearA use-after-free vulnerability exists in the tif_parse_sub_IFD functionality of Accusoft...9.8 Critical
- accusoft imagegearAn out-of-bounds write vulnerability exists in the dcm_pixel_data_decode functionality of...9.8 Critical
- accusoft imagegearAn out-of-bounds write vulnerability exists in the allocate_buffer_for_jpeg_decoding...9.8 Critical
- mediawiki, debian linux +1 moreStored XSS leads to privilege escalation in MediaWiki v1.40.07.3 High
- huawei emui, harmonyos +1 moreCommand injection vulnerability in the distributed file system module. Successful exploitation of...7.5 High
- huawei emui, harmonyos +1 moreInput verification vulnerability in the fingerprint module. Successful exploitation of this...9.8 Critical
- huawei emui, harmonyos +1 moreData security classification vulnerability in the DDMP module. Successful exploitation of this...7.5 High
- huawei emui, harmonyos +1 moreRedirection permission verification vulnerability in the home screen module. Successful...7.5 High
- huawei emui, harmonyos +1 moreVulnerability of unauthorized API access in the PMS module. Successful exploitation of this...7.5 High
- huawei emui, harmonyos +1 moreVulnerability of parameters not being strictly verified in the PMS module. Successful...7.5 High
- huawei emui, harmonyos +1 moreDoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the...7.5 High
- huawei emui, harmonyos +1 moreVulnerability of permission control in the window module. Successful exploitation of this...7.5 High
- huawei emui, harmonyos +1 moreVulnerability of defects introduced in the design process in the HiviewTunner module. Successful...9.8 Critical
- Show moreLoading…