CVEs published in September 2023
2,233 vulnerabilities, 282 critical, 23 exploited.
- collne welcart, collne inc. welcart e-commerce +1 morePath traversal vulnerability in Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with...4.3 Medium
- coline welcart e-commerce, welcart e-commerce +1 moreWelcart e-Commerce versions 2.7 to 2.8.21 allows a user with editor or higher privilege to upload...7.2 High
- easyphp webserverOS command injection on EasyPHP Webserver9.8 Critical
- travelmap travel map, travelmap +1 moreWordPress Travel Map Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)5.8 Medium
- restrictWordPress Restrict Plugin <= 2.2.4 is vulnerable to Cross Site Scripting (XSS)7.1 High
- pimcore core, pimcore, pimcore pimcore/demo +2 moreExcessive Data Query Operations in a Large Data Table in pimcore/demo6.1 Medium
- opencartPath Traversal in OpenCart versions 4.0.0.0 to 4.0.2.28.1 High
- domainsupport options for twenty seventeenOptions for Twenty Seventeen <= 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- wow-company modal window, wpcalc modal window – create popup modal window +1 moreModal Window <= 5.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- elliotvs simple captcha alternative with cloudflare turnstile, replywp simple cloudfare turnstile +1 moreSimple Cloudflare Turnstile <= 1.23.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- cyberlord92 active directory integration / ldap integration, miniorange active directory integration \/ ldap integration +1 moreActive Directory Integration / LDAP Integration <= 4.1.10 - LDAP Passback2.2 Low
- cyberlord92 staff/employee business directory for active directory, miniorange staff \/ employee business directory for active directory +1 moreStaff / Employee Business Directory for Active Directory <= 1.2.3 - Authenticated (Admin+) LDAP Passback2.2 Low
- huawei emui, harmonyos +1 moreStability-related vulnerability in the binder background management and control module....7.5 High
- huawei emui, harmonyos +1 moreBroadcast permission control vulnerability in the framework module. Successful exploitation of...5.3 Medium
- huawei emui, harmonyos +1 morePermission control vulnerability in the audio module. Successful exploitation of this...5.3 Medium
- huawei emui, harmonyos +1 morePermission control vulnerability in the audio module. Successful exploitation of this...5.3 Medium
- huawei emui, harmonyos +1 moreKeep-alive vulnerability in the sticky broadcast mechanism. Successful exploitation of this...3.3 Low
- huawei emui, harmonyos +1 morePermission control vulnerability in the MediaPlaybackController module. Successful exploitation...7.5 High
- huawei emui, harmonyos +1 moreScreenshot vulnerability in the input module. Successful exploitation of this vulnerability may...7.5 High
- huawei emui, harmonyos +1 moreMemory overwriting vulnerability in the security module. Successful exploitation of this...7.5 High
- huawei emui, harmonyos +1 moreVulnerability of mutex management in the bone voice ID trusted application (TA) module....3.7 Low
- huawei emui, harmonyos +1 moreVulnerability of 5G messages being sent without being encrypted in a VPN environment in the SMS...7.5 High
- amd ryzen 5 7600x, ryzen 7 4800u, apple m1 mac mini +14 more +16 morePVRIC (PowerVR Image Compression) on Imagination 2018 and later GPU devices offers software...5.3 Medium
- seacmsSeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component...9.8 Critical
- seacmsSeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component...9.8 Critical
- seacmsSeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component...9.8 Critical
- seacmsSeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component...9.8 Critical
- superstorefinder super store finderSuper Store Finder v3.6 and below was discovered to contain a SQL injection vulnerability via the...7.2 High
- blackcat-cms blackcat cmsA stored cross-site scripting (XSS) vulnerability in /settings/index.php of Black Cat CMS 1.4.1...6.1 Medium
- blackcat-cms blackcat cmsA stored cross-site scripting (XSS) vulnerability in /settings/index.php of Black Cat CMS 1.4.1...5.4 Medium
- iteachyou dreamer cmsDreamer CMS v4.1.3 was discovered to contain a stored cross-site scripting (XSS) vulnerability...5.4 Medium
- iteachyou dreamer cmsDreamer CMS v4.1.3 was discovered to contain an arbitrary file read vulnerability via the...7.5 High
- tianchoy blogSQL Injection vulnerability in Tianchoy Blog v.1.8.8 allows a remote attacker to obtain sensitive...7.5 High
- small crm project crmA cross-site scripting (XSS) vulnerability in the Add User function of Small CRM v3.0 allows...5.4 Medium
- emlogDeserialization of Untrusted Data in emlog pro v.2.1.15 and earlier allows a remote attacker to...9.8 Critical
- froala editorA Cross-site scripting (XSS) vulnerability in Froala Editor v.4.1.1 allows attackers to execute...6.1 Medium
- dedebizDedeBIZ v6.2.11 was discovered to contain multiple remote code execution (RCE) vulnerabilities at...9.8 Critical
- dedebizA stored cross-site scripting (XSS) vulnerability in the Website column management function of...5.4 Medium
- seacmsSeaCMS v12.8 has an arbitrary code writing vulnerability in the /jxz7g2/admin_ping.php file.9.8 Critical
- seacmsSeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component...9.8 Critical
- nodebbA remote code execution (RCE) vulnerability in the xmlrpc.php endpoint of NodeBB Inc NodeBB forum...9.8 Critical
- macs cms project cmsIn Macrob7 Macs Framework Content Management System (CMS) 1.1.4f, loose comparison in ...9.8 Critical
- zohocorp manageengine admanager plusZoho ManageEngine ADManager Plus before 7203 allows 2FA bypass (for AuthToken generation) in REST...5.4 Medium
- cassianetworks access controllerAn issue was discovered in Cassia Access Controller 2.1.1.2303271039. Establishing a web SSH...8.8 High
- xunruicmsxunruicms <=4.5.1 is vulnerable to Remote Code Execution.9.8 Critical
- zephyrproject zephyrPotential buffer overflow vulnerabilities in the Zephyr eS-WiFi driver7.1 High
CadenceopenSUSESecurity update for CadenceNo score- zephyrproject zephyrbt: mesh: vulnerability in provisioning protocol implementation on provisionee side8.6 High
- debian linux, linux kernel, red hat enterprise linux 6 +17 more +19 moreKernel: netfilter: potential slab-out-of-bound access due to integer underflow7.0 High
- codehaus-plexus plexus-utils, red hat a-mq clients 2, a-mq online +28 more +30 moreCodehaus-plexus: xml external entity (xxe) injection4.3 Medium
- Show moreLoading…