CVEs published in September 2023
2,233 vulnerabilities, 282 critical, 23 exploited.
- apple macosThe issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.6. Apps...5.5 Medium
- apple macosThe issue was addressed with improved bounds checks. This issue is fixed in macOS Sonoma 14. A...7.5 High
- apple ipados, macos, ios and ipados +1 more +3 moreA permissions issue was addressed with additional restrictions. This issue is fixed in iOS 17 and...5.5 Medium
- apple macosThe issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may...5.5 Medium
- apple ipados, ios and ipados, iphone os +2 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 17 and iPadOS...7.8 High
- apple ipados, macos, tvos +3 more +5 moreThe issue was addressed with improved handling of caches. This issue is fixed in macOS Ventura 13...3.3 Low
- apple ipados, macos, tvos +3 more +5 moreThis issue was addressed with improved validation of symlinks. This issue is fixed in macOS...5.5 Medium
- apple ipados, macos, tvos +4 more +6 moreThis issue was addressed with improved checks. This issue is fixed in Xcode 15, tvOS 17, watchOS...7.8 High
- apple ipados, macos, ios and ipados +1 more +3 moreA resource exhaustion issue was addressed with improved input validation. This issue is fixed in...6.5 Medium
- apple macosA permissions issue was addressed with improved redaction of sensitive information. This issue is...5.5 Medium
- apple ipados, macos, tvos +3 more +5 moreThis issue was addressed with improved checks. This issue is fixed in tvOS 17, iOS 17 and iPadOS...9.8 Critical
- apple ipados, macos, tvos +3 more +5 moreThe issue was addressed with improved handling of protocols. This issue is fixed in tvOS 17, iOS...5.5 Medium
- apple macosThe issue was addressed with improved bounds checks. This issue is fixed in macOS Sonoma 14. An...9.1 Critical
- apple ipados, macos, tvos +3 more +5 moreThe issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6,...6.5 Medium
- apple macosA logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app...5.5 Medium
- apple ipados, macos, tvos +3 more +5 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in tvOS...7.8 High
- apple ipados, macos, watchos +2 more +4 moreA logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.6, iOS...5.5 Medium
- apple ipados, tvos, watchos +2 more +4 moreThe issue was addressed with improved memory handling. This issue is fixed in tvOS 17, iOS 17 and...7.8 High
- apple macosAn authentication issue was addressed with improved state management. This issue is fixed in...5.5 Medium
- apple ipados, tvos, watchos +2 more +4 moreThe issue was addressed with improved checks. This issue is fixed in tvOS 17, iOS 17 and iPadOS...3.3 Low
- apple macosA privacy issue was addressed with improved handling of temporary files. This issue is fixed in...5.5 Medium
- apple ipados, macos, ios and ipados +1 more +3 moreThe issue was addressed with improved checks. This issue is fixed in iOS 17 and iPadOS 17, macOS...5.5 Medium
- apple ipados, macos, safari +3 more +5 moreA window management issue was addressed with improved state management. This issue is fixed in...5.4 Medium
- juniper junos, junos os +1 moreJunos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload and download arbitrary files5.3 Medium
- zephyrproject zephyrPotential off-by-one buffer overflow vulnerability in the Zephyr FS subsystem6.3 Medium
- element-hq synapse, fedoraproject fedora +1 moreImproper validation of receipts allows forged read receipts in matrix synapse3.1 Low
- element-hq synapse, fedoraproject fedora +1 moreTemporary storage of plaintext passwords during password changes in matrix synapse3.7 Low
- vyperlang vyper_abi_decode input not validated in complex expressions in Vyper5.3 Medium
- zephyrproject zephyrPotential buffer overflow vulnerabilities in the Zephyr Bluetooth subsystem7.1 High
- chaijs get-func-nameInefficient Regular Expression Complexity in get-func-name8.6 High
- palantir com.palantir.acme:gotham-fe-bundle, com.palantir.acme:titanium-browser-app-bundle, gotham-fe-bundle +1 more +3 morePalantir Gotham UI bug that could lead to incorrect data classification6.5 Medium
- ciliumCilium NetworkPolicy bypass via pod labels7.6 High
- palantir apollo autopilot, com.palantir.apollo:autopilot +1 moreStored XSS via javascript URI in Apollo Change Requests comment4.1 Medium
- vmware aria operations, cloud foundation +1 moreVMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor...6.7 Medium
wireopenSUSESecurity update for wireNo score- hancom office 2020A use-after-free vulnerability exists in the footerr functionality of Hancom Office 2020 HWord 11...8.8 High
- eaton smp 16, smp 4/dp, smp sg-4250 +5 more +7 moreSecurity issue in SMP Gateway automation platform4.7 Medium
- dell networkerDell NetWorker, Version 19.7 has an improper authorization vulnerability in the NetWorker client...8.8 High
- red hat amq broker 7, rhel-8 based middleware containers, redhat jboss a-mq +2 more +4 moreOperator: plaintext password in operator log5.5 Medium
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreUse-after-free in Linux kernel's netfilter: nf_tables component7.8 High
- siberiancmsSiberianCMS - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') by an unauthenticated user8.8 High
- siberiancmsSiberianCMS - CWE-434: Unrestricted Upload of File with Dangerous Type - A malicious user with administrative privileges may be able to upload a dangerous filetype via an unspecified method7.2 High
- siberiancmsSiberianCMS - CWE-284: Improper Access Control Authorized user may disable a security feature over the network6.5 Medium
- siberiancmsSiberianCMS - CWE-274: Improper Handling of Insufficient Privileges7.5 High
- collne inc. welcart e-commerce, welcart e-commerce +1 moreCross-site scripting vulnerability in Order Data Edit page of Welcart e-Commerce versions 2.7 to...6.1 Medium
- collne inc. welcart e-commerce, welcart e-commerce +1 moreSQL injection vulnerability in Order Data Edit page of Welcart e-Commerce versions 2.7 to 2.8.21...8.8 High
- collne inc. welcart e-commerce, welcart e-commerce +1 moreSQL injection vulnerability in Item List page of Welcart e-Commerce versions 2.7 to 2.8.21 allows...4.9 Medium
- collne inc. welcart e-commerce, welcart e-commerce +1 moreCross-site scripting vulnerability in Item List page of Welcart e-Commerce versions 2.7 to 2.8.21...6.1 Medium
- collne inc. welcart e-commerce, welcart e-commerce +1 moreCross-site scripting vulnerability in Credit Card Payment Setup page of Welcart e-Commerce...6.1 Medium
- collne inc. welcart e-commerce, welcart e-commerce +1 moreCross-site scripting vulnerability in Item List page registration process of Welcart e-Commerce...6.1 Medium
- Show moreLoading…