CVEs published in September 2023
2,233 vulnerabilities, 282 critical, 23 exploited.
- jes madsen cookies by jmWordPress Cookies by JM Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- brett shumaker simple staff list, simple staff list project staff list +1 moreWordPress Simple Staff List Plugin <= 2.2.3 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- estatik mortgage calculatorWordPress Mortgage Calculator Estatik Plugin <= 2.0.7 is vulnerable to Cross Site Scripting (XSS)7.1 High
- wp-eventmanager wp event manager, wpeventmanager wp event manager – events calendar, registrations, sell tickets with woocommerce +1 moreWP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce <= 3.1.37.1 - Authenticated (Admin+) Stored Cross-Site Scripting4.4 Medium
- pgyer codefeverAn issue in PGYER codefever v.2023.8.14-2ce4006 allows a remote attacker to execute arbitrary...9.8 Critical
- oretnom23 expense trackerSourcecodester Expense Tracker App v1 is vulnerable to Cross Site Scripting (XSS) via add category.5.4 Medium
- oretnom23 toll tax management systemSourcecodester Toll Tax Management System v1 is vulnerable to SQL Injection.7.2 High
- tenda ac10u, tendacn ac10u firmware +1 moreTenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack...9.8 Critical
- tenda ac10u, tendacn ac10u firmware +1 moreTenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack...9.8 Critical
- tenda ac10u, tendacn ac10u firmware +1 moreTenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack...9.8 Critical
- tenda ac10u, tendacn ac10u firmware +1 moreTenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack...9.8 Critical
- tenda ac10u firmwareTenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack...9.8 Critical
- tenda ac10u firmwareTenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack...9.8 Critical
- tenda ac10u firmwareTenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack...9.8 Critical
- tenda ac10u firmwareTenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack...9.8 Critical
- tenda ac10u firmwareTenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack...9.8 Critical
- tenda ac10u firmwareTenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain multiple...9.8 Critical
- tenda ac10u firmwareTenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack...9.8 Critical
- intelliants subrionSubrion CMS XSS in /panel/configuration/financial/5.4 Medium
- intelliants subrionSubrion CMS Cross-site Scripting vulnerability in /panel/languages5.4 Medium
- proxmox backup server, mail gateway, virtual environment +2 moreAn issue in Proxmox Server Solutions GmbH Proxmox VE v.5.4 thru v.8.0, Proxmox Backup Server v.1...8.8 High
- zyxel pmg2005-t20b, pmg2005-t20b firmware +1 moreBuffer Overflow vulnerability in ZYXEL ZYXEL v.PMG2005-T20B allows a remote attacker to cause a...7.5 High
- yzncmsA stored cross-site scripting (XSS) vulnerability in the cms/content/edit component of YZNCMS v1...6.1 Medium
- jrecms springbootcmsSQL injection can exist in a newly created part of the JFinalcms background, and the parameters...8.8 High
- jrecms springbootcmsJFinalCMS foreground message can be embedded malicious code saved in the database. When users...5.4 Medium
- ibm spectrum fusion hci, storage fusion hci +1 moreIBM Spectrum Fusion HCI improper access control6.5 Medium
- phpkobo ajaxnewstickerCross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to...6.1 Medium
- phpkobo ajaxnewstickerCross Site Request Forgery vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote...8.8 High
- phpkobo ajaxnewstickerCross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to...6.1 Medium
- phpkobo ajaxnewstickerAn issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute arbitrary code via...9.8 Critical
- phpkobo ajaxnewstickerCross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to...6.1 Medium
- phpkobo ajaxnewstickerCross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to...6.1 Medium
- metersphereWeak password of selenium VNC in MeterSphere4.6 Medium
- glpi-project glpiFile deletion through document upload process in GLPI7.7 High
- glpi-project glpiSQL injection in ITIL actors in GLPI6.5 Medium
- glpi-project glpiPhishing through a login page malicious URL in GLPI5.3 Medium
- glpi-project glpiAccount takeover via Kanban feature in GLPI8.1 High
- glpi-project glpiAccount takeover through API in GLPI8.1 High
- glpi-project glpiUsers login enumeration by unauthenticated user in GLPI5.3 Medium
- glpi-project glpiPrivilege Escalation from technician to super-admin in GLPI4.9 Medium
- symantec protection engineSymantec Protection Engine Hash Leak Vulnerability6.8 Medium
- hitachi vantara pentaho business analytics server, hitachivantara pentaho business analytics +1 moreHitachi Vantara Pentaho Business Analytics Server – Password Stored in a Recoverable Format4.3 Medium
- illumio core pce, core policy compute engine +1 moreAuthenticated RCE due to unsafe JSON deserialization9.9 Critical
- glpi-project glpiSensitive fields enumeration through API in GLPI4.9 Medium
- glpi-project glpiAccount takeover via SQL Injection in UI layout preferences in GLPI8.1 High
- openfgaDenial of service from circular relationship definitions in OpenFGA5.9 Medium
- fit2cloud jumpserverPath traversal in Jumpserver8.9 High
- fit2cloud jumpserverRandom seed leakage in Jumpserver7.0 High
- ciliumDenial of service via Kubernetes annotations in specific Cilium configurations3.5 Low
- ciliumBypass of namespace restrictions in CiliumNetworkPolicy6.9 Medium
- Show moreLoading…