CVEs published in September 2023
2,233 vulnerabilities, 282 critical, 23 exploited.
- cisco ios xe software, ios, ios xe +2 moreA vulnerability in the Authentication, Authorization, and Accounting (AAA) feature of Cisco IOS...8.0 High
- cisco ios xe software, ios xe +1 moreA vulnerability in the Layer 2 Tunneling Protocol (L2TP) feature of Cisco IOS XE Software could...8.6 High
- cisco ios xe software, ios xe +1 moreA vulnerability in Application Quality of Experience (AppQoE) and Unified Threat Defense (UTD) on...8.6 High
- cisco dna center, digital network architecture center (dna center) +1 moreA vulnerability in Cisco DNA Center could allow an unauthenticated, remote attacker to read and...8.6 High
- cisco ios xe software, ios xe +1 moreA vulnerability in Cisco IOS XE Software for Cisco Catalyst 3650 and Catalyst 3850 Series...8.6 High
container-suseconnectSUSESecurity update for container-suseconnectNo score- cisco ios xe software, ios xe +1 moreA vulnerability in the Multicast Leaf Recycle Elimination (mLRE) feature of Cisco IOS XE Software...8.6 High
- cisco ios xe software, ios xe +1 moreA vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote...8.8 High
- cisco catalyst sd-wan manager, sd-wan vmanage +1 moreA vulnerability in the Security Assertion Markup Language (SAML) APIs of Cisco Catalyst SD-WAN...9.8 Critical
- cisco catalyst sd-wan manager, sd-wan solution, sd-wan vmanage +1 more +3 moreA vulnerability in the SSH service of Cisco Catalyst SD-WAN Manager could allow an...5.3 Medium
- xentop-level shadow reference dropped too early for 64-bit PV guests7.8 High
- cisco sd-wan vmanage, sd-wan +1 moreVulnerability in the Elasticsearch database used in the of Cisco SD-WAN vManage software could...7.5 High
- cisco sd-wan vmanage, catalyst sd-wan manager +1 moreA vulnerability in the command line interface (cli) management interface of Cisco SD-WAN vManage...7.1 High
- cisco catalyst sd-wan manager, sd-wan manager, sd-wan vmanage +2 moreA vulnerability in the session management system of the Cisco Catalyst SD-WAN Manager multi...7.2 High
drupal/content_moderation_notificationsPackagistThis module enables notifications to be sent to all users of a particular role, or to the content's author when a piece of content is transitioned from one state to another via core's content_moderati…No scorecontainerdopenSUSESecurity update for containerdNo scorecni-pluginsopenSUSESecurity update for cni-pluginsNo scorecniopenSUSESecurity update for cniNo score- emc appsync, dell emc appsync +1 moreDell AppSync, versions 4.4.0.0 to 4.6.0.0 including Service Pack releases, contains an improper...7.3 High
- dell data protection centralDell Data Protection Central, version 19.9, contains an Inadequate Encryption Strength...5.9 Medium
- f5 big-ip edge client, big-ip access policy manager, big-ip access policy manager client +1 more +3 moreBIG-IP APM Clients TunnelCrack vulnerability6.8 Medium
- f5 big-ip edge client, big-ip access policy manager, big-ip access policy manager client +1 more +3 moreBIG-IP APM Clients TunnelCrack vulnerability5.3 Medium
- progress ws ftp serverWS_FTP Server Information Disclosure via Directory Listing5.3 Medium
- progress ws ftp serverWS_FTP Server Cross-Site Request Forgery (CSRF) Vulnerability6.8 Medium
- progress ws ftp serverWS_FTP Server Stored Cross-Site Scripting Vulnerability8.3 High
- progress ws ftp serverWS_FTP Server SQL Injection via Administrative Interface8.2 High
- progress ws ftp serverWS_FTP Server Ad Hoc Transfer Module Reflected Cross-Site Scripting Vulnerability8.3 High
- progress ws ftp serverWS_FTP Server Directory Traversal9.9 Critical
- progress ws ftp serverWS_FTP Server Ad Hoc Transfer Module .NET Deserialization Vulnerability10.0 Critical
- mozilla firefoxDuring process shutdown, it was possible that an `ImageBitmap` was created that would later be...9.8 Critical
- mozilla firefoxIn a non-standard configuration of Firefox, an integer overflow could have occurred based on...7.5 High
- mozilla firefoxA hashtable in the Ion Engine could have been mutated while there was a live interior reference,...9.8 Critical
- mozilla firefoxIn canvas rendering, a compromised content process could have caused a surface to change...7.4 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMemory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2. Some of...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreIf Windows failed to duplicate a handle during process creation, the sandbox code may have...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreDuring Ion compilation, a Garbage Collection could have resulted in a use-after-free condition,...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreA compromised content process could have provided malicious data in a `PathRecording` resulting...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreA compromised content process could have provided malicious data to `FilterNodeD2D1` resulting in...9.8 Critical
- google android, lg electronics v60 thin q 5g(lmv600vm) +1 moreMessaging - Gaining access to arbitrary content providers via QClipIntentReceiverActivity3.6 Low
- google android, lg electronics v60 thin q 5g(lmv600vm) +1 moreLGInstallService - Deletion of arbitrary files with system privilege5.0 Medium
- google android, lg electronics v60 thin q 5g(lmv600vm) +1 moreCall management - Implicit activity intents disclose contact details and phone numbers3.6 Low
- google android, lg electronics v60 thin q 5g(lmv600vm) +1 moreCall management - Implicit intents disclose telephony data such as phone numbers, call states, contacts3.6 Low
- himitzh hoj, hdoi hcode online judge +1 moreHimitZH HOJ Topic sandbox6.3 Medium
- google android, lg electronics v60 thin q 5g(lmv600vm) +1 morePersonalized service - Theft and (over-)write of arbitrary files with system privilege via PendingIntent hijacking6.1 Medium
- google android, lg electronics v60 thin q 5g(lmv600vm) +1 moreScreen recording - Theft of arbitrary files with system privilege6.1 Medium
- redhat undertow, red hat build of quarkus, data grid 8 +25 more +27 moreUndertow: outofmemoryerror due to @multipartconfig handling7.5 High
- google android, lg electronics v60 thin q 5g(lmv600vm) +1 moreBluetooth - Theft and (over-)write of arbitrary files with system privilege via PendingIntent hijacking6.1 Medium
- google android, lg electronics v60 thin q 5g(lmv600vm) +1 moreLockScreenSettings - Theft arbitrary files with system privilege6.1 Medium
- redhat a-mq streams, squareup okhttp, red hat amq streams 2.2.1 +1 more +3 moreRed hat a-mq streams: component version with information disclosure flaw4.7 Medium
- redhat apicast, red hat 3scale api management platform 2 +1 moreApicast proxies the api call with incorrect jwt token to the api backend without proper authorization check7.4 High
- Show moreLoading…