CVEs published in September 2023
2,233 vulnerabilities, 282 critical, 23 exploited.
- online book store project book store projectOnline Book Store Project v1.0 - Unauthenticated SQL Injection (SQLi)9.8 Critical
- codeastro online movie ticket booking system, online movie ticket booking system movie ticket booking system +1 moreOnline Movie Ticket Booking System v1.0 - Stored Cross-Site Scripting (XSS)6.4 Medium
- asset management system management system, projectworlds asset management system +1 moreAsset Management System v1.0 - Authenticated SQL Injection (SQLi)8.8 High
- asset management system management system, projectworlds asset management system +1 moreAsset Management System v1.0 - Unauthenticated SQL Injection (SQLi)9.8 Critical
- codeastro online movie ticket booking system, online movie ticket booking system movie ticket booking system +1 moreOnline Movie Ticket Booking System v1.0 - Reflected Cross-Site Scripting (XSS)5.4 Medium
- gym management system project management system project, projectworlds gym management system project +1 moreGym Management System Project v1.0 - Insecure File Upload9.1 Critical
- online book store project book store project, projectworlds online book store project +1 moreOnline Book Store Project v1.0 - Insecure File Upload8.8 High
- hospital-management-system, projectworlds hospital management system in php +1 moreSQL Injection in hospital-management-system-in-php 378c157 in index.php9.8 Critical
- hospital-management-system, projectworlds hospital management system in php +1 moreHospital-management-system-in-php 378c157 - Blind SQL Injection9.8 Critical
- colinhacks zodZod 3.22.2 - Regular expression Denial of Service7.5 High
- discourse discourse-encryptImproper escaping of encrypted topic titles can lead to Cross-site Scripting under non-default site configuration7.2 High
- ibm iIBM i privilege escalation7.4 High
- ibm license metric toolIBM License Metric Tool directory traversal5.3 Medium
- prestashopImproper Privilege Management in Prestashop6.3 Medium
- prestashopEmployee without any access rights can list all installed modules in Prestashop4.3 Medium
- google chrome, libvpx, apple ipados +9 more +11 moreElectron affected by libvpx's heap buffer overflow in vp8 encoding8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Extensions in Google Chrome prior to 117.0.5938.132 allowed an attacker who...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Passwords in Google Chrome prior to 117.0.5938.132 allowed a remote attacker...8.8 High
javaparserOSS-FuzzSecurity exception in com.github.javaparser.GeneratedJavaParser.ExpressionNo score- sap privilegesPrivileges Memory Corruption (Out-of-bound write)6.3 Medium
- debian linux, linux kernel, fedoraproject fedora +5 more +7 moreKernel: netfilter: race condition between ipset_cmd_add and ipset_cmd_swap4.4 Medium
- redhat libnbd, red hat enterprise linux 8, enterprise linux 8 advanced virtualization +2 more +4 moreLibnbd: crash or misbehaviour when nbd server returns an unexpected block size5.3 Medium
- generex cs141 firmware, ups cs141, ups-cs141 +2 moreFile upload XSS vulnerability in Generex CS1415.3 Medium
- generex cs141 firmware, ups cs141, ups-cs141 +2 moreUnrestricted Upload of File vulnerability in Generex CS1417.5 High
- openeuler isula, isulad +1 moreRun copy with container in a malicious directory may cause container escaping8.4 High
- openeuler isula, isulad +1 moreExport container in a malicious directory may cause process to be hijacked8.4 High
- openeuler isula, isulad +1 moreLoad malicious images may cause process to be hijacked8.4 High
- openeuler isula, isulad +1 morePull malicious images may cause process to be hijacked9.8 Critical
- openeuler lcr, icr +1 moreMalicious image running containers may cause DoS attacks6.3 Medium
- quill-mention quill mentionquill-mention Cross-site Scripting vulnerability6.1 Medium
- derrickgilland pydashpydash Command Injection vulnerability7.4 High
- fontawesome font awesome integrationFont Awesome Integration <= 5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- templatemonster-2002 tm woocommerce compare & wishlist, jetimpex tm woocommerce compare \& wishlist +1 moreTM WooCommerce Compare & Wishlist <= 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- jr00ck font awesome more iconsFont Awesome More Icons <= 3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- microweber, microweber microweber/microweber +1 moreCross-site Scripting (XSS) - Reflected in microweber/microweber5.0 Medium
- opnsenseOPNsense before 23.7.5 allows XSS via the index.php sequence parameter to the Lobby Dashboard.5.4 Medium
- opnsenseOPNsense before 23.7.5 allows XSS via the index.php column_count parameter to the Lobby Dashboard.5.4 Medium
- consensys gnark-cryptoDuplicate Advisory: Consensys gnark-crypto allows Signature Malleability9.8 Critical
- intelliants subrionSubrion CMS Cross-site Scripting vulnerability5.4 Medium
- ritecmsRite CMS 3.0 has a Cross-Site scripting (XSS) vulnerability that allows attackers to execute...4.8 Medium
- ritecmsRite CMS 3.0 has Multiple Cross-Site scripting (XSS) vulnerabilities that allow attackers to...5.4 Medium
- octobercms octoberWithdrawn Advisory: October Cross-site Scripting vulnerability5.4 Medium
- e107 cmsMultiple Cross Site Scripting (XSS) vulnerability in e017 CMS v.2.3.2 allows a local attacker to...5.4 Medium
- e107 cmsA Cross Site Scripting (XSS) vulnerability in e017 CMS v.2.3.2 allows a local attacker to execute...5.4 Medium
- cmsmadesimple cms made simpleA File upload vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to upload a pdf...5.4 Medium
- wbce cmsA File upload vulnerability in WBCE v.1.6.1 allows a local attacker to upload a pdf file with...5.4 Medium
- d-link dir-619l, dlink dir-619l firmware +1 moreD-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWAN_Wizard56 function.9.8 Critical
- d-link dir-619l, dlink dir-619l firmware +1 moreD-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via websGetVar function.7.5 High
- d-link dir-619l, dlink dir-619l firmware +1 moreD-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWanL2TP function.7.5 High
- d-link dir-619l, dlink dir-619l firmware +1 moreD-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWAN_Wizard7 function.7.5 High
- Show moreLoading…