CVEs published in September 2023
2,233 vulnerabilities, 282 critical, 23 exploited.
- stockdio stock quotes listWordPress Stock Quotes List Plugin <= 2.9.9 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- gfazioli wp bannerize proWordPress WP Bannerize Pro Plugin <= 1.6.9 is vulnerable to Cross Site Scripting (XSS)7.1 High
- ulf benjaminsson wp-dtreeWordPress WP-dTree Plugin <= 4.4.5 is vulnerable to Cross Site Scripting (XSS)7.1 High
- presspage entertainment inc. smarty for wordpress, smarty +1 moreWordPress Smarty for WordPress Plugin <= 3.1.35 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- i thirteen web solution photo gallery slideshow & masonry tiled gallery, i13websolution web solution photo gallery slideshow \& masonry tiled gallery +1 moreWordPress Photo Gallery Slideshow & Masonry Tiled Gallery Plugin <= 1.0.13 is vulnerable to Cross Site Scripting (XSS)7.1 High
- openrapid rapidcmsOpenRapid RapidCMS uploadicon.php isImg unrestricted upload6.3 Medium
- groundhogg hollerboxWordPress HollerBox Plugin <= 2.3.2 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- andreas heigl authldapWordPress authLdap Plugin <= 2.5.9 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- tongda oa 2017, tongda2000 tongda office anywhere +1 moreTongda OA 2017 delete.php sql injection5.5 Medium
- razormist simple membership systemSourceCodester Simple Membership System group_validator.php sql injection6.3 Medium
- sick sim1012, sim1012-0p0g200 firmware +1 moreA remote unauthorized attacker may connect to the SIM1012, interact with the device and change...9.8 Critical
- foru cmsForU CMS cms_admin.php denial of service2.7 Low
- openrapid rapidcmsOpenRapid RapidCMS addgood.php sql injection6.3 Medium
- whitehsbg jndiexploitWhiteHSBG JNDIExploit HTTPServer.java handleFileRequest path traversal3.5 Low
- mattermostA system/user manager can demote / deactivate another manager2.7 Low
- mattermostA team member can soft delete other teams that they are not part of6.5 Medium
- mattermostSystem Role with manage posts permission can read posts of Direct Messages4.9 Medium
- mattermostDoS via Channel Notification Properties6.5 Medium
- mattermostA User Manager role with user edit permissions could manage/update bots3.8 Low
- gitlabInsertion of Sensitive Information Into Sent Data in GitLab6.5 Medium
- gitlabURL Redirection to Untrusted Site ('Open Redirect') in GitLab3.0 Low
- dell common event enablerDell Common Event Enabler 8.9.8.2 for Windows and prior, contain an improper access control...7.8 High
- gitlabIncorrect Authorization in GitLab4.3 Medium
- gitlabImproper Ownership Management in GitLab4.3 Medium
- gitlabMissing Authorization in GitLab3.1 Low
- gitlabIncorrect User Management in GitLab5.4 Medium
- gitlabIncorrect Authorization in GitLab4.3 Medium
- gitlabImproper Validation of Specified Type of Input in GitLab4.3 Medium
- gitlabIncorrect User Management in GitLab5.4 Medium
- gitlabImproper Validation of Specified Type of Input in GitLab3.5 Low
- gitlabIncorrect Authorization in GitLab3.1 Low
- gitlabIncorrect Authorization in GitLab4.3 Medium
- nodebbNodeBB Pre-Authentication Denial-of-Service7.5 High
- ithewei libhvAll versions of the package ithewei/libhv are vulnerable to HTTP Response Splitting when...5.3 Medium
- ithewei libhvAll versions of the package ithewei/libhv are vulnerable to CRLF Injection when untrusted user...5.4 Medium
- ithewei libhv, ithewei\/libhv +1 moreAll versions of the package ithewei/libhv are vulnerable to Cross-site Scripting (XSS) such that...6.1 Medium
- lemonldap-ng lemonldap\A Server-Side Request Forgery issue in the OpenID Connect Issuer in LemonLDAP::NG before 2.17.1...4.3 Medium
- linux kernelAn issue was discovered in net/ceph/messenger_v2.c in the Linux kernel before 6.4.5. There is an...8.8 High
- rami pretixpretix allows Pillow to parse EPS files7.8 High
- postcssPostCSS line return parsing error5.3 Medium
- oretnom23 task management systemA Stored Cross Site Scripting (XSS) vulnerability was found in SourceCodester Task Management...5.4 Medium
- hospital management system management systemHospital Management System thru commit 4770d was discovered to contain a SQL injection...9.1 Critical
- cambiumnetworks enterprise wi-fiCambium Enterprise Wi-Fi System Software before 6.4.2 does not sanitize the ping host argument in...8.8 High
- hashicorp vault, vault enterprise +1 moreVault's Google Cloud Secrets Engine Removed Existing IAM Conditions When Creating / Updating Rolesets7.6 High
- hashicorp vault, vault enterprise +1 moreVault Enterprise's Sentinel RGP Policies Allowed For Cross-Namespace Denial of Service4.2 Medium
- pytorch serve, torchserve +1 moreTorchServe Server-Side Request Forgery10.0 Critical
- shokoanime shokoserverArbitrary file read vulnerability in Shoko Server8.6 High
- codeastro online movie ticket booking system, online movie ticket booking system movie ticket booking system +1 moreOnline Movie Ticket Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)9.8 Critical
- codeastro online movie ticket booking system, online movie ticket booking system movie ticket booking system +1 moreOnline Movie Ticket Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)9.8 Critical
- codeastro online movie ticket booking system, online movie ticket booking system movie ticket booking system +1 moreOnline Movie Ticket Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)9.8 Critical
- Show moreLoading…