CVEs published in September 2023
2,233 vulnerabilities, 282 critical, 23 exploited.
- os commerce commerce, oscommerce +1 moreOs Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)5.4 Medium
- os commerce commerce, oscommerce +1 moreOs Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)5.4 Medium
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - DOM in thorsten/phpmyfaq9.0 Critical
- microweber, microweber microweber/microweber +1 moreUse of Hard-coded Credentials in microweber/microweber5.8 Medium
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - Stored in thorsten/phpmyfaq6.3 Medium
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - DOM in thorsten/phpmyfaq9.1 Critical
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreCross-site Scripting (XSS) - Stored in thorsten/phpmyfaq8.3 High
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreUnrestricted Upload of File with Dangerous Type in thorsten/phpmyfaq6.5 Medium
- webmproject libvpx, debian linux, fedoraproject fedora +1 more +3 moreVP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.7.5 High
- rockoaXinhu RockOA start backup3.7 Low
- rockoaXinhu RockOA Password password recovery4.3 Medium
opencv-python-headlessPyPIopencv-python-headless versions before v4.8.1.78 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863. opencv-python-headless v4.8.1.78 upgrades the bundled libwebp binary to v1.3.2…No scoreopencv-pythonPyPIopencv-python versions before v4.8.1.78 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863. opencv-python v4.8.1.78 upgrades the bundled libwebp binary to v1.3.2.No scoreopencv-contrib-python-headlessPyPIopencv-contrib-python-headless versions before v4.8.1.78 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863. opencv-contrib-python-headless v4.8.1.78 upgrades the bundled libwebp…No scoreopencv-contrib-pythonPyPIopencv-contrib-python versions before v4.8.1.78 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863. opencv-contrib-python v4.8.1.78 upgrades the bundled libwebp binary to v1.3.2.No score- shopex ecshopECshop order.php sql injection4.7 Medium
github.com/cometbft/cometbftGoCometBFT's default for `BlockParams.MaxBytes` consensus parameter may increase block times and affect consensus participationNo score- shopex ecshopECshop leancloud.php sql injection4.7 Medium
- beecmsBEECMS cross site scripting2.4 Low
- oretnom23 expense tracker, sourcecodester expense tracker app +1 moreSourceCodester Expense Tracker App Category add_category.php cross site scripting3.5 Low
- composer, debian linux, fedoraproject fedora +2 moreRemote Code Execution via web-accessible composer.phar6.4 Medium
- tongda oa 2017, tongda2000 tongda office anywhere +1 moreTongda OA 2017 delete.php sql injection6.3 Medium
- engineers online portal project online portal, sourcecodester engineers online portal +1 moreSourceCodester Engineers Online Portal upload_save_student.php unrestricted upload6.3 Medium
- engineers online portal project online portal, sourcecodester engineers online portal +1 moreSourceCodester Engineers Online Portal teacher_signup.php sql injection6.3 Medium
- engineers online portal project online portal, sourcecodester engineers online portal +1 moreSourceCodester Engineers Online Portal seed_message_student.php sql injection6.3 Medium
- engineers online portal project online portal, sourcecodester engineers online portal +1 moreSourceCodester Engineers Online Portal remove_inbox_message.php sql injection6.3 Medium
- engineers online portal project online portal, sourcecodester engineers online portal +1 moreSourceCodester Engineers Online Portal my_students.php sql injection6.3 Medium
- engineers online portal project online portal, sourcecodester engineers online portal +1 moreSourceCodester Engineers Online Portal my_classmates.php sql injection6.3 Medium
- engineers online portal project online portal, sourcecodester engineers online portal +1 moreSourceCodester Engineers Online Portal login.php sql injection6.3 Medium
- engineers online portal project online portal, sourcecodester engineers online portal +1 moreSourceCodester Engineers Online Portal student_avatar.php unrestricted upload6.3 Medium
- tibco nimbusTIBCO Nimbus Reflected Cross-site Scripting (XSS) vulnerabilities8.0 High
- engineers online portal project online portal, sourcecodester engineers online portal +1 moreSourceCodester Engineers Online Portal downloadable_student.php sql injection6.3 Medium
- silabs gecko software development kit, silabs.com gsdk +1 moreBluetooth LE segmented 'prepare write response' packet may lead to out-of-bounds memory access5.9 Medium
- mayuri k best courier management systemSourceCodester Best Courier Management System manage_parcel_status.php cross site scripting3.5 Low
- mayuri k best courier management systemSourceCodester Best Courier Management System GET Parameter edit_parcel.php sql injection5.5 Medium
- apache avro, apache software foundation avro java sdk +1 moreApache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK7.5 High
- mayuri k best courier management systemSourceCodester Best Courier Management System edit_parcel.php sql injection5.5 Medium
- mayuri k best courier management systemSourceCodester Best Courier Management System view_parcel.php sql injection5.5 Medium
- mayuri k best courier management systemSourceCodester Best Courier Management System GET Parameter parcel_list.php sql injection5.1 Medium
- dedebizDedeBIZ makehtml_taglist_action.php sql injection6.3 Medium
- tongda oa 2017, tongda2000 tongda office anywhere +1 moreTongda OA 2017 delete.php sql injection5.5 Medium
- dedebizDedeBIZ tags_main.php sql injection6.3 Medium
- tongda oa 2017, tongda2000 tongda office anywhere +1 moreTongda OA 2017 delete.php sql injection5.5 Medium
harfbuzzOSS-FuzzHeap-buffer-overflow in OT::cvar::decompile_tuple_variationsNo score- huakecmshuakecms cms_content.php sql injection6.3 Medium
- zzzcmsZZZCMS Database Backup File save.php restore permission6.3 Medium
- monsterinsights userfeedback, syed balkhi user feedback +1 moreWordPress User Feedback Plugin <= 1.0.7 is vulnerable to Cross Site Scripting (XSS)7.1 High
- ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 moreAllocation of Resources Without Limits or Throttling in ikus060/rdiffweb7.1 High
- pensopay woocommerce pensopayWordPress WooCommerce PensoPay Plugin <= 6.3.1 is vulnerable to Cross Site Scripting (XSS)7.1 High
- goods catalog project catalog, irina sokolovskaya goods catalog +1 moreWordPress Goods Catalog Plugin <= 2.4.1 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- Show moreLoading…