CVEs published in October 2023
2,902 vulnerabilities, 370 critical, 18 exploited.
- cybozu remote service, cybozu, inc. cybozu remote service +1 more Uncontrolled resource consumption vulnerability in Cybozu Remote Service 4.1.0 to 4.1.1 allows a... 6.5 Medium
-
linux-laptopUbuntu linux-laptop vulnerabilities No score - projectworlds online blood donation management system Online Blood Donation Management System v1.0 - Stored Cross-Site Scripting (XSS) 6.1 Medium
- vmware workspace one uem VMware Workspace ONE UEM console contains an open redirect vulnerability. A malicious actor may... 8.8 High
- kubernetes, kubernetes kubelet +1 more Kubernetes - Windows nodes - Insufficient input sanitization leads to privilege escalation 8.8 High
- kubernetes, kubernetes kubelet +1 more Kubernetes - Windows nodes - Insufficient input sanitization leads to privilege escalation 8.8 High
- element-hq synapse, fedoraproject fedora +1 more Synapse vulnerable to leak of remote user device information 5.3 Medium
- hp pc hardware diagnostics, hp inc. pc hardware diagnostics windows, hp image assistant +1 more +3 more Certain versions of HP PC Hardware Diagnostics Windows are potentially vulnerable to elevation of... 7.8 High
- pimcore admin classic bundle, admin-ui-classic-bundle +1 more Pimcore Admin Classic Bundle Cross-site Scripting (XSS) in PDF previews 6.1 Medium
- paijp lte-pic32-writer lte-pic32-writer's sendto.txt may disclose URL and the API key 8.9 High
- px4 px4-autopilot, dronecode px4 drone autopilot +1 more PX4-Autopilot Heap Buffer Overflow Bug 4.4 Medium
- authzed spicedb `SPICEDB_DATASTORE_CONN_URI` is leaked when URI cannot be parsed 4.2 Medium
- py-pdf pypdf pypdf possible Infinite Loop when PdfWriter(clone_from) is used with a PDF 5.1 Medium
- goauthentik authentik authentik potential installation takeover when default admin user is deleted 9.7 Critical
- sourcegraph cody Overwrite of builtin Cody commands facilitates RCE 9.1 Critical
- fogproject FOG path traversal via unauthenticated endpoint 5.8 Medium
- solwin infotech user activity log WordPress User Activity Log Plugin <= 1.6.2 is vulnerable to SQL Injection 7.6 High
- atera agent package availability The C:\Windows\Temp\Agent.Package.Availability\Agent.Package.Availability.exe file is... 7.8 High
- fogproject FOG SSRF via unauthenticated endpoint(s) 8.6 High
- atlassian confluence data center, confluence data center and server, confluence server +2 more All versions of Confluence Data Center and Server are affected by this unexploited vulnerability.... 10.0 Critical
- contact form - wpmanageninja llc form plugin – fastest contact form builder plugin for wordpress by fluent forms, fluentforms contact form +1 more WordPress FluentForm Plugin <= 4.3.25 is vulnerable to SQL Injection 5.5 Medium
- fogproject FOG stored XSS on log screen via unsanitized request logging 5.4 Medium
- bestwebsoft contact form to db by bestwebsoft – messages database plugin for wordpress, contact form to db +1 more WordPress Contact Form to DB by BestWebSoft Plugin <= 1.7.1 is vulnerable to SQL Injection 7.6 High
- woo product vendors WordPress WooCommerce Product Vendors Plugin <= 2.1.78 is vulnerable to SQL Injection 7.6 High
- themeisle multiple page generator plugin – mpg, multiple page generator +1 more WordPress Multiple Page Generator Plugin – MPG Plugin <= 3.3.19 is vulnerable to SQL Injection 7.6 High
- chef inspec, progress software chef inspec +1 more InSpec Archive Command Vulnerable to Maliciously Crafted Profile 8.8 High
- chef automate, progress software chef automate +1 more Automate Vulnerable to Malicious Content Uploaded Through Embedded Compliance Application 9.9 Critical
- crm perks database for contact form 7, wpforms, elementor forms, crmperks database for contact form 7\, wpforms\, elementor forms +1 more WordPress Contact Form Entries Plugin <= 1.3.0 is vulnerable to SQL Injection 8.5 High
- learndash, learndash lms, stellarwp learndash lms +2 more WordPress LearnDash LMS Plugin <= 4.5.3 is vulnerable to SQL Injection 8.5 High
- metagauss eventprime EventPrime < 3.2.0 - Reflected XSS 6.1 Medium
- fattura24 Fattura24 < 6.2.8 - Reflected Cross-Site Scripting 6.1 Medium
- ays-pro popup box Popup box < 3.7.2 - Admin+ Stored Cross-Site Scripting 4.8 Medium
- metagauss eventprime EventPrime < 3.2.0 - Booking Creation via CSRF 4.3 Medium
- metagauss eventprime EventPrime < 3.2.0 - Booking Creation via CSRF 4.3 Medium
- jason c. memberlite shortcodes Memberlite Shortcodes < 1.3.9 - Contributor+ Stored XSS via Shortcode 5.4 Medium
- unknown campaign monitor forms by optin cat, fatcatapps campaign monitor optin cat +1 more Campaign Monitor Forms < 2.5.6 - Subscriber+ Arbitrary Options Update 8.1 High
- contest-gallery contest gallery, unknown photos and files contest gallery +1 more Photos and Files Contest Gallery – Contact Form < 21.2.8.1 - Unauthenticated Stored XSS via HTTP Headers 6.1 Medium
- login screen manager project screen manager, unknown login screen manager +1 more Login screen manager <= 3.5.2 - Admin+ Stored XSS 4.8 Medium
- metagauss eventprime EventPrime < 3.2.0 - Reflected HTML Injection on keyword parameter 6.1 Medium
- unknown cits support svg, webp media and ttf,otf file upload, ashik cits support svg\, webp media and ttf\,otf file upload +1 more CITS Support svg, webp Media and TTF,OTF File Upload < 3.0 - Author+ Stored XSS via SVG 5.4 Medium
- royal-elementor-addons royal elementor addons, unknown royal elementor addons and templates +1 more Royal Elementor Addons and Templates < 1.3.79 - Unauthenticated Arbitrary File Upload 9.8 Critical
- prasadkirpekar wp meta and date remover WP Meta and Date Remover < 2.2.0 - Subscriber+ Stored XSS 5.4 Medium
- e2pdf E2Pdf < 1.20.20 - Admin+ Stored Cross-Site Scriping 4.8 Medium
- gamipress WordPress GamiPress Plugin <= 2.5.7 is vulnerable to SQL Injection 8.2 High
- carrcommunications rsvpmaker WordPress RSVPMarker Plugin <= 9.9.3 is vulnerable to SQL Injection 5.5 Medium
- carrcommunications rsvpmaker WordPress RSVPMarker Plugin <= 9.9.3 is vulnerable to SQL Injection 6.7 Medium
-
container-suseconnectSUSE Security update for container-suseconnect No score -
phpOSS-Fuzz Heap-use-after-free in zend_jit_trace_execute No score -
ndpiOSS-Fuzz Stack-buffer-overflow in ndpi_handle_rule No score -
hdf5OSS-Fuzz Heap-buffer-overflow in H5F_addr_decode No score - Show olderLoading…