CVEs published in October 2023
2,902 vulnerabilities, 370 critical, 18 exploited.
- dreamfox payment gateway per product for woocommerceWordPress Dreamfox Media Payment gateway per Product for Woocommerce Plugin <= 3.2.7 is vulnerable to Cross Site Scripting (XSS)7.1 High
- riyaz social metricsWordPress Social Metrics Plugin <= 2.2 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- jobin jose wwm social share on image hover, walkswithme social share on image hover +1 moreWordPress WWM Social Share On Image Hover Plugin <= 2.2 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
python-bugzillaopenSUSESecurity update for python-bugzillaNo score- fooplugins foogalleryWordPress FooGallery Plugin <= 2.2.44 is vulnerable to Cross Site Scripting (XSS)7.1 High
- boxy studio cookedWordPress Cooked Plugin <= 1.7.13 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- md jakir hosen tiger forms – drag and drop form builder, tiger forms - drag and drop form builder +1 moreWordPress Tiger Forms Plugin <= 2.0.0 is vulnerable to Cross Site Scripting (XSS)7.1 High
- ashok rane order delivery date for wp e-commerceWordPress Order Delivery Date for WP e-Commerce Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- clicktotweet click to tweetWordPress Click To Tweet Plugin <= 2.0.14 is vulnerable to Cross Site Scripting (XSS)7.1 High
- regpacks regpackWordPress Regpack Plugin <= 0.1 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- wen solutions notice barWordPress Notice Bar Plugin <= 3.1.0 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- uniconsent cmp for gdpr cpra gpp tcfWordPress UniConsent Cookie Consent CMP for GDPR / CCPA Plugin <= 1.4.2 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- gold plugins locationsWordPress Locations Plugin <= 4.0 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- jim krill wp jump menu, krillwebdesign wp-jump-menu +1 moreWordPress WP Jump Menu Plugin <= 3.6.4 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- wpgens swifty bar, sticky bar by wpgens, swifty bar +1 moreWordPress Swifty Bar, sticky bar by WPGens Plugin <= 1.2.10 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- gopi ramasamy email posts to subscribersWordPress Email posts to subscribers Plugin <= 6.2 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- nigauri insert estimated reading timeWordPress Insert Estimated Reading Time Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- yydevelopment back to the top buttonWordPress Back To The Top Button Plugin <= 2.1.5 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- i thirteen web solution wordpress publish post email notificationWordPress wordpress publish post email notification Plugin <= 1.0.2.2 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- pressified sendpress, sendpress newsletters, unknown sendpress newsletters +2 moreWordPress SendPress Newsletters Plugin <= 1.22.3.31 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- rescue themes shortcodes, rescuethemes rescue shortcodes +1 moreWordPress Rescue Shortcodes Plugin <= 2.5 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- hennessey attorneyWordPress Attorney Theme <= 3 is vulnerable to Cross Site Scripting (XSS)7.1 High
- mhlw fd applicationFD Application Apr. 2022 Edition (Version 9.01) and earlier improperly restricts XML external...5.5 Medium
- google android, mediatek mt5527, mt5583 +69 more +71 moreIn TVAPI, there is a possible out of bounds write due to a missing bounds check. This could lead...6.7 Medium
- google android, linuxfoundation yocto, mediatek iot yocto +15 more +17 moreIn apusys, there is a possible out of bounds write due to an integer overflow. This could lead to...6.7 Medium
- google android, mediatek iot yocto, mt6771 +15 more +17 moreIn vpu, there is a possible out of bounds write due to an integer overflow. This could lead to...6.7 Medium
- google android, mediatek mt6879, mt6886 +33 more +35 moreIn camera middleware, there is a possible out of bounds write due to a missing input validation....6.7 Medium
- google android, mediatek mt6879, mt6886 +33 more +35 moreIn camera middleware, there is a possible out of bounds write due to a missing input validation....6.7 Medium
- google android, mediatek mt6580, mt6739 +29 more +31 moreIn rpmb , there is a possible double free due to improper locking. This could lead to local...6.7 Medium
- google android, mediatek mt6580, mt6739 +29 more +31 moreIn rpmb , there is a possible memory corruption due to a missing bounds check. This could lead to...6.7 Medium
- google android, mediatek mt2713, mt6739 +43 more +45 moreIn ftm, there is a possible out of bounds write due to a missing bounds check. This could lead to...6.7 Medium
- google android, mediatek mt6761, mt6763 +9 more +11 moreIn video, there is a possible out of bounds write due to a permissions bypass. This could lead to...6.7 Medium
- field logic datacube4, f-logic datacube4 firmware +1 moreField Logic DataCube4 Web API improper authentication4.3 Medium
- rami pretixpretix potential IP address spoofing vulnerability5.3 Medium
- mojoportalCross Site Scripting vulnerability in mojoPortal v.2.7.0.0 allows a remote attacker to execute...6.1 Medium
- mojoportalAn issue in mojoPortal v.2.7.0.0 allows a remote attacker to execute arbitrary code via a crafted...9.8 Critical
- mojoportalFile Upload vulnerability in mojoPortal v.2.7.0.0 allows a remote attacker to execute arbitrary...9.8 Critical
- mojoportalFile Upload vulnerability in mojoPortal v.2.7.0.0 allows a remote attacker to execute arbitrary...9.8 Critical
- presto-changeo testsitecreatorPresto Changeo testsitecreator up to v1.1.1 was discovered to contain a SQL injection...9.8 Critical
- netis-systems n3m firmwareNetis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the...9.8 Critical
- netis-systems n3m firmwareNetis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the...9.8 Critical
- netis-systems n3m firmwareNetis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability in the...9.8 Critical
- netis-systems n3m firmwareNetis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability in the...8.8 High
- jizhicmsThere is a SQL injection vulnerability in the Jizhicms 2.4.9 backend, which users can use to...6.5 Medium
- superstorefinder super store finderSuper Store Finder 3.7 and below is vulnerable to authenticated Arbitrary PHP Code Injection that...8.8 High
- xiph vorbis-toolsBuffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute...7.8 High
- linecorp lineAn issue in animal-art-lab v13.6.1 allows attackers to send crafted notifications via leakage of...5.4 Medium
- deyue remote vehicle management system project remote vehicle management systemDeyue Remote Vehicle Management System v1.1 was discovered to contain a deserialization...8.8 High
- emlogA cross-site scripting (XSS) vulnerability in the publish article function of emlog pro v2.1.14...5.4 Medium
- phpipamPhpipam before v1.5.2 was discovered to contain a LDAP injection vulnerability via the dname...7.5 High
- Show moreLoading…