CVEs published in October 2023
2,902 vulnerabilities, 370 critical, 18 exploited.
- x.org libx11, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreLibx11: integer overflow in xcreateimage() leading to a heap overflow7.8 High
- x.org libx11, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreLibx11: stack exhaustion from infinite recursion in putsubimage()5.5 Medium
- x.org libx11, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreLibx11: out-of-bounds memory access in _xkbreadkeysyms()6.5 Medium
- afterlogic aurora filesA deserialization vulnerability in Afterlogic Aurora Files v9.7.3 allows attackers to execute...8.8 High
- tenda ac6 firmwareTenda AC6 v15.03.05.19 is vulnerable to Buffer Overflow as the Index parameter does not verify...9.8 Critical
- broadpeak centralized accounts management auth agentA cross-site scripting (XSS) vulnerability in the bpk-common/auth/login/index.html login portal...6.1 Medium
- themevolty theme volty cms brandlistImproper neutralization of SQL parameter in Theme Volty CMS BrandList module for PrestaShop In...9.8 Critical
- themevolty theme volty cms category sliderImproper neutralization of SQL parameter in Theme Volty CMS Category Slider module for PrestaShop...9.8 Critical
- themevolty theme volty cms testimonialImproper neutralization of SQL parameter in Theme Volty CMS Testimonial module for PrestaShop. In...9.8 Critical
- themevolty theme volty cms category productImproper neutralization of SQL parameter in Theme Volty CMS Category Product module for...9.8 Critical
- themevolty theme volty cms category chain sliderImproper neutralization of SQL parameter in Theme Volty CMS Category Chain Slider module for...9.8 Critical
- themevolty cms payment iconTheme volty tvcmspaymenticon up to v4.0.1 was discovered to contain a SQL injection vulnerability...9.8 Critical
- dts monitoringAn issue was discovered in DTS Monitoring 3.57.0. The parameter url within the WGET check...9.8 Critical
- dts monitoringAn issue was discovered in DTS Monitoring 3.57.0. The parameter ip within the Ping check function...9.8 Critical
- dts monitoringAn issue was discovered in DTS Monitoring 3.57.0. The parameter common_name within the SSL...9.8 Critical
- dts monitoringAn issue was discovered in DTS Monitoring 3.57.0. The parameter url within the Curl check...9.8 Critical
- dts monitoringAn issue was discovered in DTS Monitoring 3.57.0. The parameter options within the WGET check...9.8 Critical
- dts monitoringAn issue was discovered in DTS Monitoring 3.57.0. The parameter port within the SSL Certificate...9.8 Critical
- charm soft serve, charmbracelet soft-serve +1 moreSoft Serve Public Key Authentication Bypass Vulnerability when Keyboard-Interactive SSH Authentication is Enabled7.5 High
- opentelemetry, open-telemetry opentelemetry-python-contrib +1 moreopentelemetry-instrumentation Denial of Service vulnerability due to unbound cardinality metrics7.5 High
- python urllib3, debian linux, fedoraproject fedora +2 more`Cookie` HTTP header isn't stripped on cross-origin redirects5.9 Medium
- pure storage flasharray purity, purestorage purity\/\/fa +1 morePrivilege Escalation in VASA8.8 High
- pure storage flasharray purity, purestorage purity\/\/fa +1 moreFlashArray pgroup Retention Lock SafeMode Protection6.5 Medium
- pure storage flasharray purity, purestorage purity\/\/fa +1 moreFlashArray SafeMode Immutable Vulnerability4.4 Medium
- pure storage flashblade purity, purestorage purity +1 moreFlashBlade Snapshot Scheduler7.7 High
- pure storage flashblade purity, purestorage purity +1 moreFlashBlade Object Store Protocol7.7 High
- pure storage flashblade, purestorage purity +1 moreFlashBlade Object Store Privileged Access6.5 Medium
wallabag/wallabagPackagistWallabag user can disable 2FA unintentionally4.3 MediumtorchservePyPITorchServe Pre-Auth Remote Code Execution9.9 Critical- vim, vim vim/vim, fedoraproject fedora +2 moreHeap-based Buffer Overflow in vim/vim4.0 Medium
- free5gc open5gc, webconsole +1 moreCross-Site Request Forgery in Free5Gc9.8 Critical
- smartfan most popular posts widgetMost Popular Posts Widget Plugin functions.php show_views sql injection6.3 Medium
- slims, slims senayan library management system +1 moreServer-Side Request Forgery in SLiMS9.9 Critical
- ingeteam ingepac da3451, ingepac da3451 firmware +1 moreVulnerability in Ingeteam's INGEPAC DA5.3 Medium
liblouisOSS-FuzzHeap-buffer-overflow in back_passDoActionNo scorelibavcOSS-FuzzGlobal-buffer-overflow in isvce_write_coeff4x4_cavlcNo score- ingeteam ingepac fc5066, ingepac fc5066 firmware +1 moreVulnerability in Ingeteam's INGEPAC EF8.6 High
- gitlabIncorrect Authorization in GitLab8.2 High
- ingeteam ingepac da3451, ingepac da3451 firmware, ingepac ef md firmware +1 more +3 moreVulnerability in Ingeteam's INGEPAC EF/DA8.6 High
- mattermostFull name disclosure via team top membership with Show Full Name option disabled4.3 Medium
- gopi ramasamy onclick show popupWordPress Onclick Show Popup Plugin <= 8.1 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- jewel theme wp adminifyWordPress WP Adminify Plugin <= 3.1.6 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- gopi ramasamy popup contact formWordPress Popup contact form Plugin <= 7.1 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- gopi ramasamy popup contact formWordPress Popup contact form Plugin <= 7.1 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- arrow plugins the awesome feed – custom feed, arrowplugins the awesome feed +1 moreWordPress The Awesome Feed – Custom Feed Plugin <= 2.2.5 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- 2j slideshow team slideshow, image slider by 2j, 2joomla 2j slideshow +1 moreWordPress Images Slideshow by 2J Plugin <= 1.3.54 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
roundcubemailopenSUSESecurity update for roundcubemailNo score- leap contractor contact form website to workflow tool, leaptodigital contact form website to workflow tool +1 moreWordPress Contractor Contact Form Website to Workflow Tool Plugin <= 4.0.0 is vulnerable to Cross Site Scripting (XSS)7.1 High
- renzo johnson blocksWordPress Blocks Plugin <= 1.6.41 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- jeswd anchor episodes index (spotify for podcasters), jesweb anchor episodes index \(spotify for podcasters\) +1 moreWordPress Anchor Episodes Index (Spotify for Podcasters) Plugin <= 2.1.7 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- Show moreLoading…