CVEs published in October 2023
2,902 vulnerabilities, 370 critical, 18 exploited.
- presspage smarty for wordpressWordPress Smarty for WordPress Plugin <= 3.1.35 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- monchito wp emoji oneWordPress WP Emoji One Plugin <= 0.6.0 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- optimonk optimonk: popups, personalization & a/b testing, optimonk\ +1 moreWordPress Exit Popups & Onsite Retargeting by OptiMonk Plugin <= 2.0.4 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- pos/ dienstleistung, entwicklung & vertrieb gmbh cashit! - serving solutions., cashit cashit\! +1 moreOrigin Check Bypass9.4 Critical
- sonicwall netextenderA flaw within the SonicWall NetExtender Pre-Logon feature enables an unauthorized user to gain...8.8 High
- sonicwall netextenderA local privilege escalation vulnerability in SonicWall Net Extender MSI client for Windows 10.2...7.8 High
- pos/ dienstleistung, entwicklung & vertrieb gmbh cashit! - serving solutions., cashit cashit\! +1 moreUnauthenticated Remote Database Exfiltration7.5 High
- pos/ dienstleistung, entwicklung & vertrieb gmbh cashit! - serving solutions., cashit cashit\! +1 moreUnauthenticated Remote Code Execution9.8 Critical
- qualcomm qam8295p firmware, qam8650p firmware, qamsrv1h firmware +19 more +21 moreUse After Free in Automotive Display8.4 High
- qualcomm ar8035 firmware, ar9380 firmware, csr8811 firmware +174 more +176 moreBuffer Copy without Checking Size of Input in WLAN Firmware9.8 Critical
- qualcomm 315 5g iot modem firmware, 8098 firmware, 8998 firmware +350 more +352 moreBuffer Over-read in WLAN Firmware7.5 High
- qualcomm ar8035 firmware, ar9380 firmware, csr8811 firmware +202 more +204 moreBuffer over-read in WLAN Firmware7.5 High
- qualcomm 315 5g iot modem firmware, apq5053-aa firmware, aqt1000 firmware +150 more +152 moreImproper Authentication in Data Modem9.1 Critical
- qualcomm ar8035 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +61 more +63 moreUse of Out-of-range Pointer Offset in Modem9.8 Critical
- qualcomm ar8035 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +111 more +113 moreImproper Input Validation in HLOS8.4 High
- qualcomm apq5053-aa firmware, apq8017 firmware, apq8037 firmware +204 more +206 moreImproper Validation of Array Index in HLOS7.8 High
- qualcomm 315 5g iot modem firmware, 9206 lte modem firmware, 9207 lte modem firmware +236 more +238 moreBuffer Over-read in Data Modem8.2 High
- qualcomm 315 5g iot modem firmware, 9206 lte modem firmware, 9207 lte modem firmware +242 more +244 moreBuffer Over-read in Data Modem8.2 High
- qualcomm 315 5g iot modem firmware, aqt1000 firmware, ar8031 firmware +255 more +257 moreNULL pointer Dereference in Modem7.5 High
- qualcomm ar8035 firmware, fastconnect 6700 firmware, fastconnect 6900 firmware +41 more +43 moreImproper Access Control in Core8.4 High
- qualcomm 315 5g iot modem firmware, ar8035 firmware, fastconnect 6200 firmware +64 more +66 moreReachable Assertion in Modem7.5 High
- qualcomm 315 5g iot modem firmware, 9205 lte modem firmware, 9206 lte modem firmware +239 more +241 moreBuffer Over-read in Data Modem8.2 High
- qualcomm qca6574au firmware, qca6696 firmware, sa6145p firmware +7 more +9 moreBuffer Copy Without Checking Size of Input in VR Service6.7 Medium
- qualcomm apq8064au firmware, msm8996au firmware, qam8295p firmware +27 more +29 moreImproper Input Validation in Automotive7.4 High
- qualcomm aqt1000 firmware, ar8035 firmware, fastconnect 6200 firmware +161 more +163 moreImproper Access Control in Kernel8.7 High
- nbluis static-serverstatic-server Path Traversal vulnerability7.5 High
- freeopcua opcua-asyncioasyncua Improper Authentication vulnerability6.5 Medium
- freeopcua opcua-asyncioasyncua vulnerable to denial of service via infinite loop5.3 Medium
- linux kernel, fedoraproject fedora +1 moreUse-after-free in Linux kernel's fs/smb/client component7.8 High
- wponlinesupport wp responsive header image sliderWP Responsive header image slider <= 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- hitachi jp1/performance management - agent option for application server, jp1/performance management - agent option for domino, jp1/performance management - agent option for enterprise applications +23 more +25 moreFile and Directory Permission Vulnerability in JP1/Performance Management8.4 High
- hitachi ops center common servicesDoS Vulnerability in Hitachi Ops Center Common Services5.3 Medium
- hitachi ops center administratorInformation Exposure Vulnerability in Hitachi Ops Center Administrator6.5 Medium
- furuno systems co.,ltd. acera 1310, acera 1320, furunosystems acera 1310 firmware +1 more +3 morePath traversal vulnerability in ACERA 1320 firmware ver.01.26 and earlier, and ACERA 1310...5.7 Medium
- furuno systems co.,ltd. acera 1310, acera 1320, furunosystems acera 1310 firmware +1 more +3 moreAuthentication bypass vulnerability in ACERA 1320 firmware ver.01.26 and earlier, and ACERA 1310...8.8 High
- furuno systems co.,ltd. acera 1010, acera 1020, acera 1110 +21 more +23 moreCross-site request forgery (CSRF) vulnerability exists in FURUNO SYSTEMS wireless LAN access...8.8 High
- furuno systems co.,ltd. acera 1010, acera 1020, acera 1110 +21 more +23 moreCross-site scripting vulnerability in FURUNO SYSTEMS wireless LAN access point devices allows an...5.4 Medium
- furuno systems co.,ltd. acera 1010, acera 1020, acera 1110 +25 more +27 moreOS command injection vulnerability in FURUNO SYSTEMS wireless LAN access point devices allows an...8.8 High
- gnu glibc, c library, canonical ubuntu linux +48 more +50 moreGlibc: buffer overflow in ld.so leading to privilege escalation7.8 High
- gnu grub2, red hat enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: out-of-bounds read at fs/ntfs.c5.3 Medium
- gnu grub2, red hat enterprise linux 7, enterprise linux 8 +2 more +4 moreGrub2: out-of-bounds write at fs/ntfs.c may lead to unsigned code execution7.5 High
- emlogAn arbitrary file upload vulnerability in the component /admin/plugin.php of Emlog Pro v2.2.0...9.8 Critical
- emlogAn arbitrary file upload vulnerability in the component /content/templates/ of Emlog Pro v2.2.0...9.8 Critical
- catonetworks cato clientAn issue in CatoNetworks CatoClient before v.5.4.0 allows attackers to escalate privileges and...8.1 High
- sscmsSSCMS 7.2.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the Content...5.4 Medium
- sscms project sscmsSSCMS 7.2.2 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the...5.4 Medium
- sscms project sscmsSSCMS 7.2.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the Column...5.4 Medium
- nothings stb image.hNothings stb 2.28 was discovered to contain a Null Pointer Dereference via the function...5.5 Medium
- libxpm project libxpm, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreLibxpm: out of bounds read on xpm with corrupted colormap5.5 Medium
- x.org libxpm, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreLibxpm: out of bounds read in xpmcreatexpmimagefrombuffer()5.5 Medium
- Show moreLoading…