CVEs published in October 2023
2,902 vulnerabilities, 370 critical, 18 exploited.
- samsung assistantImproper authorization in PushMsgReceiver of Samsung Assistant prior to version 8.7.00.1 allows...4.4 Medium
- samsung sassistantImproper Preservation of Permissions vulnerability in SAssistant prior to version 8.7 allows...5.1 Medium
- samsung healthImproper access control vulnerability in Samsung Health prior to version 6.24.3.007 allows...4.0 Medium
- samsung android, samsung mobile devices +1 moreStack-based Buffer Overflow in vulnerability HDCP trustlet prior to SMR Oct-2023 Release 1 allows...7.8 High
- samsung android, samsung mobile devices +1 moreImproper access control in system property prior to SMR Oct-2023 Release 1 allows local attacker...5.5 Medium
- samsung android, samsung mobile devices +1 moreLogic error in package installation via debugger command prior to SMR Oct-2023 Release 1 allows...5.7 Medium
- samsung android, samsung mobile devices +1 moreImproper access control vulnerability in SecSettings prior to SMR Oct-2023 Release 1 allows...6.7 Medium
- samsung android, samsung mobile devices +1 moreImproper input validation vulnerability in Evaluator prior to SMR Oct-2023 Release 1 allows local...8.5 High
- samsung android, samsung mobile devices +1 moreImproper input validation vulnerability in Duo prior to SMR Oct-2023 Release 1 allows local...8.5 High
- awplife blog filter, awordpresslife blog filter post filtering +1 moreBlog Filter <= 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- wpforms wp mail smtp, wpforms (awesome motive) wp mail smtp pro +1 moreWP Mail SMTP Pro <= 3.8.0 - Missing Authorization to Information Dislcosure via is_print_page5.3 Medium
- esemono instagram for wordpressInstagram for WordPress <= 2.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- ibm observability with instanaIBM Observability with Instana code execution6.4 Medium
- ibm filenet content managerIBM FileNet Content Manager cross-site scripting4.6 Medium
- google chrome, fedoraproject fedora +1 moreType confusion in V8 in Google Chrome prior to 117.0.5938.149 allowed a remote attacker to...8.8 High
- canonical subiquitySensitive data could be exposed in logs of subiquity version 23.09.1 and earlier. An attacker in...5.5 Medium
- small crm project crmCross Site Scripting vulnerability in Small CRM in PHP v.3.0 allows a remote attacker to execute...5.4 Medium
- ritecmsRite CMS 3.0 has Multiple Cross-Site scripting (XSS) vulnerabilities that allow attackers to...4.8 Medium
- personal-management-system personal management systemAn arbitrary file upload vulnerability in Personal Management System v1.4.64 allows attackers to...7.8 High
- dcnetworks dcfw-1800-sdc firmwareFile Upload vulnerability in Digital China Networks DCFW-1800-SDC v.3.0 allows an authenticated...8.8 High
- milesight ur32 firmware, ur32l firmware, ur35 firmware +2 more +4 moreAn information disclosure in Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 allows...7.5 High
- kong insomnia macos, konghq insomnia +1 moreKong Insomnia 2023.4.0 on macOS allows attackers to execute code and access restricted files, or...7.8 High
- unify session border controllerAtos Unify OpenScape Session Border Controller through V10 R3.01.03 allows execution of...9.8 Critical
- unify session border controllerAtos Unify OpenScape Session Border Controller through V10 R3.01.03 allows execution of OS...8.8 High
- extremenetworks iq engineIQ Engine before 10.6r2 on Extreme Network AP devices has a Buffer Overflow.9.8 Critical
- pleasantsolutions pleasant password serverA cross-site scripting (XSS) vulnerability in the component /framework/cron/action/humanize of...6.1 Medium
- nokia wavelite metro 200 and f2b fans, wavelite metro 200 and fan, wavelite metro 200 ne and f2b fans +8 more +10 moreIf Security Hardening guide rules are not followed, then Nokia WaveLite products allow a local...8.1 High
- ibm disconnected log collectorIBM Disconnected Log Collector information disclosure4.0 Medium
com.facebook.presto:presto-jdbcMavenPresto JDBC Server-Side Request Forgery by nextUri7.6 Highcom.facebook.presto:presto-jdbcMavenPresto JDBC Server-Side Request Forgery by redirect7.6 HighruncopenSUSESecurity update for runcNo score- puppet server, perforce puppet enterprise, puppet enterprise +2 moreDenial of Service for Revocation of Auto Renewed Certificates4.4 Medium
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +14 more +16 moreKernel: race between task migrating pages and another task calling exit_mmap to release those same pages getting invalid opcode bug in include/linux/swapops.h4.7 Medium
- capensis canopsisMultiple vulnerabilities in Canopsis of Capensis4.7 Medium
- capensis canopsisMultiple vulnerabilities in Canopsis of Capensis4.7 Medium
- icp das et-7060, icpdas et-7060 firmware +1 moreUnrestricted file upload vulnerability in ICP DAS ET-70607.2 High
- open5gsMultiple vulnerabilities in Open5GS6.5 Medium
- open5gsMultiple vulnerabilities in Open5GS6.5 Medium
- open5gsMultiple vulnerabilities in Open5GS7.5 High
- open5gsMultiple vulnerabilities in Open5GS7.5 High
- theforeman foreman, red hat satellite 6.13 for rhel 8, satellite 6.14 for rhel 8 +1 more +3 moreForeman: world readable file containing secrets6.7 Medium
- moxa nport 5000ai-m12 series, nport 5100 series, nport 5100a series +130 more +132 moreNPort 5000 Series Firmware Improper Validation of Integrity Check Vulnerability6.5 Medium
- emarket design youtube video gallery by youtube showcase, emarketdesign youtube video gallery +1 moreWordPress Video Gallery & Management Plugin <= 3.3.5 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- ayesa ibermatica rps, ibermatica rps 2019 +1 moreCryptographic Issues on IBERMATICA RPS8.2 High
- ayesa ibermatica rps, ibermatica rps 2019 +1 moreInformation exposure on IBERMATICA RPS8.2 High
- multidots banner management for woocommerceWordPress Woocommerce Category Banner Management Plugin <= 2.4.2 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- buildfail localize remote imagesWordPress Localize Remote Images Plugin <= 1.0.9 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- bydemes airspace cctv web serviceByDemes Group Airspace CCTV Web Service Improper Access Control8.8 High
- edward plainview mycryptocheckoutWordPress MyCryptoCheckout Plugin <= 2.125 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- sami ahmed siddiqui http authWordPress HTTP Auth Plugin <= 0.3.2 is vulnerable to Cross Site Request Forgery (CSRF)6.3 Medium
- Show moreLoading…