CVEs published in October 2023
2,902 vulnerabilities, 370 critical, 18 exploited.
- trellix endpoint securityA code injection vulnerability in Trellix ENS 10.7.0 April 2023 release and earlier, allowed a...5.5 Medium
- red hat ansible automation platform 2.3 for rhel 8, ansible automation platform 2.3 for rhel 9, ansible automation platform 2.4 for rhel 8 +5 more +7 moreController: html injection in custom login info7.3 High
- redhat ansible automation platform, red hat ansible automation platform 2.4 for rhel 8, ansible automation platform 2.4 for rhel 9 +2 more +4 morePlatform: token exposed at importing project6.3 Medium
- redhat ansible automation platform, red hat ansible automation platform 2.4 for rhel 8, ansible automation platform 2.4 for rhel 9 +1 more +3 morePlatform: ec2_key module prints out the private key directly to the standard output7.3 High
- hp inc. certain hp enterprise laserjet, laserjet managed printers, hp futuresmart 5 +1 moreCertain HP Enterprise LaserJet, LaserJet Managed printers - Potential denial of service, potential Cross Site Scripting (XSS)6.1 Medium
- multidots dynamic pricing and discount rules for woocommerceWordPress WooCommerce Dynamic Pricing and Discount Rules Plugin <= 2.4.0 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- atlassian confluence data center, confluence data center and server, confluence server +2 moreAtlassian has been made aware of an issue reported by a handful of customers where external...10.0 Critical
- multidots enhanced ecommerce google analytics for woocommerceEnhanced Ecommerce Google Analytics for WooCommerce5.4 Medium
- yas global team make paths relativeWordPress Make Paths Relative Plugin <= 1.3.0 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- ibm security guardiumIBM Security Guardium information disclosure3.1 Low
- ibm urbancode deployIBM UrbanCode Deploy (UCD) improper authentication controls5.3 Medium
- ibm content navigatorIBM Content Navigator cross-site scripting4.6 Medium
- oretnom23 online computer and laptop storeSourceCodester Online Computer and Laptop Store products.php sql injection6.3 Medium
- chetan gole wp-copyprotect [protect your blog posts], chetangole wp-copyprotect \[protect your blog posts\] +1 moreWordPress WP-CopyProtect [Protect your blog posts] Plugin <= 3.1.0 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- candlepinproject candlepin, red hat satellite 6, redhat satellite +2 moreImproper authorization check in the server component6.8 Medium
apache-poiOSS-FuzzSecurity exception in java.base/java.util.Arrays.copyOfNo scorelibdwarfOSS-FuzzHeap-buffer-overflow in _dwarf_memcpy_noswap_bytesNo score- easy chat server project chat server, efs easy chat server +1 moreEasy Chat Server XSS vulnerability6.1 Medium
- easy chat server project chat server, efs easy chat server +1 moreEasy Chat Server XSS vulnerability6.1 Medium
- oretnom23 online computer and laptop storeSourceCodester Online Computer and Laptop Store Master.php register sql injection7.3 High
- easy chat server project chat server, efs easy chat server +1 moreEasy Chat Server XSS vulnerability6.1 Medium
- easy chat server project chat server, efs easy chat server +1 moreEasy Chat Server Stack-based buffer overflow vulnerability9.8 Critical
- easy address book web server project address book web server, efs software easy address book web server +1 moreEasy Address Book Web Server Stored XSS vulnerability6.1 Medium
- easy address book web server project address book web server, efs software easy address book web server +1 moreEasy Address Book Web Server XSS vulnerability6.1 Medium
- easy address book web server project address book web server, efs software easy address book web server +1 moreEasy Address Book Web Server Buffer overflow vulnerability9.8 Critical
- acronis cyber protect home office, true image oem +1 moreSensitive information disclosure and manipulation due to missing authorization. The following...7.8 High
- redhat openshift data science, opendatahub open data hub dashboard, red hat openshift data science (rhods) +2 moreS3 credentials included when exporting elyra notebook7.7 High
- dogtagpki network security services for java, fedora extra packages for enterprise linux, fedora +7 more +9 moreMemory leak on tls connections5.9 Medium
- helpdezk, helpdezk community +1 moreHelpDezk Community improper authorization9.8 Critical
- helpdezk, helpdezk community +1 moreHelpDezk Community improper authorization8.6 High
- setelsa security conacwinSQL injection in Setelsa Security ConacWin9.9 Critical
- acilia widestand, widestand cms +1 moreCross-Site Scripting (XSS) vulnerability on WideStand CMS of Acilia5.4 Medium
- aqua esolutions drive, aquaesolutions aqua drive +1 moreRelative path traversal in Aqua eSolutions9.9 Critical
- prointegra uptimedcImproper authorisation in Uptime DC8.8 High
- setelsa security conacwin cb, setelsa-security conacwin +1 moreRelative path traversal in Setelsa Security ConacWin CB7.5 High
- sage 200 spainUse of Cleartext credentials in Sage 200 Spain7.8 High
- quarkus, red hat build of quarkus 2.13.8.final, rhint service registry 2.5.4 ga +2 moreQuarkus-oidc: id and access tokens leak via the authorization code flow7.5 High
- infinispan hot rod, red hat data grid 8.4.6, redhat data grid +2 moreHotrod-client: hot rod client does not enable hostname validation when using tls that lead to a mitm attack7.4 High
- iwebss update theme and plugins from zip fileWordPress Update Theme and Plugins from Zip File Plugin <= 2.0.0 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- saphali woocommerce lite, woocommerce +1 moreWordPress Saphali Woocommerce Lite Plugin <= 1.8.13 is vulnerable to Cross Site Request Forgery (CSRF)6.3 Medium
- cage web design | rolf van gelder optimize database after deleting revisionsWordPress Optimize Database after Deleting Revisions Plugin <= 5.1 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- chetan gole wp-copyprotect [protect your blog posts], wp-copyprotect project wp-copyprotect +1 moreWordPress WP-CopyProtect [Protect your blog posts] Plugin <= 3.1.0 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- gpac, gpac gpac/gpac +1 moreOut-of-bounds Read in gpac/gpac5.5 Medium
- mosparo, mosparo mosparo/mosparo +1 moreOpen Redirect in mosparo/mosparo4.3 Medium
- citadelA cross-site scripting vulnerability exists in Citadel versions prior to 994. When a malicious...5.4 Medium
- freebsdarm64 boot CPUs may lack speculative execution protections5.5 Medium
- freebsdcopy_file_range insufficient capability rights check7.1 High
- freebsdmsdosfs data disclosure6.5 Medium
- samsung mobile galaxy book, galaxy book pro, galaxy book pro 360 and galaxy book odyssey, samsung galaxy book firmware, galaxy book odyssey firmware +2 more +4 moreAn improper input validation in UEFI Firmware prior to Firmware update Oct-2023 Release in Galaxy...5.5 Medium
- samsung healthImproper access control vulnerability in Samsung Health prior to version 6.24.3.007 allows...4.0 Medium
- Show moreLoading…