CVEs published in October 2023
2,902 vulnerabilities, 370 critical, 18 exploited.
- dlink dir-823g firmwareD-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the GuardInt...7.5 High
- dlink dir-823g firmwareD-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the MacAddress...7.5 High
- dlink dir-823g firmwareD-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Type parameter in...7.5 High
- dlink dir-823g firmwareD-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the EndTime parameter...7.5 High
- dlink dir-823g firmwareD-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the AdminPassword...7.5 High
- dlink dir-823g firmwareD-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the CurrentPassword...7.5 High
- knowband one page checkout\, social login \& mailchimpSQL injection vulnerability in KnowBand Module One Page Checkout, Social Login & Mailchimp ...9.8 Critical
- presto-changeo attribute gridPresto Changeo attributegrid up to 2.0.3 was discovered to contain a SQL injection vulnerability...9.8 Critical
- presto-changeo test site creatorPresto Changeo testsitecreator up to 1.1.1 was discovered to contain a deserialization...9.8 Critical
- opensolution quick cmsCross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker...5.4 Medium
- dlink dir-846 firmwareAn issue in D-Link Wireless MU-MIMO Gigabit AC1200 Router DIR-846 firmware version 100A53DBR...8.8 High
- pigcmspigcms up to 7.0 was discovered to contain an arbitrary file upload vulnerability.9.8 Critical
- milesight ur32 firmware, ur32l firmware, ur35 firmware +5 more +7 moreMilesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 was discovered to contain a cross-site...6.1 Medium
- prixan prixanconnectPrixan prixanconnect up to v1.62 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- watchguard edr firmware, epdr firmware, epp firmware +1 more +3 moreAn issue was discovered in WatchGuard EPDR 8.0.21.0002. Due to a weak implementation of a...5.5 Medium
- watchguard edr firmware, epdr firmware, epp firmware +1 more +3 moreAn issue was discovered in WatchGuard EPDR 8.0.21.0002. It is possible to enable or disable...5.5 Medium
- watchguard edr firmware, epdr firmware, epp firmware +1 more +3 moreAn issue was discovered in WatchGuard EPDR 8.0.21.0002. It is possible to bypass the defensive...6.7 Medium
- watchguard edr firmware, epdr firmware, epp firmware +1 more +3 moreAn issue was discovered in WatchGuard EPDR 8.0.21.0002. Due to a weak implementation of message...7.8 High
- altair-graphql altairThe Altair Desktop Client Does Not Sanitize External URLs before passing them to the underlying system5.0 Medium
- nexryai nexkeyNexkey allows users to bypass authentication of Bull dashboard7.5 High
- misskeyMisskey allows users to bypass authentication of Bull dashboard7.5 High
- silicon labs ember znet, silabs emberznet +1 moreTouchlink authentication bypass due to packets processed after timeout or out of range in Ember ZNet10.0 Critical
- acronis cyber protect 17, cyber protect cloud agent, agent +2 moreSensitive information disclosure and manipulation due to missing authorization. The following...7.3 High
- acronis cyber protect 17, cyber protect cloud agent, agent +2 moreLocal privilege escalation due to improper soft link handling. The following products are...5.6 Medium
- redissonRedisson unsafe deserialization vulnerability9.7 Critical
- mozilla common voice, common-voice +1 moreCommon Voice Cross-site Scripting vulnerability6.1 Medium
- facebook whatsapp business for android, whatsapp business for ios, whatsapp desktop for mac +4 more +6 moreA race condition in an event subsystem led to a heap use-after-free issue in established audio...5.0 Medium
- facebook whatsapp business for android, whatsapp business for ios, whatsapp desktop for mac +4 more +6 moreA race condition in a network transport subsystem led to a heap use-after-free issue in...5.6 Medium
- input-output-hk hydraMalicious head initialiser can extract PTs from control of Hydra scripts, leading to locked participant commits or spoofed commits8.1 High
- input-output-hk hydraHydra's contestation period in head datum can be modified during Close transaction, allowing malicious participant to freely modify the contestation deadline8.1 High
- htmlsanitizer project htmlsanitizerHtmlSanitizer vulnerable to Cross-site Scripting in Foreign Content6.1 Medium
- zopeZope management interface vulnerable to stored cross site scripting via the title property3.1 Low
- input-output-hk hydraHydra's committed UTxOs at Commit validator and UTxOs at Initial validator can be spent arbitrarily by anyone9.1 Critical
- schneider electric ecostruxure power monitoring expert, ecostruxure power operation (epo) with advanced reports, ecostruxure power scada operation with advanced reports +1 more +3 moreA?CWE-502:?Deserialization of untrusted data?vulnerability exists?that could allow an attacker...9.8 Critical
- schneider electric c-bus toolkit, schneider-electric spacelogic c-bus toolkit +1 moreA?CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')...9.8 Critical
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +5 more +7 moreKernel: ebpf: insufficient stack type checks in dynptr8.2 High
- apple ipados, ios and ipados, iphone os +2 moreThe issue was addressed with improved checks. This issue is fixed in iOS 17.0.3 and iPadOS 17.0.3...7.8 High
- schneider electric c-bus toolkitA?CWE-269: Improper Privilege Management vulnerability exists?that could cause?a local privilege...9.8 Critical
- typo3 femanagerTYPO3 extension femanager Broken Access Control vulnerability4.2 Medium
- cisco ios xe software, ios xe +1 moreA vulnerability in the on-device application development workflow feature for the Cisco IOx...6.5 Medium
- cisco emergency responder, prime collaboration deployment, unified communications manager +3 more +5 moreA vulnerability in an API endpoint of multiple Cisco Unified Communications Products could allow...8.6 High
- cisco emergency responderA vulnerability in Cisco Emergency Responder could allow an unauthenticated, remote attacker to...9.8 Critical
- wiresharkMemory Allocation with Excessive Size Value in Wireshark5.3 Medium
drupal/mail_loginPackagistThis module enables users to log in by email address with minimal configurations. Drupal core contains protection against brute force attacks via a flood control mechanism. This module's functionality…No score- tcman gimSQL injection vulnerability in TCMAN GIM6.5 Medium
- tcman gimSQL injection vulnerability in TCMAN GIM9.9 Critical
- garuda linux linux, garudalinux garuda linux +1 moreGaruda Linux Improper Authorization5.3 Medium
- djangoproject django, fedoraproject fedora +1 moreDjango Denial-of-service in django.utils.text.Truncator7.5 High
express-zod-apinpmZod denial of service vulnerability during email validation7.5 High- consensys gnarkgnark vulnerable to unsoundness in variable comparison/non-unique binary decomposition7.1 High
- Show moreLoading…