CVEs published in October 2023
2,902 vulnerabilities, 370 critical, 18 exploited.
- concretecms concrete cmsConcreteCMS Cross-site Scripting vulnerability5.4 Medium
- gdidees cmsGDidees CMS 3.0 is affected by a Cross-Site Scripting (XSS) vulnerability that allows attackers...5.4 Medium
- simple and nice shopping cart script project and nice shopping cart scriptFile Upload vulnerability in Simple and Nice Shopping Cart Script v.1.0 allows a remote attacker...8.8 High
- plain craft launcher 2 project craft launcher 2Directory Traversal vulnerability in Hex-Dragon Plain Craft Launcher 2 version Alpha 1.3.9,...7.8 High
- smackcoders import all pages\, post types\, products\, orders\, and users as xml \& csvWP Ultimate CSV Importer Plugin cross-site request forgery4.3 Medium
- acronis cyber protect 17, cyber protect cloud agent, agent +2 moreSensitive information disclosure due to missing authorization. The following products are...5.5 Medium
- acronis cyber protect 17, cyber protect cloud agent, agent +2 moreSensitive information disclosure due to missing authorization. The following products are...5.5 Medium
- acronis cyber protect 16, cyber protect cloud agent, agent +2 moreSensitive information leak through log files. The following products are affected: Acronis Agent ...4.4 Medium
- acronis agentSensitive information disclosure due to missing authorization. The following products are...5.5 Medium
- acronis agentSensitive information disclosure due to missing authorization. The following products are...5.5 Medium
- acronis cyber protect 16, cyber protect cloud agent, agent +2 moreSensitive information disclosure due to excessive collection of system information. The following...3.3 Low
- acronis cyber protect 16, cyber protect cloud agent, agent +2 moreSensitive information disclosure and manipulation due to missing authorization. The following...7.1 High
- acronis agentSensitive information disclosure and manipulation due to missing authorization. The following...7.3 High
github.com/consensys/gnark-cryptoGognark-crypto's exponentiation in the pairing target group GT using GLV can give incorrect resultsNo score- objectcomputing micronaut security, micronaut-projects micronaut-security +1 moremicronaut security has invalid IdTokenClaimsValidator logic on aud4.8 Medium
- decidimDecidim has broken access control in templates9.1 Critical
- go toolchain cmd/go, golang go, fedoraproject fedora +2 moreArbitrary code execution during build via line directives in cmd/go8.1 High
- vim, vim vim/vim, fedoraproject fedora +2 moreNULL Pointer Dereference in vim/vim6.2 Medium
- debian linux, linux kernel, red hat enterprise linux 6 +8 more +10 moreKernel: rsvp: out-of-bounds read in rsvp_classify()6.5 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +8 more +10 moreKernel: ipv4: null pointer dereference in ipv4_send_dest_unreach()5.5 Medium
- dell smartfabric storage softwareDell SmartFabric Storage Software version 1.3 and lower contain an improper input validation...9.8 Critical
- dell smartfabric storage softwareDell SmartFabric Storage Software v1.4 (and earlier) contains an Improper Input Validation...4.3 Medium
- gradleGradle has incorrect permission assignment for symlinked files used in copy or archiving operations3.2 Low
- dell smartfabric storage softwareDell SmartFabric Storage Software v1.4 (and earlier) contains an improper access control...4.4 Medium
- dell smartfabric storage softwareDell SmartFabric Storage Software v1.4 (and earlier) contains possible vulnerabilities for HTML...4.4 Medium
- vaporIncorrect request error handling triggers server crash in Vapor5.3 Medium
- dell smartfabric storage softwareDell SmartFabric Storage Software v1.4 (and earlier) contains a Path Traversal Vulnerability in...6.3 Medium
- dell smartfabric storage softwareDell SmartFabric Storage Software v1.4 (and earlier) contain(s) an OS Command Injection...7.8 High
- dell smartfabric storage softwareDell SmartFabric Storage Software v1.4 (and earlier) contains an OS Command Injection...7.8 High
- dell smartfabric storage softwareDell SmartFabric Storage Software v1.4 (and earlier) contains an OS Command Injection...7.8 High
- oretnom23 online pizza ordering systemSourceCodester Online Pizza Ordering System sql injection4.7 Medium
- qognify nicevisionQognify NiceVision Use of Hard-coded Credentials10.0 Critical
- ni measurementlinkImproper Restriction in NI MeasurementLink Python Services8.8 High
- 1e clientElevated Temp Directory Execution in 1E Client8.8 High
- red hat advanced cluster management for kubernetes 2, ansible automation platform 1.2, ansible tower 3 +4 more +6 moreOpenshift api admission checks does not enforce "custom-host" permissions4.4 Medium
CefSharp.CommonNuGet,CefSharp.Common.NETCoreNuGet +1 moreCefSharp affected by libvpx's heap buffer overflow in vp8 encodingNo scorelibredwgOSS-FuzzHeap-buffer-overflow in bit_TV_to_utf8No scoreapache-commons-ioOSS-FuzzSecurity exception in java.base/java.util.regex.Pattern$GroupHead.matchNo score- linux kernel, fedora, red hat enterprise linux 6 +4 more +6 moreUse-after-free in smb2_is_status_io_timeout()6.5 Medium
- red hat openshift container platform 4, redhat openshift container platform +1 moreContent spoofing4.3 Medium
- 1e client1E Client installer can perform arbitrary file deletion on protected files8.4 High
imagecodecsPyPIBundled libwebp in imagecodecs vulnerableNo score- python pillow, debian linux +1 moreArbitrary Code Execution in Pillow8.1 High
- netbsd ftpd, tnftpd +1 moreftpd before "NetBSD-ftpd 20230930" can leak information about the host filesystem before...7.5 High
- dlink dir-823g firmwareD-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Encryption...7.5 High
- d-link dir-823g-firmware, dlink dir-823g firmware +1 moreD-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the TXPower parameter...7.5 High
- dlink dir-823g firmwareD-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Password...7.5 High
- dlink dir-823g firmwareD-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the SSID parameter in...7.5 High
- dlink dir-823g firmwareD-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Mac parameter in...7.5 High
- dlink dir-823g firmwareD-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the StartTime...7.5 High
- Show moreLoading…