CVEs published in October 2023
2,902 vulnerabilities, 370 critical, 18 exploited.
- qnap qvpn, qnap systems inc. qvpn windows +1 moreQVPN Device Client6.7 Medium
- qnap music stationMusic Station7.7 High
- qnap music stationMusic Station7.7 High
- fooplugins best wordpress gallery plugin – foogallery, foogallery +1 moreWordPress FooGallery Plugin <= 2.2.44 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- dylan blokhuis instant cssWordPress Instant CSS Plugin <= 1.2.1 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- checkfront online booking systemWordPress Checkfront Online Booking System Plugin <= 3.6 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- laposta signup basicWordPress Laposta Signup Basic Plugin <= 1.4.1 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- cluevo lms, e-learning platform, learning management system +1 moreWordPress CLUEVO LMS, E-Learning Platform Plugin <= 1.10.0 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- awp classifieds team ad directory & listings by awp classifieds, strategy11 awp classifieds +1 moreWordPress AWP Classifieds Plugin <= 4.3 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- codepeople cp blocksWordPress CP Blocks Plugin <= 1.0.20 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- bdwm responsive gallery gridWordPress Responsive Gallery Grid Plugin <= 2.3.10 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- andreas heigl authldapWordPress authLdap Plugin <= 2.5.8 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- venugopal remove/hide author, date, category like entry-meta, remove\/hide author\, date\, category like entry-meta project author\, date\, category like entry-meta +1 moreWordPress Remove/hide Author, Date, Category Like Entry-Meta Plugin <= 2.1 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- gradlePossible local file exfiltration by XML External entity injection6.8 Medium
- teluu pjsip, pjsip pjproject +1 morePJSIP has use-after-free vulnerability in SRTP media transport9.8 Critical
- ibm robotic process automation, robotic process automation for cloud pak +1 moreIBM Robotic Process Automation privilege escalation5.3 Medium
- ibm storage protect for virtual environments, storage protect, storage protect client +2 moreIBM Spectrum Protect code execution8.4 High
- fugu maintenance switchWordPress Maintenance Switch Plugin <= 1.5.2 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
luceneOSS-FuzzOut-of-memory in IndexSearchFuzzerNo scoreghostscriptOSS-FuzzHeap-use-after-free in gx_device_forward_finalizeNo score- gangesh matta simple org chartWordPress Simple Org Chart Plugin <= 2.3.4 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
libxml2OSS-FuzzHeap-use-after-free in xmlStaticCopyNodeNo score- dipak c. gajjar wp super minifyWordPress WP Super Minify Plugin <= 1.5.1 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- makestories team (for google web stories), pratik ghela makestories (for google web stories), makestories \(for google web stories\) +2 moreWordPress MakeStories (for Google Web Stories) Plugin <= 2.8.0 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- sumo social share boostWordPress Social Share Boost Plugin <= 4.5 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- p royal royal elementor addons and templates, royal-elementor-addons royal elementor addons +1 moreWordPress Royal Elementor Addons Plugin <= 1.3.75 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- boldgrid post and page builder by boldgrid – visual drag and drop editor, post and page builder +1 moreWordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor Plugin <= 1.24.1 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
yqopenSUSESecurity update for yqNo score- daxiawp dx-auto-save-imagesWordPress DX-auto-save-images Plugin <= 1.4.0 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- gangesh matta simple org chartWordPress Simple Org Chart Plugin <= 2.3.4 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- acronis cyber protect 16, cyber protect cloud agent, agent +2 moreSensitive information disclosure and manipulation due to improper authentication. The following...7.1 High
- acronis agentSensitive information disclosure due to missing authorization. The following products are...3.3 Low
- acronis cyber protect 16, cyber protect cloud agent, agent +2 moreSensitive information disclosure and manipulation due to missing authorization. The following...7.1 High
- bestwebsoft profile extra fields by bestwebsoft, profile extra fields +1 moreProfile Extra Fields by BestWebSoft <= 1.2.7 - Missing Authorization to Sensitive Information Exposure5.3 Medium
- turna advertising administration panelSQLi in Turna Media's Advertising Administration Panel9.8 Critical
- steven ellis easy2map photosEasy2Map Photos Plugin sql injection6.3 Medium
- greg ross schedule posts calendarWordPress Schedule Posts Calendar Plugin <= 5.2 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- geokit geokit-railsgeokit-rails Command Injection vulnerability8.3 High
- xmlsoft libxml2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 more** DISPUTED ** libxml2 through 2.11.5 has a use-after-free that can only occur after a certain...6.5 Medium
- fsevents project fseventsCode injection in fsevents9.8 Critical
- thingsboardThingsBoard Server-Side Template Injection8.4 High
- nasa openmctPrototype Pollution in NASA Open MCT7.5 High
- netis-systems n3m firmwareAn issue in NETIS SYSTEMS N3Mv2 v.1.0.1.865 allows a remote attacker to cause a denial of service...7.5 High
- d-link dir-820l, dlink dir-820l firmware +1 moreD-Link DIR-820L 1.05B03 has a stack overflow vulnerability in the cancelPing function.9.8 Critical
- tribalsystems zenarioZenario CMS Cross-site Scripting vulnerability5.4 Medium
- tribalsystems zenarioZenario CMS Cross-site Scripting vulnerability5.4 Medium
- concretecms concrete cmsConcreteCMS Cross-site Scripting vulnerability4.8 Medium
- concretecms concrete cmsConcreteCMS Cross-site Scripting vulnerability5.4 Medium
- concretecms concrete cmsConcreteCMS Cross-site Scripting vulnerability5.4 Medium
- concretecms concrete cmsConcreteCMS Cross-site Scripting vulnerability5.4 Medium
- Show moreLoading…