CVEs published in October 2023
2,902 vulnerabilities, 370 critical, 18 exploited.
- sick rdt400, apu0200 firmware, sick ag apu0200 +2 moreMissing Authorization in RDT400 in SICK APU allows an unprivileged remote attacker to modify data...7.7 High
- sick apu0200 firmware, sick ag apu0200 +1 moreImproper Access Control in SICK APU allows an unprivileged remote attacker to download as well...8.2 High
- acronis cyber protect 16, cyber protect cloud agent, agent +2 moreSensitive information disclosure and manipulation due to missing authorization. The following...7.1 High
- acronis cyber protect 16, cyber protect cloud agent, agent +2 moreLocal privilege escalation due to DLL hijacking vulnerability. The following products are...6.6 Medium
- mattermost, mattermost server +1 moreDenial of Service via multiple identical User IDs in /api/v4/users/ids4.3 Medium
- mattermost, mattermost server +1 moreFile Information Leak via IDOR in file_id in Draft Posts4.3 Medium
- mattermost, mattermost server +1 moreDenial of Service via Opengraph Data Cache4.3 Medium
- jetbrains ktorIn JetBrains Ktor before 2.3.5 server certificates were not verified6.8 Medium
- jetbrains ktorIn JetBrains Ktor before 2.3.5 default configuration of ContentNegotiation with XML format was...8.6 High
- quantumcloud ai chatbot, wpbot +1 moreWordPress ChatBot Plugin <= 4.7.8 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- dublue table of contents plusWordPress Table of Contents Plus Plugin <= 2302 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- peter butler timthumb vulnerability scannerWordPress Timthumb Vulnerability Scanner Plugin <= 1.54 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- matias s shockingly simple faviconWordPress Shockingly Simple Favicon Plugin <= 1.8.2 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- joakim ling remove slug from custom post typeWordPress Remove slug from custom post type Plugin <= 1.0.3 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- moriyan jay wp site protectorWordPress WP Site Protector Plugin <= 2.0 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- devnath verma wp captchaWordPress WP Captcha Plugin <= 2.0.0 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- 3ds teamwork cloud no magic release, dassault teamwork cloud enterprise edition, teamwork cloud standard edition +6 more +8 moreCross-Site Request Forgery (CSRF) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x6.8 Medium
- huseyin berberoglu wp hide pagesWordPress WP Hide Pages Plugin <= 1.0 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- nickduncan contact formWordPress Contact Form Plugin <= 2.0.10 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- mikk mihkel nurges, rebing oü woocommerce estoWordPress Woocommerce ESTO Plugin <= 2.23.1 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- imagemagick, fedoraproject extra packages for enterprise linux, fedora +2 more +4 moreImagemagick: heap use-after-free in coders/bmp.c6.2 Medium
- antisamy project antisamymXSS in AntiSamy6.1 Medium
- mediawikiAn issue was discovered in the SportsTeams extension for MediaWiki before 1.35.12, 1.36.x through...5.3 Medium
- mediawikiAn issue was discovered in the ProofreadPage extension for MediaWiki before 1.35.12, 1.36.x...6.1 Medium
- mediawikiAn issue was discovered in the Wikibase extension for MediaWiki before 1.35.12, 1.36.x through 1...5.3 Medium
- mediawikiAn issue was discovered in the Wikibase extension for MediaWiki before 1.35.12, 1.36.x through 1...7.5 High
- mediawikiAn issue was discovered in the SportsTeams extension for MediaWiki before 1.35.12, 1.36.x through...5.3 Medium
- mediawikiAn issue was discovered in the PageTriage extension for MediaWiki before 1.35.12, 1.36.x through...4.3 Medium
- mediawikiAn issue was discovered in the CheckUser extension for MediaWiki before 1.35.12, 1.36.x through 1...6.5 Medium
- mediawiki, debian linux +1 moreAn issue was discovered in includes/page/Article.php in MediaWiki 1.36.x through 1.39.x before 1...5.3 Medium
- mediawiki, debian linux +1 moreMediaWiki Denial of Service vulnerability7.5 High
- atos unify openscape 4000 assistant, unify openscape 4000 manager +1 moreAtos Unify OpenScape 4000 Platform V10 R1 before Hotfix V10 R1.42.2 4000 and Manager Platform V10...8.8 High
- atos unify openscape 4000 assistant, unify openscape 4000 manager +1 moreAtos Unify OpenScape 4000 Platform V10 R1 before Hotfix V10 R1.42.2 and 4000 and Manager Platform...8.8 High
- atos unify openscape common managementAtos Unify OpenScape Common Management Portal V10 before V10 R4.17.0 and V10 R5.1.0 allows an...8.8 High
- atos unify openscape common managementAtos Unify OpenScape Common Management Portal V10 before V10 R4.17.0 and V10 R5.1.0 allows an...8.8 High
- atos unify openscape common managementAtos Unify OpenScape Common Management Portal V10 before V10 R4.17.0 and V10 R5.1.0 allows an...8.8 High
- atos unify openscape 4000 assistant, unify openscape 4000 manager +1 moreAtos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.1, 4000 Assistant V10 R0, 4000...8.8 High
- atos unify openscape 4000 managerAtos Unify OpenScape 4000 Manager V10 R1 before V10 R1.42.1 and 4000 Manager V10 R0 allow...8.8 High
- atos unify openscape 4000 assistant, unify openscape 4000 manager +1 moreAtos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.34.7, 4000 Assistant V10 R1.42.0, 4000...7.5 High
- lcdf gifsicleBuffer Overflow vulnerability in gifsicle v.1.92 allows a remote attacker to cause a denial of...5.5 Medium
- moosocialCross Site Scripting (XSS) vulnerability in mooSocial v.3.1.8 allows a remote attacker to execute...6.1 Medium
- moosocialCross Site Scripting (XSS) vulnerability in mooSocial v.3.1.8 allows a remote attacker to execute...6.1 Medium
- moosocialCross Site Request Forgery (CSRF) vulnerability in MooSocial v.3.1.8 allows a remote attacker to...8.8 High
- langchain experimentallangchain_experimental vulnerable to arbitrary code execution via PALChain in the python exec method9.8 Critical
- hansuncms project hansuncmshansun CMS v1.0 was discovered to contain a SQL injection vulnerability via the component /ajax...9.8 Critical
- 70mai a500s firmwareIncorrect access control in 70mai a500s v1.2.119 allows attackers to directly access and delete...9.1 Critical
- atx ucryptThe web interface of ATX Ucrypt through 3.5 allows authenticated users (or attackers using...6.5 Medium
- janusintl noke hd\+ smart padlock firmware, noke hd smart padlock firmware, noke standard smart padlock firmware +2 moreNokelock Smart padlock O1 Version 5.3.0 is vulnerable to Insecure Permissions. By sending a...6.5 Medium
libxml2OSS-FuzzHeap-use-after-free in __xmlRaiseErrorNo scoreradare2OSS-FuzzHeap-buffer-overflow in load_sections_64No score- Show moreLoading…