CVEs published in October 2023
2,902 vulnerabilities, 370 critical, 18 exploited.
- samba, fedora, red hat enterprise linux 6 +4 more +6 moreSamba: ad dc password exposure to privileged users and rodcs7.5 High
- samba, fedoraproject fedora, red hat enterprise linux 6 +12 more +14 moreSamba: smb clients can truncate files with read-only permissions6.5 Medium
- phpjabbers appointment schedulerUser enumeration is found in in PHPJabbers Appointment Scheduler 3.0. This issue occurs during...7.5 High
- phpjabbers appointment schedulerThere is a Cross Site Scripting (XSS) vulnerability in the "theme" parameter of preview.php in...6.1 Medium
- broadcom lsi pci-sv92ex firmwareAn issue was discovered in Broadcom) LSI PCI-SV92EX Soft Modem Kernel Driver through 2.2.100.1 ...7.8 High
- microchip mplab network creatorIn Microchip MPLAB Net 3.6.1, TCP ISNs are improperly random.9.1 Critical
- capgemini picotcpIn PicoTCP 1.7.0, TCP ISNs are improperly random.9.1 Critical
- contiki-ngIn Contiki 4.5, TCP ISNs are improperly random.9.1 Critical
- butok fnetIn FNET 4.6.3, TCP ISNs are improperly random.9.1 Critical
- oryx-embedded cyclonetcpIn Oryx CycloneTCP 1.9.6, TCP ISNs are improperly random.9.8 Critical
- silabs uc\/tcp-ipIn Silicon Labs uC/TCP-IP 3.6.0, TCP ISNs are improperly random.9.8 Critical
- ethernut nut\/osAn issue was discovered in Ethernut Nut/OS 5.1. The code that generates Initial Sequence Numbers ...7.5 High
- typoraCross Site Scripting (XSS) vulnerability found in Typora v.0.9.65 allows a remote attacker to...7.4 High
- xinje xdpproXINJE XDPPro cfgmgr32.dll uncontrolled search path7.8 High
- xinje xd5e-30r-e, xd5e-30r-e firmware +1 moreXINJE XD5E-30R-E Modbus denial of service6.5 Medium
- lenovo thinkpad t14s gen 3 bios - linux, thinkpad t14s x13 gen3 bios - windows, thinkpad x13 gen3 bios - linux +3 more +5 moreA vulnerability was reported in ThinkPad T14s Gen 3 and X13 Gen3 that could cause the BIOS...6.1 Medium
- lenovo thinkpad t14s gen 3 bios - linux, thinkpad t14s x13 gen3 bios - windows, thinkpad x13 gen3 bios - linux +3 more +5 moreA vulnerability was reported in ThinkPad T14s Gen 3 and X13 Gen3 that could cause the BIOS...6.1 Medium
- lenovo thinkpad t14s gen 3 bios, thinkpad x13 gen3 bios, thinkpad t14s gen 3 firmware +1 more +3 moreA vulnerability was reported in ThinkPad T14s Gen 3 and X13 Gen3 that could cause the BIOS...6.1 Medium
- delta electronics wplsoftDelta Electronics WPLSoft Modbus cleartext transmission3.7 Low
- gardenArbitrary code execution vulnerability when using shared Kubernetes cluster8.3 High
- delta electronics wplsoftDelta Electronics WPLSoft Modbus Data Packet heap-based overflow3.5 Low
- delta electronics dvp32es2 plc, deltaww dvp32es200r firmware, dvp32es200rc firmware +5 more +7 moreDelta Electronics DVP32ES2 PLC Password Transmission denial of service6.5 Medium
- rémi leclercq hide admin notices – admin notification center, remileclercq hide admin notices - admin notification center plugin +1 moreWordPress Hide admin notices – Admin Notification Center Plugin <= 2.3.2 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- palasthotel use memcachedWordPress Use Memcached Plugin <= 1.0.5 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- lenovo notebook, bios, d330-10igl firmware +24 more +26 moreA potential vulnerability in a driver used during manufacturing process on some consumer Lenovo...6.7 Medium
- daext live newsWordPress Live News Plugin <= 1.06 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +8 more +10 moreKernel: xfrm: out-of-bounds read in __xfrm_state_filter_match()3.2 Low
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +8 more +10 moreKernel: netfilter: xtables sctp out-of-bounds read in match_flags()6.1 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +8 more +10 moreKernel: netfilter: xtables out-of-bounds read in u32_match_it()6.7 Medium
- linux kernel, fedoraproject fedora, red hat enterprise linux 6 +8 more +10 moreKernel: netfilter: nftables out-of-bounds read in nf_osf_match_one()5.1 Medium
- leadsterWordPress Leadster Plugin <= 1.1.2 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- ulf benjaminsson wp-dtreeWordPress WP-dTree Plugin <= 4.4.5 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- lipnitsk libcue, debian linux, fedoraproject fedora +2 morelibcue vulnerable to out-of-bounds array access8.8 High
- wazuh wazuh-dashboard, wazuh-kibana-app +1 moreWazuh vulnerable to user privilege escalation8.8 High
- octoprintImproper Neutralization of Special Elements Used in a Template Engine in OctoPrint6.2 Medium
- hp life, hp inc. life android mobile +1 moreHP LIFE Android Mobile – Potential Escalation of Privilege, Information Disclosure9.8 Critical
- uptime.kuma uptime kuma, louislam uptime-kuma +1 moreUptime Kuma has Persistentent User Sessions6.7 Medium
- hewlett packer enterprise (hpe) hpe msa controller, hpe msa 1060 storage firmware, msa 2060 storage firmware +1 more +3 moreHPE MSA Controller prior to version IN210R004 could be remotely exploited to allow inconsistent...5.4 Medium
- piwigoPiwigo Reflected XSS vulnerability9.3 Critical
- wpsynchro wp synchroWordPress WP Migration Plugin DB & Files – WP Synchro Plugin <= 1.9.1 is vulnerable to Cross Site Request Forgery (CSRF)6.5 Medium
- reportportal, reportportal service-api +1 moreReportPortal DoS vulnerability on creating a Launch with too many recursively nested elements6.3 Medium
- oroinc orocommerceOroCommerce Cross-site Scripting vulnerability in add note dialog of Shopping List line item6.9 Medium
openscOSS-FuzzStack-buffer-overflow in entersafe_reverse_bufferNo score- sick apu0200 firmware, sick ag apu0200 +1 moreImproper Restriction of Rendered UI Layers or Frames in RDT400 in SICK APU allows an unprivileged...4.3 Medium
- sick apu0200, apu0200 firmware +1 moreInsufficient Control Flow Management in RDT400 in SICK APU allows an unprivileged remote...5.3 Medium
- sick apu0200, apu0200 firmware +1 moreFiles or Directories Accessible to External Parties in RDT400 in SICK APU allows an unprivileged...5.3 Medium
- sick apu0200 firmware, sick ag apu0200 +1 moreCleartext Transmission of Sensitive Information in RDT400 in SICK APU allows an unprivileged...5.9 Medium
- sick apu0200, apu0200 firmware +1 moreModification of Assumed-Immutable Data (MAID) in RDT400 in SICK APU allows an unprivileged...6.5 Medium
- sick apu0200 firmware, sick ag apu0200 +1 moreImproper Neutralization of Input During Web Page Generation (’Cross-site Scripting’) in RDT400...7.1 High
- sick apu0200, apu0200 firmware +1 moreImproper Restriction of Excessive Authentication Attempts in RDT400 in SICK APU allows an...7.5 High
- Show moreLoading…