CVEs published in October 2023
2,902 vulnerabilities, 370 critical, 18 exploited.
- siemens simatic cp 1604, simatic cp 1616, simatic cp 1623 +7 more +9 moreA vulnerability has been identified in SIMATIC CP 1604 (All versions), SIMATIC CP 1616 (All...4.4 Medium
- siemens simatic cp 1604, simatic cp 1616, simatic cp 1623 +7 more +9 moreA vulnerability has been identified in SIMATIC CP 1604 (All versions), SIMATIC CP 1616 (All...6.7 Medium
- siemens cp-8031 master module, cp-8050 master module, cp-8031 firmware +1 more +3 moreA vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05.11 (only...9.8 Critical
- siemens sinema server v14, sinema server +1 moreA vulnerability has been identified in SINEMA Server V14 (All versions). The affected application...8.3 High
- siemens xpedition layout browserA vulnerability has been identified in Xpedition Layout Browser (All versions < VX.2.14)....7.8 High
- siemens sinec nmsA vulnerability has been identified in SINEC NMS (All versions < V2.0). The affected application...7.8 High
- jan syski smodbipCross-site request forgery (CSRF) in SmodBIP8.8 High
- chiefonboarding, chiefonboarding chiefonboarding/chiefonboarding +1 moreCross-Site Request Forgery (CSRF) in chiefonboarding/chiefonboarding4.3 Medium
conmonopenSUSESecurity update for conmonNo scoreconmonSUSESecurity update for conmonNo score- dinesh karki block plugin updateWordPress Block Plugin Update Plugin <= 3.3 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- mediavine control panelWordPress Mediavine Control Panel Plugin <= 2.10.2 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- hometory mang board wp, mangboard mang board +1 moreWordPress Mang Board WP Plugin <= 1.7.6 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- hardik kalathiya wp gallery metabox, wp gallery metabox project gallery metabox +1 moreWordPress WP Gallery Metabox Plugin <= 1.0.0 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- ashok rane order delivery date for wp e-commerce, tychesoftwares order delivery date for woocommerce +1 moreWordPress Order Delivery Date for WP e-Commerce Plugin <= 1.2 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- softaculous ltd. wpcentralWordPress wpCentral Plugin <= 1.5.7 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- wp ical availability ical availability, wpicalavailability wp ical availability +1 moreWordPress WP iCal Availability Plugin <= 1.0.3 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- mailmunch, mailmunch – grow your email list +1 moreWordPress MailMunch – Grow your Email List Plugin <= 3.1.2 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- dotsquares wp custom post templateWordPress WP Custom Post Template Plugin <= 1.0 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- morris bryant, ruben sargsyan outbound link managerWordPress Outbound Link Manager Plugin <= 1.2 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- pressified sendpress, sendpress newsletters, unknown sendpress newsletters +2 moreWordPress SendPress Newsletters Plugin <= 1.22.3.31 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- nikunj soni easy wp cleanerWordPress Easy WP Cleaner Plugin <= 1.9 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- realbig, realbig team for wordpress +1 moreWordPress Realbig Plugin <= 1.0.3 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- felix welberg sis handballWordPress SIS Handball Plugin <= 1.0.45 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- leechesnutt slick contact formsSlick Contact Forms <= 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- geomywp geo my wordpress, ninjew geo my wp +1 moreGEO my WordPress <= 4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- sap se netweaver as java, sap netweaver application server java +1 moreServer-Side Request Forgery in SAP NetWeaver AS Java (GRMG Heartbeat application)6.5 Medium
- sap s\/4hana, sap se s/4hana core +1 moreInformation Disclosure Vulnerability in Statutory Reporting4.3 Medium
- sap businessobjects web intelligenceCross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Web Intelligence6.8 Medium
- sap se s/4hana (manage withholding tax items), sap s\/4hana +1 moreMissing Authorization Check In S/4HANA (Manage Withholding Tax Items)5.4 Medium
- sap business one, sap se business one (b1i) +1 moreInformation Disclosure vulnerability in SAP Business One (B1i)4.3 Medium
- sap powerdesigner, sap se powerdesigner client +1 moreMissing XML Validation vulnerability in SAP PowerDesigner Client BPMN2 import6.5 Medium
- code-projects farmaciacodeprojects Farmacia index.php sql injection6.3 Medium
- apache tomcat, debian linux +1 moreApache Tomcat: Trailer header parsing too lenient5.3 Medium
- mediawikiAn issue was discovered in DifferenceEngine.php in MediaWiki before 1.35.12, 1.36.x through 1.39...4.3 Medium
- mediawikiAn issue was discovered in MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1...5.4 Medium
- mtproto mt proto proxyMTProto proxy remote code execution vulnerability8.8 High
- d-link dap-x1860, dlink dap-1860 firmware +1 moreA command injection in the parsing_xml_stasurvey function inside libcgifunc.so of the D-Link DAP...8.8 High
- dlink dsl-3782 firmwareAn issue found in D-Link DSL-3782 v.1.03 and before allows remote authenticated users to execute...8.8 High
- seacmsAn issue in SeaCMS v.12.8 allows an attacker to execute arbitrary code via the admin_template.php...8.1 High
- seacmsAn issue in SeaCMS v.12.8 allows an attacker to execute arbitrary code via the admin_ Weixin.php...7.2 High
- seacmsAn issue in SeaCMS v.12.8 allows an attacker to execute arbitrary code via the admin_ notify.php...8.8 High
- easycorp zentao, zentao biz, zentao max +2 moreAn issue in ZenTao Community Edition v.18.6 and before, ZenTao Biz v.8.6 and before, ZenTao Max v...8.8 High
- easycorp zentaoCross Site Scripting vulnerability in ZenTaoPMS v.18.6 allows a local attacker to obtain...5.4 Medium
- concretecms concrete cmsConcreteCMS vulnerable to Stored Cross-site Scripting5.4 Medium
- macrium reflectA buffer overflow in Macrium Reflect 8.1.7544 and below allows attackers to escalate privileges...7.8 High
- apache tomcat, accumulo, debian linux +2 moreApache Tomcat: Failure during request clean-up leads to sensitive data leaking to subsequent requests5.3 Medium
- samba, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 moreSamba: ad dc busy rpc multiple listener dos6.5 Medium
- samba, red hat enterprise linux 6, enterprise linux 7 +15 more +17 moreSamba: "rpcecho" development server allows denial of service via sleep() call on ad dc6.5 Medium
- eve door and window firmware, govee led strip firmware, nanoleaf lightstrip firmware +6 more +8 moreInsecure Permissions vulnerability in Connectivity Standards Alliance Matter Official SDK v.1.1.0...7.5 High
- Show moreLoading…