CVEs published in October 2023
2,902 vulnerabilities, 370 critical, 18 exploited.
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreLayer 2 Tunneling Protocol Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreLayer 2 Tunneling Protocol Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreLayer 2 Tunneling Protocol Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreLayer 2 Tunneling Protocol Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreLayer 2 Tunneling Protocol Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreLayer 2 Tunneling Protocol Remote Code Execution Vulnerability8.1 High
- microsoft skype for business, skype for business server 2015 cu13, skype for business server 2019 cu7 +1 more +3 moreSkype for Business Elevation of Privilege Vulnerability5.3 Medium
- microsoft azure network watcher, azure network watcher vm extension +1 moreAzure Network Watcher VM Agent Elevation of Privilege Vulnerability7.8 High
- microsoft .net, .net 7.0, visual studio 2022 version 17.2 +9 more +11 moreMicrosoft QUIC Denial of Service Vulnerability7.5 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +14 more +16 moreWindows Runtime Remote Code Execution Vulnerability7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreMicrosoft Message Queuing (MSMQ) Remote Code Execution Vulnerability9.8 Critical
- translator poqdev add-onTranslator PoqDev Add-On Select Text cross site scripting3.1 Low
- zitadelZITADEL's password reset does not respect the "Ignoring unknown usernames" setting5.3 Medium
- eclipse jetty, debian linux, eclipse jetty.project +1 more +3 moreHTTP/2 HPACK integer overflow and buffer allocation7.5 High
- fortinet fortimanagerAn improper access control vulnerability [CWE-284] in FortiManager management interface 7.2.0...7.7 High
- fortinet fortiadc, fortianalyzer, fortimanager +2 moreAn improper neutralization of special elements used in an OS Command ('OS Command Injection')...7.4 High
- fortinet fortiosA use of GET request method with sensitive query strings vulnerability in Fortinet FortiOS 7.0.0 ...6.5 Medium
- fortinet fortiwlmA improper neutralization of special elements used in an os command ('os command injection') in...9.6 Critical
- fortinet fortiwlmA improper neutralization of special elements used in an os command ('os command injection') in...9.6 Critical
- fortinet fortiwlmA improper neutralization of special elements used in an os command ('os command injection') in...9.6 Critical
- fortinet fortiwlmA improper neutralization of special elements used in an os command ('os command injection') in...9.6 Critical
- fortinet fortiwlmA improper neutralization of special elements used in an os command ('os command injection') in...8.6 High
- fortinet fortiwlmA improper neutralization of special elements used in an os command ('os command injection') in...8.6 High
- fortinet fortiwlmA improper neutralization of special elements used in an os command ('os command injection') in...8.6 High
- fortinet fortiwlmA improper neutralization of special elements used in an os command ('os command injection') in...8.6 High
- fortinet fortiwlmA improper neutralization of special elements used in an os command ('os command injection') in...8.6 High
- fortinet fortiwlmA improper neutralization of special elements used in an os command ('os command injection') in...8.6 High
- fortinet fortianalyzer, fortianalyzer-bigdata, fortimanager +2 moreA insufficient verification of data authenticity vulnerability [CWE-345] in FortiAnalyzer version...5.0 Medium
- fortinet fortisiemA improper neutralization of special elements used in an os command ('os command injection') in...9.7 Critical
- fortinet fortimailAn improper neutralization of input during web page generation vulnerability [CWE-79] in...3.4 Low
- fortinet forticlient, forticlientlinux, forticlientmac +1 more +3 moreAn exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in...3.0 Low
- fortinet fortios, fortiproxy +1 moreA use after free vulnerability [CWE-416] in FortiOS version 7.2.0 through 7.2.4 and version 7.0.0...4.8 Medium
- fortinet fortimailAn incorrect authorization vulnerability [CWE-863] in FortiMail webmail version 7.2.0 through 7.2...8.6 High
- fortinet fortiisolatorA improper neutralization of special elements used in an os command ('os command injection') in...6.7 Medium
- fortinet fortiguestAn insertion of sensitive information into log file vulnerability in Fortinet FortiGuest 1.0.0...5.5 Medium
- fortinet fortiosAn improper authorization vulnerability in Fortinet FortiOS 7.0.0 - 7.0.11 and 7.2.0 - 7.2.4...7.4 High
- fortinet fortimanager, fortianalyzer +1 moreAn improper neutralization of special elements used in an os command ('os command injection') in...6.9 Medium
- fortinet ips engine, fortios ips engine +1 moreA interpretation conflict in Fortinet IPS Engine versions 7.321, 7.166 and 6.158 allows attacker...6.7 Medium
- fortinet fortianalyzer, fortimanager +1 moreAn improper neutralization of special elements used in an os command ('OS Command Injection')...7.6 High
- fortinet fortianalyzer, fortimanager, fortianalyzer cloud +1 more +3 moreA client-side enforcement of server-side security [CWE-602] vulnerability in Fortinet...6.2 Medium
- fortinet fortianalyzer, fortimanager +1 moreAn authorization bypass through user-controlled key [CWE-639] vulnerability in Fortinet...4.1 Medium
- fortinet fortiosAn improper neutralization of script-related html tags in a web page (basic xss) in Fortinet...3.9 Low
- fortinet fortiosAn improper access control vulnerability in Fortinet FortiOS 7.2.0 - 7.2.4 and 7.4.0 allows an...6.5 Medium
- qdocs smart schoolQDocs Smart School HTTP POST Request sql injection6.3 Medium
- byzoro smart s45f multi-service secure gateway intelligent management platform, smart s45f firmware +1 moreByzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform download.php os command injection6.3 Medium
- byzoro smart s45f multi-service secure gateway intelligent management platform, smart s45f firmware +1 moreByzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform web.php unrestricted upload6.3 Medium
- naresh parmar post view countWordPress Post View Count Plugin <= 1.8.2 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- wp doctor woocommerce login redirectWordPress WooCommerce Login Redirect Plugin <= 2.2.4 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- byzoro smart s45f multi-service secure gateway intelligent management platform, smart s45f firmware +1 moreByzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform licence.php unrestricted upload6.3 Medium
- Show moreLoading…