CVEs published in October 2023
2,902 vulnerabilities, 370 critical, 18 exploited.
- juniper junos, juniper networks junos os +1 moreJunos OS: jkdsd crash due to multiple telemetry requests5.3 Medium
- juniper junos os evolvedJunos OS Evolved: 'file copy' CLI command can disclose password to shell users5.9 Medium
- wargio naxsiIgnoreIP/IgnoreCIDR should not trust X-Forwarded-For9.1 Critical
sambaUbuntusamba regressionNo score- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: RPD crash when attempting to send a very long AS PATH to a non-4-byte-AS capable BGP neighbor7.5 High
- all-three cachetCachet vulnerable to Authenticated Remote Code Execution9.1 Critical
- vantage6vantage6 Improper Access Control vulnerability5.4 Medium
- vantage6Deleting a collaboration should also delete linked resources3.7 Low
- vantage6Defining resource name as integer in vantage6 may give unintended access5.4 Medium
- vim, vim vim/vim, fedoraproject fedora +1 more +3 moreUse After Free in vim/vim7.8 High
- vantage6vantage6's Pickle serialization is insecure5.5 Medium
- synaptics displaylink, displaylink usb graphics software for windows +1 moreSynaptics-DisplayLink-privilege escalation vulnerability via a dynamic library sideloading5.5 Medium
- go standard library net/http, golang go, http2 +4 more +6 moreHTTP/2 rapid reset can cause excessive work in net/http7.5 High
- peplink surf soho hw1, surf soho, surf soho firmware +2 moreAn OS command injection vulnerability exists in the data.cgi xfer_dns functionality of peplink...7.2 High
- peplink surf soho hw1, surf soho firmware +1 moreAn OS command injection vulnerability exists in the admin.cgi MVPN_trial_init functionality of...7.2 High
- peplink surf soho hw1, surf soho firmware +1 moreA stored cross-site scripting (XSS) vulnerability exists in the upload_brand.cgi functionality of...3.4 Low
- peplink surf soho hw1, surf soho firmware +1 moreAn OS command injection vulnerability exists in the admin.cgi USSD_send functionality of peplink...7.2 High
- peplink surf soho hw1, surf soho firmware +1 moreAn OS command injection vulnerability exists in the api.cgi cmd.mvpn.x509.write functionality of...7.2 High
- peplink surf soho hw1, surf soho firmware +1 moreAn OS command injection vulnerability exists in the api.cgi cmd.mvpn.x509.write functionality of...7.2 High
- yifan yf325, yifanwireless yf325 firmware +1 moreA leftover debug code vulnerability exists in the httpd debug credentials functionality of Yifan...9.8 Critical
- yifan yf325, yifanwireless yf325 firmware +1 moreA buffer overflow vulnerability exists in the httpd next_page functionality of Yifan YF325 v1...8.8 High
- yifan yf325, yifanwireless yf325 firmware +1 moreA buffer overflow vulnerability exists in the httpd next_page functionality of Yifan YF325 v1...8.8 High
- yifan yf325, yifanwireless yf325 firmware +1 moreAn authentication bypass vulnerability exists in the httpd nvram.cgi functionality of Yifan YF325...9.8 Critical
- yifan yf325, yifanwireless yf325 firmware +1 moreA stack-based buffer overflow vulnerability exists in the libutils.so nvram_restore functionality...9.8 Critical
- yifan yf325, yifanwireless yf325 firmware +1 moreA stack-based buffer overflow vulnerability exists in the httpd gwcfg.cgi get functionality of...9.8 Critical
- yifan yf325, yifanwireless yf325 firmware +1 moreA stack-based buffer overflow vulnerability exists in the httpd manage_request functionality of...9.8 Critical
- yifan yf325, yifanwireless yf325 firmware +1 moreA command execution vulnerability exists in the validate.so diag_ping_start functionality of...8.8 High
- yifan yf325, yifanwireless yf325 firmware +1 moreA stack-based buffer overflow vulnerability exists in the httpd do_wds functionality of Yifan...8.8 High
- yifan yf325, yifanwireless yf325 firmware +1 moreTwo heap-based buffer overflow vulnerabilities exist in the httpd manage_post functionality of...9.8 Critical
- yifan yf325, yifanwireless yf325 firmware +1 moreTwo heap-based buffer overflow vulnerabilities exist in the httpd manage_post functionality of...9.8 Critical
- yifan yf325, yifanwireless yf325 firmware +1 moreTwo heap-based buffer overflow vulnerabilities exist in the gwcfg_cgi_set_manage_post_data...9.8 Critical
- yifan yf325, yifanwireless yf325 firmware +1 moreTwo heap-based buffer overflow vulnerabilities exist in the gwcfg_cgi_set_manage_post_data...9.8 Critical
- zebra technologies ztc zt410, zebra zt410 firmware +1 moreAuthentication Bypass on Zebra ZTC5.4 Medium
openscOSS-FuzzHeap-buffer-overflow in iasecc_parse_get_tlvNo scorespring-data-keyvalueOSS-FuzzSecurity exception in java.base/java.lang.String.repeatNo scorelibxml2OSS-FuzzHeap-use-after-free in xmlParserPrintFileContextInternalNo score- hcl software digital experienceHCL Digital Experience is susceptible to cross site scripting (XSS)9.3 Critical
- huawei emui, harmonyos +1 moreType confusion vulnerability in the distributed file module.Successful exploitation of this...7.5 High
- huawei harmonyosVulnerability of defects introduced in the design process in the screen projection module...9.1 Critical
- huawei emui, harmonyos +1 moreVulnerability of permissions not being strictly verified in the window management module...9.8 Critical
- huawei emui, harmonyos +1 moreVulnerability of mutual exclusion management in the kernel module.Successful exploitation of this...7.5 High
- huawei emui, harmonyos +1 moreVulnerability of undefined permissions in the MeeTime module.Successful exploitation of this...9.1 Critical
- huawei emui, harmonyos +1 moreVulnerability of access permissions not being strictly verified in the APPWidget module...9.8 Critical
- huawei emui, harmonyos +1 moreOut-of-bounds array vulnerability in the dataipa module.Successful exploitation of this...7.5 High
- kernelsu, tiann tiann/kernelsu +1 moreIncorrect Authorization in tiann/kernelsu7.3 High
- huawei emui, harmonyos +1 moreVulnerability of brute-force attacks on the device authentication module.Successful exploitation...7.5 High
- huawei emui, harmonyos +1 moreOut-of-bounds access vulnerability in the audio module.Successful exploitation of this...4.3 Medium
- huawei emui, harmonyos +1 moreParameter verification vulnerability in the window module.Successful exploitation of this...5.3 Medium
- gpac, gpac gpac/gpac +1 moreOut-of-bounds Read in gpac/gpac4.0 Medium
- apache zookeeper, debian linux +1 moreApache ZooKeeper: Authorization bypass in SASL Quorum Peer Authentication9.1 Critical
- Show moreLoading…