CVEs published in October 2023
2,902 vulnerabilities, 370 critical, 18 exploited.
- line corporation client for ios, linecorp line +1 moreLack of TLS certificate verification in log transmission of a financial module within LINE Client...4.8 Medium
- leadsquared suite, leadsquared, inc leadsquared suite +1 moreWordPress LeadSquared Suite Plugin <= 0.7.4 is vulnerable to Cross Site Request Forgery (CSRF)7.1 High
- xenx86/AMD: Debug Mask handling5.5 Medium
- xenx86/AMD: Debug Mask handling5.5 Medium
- xenx86/AMD: missing IOMMU TLB flushing7.8 High
- xenMultiple vulnerabilities in libfsimage disk handling7.8 High
- xenxenstored: A transaction conflict can crash C Xenstored5.5 Medium
- etsy shop project shop, fsheedy etsy shop +1 moreEtsy Shop <= 3.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- zabbixJavaScript engine memory pointers are directly available for Zabbix users for modification9.1 Critical
- zabbixInefficient permission check in class CControllerAuthenticationUpdate8.5 High
- zabbixStack-buffer Overflow in library module zbxjson9.6 Critical
- zabbixStored XSS in Maps element7.6 High
- zabbix, zabbix zabbix-agent2 +1 moreAgent 2 package are built with Go version affected by CVE-2023-245389.8 Critical
- i13websolution thumbnail slider with lightboxThumbnail Slider With Lightbox <= 1.0 - Cross-Site Request Forgery4.3 Medium
tomcat9Debiantomcat9 - regression updateNo score- justdan96 tsmuxerA memory leak in tsMuxer version git-2539d07 allows attackers to cause a Denial of Service (DoS)...5.5 Medium
- justdan96 tsmuxertsMuxer version git-2539d07 was discovered to contain an alloc-dealloc-mismatch (operator new []...7.5 High
- spa-cartSPA-Cart 1.9.0.3 is vulnerable to Cross Site Request Forgery (CSRF) that allows a remote attacker...8.8 High
- spa-cartSPA-Cart 1.9.0.3 has a Cross Site Request Forgery (CSRF) vulnerability that allows a remote...8.1 High
- phpjabbers limo booking softwarePHPJabbers Limo Booking Software 1.0 is vulnerable to Cross Site Request Forgery (CSRF) to add an...8.8 High
- apple ipados, macos, safari +3 more +5 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...8.8 High
- apple ipados, macos, safari +4 more +6 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in iOS...8.8 High
- apple ipados, macos, safari +4 more +6 moreThe issue was addressed with improved memory handling. This issue is fixed in Safari 17.2, macOS...8.8 High
- apple ipados, macos, safari +4 more +6 moreProcessing web content may lead to arbitrary code execution. This issue is fixed in iOS 17 and...7.3 High
- gpacAn issue in GPAC GPAC v.2.2.1 and before allows a local attacker to cause a denial of service via...5.5 Medium
- plixer scrutinizerAn issue was discovered in Plixer Scrutinizer before 19.3.1. It exposes debug logs to...3.7 Low
- plixer scrutinizerAn issue was discovered in /fcgi/scrut_fcgi.fcgi in Plixer Scrutinizer before 19.3.1. The...9.8 Critical
- plixer scrutinizerAn issue was discovered in /fcgi/scrut_fcgi.fcgi in Plixer Scrutinizer before 19.3.1. The...5.3 Medium
- thecosy icecmsAn issue in Thecosy IceCMS v.1.0.0 allows a remote attacker to gain privileges via the Id and key...9.8 Critical
- tencent enterprise wechat privatizationThere is an interface unauthorized access vulnerability in the background of Tencent Enterprise...7.5 High
- apple ipados, macos, safari +4 more +6 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in...9.8 Critical
- apple ipados, ios and ipados, iphone os +2 moreThis issue was addressed with improved redaction of sensitive information. This issue is fixed in...7.5 High
- beyondtrust privileged remote accessBeyondTrust Privileged Remote Access (PRA) versions 22.2.x to 22.4.x are vulnerable to a local...7.8 High
- kubernetes kops, operations +1 morePrivilege Escalation in kOps using GCE/GCP Provider in Gossip Mode8.0 High
- google chrome, debian linux +1 moreInappropriate implementation in Input in Google Chrome prior to 118.0.5993.70 allowed a remote...4.3 Medium
- google chrome, debian linux +1 moreUse after free in Cast in Google Chrome prior to 118.0.5993.70 allowed a remote attacker who had...6.3 Medium
- google chrome, debian linux +1 moreInappropriate implementation in Autofill in Google Chrome prior to 118.0.5993.70 allowed a remote...4.3 Medium
- google chrome, debian linux +1 moreInappropriate implementation in Extensions API in Google Chrome prior to 118.0.5993.70 allowed an...6.5 Medium
- google chrome, debian linux +1 moreInappropriate implementation in Autofill in Google Chrome prior to 118.0.5993.70 allowed a remote...4.3 Medium
- google chrome, debian linux +1 moreInappropriate implementation in Installer in Google Chrome prior to 118.0.5993.70 allowed a local...4.3 Medium
- google chrome, debian linux +1 moreHeap buffer overflow in PDF in Google Chrome prior to 118.0.5993.70 allowed a remote attacker who...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in Navigation in Google Chrome prior to 118.0.5993.70 allowed a...6.5 Medium
- google chrome, debian linux +1 moreInappropriate implementation in Intents in Google Chrome prior to 118.0.5993.70 allowed a remote...6.5 Medium
- google chrome, debian linux +1 moreInappropriate implementation in Downloads in Google Chrome prior to 118.0.5993.70 allowed a...6.5 Medium
- google chrome, debian linux +1 moreUse after free in Blink History in Google Chrome prior to 118.0.5993.70 allowed a remote attacker...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 moreInappropriate implementation in DevTools in Google Chrome prior to 118.0.5993.70 allowed an...6.5 Medium
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in Fullscreen in Google Chrome prior to 118.0.5993.70 allowed an...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Site Isolation in Google Chrome prior to 118.0.5993.70 allowed a remote...8.8 High
- juniper junos os evolvedJunos OS Evolved: PTX10001, PTX10004, PTX10008, PTX10016: MAC address validation bypass vulnerability6.1 Medium
- juniper junos os evolvedJunos OS Evolved: PTX10003 Series: MAC address validation bypass vulnerability6.1 Medium
- Show moreLoading…