CVEs published in October 2023
2,902 vulnerabilities, 370 critical, 18 exploited.
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Stack overflow vulnerability in CLI command processing5.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Receipt of a specific genuine PIM packet causes RPD crash6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: The PFE will crash on receiving malformed SSL traffic when Sky ATP is enabled7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: Receipt of malformed TCP traffic will cause a Denial of Service7.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: An l2cpd crash will occur when specific LLDP packets are received6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: PTX Series and QFX10000 Series: Received flow-routes which aren't installed as the hardware doesn't support them, lead to an FPC heap memory leak6.5 Medium
- netapp snapcenterPrivilege Escalation Vulnerability in SnapCenter8.8 High
- knime analytics platformUnsafe default allows for cross-site scripting attacks in KNIME Server and KNIME Business Hub6.1 Medium
io.root.org.json:jsonRoot,org.json:jsonRoot +1 moreDuplicate Advisory: Denial of Service in JSON-Java7.5 High- netapp ontap 9, clustered data ontap +1 moreDenial of Service Vulnerability in ONTAP 97.5 High
- netapp snapcenterPrivilege Escalation Vulnerability in SnapCenter8.3 High
- netapp snapcenter plugin for vmware vsphere, snapcenter plug-in +1 morePrivilege Escalation Vulnerability in SnapCenter Plugin for VMware vSphere5.4 Medium
- nodejs undici, fedoraproject fedora +1 moreUndici's cookie header not cleared on cross-origin redirect in fetch3.9 Low
- opentelemetry, open-telemetry opentelemetry-go-contrib +1 moreOpenTelemetry-Go Contrib has DoS vulnerability in otelhttp due to unbound cardinality metrics7.5 High
- xwiki change request, xwiki-contrib application-changerequest +1 moreChange Request Application vulnerable to XSS and remote code execution through change request title10.0 Critical
- babel, babeljs babel-plugin-polyfill-corejs2, babel-plugin-polyfill-corejs3 +6 more +8 moreBabel vulnerable to arbitrary code execution when compiling specifically crafted malicious code9.4 Critical
- stleary json-javaDoS Vulnerability in JSON-Java7.5 High
- softether vpnA heap-based buffer overflow vulnerability exists in the vpnserver WpcParsePacket() functionality...9.0 Critical
- softether vpnA denial of service vulnerability exists in the DCRegister DDNS_RPC_MAX_RECV_SIZE functionality...5.9 Medium
- softether vpnAn integer underflow vulnerability exists in the vpnserver OvsProcessData functionality of...7.5 High
- softether vpnA denial-of-service vulnerability exists in the vpnserver ConnectionAccept() functionality of...7.5 High
- softether vpnA denial-of-service vulnerability exists in the vpnserver EnSafeHttpHeaderValueStr functionality...7.5 High
- softether vpnAn information disclosure vulnerability exists in the CtEnumCa() functionality of SoftEther VPN 4...5.5 Medium
- softether vpnAn authentication bypass vulnerability exists in the CiRpcAccepted() functionality of SoftEther...7.3 High
- softether vpnAn authentication bypass vulnerability exists in the CiRpcServerThread() functionality of...7.8 High
- softether vpnAn information disclosure vulnerability exists in the ClientConnect() functionality of SoftEther...5.3 Medium
- fedor urvanov, aram kocharyan urvanov syntax highlighter, urvanov syntax highlighter +1 moreWordPress Urvanov Syntax Highlighter Plugin <= 2.8.33 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- yas global team permalinks customizerWordPress Permalinks Customizer Plugin <= 2.8.2 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- otwthemes blog manager lightWordPress Blog Manager Light Plugin <= 1.20 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- jonk @ follow me darling sp*tify play button for wordpress, followingmedarling spotify play button +1 moreWordPress Sp*tify Play Button for WordPress Plugin <= 2.10 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- arul prasad j publish confirm messageWordPress Publish Confirm Message Plugin <= 1.3.1 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- netapp snapgathersInformation Disclosure Vulnerability in SnapGathers6.5 Medium
ghostscriptOSS-FuzzHeap-use-after-free in gx_image_enum_beginNo scorendpiOSS-FuzzHeap-buffer-overflow in ndpi_snprintfNo score- supsystic contact form by supsystic, contact form +1 moreWordPress Contact Form by Supsystic Plugin <= 1.7.27 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- rayhan1 ai content writing assistant, recorp ai content writing assistant (content writer, gpt 3 & 4, chatgpt, image generator) all in one +1 moreWordPress AI Content Writing Assistant (Content Writer, ChatGPT, Image Generator) All in One Plugin <= 1.1.5 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- fla-shop interactive world mapWordPress Interactive World Map Plugin <= 3.2.0 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- kaizencoders short urlWordPress Short URL Plugin <= 1.6.8 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- dan009 wp bing map proWordPress WP Bing Map Pro Plugin < 5.0 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- repuso, repuso social proof testimonials and reviews by repuso +1 moreWordPress Social proof testimonials and reviews by Repuso Plugin <= 5.00 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- igor buyanov wp power statsWordPress WP Power Stats Plugin <= 2.2.3 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- josecoelho, randy hoyt, steveclarkcouk, vitaliy kukin, eric le bail, tom ransom category meta plugin, randyhoyt category meta +1 moreWordPress Category Meta Plugin <= 1.2.8 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
fehlercrates.io`fehler` is unmaintained; use `culpa` insteadNo score- biltay kayisiSQLi in Biltay's Kayısı9.8 Critical
- biltay procostSQLi in Biltay's Procost9.8 Critical
- mainwp broken links checker extension, managewp broken link checker +1 moreWordPress MainWP Broken Links Checker Extension Plugin <= 4.0 is vulnerable to SQL Injection9.3 Critical
- opensc project opensc, red hat enterprise linux 7, enterprise linux 8 +2 more +4 moreOpensc: multiple memory issues with pkcs15-init (enrollment tool)5.4 Medium
- mainwp google analytics extensionWordPress MainWP Google Analytics Extension Plugin <= 4.0.4 - SQL Injection vulnerability8.5 High
- structurizr structurizr/onpremises, on-premises installation +1 moreCross-site Scripting (XSS) - Reflected in structurizr/onpremises5.3 Medium
- frappe frappe/lms, learning +1 moreCross-site Scripting (XSS) - Generic in frappe/lms7.1 High
- Show moreLoading…