CVEs published in October 2023
2,902 vulnerabilities, 370 critical, 18 exploited.
cniopenSUSESecurity update for cniNo scorecni-pluginsopenSUSESecurity update for cni-pluginsNo score- goodbarberWordPress GoodBarber Plugin <= 1.0.22 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- dell openmanage server administrator, emc openmanage server administrator +1 moreDell OpenManage Server Administrator, versions 11.0.0.0 and prior, contains an Improper Access...7.3 High
- wordpress, fedoraproject fedora +1 moreWordPress < 6.3.2 is vulnerable to Broken Access Control4.3 Medium
- vrite, vriteio vriteio/vrite +1 moreAllocation of Resources Without Limits or Throttling in vriteio/vrite4.7 Medium
- gutenberg team gutenberg, wordpress +1 moreAuth. Stored Cross-Site Scripting (XSS) vulnerability in WordPress core and Gutenberg plugin via Navigation Links Block6.5 Medium
- vrite, vriteio vriteio/vrite +1 moreServer-Side Request Forgery (SSRF) in vriteio/vrite10.0 Critical
- vrite, vriteio vriteio/vrite +1 moreImproper Input Validation in vriteio/vrite6.5 Medium
- adobe commerce, magento +1 moreAdobe Commerce | Uncontrolled Resource Consumption (CWE-400)5.3 Medium
- adobe commerce, magento +1 moreValidate Your Inputs | Cross-site Scripting (Stored XSS) (CWE-79) - Customer to Admin stored XSS with Gift wrapping8.7 High
- adobe commerce, magento +1 moreFull page cache enumeration via cookie X-Magento-Vary7.5 High
- adobe commerce, magento +1 moreError based file extraction via PHP filter chains during product bulk import logic4.9 Medium
- adobe commerce, magento +1 moreValidate Your Inputs | Server-Side Request Forgery (SSRF) (CWE-918)6.8 Medium
- adobe commerce, magento +1 moreIncorrect Authorization - Customer account takeover8.8 High
- adobe commerce, magento +1 moreAdobe Commerce | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)8.0 High
- adobe commerce, magento +1 moreAdobe Commerce | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)8.0 High
- adobe commerce, magento +1 moreAdobe Commerce | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)8.0 High
- linux kernel, fedora, red hat enterprise linux 6 +3 more +5 moreKernel: integer overflow in igmpv3_newpack leading to exploitable memory access5.5 Medium
- gnome tracker miners, red hat enterprise linux 7, enterprise linux 8 +12 more +14 moreTracker-miners: sandbox escape7.5 High
- mitsubishi electric corporation melsec-f series fx3g-14mr/ds, melsec-f series fx3g-14mr/es, melsec-f series fx3g-14mr/es-a +340 more +342 moreInformation Disclosure, Information Tampering and Authentication Bypass Vulnerability in MELSEC-F Series main module9.1 Critical
- froxlor, froxlor froxlor/froxlor +1 moreCross-site Scripting (XSS) - Stored in froxlor/froxlor5.2 Medium
- netis-systems n3m, n3m firmware +1 moreNetis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the pingWdogIp. This...7.5 High
- netis-systems n3m, n3m firmware +1 moreNetis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the...9.8 Critical
- netis-systems n3m, n3mv2 firmware +1 moreNetis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the...9.8 Critical
- netis-systems n3m, n3m firmware +1 moreNetis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the...9.8 Critical
- netis-systems n3m, n3m firmware +1 moreNetis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the servDomain parameter....7.5 High
- netis-systems n3m firmwareNetis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the hostName parameter in...7.5 High
- grandingteco utime masterAn indirect object reference (IDOR) in GRANDING UTime Master v9.0.7-Build:Apr 4,2023 allows...6.5 Medium
- grandingteco utime masterA stored cross-site scripting (XSS) vulnerability in the Create A New Employee function of...4.8 Medium
- zephyrproject zephyrThe SJA1000 CAN controller driver backend automatically attempt to recover from a bus-off event when built with CONFIG_CAN_AUTO_BUS_OFF_RECOVERY=y. This results in calling k_sleep() in IRQ context, ca…7.1 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: The rpd will crash upon receiving a malformed BGP UPDATE message6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX5000 Series, EX2300, EX3400, EX4100, EX4400 and EX4600: Packet flooding will occur when IGMP traffic is sent to an isolated VLAN6.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: A local attacker can retrieve sensitive information and elevate privileges on the device to an authorized user.5.0 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: In a PTP scenario a prolonged routing protocol churn can trigger an FPC reboot7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series and MX Series: SIP ALG doesn't drop specifically malformed retransmitted SIP packets5.8 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: An rpd crash may occur when BGP is processing newly learned routes7.5 High
- juniper junos os evolvedJunos OS Evolved: PTX10003 Series: Packets which are not destined to the router can reach the RE6.5 Medium
- juniper junos os evolvedJunos OS Evolved: Packets which are not destined to the router can reach the RE5.4 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: An unauthenticated attacker with local access to the device can create a backdoor with root privileges8.4 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: An FPC crash is observed when CFM is enabled in a VPLS scenario and a specific LDP related command is run5.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX5000 Series: DMA memory leak is observed when specific DHCP packets are transmitted over pseudo-VTEP7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX5000 Series and EX4000 Series: Denial of Service (DoS) on a large scale VLAN due to PFE hogging7.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: In an BGP scenario RPD crashes upon receiving and processing a specific malformed ISO VPN BGP UPDATE packet7.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: High CPU load due to specific NETCONF command6.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX5000 Series, EX4600 Series: In a VxLAN scenario an adjacent attacker within the VxLAN sending genuine packets may cause a DMA memory leak to occur.6.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: An Unchecked Return Value in multiple users interfaces affects confidentiality and integrity of device operations7.3 High
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX5k: l2 loop in the overlay impacts the stability in a EVPN/VXLAN environment7.5 High
- juniper junos, juniper networks junos os, juniper junos os evolved +2 moreJunos OS : Stack overflow vulnerability in CLI command processing5.5 Medium
- juniper junos, juniper networks junos os, juniper junos os evolved +2 moreJunos OS : Stack overflow vulnerability in CLI command processing5.5 Medium
- Show moreLoading…