CVEs published in October 2023
2,902 vulnerabilities, 370 critical, 18 exploited.
- d-link dir-820l, dlink dir-820l firmware +1 moreD-Link device DIR-820L 1.05B03 is vulnerable to Insecure Permissions.9.8 Critical
- d-link dir-820l, dlink dir-820l firmware +1 moreD-Link DIR-820L 1.05B03 has a stack overflow vulnerability in the sub_4507CC function.9.8 Critical
- extremenetworks exosA Directory Traversal vulnerability discovered in Chalet application in Extreme Networks Switch...7.5 High
- extremenetworks exosAn issue discovered in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, before 22.7 and...8.8 High
- extremenetworks exosAn Access Control issue discovered in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, also...9.8 Critical
- extremenetworks exosCross Site Request Forgery (CSRF) vulnerability in Chalet application in Extreme Networks Switch...8.8 High
- user registration \& login and user management system with admin panel project registration \& login and user management system with admin panelSQL Injection vulnerability in Phpgurukul User Registration & Login and User Management System...9.8 Critical
- user registration \& login and user management system with admin panel project registration \& login and user management system with admin panelCross Site Scripting (XSS) vulnerability in Phpgurukul User Registration & Login and User...5.4 Medium
- linux kernel, netapp h300s firmware, h410s firmware +2 more +4 moreextract_user_to_sg in lib/scatterlist.c in the Linux kernel before 6.4.2 fails to unpin pages in...6.3 Medium
- totolink cp300\+ firmwareTOTOLINK CP300+ <=V5.2cu.7594_B20200910 was discovered to contain a stack overflow via the File...9.8 Critical
- totolink cp300\+, cp300\+ firmware +1 moreTOTOLINK CP300+ V5.2cu.7594_B20200910 and before is vulnerable to command injection.9.8 Critical
- totolink cp300\+ firmwareTOTOLINK CP300+ V5.2cu.7594_B20200910 and before is vulnerable to command injection.9.8 Critical
- totolink cp300\+ firmwareTOTOLINK CP300+ V5.2cu.7594_B20200910 was discovered to contain a stack overflow via the pingIp...9.8 Critical
- totolink a7000r firmware, x5000r firmware +1 moreTOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered...9.8 Critical
- totolink a7000r firmware, x5000r firmware +1 moreTOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered...9.8 Critical
- totolink nr1800x firmwareTOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain a stack overflow via the...9.8 Critical
- terminalfourIn Terminalfour before 8.3.16, misconfigured LDAP users are able to login with an invalid password.6.5 Medium
- classlink oneclickA Universal Cross Site Scripting (UXSS) vulnerability in ClassLink OneClick Extension through 10...6.1 Medium
- ibm security verify governanceIBM Security Verify Governance file upload3.3 Low
- ibm security verify governanceIBM Security Verify Governance information disclosure2.3 Low
- judging management system project management system, sourcecodester judging management system +1 moreSourceCodester Judging Management System login.php sql injection7.3 High
- selenium, seleniumhq seleniumhq/selenium +1 moreNULL Pointer Dereference in seleniumhq/selenium7.5 High
- kpherox pleromakphrx pleroma pack.ex Pleroma.Emoji.Pack path traversal2.6 Low
- free hospital management system for small practices project hospital management system for small practices, sourcecodester free hospital management system for small practices +1 moreSourceCodester Free Hospital Management System for Small Practices Parameter doctors.php sql injection6.3 Medium
- cocoonSequential calls of encryption API (`encrypt`, `wrap`, and `dump`) result in nonce reuse4.5 Medium
- ibm iIBM i privilege escalation4.9 Medium
- gpac, gpac gpac/gpac +1 moreNULL Pointer Dereference in gpac/gpac4.4 Medium
- debian linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 moreAn issue was discovered in drivers/net/ethernet/intel/igb/igb_main.c in the IGB driver in the...7.5 High
- valvesoftware counter-strikeA directory traversal vulnerability in Valve Counter-Strike 8684 allows a client (with remote...7.5 High
- sourcecodester online motorcycle rental system, oretnom23 online motorcycle \(bike\) rental system +1 moreSourceCodester Online Motorcycle Rental System Bike List cross site scripting2.4 Low
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM information disclosure5.4 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM cross-site scripting5.4 Medium
- ibm app connect enterprise, integration bus +1 moreIBM App Connect Enterprise and IBM Integration Bus denial of service6.2 Medium
- ibm security verify access, security verify access oidc provider +1 moreIBM Security Verify Access information disclosure5.3 Medium
- ibm security verify access, security verify access oidc provider +1 moreIBM Security Verify Access denial of service7.5 High
- ibm cloud pak for business automationIBM Cloud Pak for Business Automation cross-site scripting4.6 Medium
- ibm security directory server, security directory suite, security verify directory +2 moreIBM Security Directory Server external entity injection5.5 Medium
- ibm security directory server, security directory integrator +1 moreIBM Security Directory Server information disclosure6.8 Medium
- ibm security directory server, security directory integrator, security directory suite +1 more +3 moreIBM Security Directory Server information disclosure5.3 Medium
- zzzcmsZZZCMS Personal Profile Page cross site scripting3.5 Low
popplerOSS-FuzzUse-of-uninitialized-value in Render_Single_PassNo scorejsoupOSS-FuzzSecurity exception in org.jsoup.parser.HtmlTreeBuilder.processNo scorelibxaacOSS-FuzzGlobal-buffer-overflow in iusace_quantize_linesNo score- oretnom23 medicine tracker systemSourceCodester Medicine Tracker System index.php cross site scripting3.5 Low
- code-projects library system, library system project system +1 moreSourceCodester Library System index.php sql injection6.3 Medium
simd-json-derivecrates.io`simd-json-derive` vulnerable to `MaybeUninit` misuse6.6 Medium- barteled sandboxyhz66 Sandbox User Data information disclosure3.5 Low
- hotjarHotjar <= 1.0.15 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4 Medium
- portabilis i-educarPortábilis i-Educar HTTP GET Request agenda_imprimir.php cross site scripting5.1 Medium
- apache airflowApache Airflow: Bypass permission verification to view task instances of other dags6.5 Medium
- Show moreLoading…