CVEs published in October 2023
2,902 vulnerabilities, 370 critical, 18 exploited.
- codex-m sort searchresult by titleWordPress Sort SearchResult By Title Plugin <= 10.0 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- freshtomatoOS command injection vulnerability in FreshTomato 2023.310.0 Critical
- eupago gateway for woocommerce, gateway woocommerce +1 moreWordPress Eupago Gateway For Woocommerce Plugin <= 3.1.9 is vulnerable to Cross Site Request Forgery (CSRF)6.5 Medium
- kevin weber lazy load for videosWordPress Lazy Load for Videos Plugin <= 2.18.2 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- pixelgrade pixfieldsWordPress PixFields Plugin <= 0.7.0 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- pixelgrade comments ratings, comments rating +1 moreWordPress Comments Ratings Plugin <= 1.1.7 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- grafana, grafana enterprise +1 moreGrafana privilege escalation vulnerability6.7 Medium
- galaxy weblinks video playlist for youtubeWordPress Video Playlist For YouTube Plugin <= 6.0 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- marco milesi wp attachmentsWordPress WP Attachments Plugin <= 5.0.11 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- helmholz myrex24, myrex24.virtual, mb connect line mbconnect24 +1 more +3 moreIn Red Lion Europe mbCONNECT24 and mymbCONNECT24 and Helmholz myREX24 and myREX24.virtual up to...4.3 Medium
- fla-shop html5 mapsWordPress HTML5 Maps Plugin <= 1.7.1.4 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- unknown booking calendarBooking Calendar < 9.7.3.1 - Unauthenticated Stored XSS6.1 Medium
- edmon.parker read more & accordion, edmonsoft read more \& accordion +1 moreRead More & Accordion < 3.2.7 - Admin+ PHP Object Injection7.2 High
- ninja team file manager pro, ninjateam filester +1 moreFile Manager Pro < 1.8 - Remote Code Execution via CSRF8.8 High
- unknown gallery – image and video gallery with thumbnails, wpdevart gallery - image and video gallery with thumbnails +1 moreWordPress Responsive Image Gallery, Gallery Album Plugin <= 2.0.3 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- getlasso simple urlsWordPress Simple URLs Plugin <= 120 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- christopher finke feed statistics, feed statistics project statistics +1 moreWordPress Feed Statistics Plugin <= 4.1 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- gpac, gpac gpac/gpac +1 moreDenial of Service in gpac/gpac5.1 Medium
- sendpulse free web pushWordPress SendPulse Free Web Push Plugin <= 1.3.1 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- matt mckenny stout google calendarWordPress Stout Google Calendar Plugin <= 1.2.3 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- otrs, otrs ag ((otrs)) community edition +1 morePossible XSS execution in customer information3.5 Low
- otrs, otrs ag ((otrs)) community edition +1 moreExternal pictures can be loaded even if not allowed by configuration5.3 Medium
- otrs, otrs ag ((otrs)) community edition, otrs community edition community edition +2 moreSSL Certificates are not checked for E-Mail Handling8.7 High
- apache inlongApache InLong: General user Unauthorized access User Management6.5 Medium
- apache inlongApache InLong: Log Injection in Global functions7.5 High
- apache inlongApache InLong: Jdbc Connection Security Bypass in InLong9.8 Critical
- apache brpcApache bRPC: The builtin service rpcz page has an XSS attack vulnerability6.1 Medium
- web2pyAn OS command injection vulnerability exists in web2py 2.24.1 and earlier. When the product is...9.8 Critical
- axis os, os 2016, os 2018 +2 more +4 moreSandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API overlay_del...6.5 Medium
- axis os, a8207-ve mk ii, q3527-lve +2 moreNCC Group has found a flaw during the annual internal penetration test ordered by Axis...7.1 High
- axis osRemote code execution vulnerability during the installation of ACAP applications on the Axis device9.1 Critical
- ibm hardware management console, power hmc +1 moreIBM Power HMC privilege escalation8.4 High
- ibm iIBM i privilege escalation4.9 Medium
- ibm security verify governanceIBM Security Verify Governance information disclosure5.3 Medium
- librenms, librenms librenms/librenms +1 moreSQL Injection in librenms/librenms7.8 High
tomcat9Debiantomcat9 - regression updateNo score- totolink a7000r firmware, x5000r firmware +1 moreTOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 were discovered...7.5 High
- totolink a7000r firmware, x5000r firmware +1 moreTOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered...9.8 Critical
- linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +2 more +4 moreThe Linux kernel before 6.5.4 has an es1 use-after-free in fs/ext4/extents_status.c, related to...7.8 High
- dlink di-7003g firmware, di-7100g\+ firmware, di-7100g firmware +4 more +6 moreBuffer Overflow vulnerability in DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08...9.8 Critical
- d-link di-7003gv2.d1, di-7200gv2.e1, di-700g plus v2.d1 +11 more +13 moreBuffer Overflow vulnerability in DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08...9.8 Critical
- d-link di-7003gv2.d1, di-7100gv2.d1, di-7200gv2.e1 +11 more +13 moreBuffer Overflow vulnerability in DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08...9.8 Critical
- d-link di-7003gv2.d1, di-7100gv2.d1, di-7200gv2.e1 +10 more +12 moreAn issue in DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI...9.8 Critical
- d-link di-7003gv2.d1, di-7100gv2.d1, di-7200gv2.e1 +10 more +12 moreBuffer Overflow vulnerability in DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08...9.8 Critical
- d-link di-7003gv2.d1, di-7100gv2.d1, di-7200gv2.e1 +11 more +13 moreBuffer Overflow vulnerability in DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08...9.8 Critical
- d-link di-7003gv2.d1, di-7100gv2.d1, di-7200gv2.e1 +11 more +13 moreBuffer Overflow vulnerability in DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08...9.8 Critical
- d-link di-7003gv2.d1, di-7100gv2.d1, di-7200gv2.e1 +11 more +13 moreBuffer Overflow vulnerability in DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08...9.8 Critical
- dlink di-7003g firmware, di-7100g\+ firmware, di-7100g firmware +4 more +6 moreBuffer Overflow vulnerability in DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08...9.8 Critical
- moosocialCross Site Scripting vulnerability in mooSocial 3.1.8 allows a remote attacker to obtain...6.1 Medium
- jorani leave management systemAn issue in Jorani Leave Management System 1.0.3 allows a remote attacker to execute arbitrary...6.5 Medium
- Show moreLoading…