CVEs published in October 2023
2,902 vulnerabilities, 370 critical, 18 exploited.
- apache traffic server, fedoraproject fedora +1 moreApache Traffic Server: s3_auth plugin problem with hash calculation7.5 High
- wago compact controller cc100, compact controller 100 firmware, edge controller +11 more +13 moreWAGO: Multiple products vulnerable to local file inclusion2.7 Low
- easyuse mailhunter ultimateSQL Injection in EasyUse MailHunter Ultimate7.7 High
- easyuse mailhunter ultimateExposure of Sensitive System Information to an Unauthorized Control Sphere in EasyUse MailHunter Ultimate5.0 Medium
- easyuse mailhunter ultimatePath Traversal in EasyUse MailHunter Ultimate6.5 Medium
- easyuse mailhunter ultimateUnrestricted Upload of File with Dangerous Type in EasyUse MailHunter Ultimate9.9 Critical
- golang go, traefik, red hat openshift ai (rhoai) +2 more +4 moreTraefik - Denial of Service via HTTP/2 Request Handling8.7 High
- ibm security verify privilege, security verify privilege on-premises +1 moreIBM Security Verify Privilege information disclosure2.7 Low
- ibm security verify privilege, security verify privilege on-premises +1 moreIBM Security Verify Privilege information disclosure3.7 Low
- ibm security verify privilege, security verify privilege on-premises +1 moreIBM Security Verify Privilege denial of service2.7 Low
- ibm security verify privilege, security verify privilege on-premises +1 moreIBM Security Verify Privilege information disclosure5.3 Medium
- ibm security verify privilege, security verify privilege on-premises +1 moreIBM Security Verify Privilege improper input validation6.5 Medium
- ibm security verify privilege, security verify privilege on-premises +1 moreIBM Security Verify Privilege improper authentication5.0 Medium
- ibm security verify privilege, security verify privilege on-premises +1 moreIBM Security Verify Privilege command execution7.2 High
- ibm security verify privilege, security verify privilege on-premises +1 moreIBM Security Verify Privilege information disclosure5.3 Medium
- ibm security verify privilege, security verify privilege on-premises +1 moreIBM Security Verify Privilege information disclosure4.3 Medium
- ibm security verify privilege, security verify privilege on-premises +1 moreIBM Security Verify Privilege information disclosure5.9 Medium
- ibm security verify privilege, security verify privilege on-premises +1 moreIBM Security Verify Privilege information disclosure5.3 Medium
- ibm security verify privilege, security verify privilege on-premises +1 moreIBM Security Verify Privilege improper input validation4.3 Medium
- ibm security verify privilege, security verify privilege on-premises +1 moreIBM Security Verify Privilege information disclosure5.3 Medium
tomcat9Debiantomcat9 - regression updateNo score- lylme spageAn arbitrary file upload vulnerability in the component ajax_link.php of lylme_spage v1.7.0...9.8 Critical
- lylme spagelylme_spage v1.7.0 was discovered to contain a SQL injection vulnerability via the $userip...9.8 Critical
- iteachyou dreamer cmsDreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the...8.8 High
- iteachyou dreamer cmsDreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the...8.8 High
- iteachyou dreamer cmsDreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the...8.8 High
- iteachyou dreamer cmsDreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the...8.8 High
- iteachyou dreamer cmsDreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the...8.8 High
- iteachyou dreamer cmsDreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the...8.8 High
- iteachyou dreamer cmsDreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the...8.8 High
- mypresta product extra tabs proIn the module extratabspro before version 2.2.8 from MyPresta.eu for PrestaShop, a guest can...9.8 Critical
- 01generator pireospayIn the module "PireosPay" (pireospay) before version 1.7.10 from 01generator.com for PrestaShop,...8.8 High
- archerirm archerArcher Platform 6.x before 6.13 P2 HF2 (6.13.0.2.2) contains a stored cross-site scripting (XSS)...8.5 High
- archerirm archerArcher Platform 6.x before 6.13 P2 HF2 (6.13.0.2.2) contains a sensitive information disclosure...4.3 Medium
- oretnom23 expense management systemAn issue in Expense Management System v.1.0 allows a local attacker to execute arbitrary code via...7.8 High
- d-link dar-7000, dlink dar-7000 firmware +1 moreD-Link Online behavior audit gateway DAR-7000 V31R02B1413C is vulnerable to SQL Injection via ...9.8 Critical
- d-link dar-7000, dlink dar-7000 firmware +1 moreD-Link Online behavior audit gateway DAR-7000 V31R02B1413C is vulnerable to SQL Injection via ...9.8 Critical
- yealink sip-t19p-e2 firmwareAn issue in YeaLinkSIP-T19P-E2 v.53.84.0.15 allows a remote privileged attacker to execute...8.8 High
- schedmd slurm, fedoraproject fedora +1 moreSchedMD Slurm 23.02.x before 23.02.6 and 22.05.x before 22.05.10 allows filesystem race...7.0 High
- esst monitoringeSST Monitoring v2.147.1 was discovered to contain a remote code execution (RCE) vulnerability...8.8 High
- esst monitoringeSST Monitoring v2.147.1 was discovered to contain a remote code execution (RCE) vulnerability...9.8 Critical
- esst monitoringA lack of input sanitizing in the file download feature of eSST Monitoring v2.147.1 allows...7.5 High
- nxp uboot secondary program loader, u boot secondary program loader\/spl\/ boot secondary program loader\/spl\/ +1 moreA software vulnerability has been identified in the U-Boot Secondary Program Loader (SPL) before...7.0 High
- covesa dlt-daemonConnected Vehicle Systems Alliance (COVESA) up to v2.18.8 wwas discovered to contain a buffer...7.5 High
- tsplus remote workTSplus Remote Work 16.0.0.0 has weak permissions for .exe, .js, and .html files under the ...9.8 Critical
- tsplus remote workTSplus Remote Work 16.0.0.0 places a cleartext password on the "var pass" line of the HTML source...9.8 Critical
- advantech webaccessAdvantech WebAccess Debug Messages Revealing Unnecessary Information6.5 Medium
- engelsystemBlind Server Side Request Forgery (SSRF) in remote schedule import feature in Engelsystem2.0 Low
- engelsystemSession is not expiring after password reset in Engelsystem3.6 Low
- halulu simple-download-button-shortcode, simple-download-button-shortcode plugin +1 moreHalulu simple-download-button-shortcode Plugin Download simple-download-button_dl.php information disclosure4.3 Medium
- Show moreLoading…