CVEs published in October 2023
2,902 vulnerabilities, 370 critical, 18 exploited.
- oracle mysql, oracle corporation mysql server, netapp oncommand insight +2 moreVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported...4.9 Medium
- netapp cloud insights acquisition unit, cloud insights storage workload security agent, oracle jdk +2 more +4 moreVulnerability in Oracle Java SE (component: CORBA). Supported versions that are affected are...5.3 Medium
- oracle mysql, oracle corporation mysql server, netapp oncommand insight +2 moreVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported...4.9 Medium
- oracle mysql, oracle corporation mysql server, netapp oncommand insight +2 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...4.9 Medium
- oracle mysql, oracle corporation mysql server, netapp oncommand insight +2 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...4.9 Medium
- oracle mysql, oracle corporation mysql server, netapp oncommand insight +2 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...6.5 Medium
- oracle mysql, oracle corporation mysql server, netapp oncommand insight +2 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). ...4.9 Medium
- oracle commerce guided search, oracle corporation commerce guided search / oracle commerce experience manager +1 moreVulnerability in the Oracle Commerce Guided Search product of Oracle Commerce (component:...6.1 Medium
- oracle graalvm for jdk, jdk, netapp cloud insights acquisition unit +3 more +5 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK...3.7 Low
- ibm http serverVulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web...7.5 High
eximTuxCare,exim-greylistTuxCare,exim-monTuxCare +2 more +4 moreUpdate of eximNo scoreeximTuxCare,exim-greylistTuxCare,exim-monTuxCare +2 more +4 moreUpdate of eximNo score- python urllib3, fedoraproject fedora +1 moreRequest body not stripped after redirect in urllib34.2 Medium
- arubanetworks airwave, hewarhewlett packard enterprise (hpe) aruba airwave management platform +1 moreAuthenticated Disclosure of Sensitive Information in AirWave Management Platform6.8 Medium
- hcl software appscan presenceHCL AppScan Presence deployed as Windows service might be vulnerable to an Unquoted Service Path vulnerability7.8 High
buildahSUSESecurity update for buildahNo scoreorg.opensearch.plugin:opensearch-securityMavenOpenSearch uncontrolled resource consumption7.5 Highgithub.com/consensys/gnarkGoPlonk verifier KZG multi point verificationNo score@seal-security/mongoose-fixednpmPrototype Pollution in ali-security/mongoose10.0 Critical- nocodbSQL Injection in nocodb6.5 Medium
- amd radeon rx 5300 xt, radeon software, radeon™ pro w5000 series graphics cards +13 more +15 moreAn improper privilege management in the AMD Radeon™ Graphics driver may allow an authenticated...7.8 High
conmonSUSESecurity update for conmonNo scorebuildahSUSESecurity update for buildahNo scoreapache-poiOSS-FuzzSecurity exception in org.apache.poi.util.IOUtils.safelyAllocateNo score- eaton easysoftInsecure storage of password in easySoft5.9 Medium
github.com/kumahq/kumaGogithub.com/kumahq/kuma affected by CVE-2023-444877.5 High- eaton easye4, easy-box-e4-ac1 firmware, easy-box-e4-dc1 firmware +20 more +22 moreWeak encoding vulnerability in easyE46.8 Medium
- openvpn connectOpenVPN Connect versions before 3.4.0.4506 (macOS) and OpenVPN Connect before 3.4.0.3100 (Windows...5.9 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP Vulnerable to XSS in the Commerce Module9.6 Critical
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP Vulnerable to XSS in the Wiki Widget9.0 Critical
sambaUbuntusamba vulnerabilitiesNo scorelibcueUbuntulibcue vulnerabilityNo score- fotomotoWordPress Fotomoto Plugin <= 1.2.8 is vulnerable to Cross Site Scripting (XSS)7.1 High
- byconsole wooodt lite – woocommerce order delivery or pickup with date time location, wooodt lite +1 moreWordPress WooODT Lite Plugin <= 2.4.6 is vulnerable to Cross Site Scripting (XSS)7.1 High
curlUbuntucurl vulnerabilitiesNo score- mehulkaklotar woo custom emailsWordPress Woo Custom Emails Plugin <= 2.2 is vulnerable to Cross Site Scripting (XSS)7.1 High
- arrow plugins social feed | custom feed for social media networks, arrowplugins social feed +1 moreWordPress Social Feed Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS)7.1 High
- alex macarthur complete open graphWordPress Complete Open Graph Plugin <= 3.4.5 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- mattermostMobile app freezes when receiving a post with hundreds of emojis4.3 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP Vulnerable to XSS via the OAuth2ProviderApplicationRedirect Class9.6 Critical
- mattermost, mattermost desktop +1 moreMattermost Desktop logs all keystrokes during initial run after fresh installation4.7 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP Vulnerable to XSS via the Page Tree Menu9.0 Critical
- castos seriously simple statsWordPress Seriously Simple Stats Plugin <= 1.5.1 is vulnerable to Cross Site Scripting (XSS)7.1 High
- realmag777 wolf – wordpress posts bulk editor and manager professional, pluginus wolf - wordpress posts bulk editor and products manager professional +1 moreWordPress WOLF Plugin <= 1.0.7.1 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- david lingren media library assistantWordPress Media Library Assistant Plugin <= 3.11 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP Vulnerable to XSS in the Fragment Components9.0 Critical
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP Vulnerable to Stored XSS in the Manage Vocabulary Page9.0 Critical
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP Vulnerable to Reflected XSS via the Export for Translation Page9.6 Critical
- grafana, grafana enterprise +1 moreGrafana is an open-source platform for monitoring and observability. In Grafana Enterprise,...6.6 Medium
- apache traffic server, fedoraproject fedora +1 moreApache Traffic Server: Malformed http/2 frames can cause an abort7.5 High
- Show moreLoading…