CVEs published in October 2023
2,902 vulnerabilities, 370 critical, 18 exploited.
- ezoic ampedsense, ampedsense – adsense split tester +1 moreWordPress AmpedSense – AdSense Split Tester Plugin <= 4.68 is vulnerable to Cross Site Scripting (XSS)7.1 High
- wpjohnny comment reply emailWordPress Comment Reply Email Plugin <= 1.0.3 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- pluginus bear - woocommerce bulk editor and products manager professional, realmag777 bear – bulk editor and products manager professional for woocommerce by pluginus.net +1 moreBEAR <= 1.1.3.3 - Missing Authorization to Product Manipulation4.3 Medium
- i13websolution thumbnail slider with lightboxThumbnail Slider With Lightbox <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via Image Title4.4 Medium
- burningx mpoperationlogsMpOperationLogs <= 1.0.1 - Unauthenticated Stored Cross-Site Scripting7.2 High
- trustedindex widgets for google reviewsWidgets for Google Reviews <= 10.9 - Cross-Site Request Forgery to Plugin Settings Reset4.3 Medium
- nodejs node, node.js, fedoraproject fedora +2 moreVarious `node:fs` functions allow specifying paths as either strings or `Uint8Array` objects. In...9.8 Critical
- nodejs node, node.js +1 moreA previously disclosed vulnerability (CVE-2023-30584) was patched insufficiently in commit...7.7 High
- ivanti endpoint managerAllows an authenticated attacker with network access to read arbitrary files on Endpoint Manager...6.5 Medium
- ivanti endpoint managerUnsafe Deserialization of User Input could lead to Execution of Unauthorized Operations in Ivanti...9.8 Critical
- lcdf gifsiclegifsicle-1.94 was found to have a floating point exception (FPE) vulnerability via resize_stream...7.8 High
- mayurik best courier management systemSourcecodester Best Courier Management System 1.0 is vulnerable to SQL Injection via the...9.8 Critical
- mayurik best courier management systemSourcecodester Best Courier Management System 1.0 is vulnerable to SQL Injection via the...9.8 Critical
- mayurik best courier management systemSourcecodester Best Courier Management System 1.0 is vulnerable to SQL Injection via the...9.8 Critical
- mayurik best courier management systemSourcecodester Best Courier Management System 1.0 is vulnerable to Arbitrary file upload in the...7.2 High
- thirtybees thirty beesThirty Bees Core v1.4.0 was discovered to contain a reflected cross-site scripting (XSS)...6.1 Medium
- wipotec comscaleWIPOTEC GmbH ComScale v4.3.29.21344 and v4.4.12.723 fails to validate user sessions, allowing...7.5 High
- wipotec comscaleAn issue in WIPOTEC GmbH ComScale v4.3.29.21344 and v4.4.12.723 allows unauthenticated attackers...9.8 Critical
- zzzcms zzzphpzzzcms v2.2.0 was discovered to contain an open redirect vulnerability.6.1 Medium
- common-services sonice etiquetageIn the module "SoNice etiquetage" (sonice_etiquetage) up to version 2.5.9 from Common-Services...7.5 High
- xnview nconvertXNSoft Nconvert 7.136 is vulnerable to Buffer Overflow. There is a User Mode Write AV via a...7.8 High
- ethereum go ethereumgo-ethereum vulnerable to denial of service via crafted GraphQL query7.5 High
- nodejs node, nodejs +1 moreMaliciously crafted export names in an imported WebAssembly module can inject JavaScript code....5.3 Medium
- nodejs node, node.js, fedoraproject fedora +2 moreWhen the Node.js policy feature checks the integrity of a resource against a trusted manifest,...7.5 High
- sophos firewallA password disclosure vulnerability in the Secure PDF eXchange (SPX) feature allows attackers...7.1 High
- pkp pkp/ojs, open journal systems, sfu open journal system +2 moreCross-Site Request Forgery (CSRF) in pkp/ojs3.5 Low
- dotcms, dotcms core +1 moreCNA SHORTNAME: dotCMSORG UUID: 5b9d93f2-25c7-46b4-ab60-d201718c9dd85.3 Medium
- relative synchronyPrototype pollution vulnerability leading to arbitrary code execution in synchrony deobfuscator8.2 High
- sonicwall sonicosSonicOS post-authentication Improper Privilege Management vulnerability in the SonicOS SSL VPN...8.8 High
- jtekt onsinview2Stack-based buffer overflow vulnerability exists in OnSinView2 versions 2.0.1 and earlier. If...7.8 High
- jtekt onsinview2Improper restriction of operations within the bounds of a memory buffer issue exists in...7.8 High
- openfgaOpenFGA denial of service5.3 Medium
- sonicwall sonicosSonicOS Use of Hard-coded Password vulnerability in the 'dynHandleBuyToolbar' demo function.7.5 High
- sonicwall sonicosSonicOS post-authentication Stack-Based Buffer Overflow Vulnerability in the SSL VPN plainprefs...6.5 Medium
- sonicwall sonicosSonicOS post-authentication Stack-Based Buffer Overflow Vulnerability in the sonicwall.exp, prefs...6.5 Medium
- sonicwall sonicosSonicOS p ost-authentication Stack-Based Buffer Overflow vulnerability in the ssoStats-s.xml,...6.5 Medium
- sonicwall sonicosSonicOS post-authentication Stack-Based Buffer Overflow vulnerability in the getPacketReplayData...6.5 Medium
- sonicwall sonicosSonicOS post-authentication user assertion failure leads to Stack-Based Buffer Overflow...6.5 Medium
- sonicwall sonicosSonicOS post-authentication stack-based buffer overflow vulnerability in the sonicflow.csv and...6.5 Medium
- sonicwall sonicosSonicOS post-authentication stack-based buffer overflow vulnerability in the getBookmarkList...6.5 Medium
- oracle sun zfs storage appliance kit, oracle corporation sun zfs storage appliance kit (ak) software +1 moreVulnerability in the Sun ZFS Storage Appliance product of Oracle Systems (component: Core). The...5.9 Medium
- oracle solaris, oracle corporation solaris operating system +1 moreVulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The...5.5 Medium
- oracle solaris, oracle corporation solaris operating system +1 moreVulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). Supported...3.1 Low
- oracle outside in technologyVulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component:...6.3 Medium
- oracle webcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component:...5.3 Medium
- oracle banking trade financeVulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services...5.4 Medium
- oracle banking trade financeVulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services...5.4 Medium
- oracle banking trade financeVulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services...5.4 Medium
- oracle banking trade financeVulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services...5.9 Medium
- oracle banking trade financeVulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services...5.4 Medium
- Show moreLoading…