CVEs published in October 2023
2,902 vulnerabilities, 370 critical, 18 exploited.
- redis, debian linux, fedoraproject fedora +2 moreRedis Unix-domain socket may have be exposed with the wrong permissions for a short time window.3.6 Low
- ni system configurationStack-based Buffer Overflow in NI System Configuration Software8.1 High
runcSUSESecurity update for runcNo scorecontainerdSUSESecurity update for containerdNo score- bytecodealliance rustix`rustix::fs::Dir` iterator with the `linux_raw` backend can cause memory explosion6.5 Medium
- arduino create agent, arduino-create-agent +1 morePath traversal in Arduino Create Agent6.1 Medium
- arduino create agent, arduino-create-agent +1 morePath traversal in Arduino Create Agent7.1 High
- hp inc. pc products, hp 200 g4 22 all-in-one pc \(rom family ssid 86f0\) firmware, 200 g4 22 all-in-one pc \(rom family ssid 86f2\) firmware +87 more +89 moreA potential security vulnerability has been identified in the system BIOS for certain HP PC...7.8 High
- arduino create agent, arduino-create-agent +1 morePath traversal in Arduino Create Agent6.1 Medium
- hewlett packard enterprise (hpe) hpe integrated lights-out, hpe integrated lights-out, integrated lights-out 5 firmware +1 more +3 moreHPE Integrated Lights-Out 5, and Integrated Lights-Out 6 using iLOrest may cause denial of service.6.8 Medium
- cisco catalyst sd-wan manager, sd-wan vmanage +1 moreA vulnerability in the web UI of Cisco Catalyst SD-WAN Manager could allow an authenticated,...6.5 Medium
- arduino create agent, arduino-create-agent +1 moreInsufficient Verification of Data Authenticity in Arduino Create Agent7.3 High
- advantech r-seenetAdvantech R-SeeNet Unauthenticated Read/Write9.8 Critical
- debian linux, fedoraproject fedora, roundcube roundcubemail +1 more +3 moreStored XSS vulnerability in Roundcube6.1 Medium
- linux kernel, netapp active iq unified manager, solidfire \& hci management node +21 more +23 moreKernel: use after free in nvmet_tcp_free_crypto in nvme8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreNSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack...6.5 Medium
- mozilla nssThe NSS code used for checking PKCS#1 v1.5 was leaking information useful in mounting...6.5 Medium
- avahi, fedora, red hat enterprise linux 6 +4 more +6 moreReachable assertion in avahi_alternative_host_name6.2 Medium
- avahi, fedora, red hat enterprise linux 6 +4 more +6 moreReachable assertion in avahi_escape_label6.2 Medium
- avahi, fedora, red hat enterprise linux 6 +4 more +6 moreReachable assertion in avahi_rdata_parse6.2 Medium
- avahi, fedora, red hat enterprise linux 6 +4 more +6 moreReachable assertion in dbus_set_host_name6.2 Medium
- avahi, fedora, red hat enterprise linux 6 +4 more +6 moreReachable assertion in avahi_dns_packet_append_record6.2 Medium
- theme blvd tweepleWordPress Tweeple Plugin <= 0.9.5 is vulnerable to Cross Site Scripting (XSS)7.1 High
- web-dorado spidervplayerWordPress Video Player Plugin <= 1.5.22 is vulnerable to Cross Site Scripting (XSS)7.1 High
- unknown gallery – image and video gallery with thumbnails, wpdevart gallery +1 moreWordPress Responsive Image Gallery, Gallery Album Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)7.1 High
- qrokes qr twitter widgetWordPress QR Twitter Widget Plugin <= 0.2.3 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- shopfiles ebook storeWordPress Ebook Store Plugin <= 5.785 is vulnerable to Cross Site Scripting (XSS)7.1 High
- get custom field values project custom field values, scott reilly get custom field values +1 moreWordPress Get Custom Field Values Plugin <= 4.0.1 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- hector cabrera wordpress popular posts, wordpress popular posts project popular posts +1 moreWordPress WordPress Popular Posts Plugin <= 6.3.2 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- nicola modugno smart cookie kitWordPress Smart Cookie Kit Plugin <= 2.3.1 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- kochm mendeley pluginWordPress Mendeley Plugin <= 1.3.2 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- mytechtalky user location and ip, user location and ip project location and ip +1 moreWordPress User Location and IP Plugin <= 1.6 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- kardi order auto complete for woocommerce, order auto complete for woocommerce project auto complete for woocommerce +1 moreWordPress Order auto complete for WooCommerce Plugin <= 1.2.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- 10web form maker by 10web – mobile-friendly drag & drop contact form builder, form maker +1 moreWordPress Form Maker by 10Web Plugin <= 1.15.18 is vulnerable to Cross Site Scripting (XSS)7.1 High
- 10web form maker by 10web – mobile-friendly drag & drop contact form builder, form maker +1 moreWordPress Form Maker by 10Web Plugin <= 1.15.18 is vulnerable to Cross Site Scripting (XSS)7.1 High
- ashish ajani wordpress simple html sitemapWordPress WP Simple HTML Sitemap Plugin <= 2.1 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- mad fish digital bulk noindex & nofollow toolkit, madfishdigital bulk noindex \& nofollow toolkit +1 moreWordPress Bulk NoIndex & NoFollow Toolkit Plugin <= 1.42 is vulnerable to Cross Site Scripting (XSS)7.1 High
- pega platform, pegasystems pega platform +1 morePega Platform versions 8.1 to 8.8.2 are affected by an XSS issue with Pin description4.6 Medium
- pega platform, pegasystems pega platform +1 morePega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with ad-hoc case...4.6 Medium
- pega platform, pegasystems pega platform +1 morePega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with task creation4.6 Medium
- north grid proself, north grid corporation proself enterprise/standard edition, proself gateway edition +1 more +3 moreProself Enterprise/Standard Edition Ver5.62 and earlier, Proself Gateway Edition Ver1.65 and...7.5 High
- daisuke takahashi(extend wings) opcache dashboardWordPress OPcache Dashboard Plugin <= 0.3.1 is vulnerable to Cross Site Scripting (XSS)7.1 High
- thomas scholl canvasio3d lightWordPress Download canvasio3D Light Plugin <= 2.4.6 is vulnerable to Cross Site Scripting (XSS)7.1 High
- eclipse mosquittoUnconditionally adding an event to the epoll causes excessive CPU consumption7.5 High
- gumroadWordPress Gumroad Plugin <= 3.1.0 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- hitsteps web analyticsWordPress Hitsteps Web Analytics Plugin <= 5.86 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- 100plugins open user mapWordPress Open User Map | Everybody can add locations Plugin <= 1.3.26 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- awesome togi product category tree, awesometogi product-category-tree +1 moreWordPress Product Category Tree Plugin <= 2.5 is vulnerable to Cross Site Scripting (XSS)7.1 High
- gopi ramasamy image vertical reel scroll slideshowWordPress Image vertical reel scroll slideshow Plugin <= 9.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- ciprian popescu youtube playlist playerWordPress YouTube Playlist Player Plugin <= 4.6.7 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- Show moreLoading…