CVEs published in October 2023
2,902 vulnerabilities, 370 critical, 18 exploited.
- booster for woocommerce, pluggabl booster for woocommerce – pdf invoices, abandoned cart, variation swatches & 100+ tools +1 moreBooster for WooCommerce <= 7.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- igorfuna ad inserter, spacetime ad inserter – ad manager & adsense ads +1 moreAd Inserter <= 2.7.30 - Unauthenticated Sensitive Information Exposure via ai_ajax5.3 Medium
- avirtum ipanorama 360 – advanced virtual tour builder, ipanorama 360 wordpress virtual tour builder project 360 wordpress virtual tour builder +1 moreiPanorama 360 – WordPress Virtual Tour Builder <= 1.8.0 - Authenticated (Contributor+) SQL Injection via Shortcode8.8 High
- hcl software compass, hcltech hcl compass +1 moreAn insufficient session expiration vulnerability affects HCL Compass7.1 High
- langchainLangChain Server Side Request Forgery vulnerability8.8 High
- zchunkzchunk before 1.3.2 has multiple integer overflows via malformed zchunk files to lib/comp/comp.c,...7.8 High
- get-simple getsimplecmsAn issue in GetSimpleCMS v.3.4.0a allows a remote attacker to execute arbitrary code via a...9.8 Critical
- dlink dsl-2730u, dsl-2750u, dsl-2730u firmware +1 more +3 more** UNSUPPORTED WHEN ASSIGNED ** D-Link (Non-US) DSL-2750U N300 ADSL2+ and (Non-US) DSL-2730U N150...6.8 Medium
- commscope ruckus cloudpath enrollment systemCross Site Scripting vulnerability in Ruckus Wireless (CommScope) Ruckus CloudPath v.5.12.54414...9.6 Critical
- enghouse qumu, qumu mulitcast extension +1 moreA privilege escalation vulnerability exists within the Qumu Multicast Extension v2 before 2.0.63...7.8 High
- knowband supercheckoutKnowBand supercheckout > 5.0.7 and < 6.0.7 is vulnerable to Unrestricted Upload of File with...9.8 Critical
- webshopworks creativepopupIn the module "Creative Popup" (creativepopup) up to version 1.6.9 from WebshopWorks for...9.8 Critical
- posthemes posrotatorimgIn the module "Rotator Img" (posrotatorimg) in versions at least up to 1.1 from PosThemes for...9.8 Critical
- hipresta carousels packIn the module "Carousels Pack - Instagram, Products, Brands, Supplier" (hicarouselspack) for...9.8 Critical
- spaceapplications yamcsAn issue in Yamcs 5.8.6 allows attackers to obtain the session cookie via upload of crafted HTML...6.1 Medium
- spaceapplications yamcsYamcs Cross-site Scripting vulnerability5.4 Medium
- spaceapplications yamcsYamcs Cross-site Scripting vulnerability5.4 Medium
- spaceapplications yamcsYamcs API Directory Traversal vulnerability9.1 Critical
- spaceapplications yamcsYamcs Path Traversal vulnerability7.5 High
- dbcli myclimycli has Inadequate Encryption Strength7.5 High
- dmconcept configuratorDM Concept configurator before v4.9.4 was discovered to contain a SQL injection vulnerability via...9.8 Critical
- intelliants subrion cmsSubrion CMS vulnerable to Cross-site Scripting6.1 Medium
- cmsmadesimple cms made simpleCross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute...5.4 Medium
- opensolution quick cmsCross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker...8.6 High
- opensolution quick cmsCross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker...5.4 Medium
- opensolution quick cmsCross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker...5.4 Medium
- evo evolution cmsEvolution CMS Cross-site Scripting vulnerability6.1 Medium
- evo evolution cmsEvolution CMS Cross-site Scripting vulnerability5.2 Medium
- xnview nconvertXNSoft Nconvert 7.136 is vulnerable to Buffer Overflow via a crafted image file.7.8 High
- xnview nconvertXNSoft Nconvert 7.136 has an Exception Handler Chain Corrupted via a crafted image file....7.8 High
- line kaibutsunosatoThe leakage of the client secret in Kaibutsunosato v13.6.1 allows attackers to obtain the channel...5.3 Medium
- papercut mf, ng +1 moreA Path Traversal vulnerability exists in PaperCut NG before 22.1.1 and PaperCut MF before 22.1.1....6.5 Medium
- insyde insydeh2oAn issue was discovered in TrEEConfigDriver in Insyde InsydeH2O with kernel 5.0 through 5.5. It...5.3 Medium
- ixpdata easyinstallAn issue discovered in IXP Data EasyInstall 6.6.14907.0 allows attackers to gain escalated...7.8 High
- ixpdata easyinstallAn issue discovered in IXP EasyInstall 6.6.14884.0 allows attackers to run arbitrary commands,...9.8 Critical
- ixpdata easyinstallAn issue found in IXP Data Easy Install v.6.6.14884.0 allows a local attacker to gain privileges...7.8 High
- ixpdata easyinstallAn issue discovered in IXP Data Easy Install v.6.6.14884.0 allows local attackers to gain...7.8 High
- ixpdata easyinstallAn issue found in IXP Data Easy Install v.6.6.14884.0 allows an attacker to escalate privileges...7.8 High
- ixpdata easyinstallAn issue found in IXP Data Easy Install 6.6.148840 allows a remote attacker to escalate...8.1 High
- mintty project minttyTerminal character injection in Mintty before 3.6.3 allows code execution via unescaped output to...9.8 Critical
- tinylab cloud lab, linux lab +1 moreTinyLab linux-lab v1.1-rc1 and cloud-labv0.8-rc2, v1.1-rc1 are vulnerable to insecure permissions...10.0 Critical
- webjet cmsInterway a.s WebJET CMS 8.6.896 is vulnerable to Cross Site Scripting (XSS).9.6 Critical
- baker hughes - bently nevada bently nevada 3500 system, bakerhughes bentley nevada 3500 system firmware +1 moreBaker Hughes Bently Nevada 3500 System Authentication Bypass by Capture-replay5.4 Medium
- baker hughes - bently nevada bently nevada 3500 system, bakerhughes bentley nevada 3500 system firmware +1 moreBaker Hughes Bently Nevada 3500 System Incorrect Permission Assignment for Critical Resource7.5 High
- baker hughes - bently nevada bently nevada 3500 system, bakerhughes bentley nevada 3500 system firmware +1 moreBaker Hughes Bently Nevada 3500 System Cleartext Transmission of Sensitive Information6.8 Medium
- hcl software compass, hcltech hcl compass +1 moreAn unrestricted file upload vulnerability affects HCL Compass9.0 Critical
- xuexueli xxl-rpcRemote code execution in XXL-RPC9.1 Critical
- apollographql apollo router, router, apollo helms-charts router +2 moreImproper Check or Handling of Exceptional Conditions in apollo-router7.5 High
- littlebigfresh bunkumTokens cached in the AuthenticationService are susceptible to reuse in Bunkum5.3 Medium
- dedsecinside torbot, validators project validators +1 moreInefficient Regular Expression Complexity in TorBot4.6 Medium
- Show moreLoading…