CVEs published in October 2023
2,902 vulnerabilities, 370 critical, 18 exploited.
- santesoft dicom viewer pro, sante dicom viewer pro +1 moreSantesoft Sante DICOM Viewer Pro Stack-based Buffer Overflow7.8 High
- santesoft dicom viewer pro, sante dicom viewer pro +1 moreSantesoft Sante DICOM Viewer Pro Out-of-bounds Write7.8 High
- santesoft fft imaging, sante fft imaging +1 moreSantesoft Sante FFT Imaging Out-of-bounds Read7.8 High
- ydb ydb-go-sdkToken in custom credentials object can leak through logs in ydb-go-sdk5.5 Medium
- artifacthub hubArbitrary file read in Artifact Hub7.5 High
- artifacthub hubUnsafe rego built-in allowed in Artifact Hub3.7 Low
- artifacthub hubIncorrect Docker Hub registry check in Artifact Hub5.4 Medium
- ichitaro 2023 2023, justsystems ichitaro 2023, easy postcard max +17 more +19 moreAn integer overflow exists in the "HyperLinkFrame" stream parser of Ichitaro 2023 1.0.1.59372. A...7.8 High
- ichitaro 2023 2023, justsystems ichitaro 2023, easy postcard max +17 more +19 moreA use-after-free vulnerability exists in the Figure stream parsing functionality of Ichitaro 2023...7.8 High
- ichitaro 2023 2023, justsystems ichitaro 2023, easy postcard max +17 more +19 moreAn out-of-bounds write vulnerability exists in the "HyperLinkFrame" stream parser of Ichitaro...7.8 High
muttUbuntumutt vulnerabilitiesNo score- archiveboxArchiveBox: Viewing wget extractor output while logged in as an admin allows archived JS to execute in the admins context6.4 Medium
- linuxfoundation nats-serverNATS.io: Adding accounts for just the system account adds auth bypass6.5 Medium
dotnet6Ubuntu,dotnet7Ubuntu +1 moredotnet6, dotnet7 vulnerabilitiesNo score- ichitaro 2023 2023, justsystems ichitaro 2023, easy postcard max +17 more +19 moreAn out-of-bounds write vulnerability exists within the parsers for both the "DocumentViewStyles"...7.8 High
dotnet8Ubuntudotnet8 vulnerabilityNo score- torchbox wagtailDisclosure of user names via admin bulk action views in wagtail2.7 Low
- meta react developer tools extension, facebook react-devtools +1 moreReact Developer Tools extension Improper Authorization vulnerability6.5 Medium
- solarwinds access rights managerSolarWinds Access Rights Manager Incorrect Default Permissions Local Privilege Escalation Vulnerability7.8 High
- solarwinds access rights managerSolarWinds Access Rights Manager Directory Traversal Remote Code Execution Vulnerability8.8 High
- solarwinds access rights managerSolarWinds Access Rights Manager OpenFile Directory Traversal Remote Code Execution Vulnerability6.8 Medium
- solarwinds access rights managerSolarWinds Access Rights Manager Incorrect Default Permissions Local Privilege Escalation Vulnerability7.8 High
- solarwinds access rights managerSolarWinds Access Rights Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability8.0 High
- solarwinds access rights managerSolarWinds Access Rights Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability8.8 High
- solarwinds access rights managerSolarWinds Access Rights Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability8.8 High
- solarwinds access rights managerSolarWinds Access Rights Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability8.0 High
tracingcrates.iouse-after-free in tracingNo score- apache inlongApache inlong has an Arbitrary File Read Vulnerability7.5 High
- texas instruments omap, ti omap l138 firmware +1 moreSK_LOAD timing side channel during AES module decryption in Texas Instruments OMAP L1384.4 Medium
- texas instruments omap, ti omap l138 firmware +1 moreStack overflow on SK_LOAD signature length field in Texas Instruments OMAP L1388.2 High
- motorola mobile radio, mtm5400 firmware, mtm5500 firmware +2 moreFormat string vulnerability in AT+CTGL command in Motorola MTM50009.6 Critical
- motorola mtm5000 series firmware, mobile radio, mtm5400 firmware +1 more +3 moreMultiple missing pointer validation checks in trusted execution module in Motorola MTM50008.2 High
- texas instruments omap, ti omap l138 firmware +1 moreFlawed SK_LOAD module authenticity check in Texas Instruments OMAP L1388.2 High
- motorola mobile radio, mtm5400 firmware, mtm5500 firmware +2 moreUnconfigured memory protection modules in Motorola MTM50008.1 High
- motorola mtm5000 series firmware, mobile radio, mtm5400 firmware +1 more +3 moreWeak PRNG entropy source used for authentication challenge generation in Motorola MTM50008.8 High
- etsi tetra standard, midnightblue tetra\ +1 moreDCK pinning attack in TETRA7.5 High
- etsi tetra standard, midnightblue tetra\ +1 moreKeystream recovery for arbitrary frames in TETRA8.8 High
- etsi tetra standard, midnightblue tetra\ +1 moreIntentionally weakened effective strength in TETRA TEA18.8 High
- etsi tetra standard, midnightblue tetra\ +1 moreCiphertext Malleability in TETRA5.9 Medium
- apache shenyuServer-Side Request Forgery in Apache ShenYu6.5 Medium
cni-pluginsSUSESecurity update for cni-pluginsNo scorecniSUSESecurity update for cniNo scorecontainer-suseconnectSUSESecurity update for container-suseconnectNo score- spring amqp, vmware spring advanced message queuing protocol +1 moreSpring AMQP Deserialization Vulnerability5.0 Medium
- quantumcloud wpbot, wpbot – ai chatbot for live support, lead generation, ai services +1 moreAI ChatBot <= 4.8.9 - Unauthenticated Sensitive Information Exposure via qcld_wb_chatbot_check_user5.3 Medium
- quantumcloud wpbot, wpbot – ai chatbot for live support, lead generation, ai services +1 moreAI ChatBot <= 4.8.9 and 4.9.2- Authenticated (Subscriber+) Arbitrary File Deletion via qcld_openai_delete_training_file9.6 Critical
- quantumcloud wpbot, wpbot – ai chatbot for live support, lead generation, ai services +1 moreAI ChatBot <= 4.8.9 - Unauthenticated SQL Injection via qc_wpbo_search_response9.8 Critical
- quantumcloud wpbot, wpbot – ai chatbot for live support, lead generation, ai services +1 moreAI ChatBot <= 4.8.9 and 4.9.2 - Authenticated (Subscriber+) Directory Traversal to Arbitrary File Write via qcld_openai_upload_pagetraining_file9.6 Critical
- hcl software compass, hcltech hcl compass +1 moreA weak password requirements vulnerability affects HCL Compass8.1 High
- themepoints team showcase, team showcase – responsive team members grid, slider & carousel plugin +1 moreTeam Showcase <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- Show moreLoading…