CVEs published in October 2023
2,902 vulnerabilities, 370 critical, 18 exploited.
- superwebmailerAn issue was discovered in SuperWebMailer 9.00.0.01710. It allows Export SQL Injection via the...8.8 High
- nothings stb, stb vorbis.c +1 moreWild address read in vorbis_decode_packet_rest in stb_vorbis5.3 Medium
- nothings stb, stb vorbis.c +1 moreOut of bounds heap buffer write in stb_vorbis7.3 High
- nothings stb, stb vorbis.c +1 moreNull pointer dereference in vorbis_deinit in stb_vorbis5.3 Medium
- nothings stb, stb vorbis.c +1 moreAttempt to free an uninitialized memory pointer in vorbis_deinit in stb_vorbis7.3 High
- nothings stb, stb vorbis.c +1 moreOff-by-one heap buffer write in start_decoder in stb_vorbis6.5 Medium
- nothings stb, stb vorbis.c +1 moreHeap buffer out of bounds write in start_decoder in stb_vorbis7.3 High
- nothings stb, stb vorbis.c +1 moreMulti-byte write heap buffer overflow in start_decoder in stb_vorbis7.3 High
- nothings stb, stb vorbis.c +1 more0 byte write heap buffer overflow in start_decoder in stb_vorbis6.5 Medium
- nothings stb, stb image, stb image.h +2 moreNull pointer dereference because of an uninitialized variable in stb_image5.3 Medium
- nothings stb, stb image, stb image.h +2 morePossible double-free or memory leak in stbi__load_gif_main in stb_image7.3 High
- nothings stb, stb image, stb image.h +2 moreDouble-free in stbi__load_gif_main_outofmem in stb_image7.3 High
- nothings stb, stb image, stb image.h +2 moreDisclosure of uninitialized memory in stbi__tga_load in stb_image5.3 Medium
- nothings stb, stb image, stb image.h +2 moreMulti-byte read heap buffer overflow in stbi__vertical_flip in stb_image6.5 Medium
- nothings stb, stb image, stb image.h +2 moreWild address read in stbi__gif_load_next in stb_image6.5 Medium
- jinher oa, tongda2000 tongda office anywhere +1 moreTongda OA delete.php sql injection5.5 Medium
- netentsec application security gateway, ns-asg application security gateway +1 moreNetentsec NS-ASG Application Security Gateway list_addr_fwresource_ip.php sql injection4.7 Medium
- six2dez reconftwInadequate validation of retrieved subdomains may lead to a Remote Code Execution in reconFTW9.6 Critical
- frostming pdm, unearth +1 moreTrojan Lockfilein pdm7.8 High
- modoboa, modoboa modoboa/modoboa +1 moreCross-Site Request Forgery (CSRF) in modoboa/modoboa5.3 Medium
- modoboa, modoboa modoboa/modoboa +1 moreCross-site Scripting (XSS) - DOM in modoboa/modoboa7.1 High
- modoboa, modoboa modoboa/modoboa +1 moreCross-site Scripting (XSS) - DOM in modoboa/modoboa9.8 Critical
- mosparo, mosparo mosparo/mosparo +1 moreCross-Site Request Forgery (CSRF) in mosparo/mosparo5.4 Medium
- radare radare2, radareorg radareorg/radare2, fedoraproject fedora +2 moreHeap-based Buffer Overflow in radareorg/radare25.1 Medium
- qnap qusbcam2QUSBCam28.8 High
- myshopkit winters, winters - wordpress blog theme +1 moreWinters <= 1.4.3 - Prototype Pollution to Reflected Cross-Site Scripting6.1 Medium
- wiloke your journeyYour Journey <= 1.9.8 - Prototype Pollution to Reflected Cross-Site Scripting6.1 Medium
- saleswizard nsc, national show centre nsc wordpress theme +1 morensc <= 1.0 - Prototype Pollution to Reflected Cross-Site Scripting6.1 Medium
- silabs gecko bootloader, silabs.com gsdk +1 moreInteger overflow in Silicon Labs Gecko Bootloader leads to unbounded memory access7.7 High
- fnando svg optimizersvg_optimizer rubygem external XML entity (XXE) vulnerability5.9 Medium
serenityOSS-FuzzHeap-buffer-overflow in Gfx::InputStreamer::read_u32No score- prismtechstudios modern footnotesModern Footnotes <= 1.4.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
chromiumopenSUSESecurity update for chromiumNo scorebluetuithopenSUSESecurity update for bluetuithNo score- apache software foundation santuario, apache santuario xml security for java +1 moreApache Santuario: Private Key disclosure in debug-log output6.5 Medium
- fortinet fortianalyzer, fortimanager +1 moreA server-side request forgery vulnerability [CWE-918] in Fortinet FortiAnalyzer version 7.4.0, version 7.2.0 through 7.2.3 and before 7.0.8 and FortiManager version 7.4.0, version 7.2.0 through 7.2.3…6.4 Medium
- vmware fusionVMware Fusion installer local privilege escalation6.6 Medium
- vmware fusionVMware Fusion TOCTOU local privilege escalation vulnerability6.7 Medium
- vmware fusion, workstation +1 moreInformation disclosure vulnerability in bluetooth device-sharing functionality7.1 High
- bompus wp customer reviewsWP Customer Reviews <= 3.6.6 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4 Medium
- adenion blog2social, pr-gateway blog2social: social media auto post & scheduler +1 moreBlog2Social <= 6.9.11 - Missing Authorization to Authenticated (Subscriber+) Settings Update4.1 Medium
- ironikus wp mailto links – protect email addresses, wp mailto links +1 moreWP Mailto Links – Protect Email Addresses <= 3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- webnus modern events calendar liteModern Events Calendar lite < 7.1.0 - Authenticated (Admin+) Stored Cross-Site Scripting4.4 Medium
- inisev social media share buttons & social sharing icons, ultimatelysocial social media share buttons \& social sharing icons +1 moreSocial Media Share Buttons & Social Sharing Icons <= 2.8.5 - Information Exposure6.5 Medium
- radykal fancy product designerFancy Product Designer <= 4.6.9 - Insufficient Authorization to Arbitrary Options Update via fpd_update_options8.8 High
- maheshwaghmare copy anything to clipboard, clipboardagency copy anything to clipboard for wordpress – copy button, copy text & copy code +1 moreCopy Anything to Clipboard <= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- cm-wp woody code snippets, themeisle woody code snippets – insert php, css, js, and header/footer scripts +1 moreWoody code snippets <= 2.3.9 - Cross-Site Request Forgery Bypass4.3 Medium
- themeisle rss aggregator by feedzy, rss aggregator by feedzy – feed to post, autoblogging, news & youtube video feeds aggregator +1 moreRSS Aggregator by Feedzy <= 3.4.2 - Cross-Site Request Forgery Bypass4.3 Medium
- hwk-fr advanced custom fields: extended, acfextended advanced custom fields extended +1 moreAdvanced Custom Fields: Extended <= 0.8.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- nikeo customizrCustomizr <= 4.3.0 - Cross-Site Request Forgery Bypass4.3 Medium
- Show moreLoading…