CVEs published in October 2023
2,902 vulnerabilities, 370 critical, 18 exploited.
- carrental project carrentalcarRental 1.0 is vulnerable to Incorrect Access Control (Arbitrary File Read on the Back-end...7.5 High
- opnsenseDECISO OPNsense 23.1 does not impose rate limits for authentication, allowing attackers to...9.8 Critical
- enhancesoft osticketA stored cross-site scripting (XSS) vulnerability in Enhancesoft osTicket v1.17.2 allows...4.8 Medium
- enhancesoft osticketA stored cross-site scripting (XSS) vulnerability in the Admin panel in Enhancesoft osTicket v1...4.8 Medium
- netentsec application security gateway, ns-asg application security gateway +1 moreNetentsec NS-ASG Application Security Gateway uploadiscgwrouteconf.php sql injection5.5 Medium
- codeastro internet banking systemCodeAstro Internet Banking System pages_view_client.php cross site scripting3.5 Low
- codeastro internet banking systemCodeAstro Internet Banking System pages_deposit_money.php cross site scripting3.5 Low
- codeastro internet banking systemCodeAstro Internet Banking System pages_withdraw_money.php cross site scripting3.5 Low
- codeastro internet banking systemCodeAstro Internet Banking System pages_transfer_money.php cross site scripting3.5 Low
- codeastro internet banking systemCodeAstro Internet Banking System pages_reset_pwd.php cross site scripting3.5 Low
- codeastro internet banking systemCodeAstro Internet Banking System pages_system_settings.php cross site scripting3.5 Low
- codeastro internet banking systemCodeAstro Internet Banking System pages_reset_pwd.php sql injection6.3 Medium
- chetan gole smooth scroll links [ssl], chetangole smooth scroll links +1 moreWordPress Smooth Scroll Links Plugin <= 1.1.0 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- lee le @ userback userbackWordPress Userback Plugin <= 1.0.13 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- roxnor wp ultimate reviewWordPress Wp Ultimate Review Plugin <= 2.2.4 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
libredwgOSS-FuzzHeap-buffer-overflow in decode_preR13_entitiesNo score- ibm cognos dashboards on cloud pak for dataIBM Cognos Dashboards improper authentication5.7 Medium
- ibm cognos dashboards on cloud pak for dataIBM Cognos Dashboards information disclosure5.9 Medium
- ibm cognos dashboards on cloud pak for dataIBM Cognos Dashboards information disclosure5.9 Medium
- fedora, red hat 3scale api management platform 2, rmagick +2 moreDraw while calling getdrawinfo()5.3 Medium
- iterm2iTermSessionLauncher.m in iTerm2 before 3.5.0beta12 does not sanitize ssh hostnames in URLs. The...9.8 Critical
- iterm2iTermSessionLauncher.m in iTerm2 before 3.5.0beta12 does not sanitize paths in x-man-page URLs....9.8 Critical
- wallix bastionWALLIX Bastion 9.x before 9.0.9 and 10.x before 10.0.5 allows unauthenticated access to sensitive...7.5 High
- nic knot resolverKnot Resolver before 5.7.0 performs many TCP reconnections upon receiving certain nonsensical...7.5 High
- zanllp stable diffusion webui infinite image browsingThe zanllp sd-webui-infinite-image-browsing (aka Infinite Image Browsing) extension before...7.5 High
- netmodule router softwareThe web administration interface in NetModule Router Software (NRSW) 4.6 before 4.6.0.106 and 4.8...8.4 High
- calibre-ebook calibrelink_to_local_path in ebooks/conversion/plugins/html_input.py in calibre before 6.19.0 can, by...7.5 High
- iterm2iTerm2 before 3.4.20 allow (potentially remote) code execution because of mishandling of certain...9.8 Critical
- iterm2iTerm2 before 3.4.20 allow (potentially remote) code execution because of mishandling of certain...9.8 Critical
- vercel next.jsNext.js missing cache-control header may lead to CDN caching empty reply7.5 High
- vonautomatisch django grappelliDjango Grappelli Open Redirect vulnerability6.1 Medium
- wagtailcrx codered extensionsWagtail CRX CodeRed Extensions vulnerable to Path Traversal6.5 Medium
- pluginever wc serial numbersWordPress Serial Numbers for WooCommerce – License Manager Plugin <= 1.6.3 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- qwerty23 rocket fontWordPress Rocket Font Plugin <= 1.2.3 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- anilankola add custom body classAdd Custom Body Class <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- salesmanago, salesmanag0 salesmanago & leadoo, salesmanago & leadoo +2 moreSALESmanago <= 3.2.4 - Log Injection via Weak Authentication Token5.3 Medium
- ashanjay eventon – events calendar, myeventon eventon-lite +1 moreEventON <= 2.2.2 - Reflected Cross-Site Scripting6.1 Medium
- byzoro smart s85f management platform, smart s85f firmware +1 moreByzoro Smart S85F Management Platform importexport.php os command injection4.7 Medium
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +4 more +6 moreKernel: kvm: svm: improper check in svm_set_x2apic_msr_interception allows direct access to host x2apic msrs6.0 Medium
- apache http serverApache HTTP Server: DoS in HTTP/2 with initial windows size 07.5 High
- apache http server, debian linux, fedoraproject fedora +2 moreApache HTTP Server: mod_macro buffer over-read7.5 High
- byzoro smart s85f management platform, smart s85f firmware +1 moreByzoro Smart S85F Management Platform importconf.php os command injection6.3 Medium
- soisy pagamento rateale, soisytech soisy pagamento rateale +1 moreSoisy Pagamento Rateale <= 6.0.1 - Missing Authorization to Sensitive Information Exposure7.5 High
zabbixDebianzabbix - regression updateNo score- thingnario photonAn issue in ThingNario Photon v.1.0 allows a remote attacker to execute arbitrary code and...8.8 High
- wbce cmsCross Site Scripting (XSS) vulnerability in WBCE CMS v.1.6.1 and before allows a remote attacker...5.4 Medium
- i-doitI-doit pro 25 and below is vulnerable to Cross Site Scripting (XSS) via index.php.5.4 Medium
- superwebmailerAn issue was discovered in SuperWebMailer 9.00.0.01710. It allows keepalive.php XSS via a GET...6.1 Medium
- superwebmailerAn issue was discovered in SuperWebMailer 9.00.0.01710. It allows Remote Code Execution via a...8.8 High
- superwebmailerAn issue was discovered in SuperWebMailer 9.00.0.01710. It allows superadmincreate.php XSS via...6.1 Medium
- Show moreLoading…