CVEs published in October 2023
2,902 vulnerabilities, 370 critical, 18 exploited.
- agevoltAn arbitrary file upload and directory traversal vulnerability exist in the file upload...8.8 High
- linux kernel, red hat enterprise linux 6, enterprise linux 7 +25 more +27 moreKernel: vmwgfx: reference count issue leads to use-after-free in surface handling7.8 High
- ibm security verify governanceIBM Security Verify Governance information disclosure4.1 Medium
- ibm security verify governanceIBM Security Verify Governance command execution7.2 High
- ibm security verify governanceIBM Security Verify Governance information disclosure6.8 Medium
- ibm security verify governanceIBM Security Verify Governance cross-site scripting4.8 Medium
- apache airflowApache Airflow: Sensitive parameters exposed in API when "non-sensitive-only" configuration is set4.3 Medium
- ibm sterling partner engagement managerIBM Sterling Partner Engagement Manager cross-site scripting6.4 Medium
- ibm sterling partner engagement managerIBM Sterling Partner Engagement Manager security bypass5.9 Medium
- hcl commerceA path traversal vulnerability affects HCL Commerce5.8 Medium
- sbt, scala-sbt io +1 moreArbitrary file write via archive extraction (Zip Slip) vulnerability in sbt3.9 Low
- dell unity, unity operating environment, unity xt operating environment +1 more +3 moreDell Unity prior to 5.3 contains an XML External Entity injection vulnerability. An XXE attack...4.9 Medium
- dell unity, unity operating environment, unity xt operating environment +1 more +3 moreDell Unity prior to 5.3 contains a Restricted Shell Bypass vulnerability. This could allow an...5.1 Medium
- dell unity, unity operating environment, unity xt operating environment +1 more +3 moreDell Unity prior to 5.3 contains a Cross-site scripting vulnerability. A low-privileged...5.5 Medium
- dell unity, unity operating environment, unity xt operating environment +1 more +3 moreDell Unity 5.3 contain(s) an Arbitrary File Creation vulnerability. A remote unauthenticated...5.2 Medium
- elated-themes frappeFrappe vulnerable to HTML injection by any Desk user5.4 Medium
- vue.js devtoolsThe Vue.js Devtools extension was found to leak screenshot data back to a malicious web page via...4.3 Medium
- zscaler client connectorZCC on Linux privilege escalation6.7 Medium
- zscaler client connectorLinux ZCC allows unsigned updates, allowing elevated Code Execution8.2 High
- zscaler client connectorTraffic being bypassed by ZCC by configuring synthetic IP range as local network5.9 Medium
- zscaler client connectorLPE using arbitrary file delete with Symlinks6.3 Medium
- zscaler client connectorIPC Bypass Through PLT Section in ELF7.1 High
- zscaler client connectorClient IPC validation bypass7.8 High
- zscaler client connectorHeap Based Buffer Overflow in Library7.8 High
- zscaler client connectorPrivilege Escalation for ZCC macOS via PATH Variable7.8 High
- zscaler client connectorPrivilege Escalation Using PID Reuse in ZCC macOS5.5 Medium
- zscaler client connectorZApp Installer Privilege Escalation Vulnerabilities6.7 Medium
- zscaler client connectorUntrusted Search Path While Executing REG DELETE by Uninstaller6.7 Medium
- zscaler client connectorJunction Delete leading to elevation of privilege4.4 Medium
libredwgOSS-FuzzHeap-buffer-overflow in dwg_json_VPORT_privateNo scorematioOSS-FuzzHeap-buffer-overflow in H5D__scatter_memNo score- sick fx0-gent00000 firmware, fx0-gent00010 firmware, fx0-gent00030 firmware +23 more +25 moreAuthentication Bypass by Capture-replay in SICK Flexi Soft Gateways with Partnumbers 1044073,...8.8 High
fwupdateSUSESecurity update for fwupdateNo score- omrom cx-designerCX-Designer Ver.3.740 and earlier (included in CX-One CXONE-AL[][]D-V4) contains an improper...5.5 Medium
- viessmann vitogate 300, vitogate 300 firmware +1 moreViessmann Vitogate 300 direct request4.3 Medium
- vnote project vnotevnotex vnote Markdown File cross site scripting4.3 Medium
- color demoiccmaxIn International Color Consortium DemoIccMAX 79ecb74, there is an out-of-bounds read in the...8.8 High
- color demoiccmaxIn International Color Consortium DemoIccMAX 79ecb74, there is a stack-based buffer overflow in...8.8 High
- webassembly binary toolkitWebAssembly wabt 1.0.33 contains an Out-of-Bound Memory Write in DataSegment::Drop(), which lead...5.5 Medium
- webassembly binary toolkitWebAssembly wabt 1.0.33 has an Out-of-Bound Memory Read in in DataSegment::IsValidRange(), which...5.5 Medium
- free5gc udmfree5GC udm vulnerable to Invalid Curve Attack7.5 High
- geeklogCross Site Scripting (XSS) vulnerability in Geeklog-Core geeklog v.2.2.2 allows a remote attacker...4.8 Medium
- geeklogCross Site Scripting (XSS) vulnerability in Geeklog-Core geeklog v.2.2.2 allows a remote attacker...4.8 Medium
- kodcloud kodboxkodbox 1.44 is vulnerable to Cross Site Scripting (XSS). Customizing global HTML results in...5.4 Medium
- remark42umputun remark42 version 1.12.1 and before has a Blind Server-Side Request Forgery (SSRF)...7.5 High
- concretecms concrete cmsConcrete CMS Cross-site Scripting vulnerability4.8 Medium
- cmsmadesimple cms made simpleCross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute...5.4 Medium
- openimageioAn issue in OpenImageIO oiio v.2.4.12.0 allows a remote attacker to execute arbitrary code and...8.8 High
- webkul uvdeskA stored cross-site scripting (XSS) vulnerability in UVDesk Community Skeleton v1.1.1 allows...5.4 Medium
- uvdesk community-skeletonUVDesk Community Skeleton v1.1.1 allows unauthenticated attackers to perform brute force attacks...9.8 Critical
- Show moreLoading…