CVEs published in October 2023
2,902 vulnerabilities, 370 critical, 18 exploited.
- appjetty copy or move commentsWordPress Copy Or Move Comments Plugin <= 5.0.4 is vulnerable to Cross Site Scripting (XSS)5.8 Medium
- muller digital inc. duplicate themeWordPress Duplicate Theme Plugin <= 0.1.6 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- auto login new user after registration project login new user after registration, jeff sherk auto login new user after registration +1 moreWordPress Auto Login New User After Registration Plugin <= 1.9.6 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- apointzilla appointment calendarWordPress Appointment Calendar Plugin <= 2.9.6 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
- internet marketing ninjas internal link buildingWordPress Internal Link Building Plugin <= 1.2.3 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- niels van renselaar open graph metaboxWordPress Open Graph Metabox Plugin <= 1.4.4 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- synology ssl vpn clientBuffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in cgi...3.3 Low
- novo-media novo-map : your wp posts on custom google maps, novo-map\ +1 moreWordPress Novo-Map : your WP posts on custom google maps Plugin <= 1.1.2 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- simple calendar – google calendar plugin, simplecalendar simple calendar – google calendar plugin, xtendify simple calendar +2 moreWordPress Google Calendar Events Plugin <= 3.2.5 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- realmag777 wolf – wordpress posts bulk editor and manager professional, pluginus wolf - wordpress posts bulk editor and products manager professional +1 moreWordPress WOLF Plugin <= 1.0.7.1 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- awesome togi product category treeWordPress Product Category Tree Plugin <= 2.5 is vulnerable to Cross Site Request Forgery (CSRF)4.3 Medium
- wp military radio, wpmilitary wp radio +1 moreWordPress WP Radio plugin <= 3.1.9 is vulnerable to Cross Site Request Forgery (CSRF)5.4 Medium
ringUbunturing vulnerabilitiesNo score- synology camera firmware, bc500 firmware, tc500 firmware +2 moreA vulnerability regarding use of externally-controlled format string is found in the cgi...9.8 Critical
- ethyca fidesFides JavaScript Injection Vulnerability in Privacy Center URL3.9 Low
- ethyca fidesFides Information Disclosure Vulnerability in Config API Endpoint6.5 Medium
- ethyca fidesServer-Side Request Forgery Vulnerability in Custom Integration Upload8.2 High
- diaconou encodedid\encoded_id-rails Denial of Service Vulnerability7.5 High
- vmware rabbitmq java client, rabbitmq rabbitmq-java-client +1 moreRabbitMQ Java client's lack of message size limitation leads to remote DoS attack4.9 Medium
- parse community server, parse-community parse-server +1 moreParse Server may crash when uploading file without extension7.5 High
- openssl, debian linux, netapp h300s firmware +9 more +11 moreIncorrect cipher key & IV length processing7.5 High
- totolink a3700r firmwareAn issue in TOTOLINK A3700R v.9.1.2u.6165_20211012 allows a remote attacker to execute arbitrary...9.8 Critical
- tp-link tl-wdr7660 firmwareTP-Link TL-WDR7660 2.0.30 has a stack overflow vulnerability via the function...9.8 Critical
- tp-link tl-wdr7660 firmware, tl-wr886n firmware +1 moreTP-Link device TL-WDR7660 2.0.30 has a stack overflow vulnerability via the function...9.8 Critical
- tenda w18e firmwareTenda W18E V16.01.0.8(1576) has a command injection vulnerability via the hostName parameter in...9.8 Critical
- tenda w18e firmwareTenda W18E V16.01.0.8(1576) contains a stack overflow vulnerability via the...9.8 Critical
- buc traceroute, debian linux +1 moreIn buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse...5.5 Medium
- seacmsAn issue in SeaCMS v.12.9 allows an attacker to execute arbitrary commands via the admin_safe.php...9.8 Critical
- wenwen-ai wenwenai cmsInsecure Permissions vulnerability in WenwenaiCMS v.1.0 allows a remote attacker to escalate...8.0 High
- zzzcmsFile Upload vulnerability in zzzCMS v.2.1.9 allows a remote attacker to execute arbitrary code...7.8 High
- zzzcmsFile Upload vulnerability in zzzCMS v.2.1.9 allows a remote attacker to execute arbitrary code...9.8 Critical
- tribalsystems zenarioZenario CMS Cross-site Scripting vulnerability5.4 Medium
- ritecmsA File upload vulnerability in RiteCMS 3.0 allows a local attacker to upload a SVG file with XSS...4.8 Medium
- cmsmadesimple cms made simpleCross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute...5.4 Medium
- nothings stb image.hDouble Free vulnerability in Nothings Stb Image.h v.2.28 allows a remote attacker to cause a...6.5 Medium
- linecorp onigiriya-musubeeThe leakage of the client secret in Onigiriya-musubee Line 13.6.1 allows attackers to obtain the...8.2 High
- linecorp regina sweets\&bakeryThe leakage of the client secret in REGINA SWEETS&BAKERY Line 13.6.1 allows attackers to obtain...8.2 High
- linecorp matsuyaThe leakage of the client secret in Matsuya Line 13.6.1 allows attackers to obtain the channel...8.2 High
- linecorp fukunaga memberscardThe leakage of the client secret in Fukunaga_memberscard Line 13.6.1 allows attackers to obtain...8.2 High
- linecorp uomasa saiji newThe leakage of the client secret in Uomasa_Saiji_news Line 13.6.1 allows attackers to obtain the...8.2 High
- linecorp trackdiner10\/10 mcThe leakage of the client secret in VISION MEAT WORKS TrackDiner10/10_mc Line v13.6.1 allows...8.2 High
- linecorp tonton-teiThe leakage of the client secret in TonTon-Tei Line v13.6.1 allows attackers to obtain the...8.2 High
- linecorp tokueimaru waitingThe leakage of the client secret in Tokueimaru_waiting Line 13.6.1 allows attackers to obtain the...8.2 High
- teomantuncer node email checkInefficient Regular Expression Complexity in node-email-check7.5 High
- sisqualwfmThe sisqualWFM 7.1.319.103 thru 7.1.319.111 for Android, has a host header injection...6.1 Medium
- jose4j project jose4jjose4j uses weak cryptographic algorithm7.5 High
- dromara surenessSureness uses hardcoded key9.8 Critical
- networknt light-oauth2light-oauth2 missing public key verification5.9 Medium
- pfsensePfsense CE version 2.6.0 is vulnerable to No rate limit which can lead to an attacker creating...4.9 Medium
- agevoltA directory traversal vulnerability exists in the AgeVolt Portal prior to version 0.1 that leads...6.5 Medium
- Show moreLoading…