CVEs published in October 2023
2,902 vulnerabilities, 370 critical, 18 exploited.
- totolink x6000r firmwareTOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE)...9.8 Critical
- totolink x6000r firmwareTOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE)...9.8 Critical
- totolink x6000r firmwareTOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE)...9.8 Critical
- totolink x6000r firmwareTOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE)...9.8 Critical
- totolink x6000r firmwareTOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE)...9.8 Critical
- totolink x6000r firmwareTOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE)...9.8 Critical
- totolink x6000r firmwareTOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a command execution...9.8 Critical
- totolink x6000r firmwareTOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a command execution...9.8 Critical
- totolink x6000r firmwareTOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a command execution...9.8 Critical
- totolink x6000r firmwareTOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a command execution...9.8 Critical
- totolink x6000r firmwareTOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a command execution...9.8 Critical
- totolink x6000r firmwareTOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a command execution...9.8 Critical
- web-audimex audimexAudimex 15.0.0 is vulnerable to Cross Site Scripting (XSS) in /audimex/cgi-bin/wal.fcgi via...5.4 Medium
- snegurka referralbyphoneIn the module "Referral and Affiliation Program" (referralbyphone) version 3.5.1 and before from...9.8 Critical
- ndkdesign ndk steppingpackIn the module "Step by Step products Pack" (ndk_steppingpack) version 1.5.6 and before from NDK...9.8 Critical
- myprestamodules exportproductsIn the module "Product Catalog (CSV, Excel, XML) Export PRO" (exportproducts) in versions up to 4...7.5 High
- fossies catdocCatdoc v0.95 was discovered to contain a NULL pointer dereference via the component xls2csv at...7.5 High
- dromara sa-tokenSaToken privilege escalation vulnerability9.8 Critical
- dromara sa-tokenSaToken authentication bypass vulnerability8.8 High
- onworks xolo cmsXolo CMS v0.11 was discovered to contain a reflected cross-site scripting (XSS) vulnerability.6.1 Medium
- writercmsIncorrect access control in writercms v1.1.0 allows attackers to directly obtain backend account...7.5 High
- linecorp lineAn issue in tire-sales Line v.13.6.1 allows a remote attacker to obtain sensitive information via...7.5 High
- linecorp lineAn issue in rmc R Beauty CLINIC Line v.13.6.1 allows a remote attacker to obtain sensitive...7.5 High
- linecorp lineAn issue in CHRISTINA JAPAN Line v.13.6.1 allows a remote attacker to obtain sensitive...7.5 High
- linecorp lineAn issue in Marbre Lapin Line v.13.6.1 allows a remote attacker to obtain sensitive information...7.5 High
- linecorp lineAn issue in Anglaise Company Anglaise.Company v.13.6.1 allows a remote attacker to obtain...7.5 High
- pallets werkzeugWerkzeug vulnerable to high resource usage when parsing multipart/form-data containing a large part with CR/LF character at the beginning8.0 High
- vmware rabbitmq, rabbitmq rabbitmq-server +1 moreDenial of Service by publishing large messages over the HTTP API4.9 Medium
- tibco hawk, hawk distribution for tibco silver fabric, operational intelligence hawk redtail +1 more +3 moreTIBCO Operational Intelligence Hawk RedTail Credential Exposure Vulnerability7.4 High
- samba, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreSamba: heap buffer overflow with freshness tokens in the heimdal kdc5.9 Medium
- pip maintainers pipMercurial configuration injectable in repo revision when installing via pip5.5 Medium
- ping identity pingid radius pcvPingFederate PingID Radius PCV Authentication Bypass7.5 High
- lenovo diagnostics, hardwarescanplugin, hardwarescan addin +1 more +3 moreA privilege escalation vulnerability was reported in the Lenovo HardwareScanPlugin prior to...7.8 High
- lenovo diagnostics, hardwarescanplugin, hardwarescan plugin +2 moreA denial of service vulnerability was reported in the Lenovo HardwareScanPlugin versions prior...4.4 Medium
- lenovo diagnostics, hardwarescanplugin, hardwarescan addin +1 more +3 moreA denial of service vulnerability was reported in the Lenovo HardwareScanPlugin versions prior...4.4 Medium
- ellipticlabs virtual lock sensor, lenovo elliptic labs virtual lock sensor, thinkpad t14 gen 3 +1 more +3 moreA vulnerability was reported in Elliptic Labs Virtual Lock Sensor for ThinkPad T14 Gen 3 that...7.8 High
- lenovo xclarity controller (xcc), thinkagile hx1331 firmware, thinkagile hx2330 firmware +56 more +58 moreAn authenticated XCC user with elevated privileges can perform blind SQL injection in limited...4.1 Medium
- lenovo xclarity controller (xcc), thinkagile hx1021 edg firmware, thinkagile hx1320 firmware +121 more +123 moreAn authenticated XCC user can change permissions for any user through a crafted API command.7.5 High
- lenovo xclarity controller (xcc), thinkagile hx1331 firmware, thinkagile hx2330 firmware +56 more +58 moreAn authenticated XCC user with Read-Only permission can change a different user’s password...8.1 High
- mozilla firefox for ios, firefox mobile +1 moreWhen opening a page in reader mode, the redirect URL could have caused attacker-controlled script...6.1 Medium
- ping identity pingone mfa integration kitPingFederate PingOne MFA IK Device Pairing Second Factor Authentication Bypass7.3 High
- geoserverWPS Server Side Request Forgery in GeoServer8.6 High
- geoserverUnsecured WMS dynamic styling sld=<url> parameter affords blind unauthenticated SSRF in GeoServer8.6 High
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreAuthenticated Remote Command Injection in ClearPass Policy Manager Web-Based Management Interface Leading to Partial System Compromise4.7 Medium
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager, hpe aruba clear pass policy manager +2 moreUnauthenticated Endpoint Allows Sending Arbitrary OnGuard Notifications5.8 Medium
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreAuthorization Bypass Leading to Privilege Escalation in ClearPass Policy Manager Web-Based Management Interface6.3 Medium
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager, hpe aruba clear pass policy manager +2 moreAuthenticated SQL Injection Vulnerability in ClearPass Policy Manager Web-based Management Interface7.2 High
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager, hpe aruba clear pass policy manager +2 moreLocal Privilege Escalation in ClearPass OnGuard Linux Agent7.8 High
- ibm cics tx advanced, cics tx standard, cics tx +1 more +3 moreIBM CICS TX denial of service4.9 Medium
- zephyrproject zephyrPotential buffer overflow vulnerabilities in the Zephyr Bluetooth subsystem6.3 Medium
- Show moreLoading…