CVEs published in October 2023
2,902 vulnerabilities, 370 critical, 18 exploited.
- jenkins lambdatest-automation, jenkins project lambdatest-automation plugin +1 moreJenkins lambdatest-automation Plugin may expose Credentials access token6.5 Medium
- jenkins lambdatest-automation, jenkins project lambdatest-automation plugin +1 moreJenkins lambdatest-automation Plugin missing permission check4.3 Medium
- jenkins warnings, jenkins project warnings plugin +1 moreJenkins Warnings Plugin exposures system-scoped credentials6.5 Medium
- jenkins github, jenkins project github plugin +1 moreStored XSS vulnerability in Jenkins GitHub Plugin5.4 Medium
- bosch rexroth ag ctrlx hmi web panel - wr21 (wr2107), ctrlx hmi web panel - wr21 (wr2110), ctrlx hmi web panel - wr21 (wr2115) +3 more +5 moreThe vulnerability allows a low privileged (untrusted) application to modify a critical system...7.9 High
- bosch rexroth ag ctrlx hmi web panel - wr21 (wr2107), ctrlx hmi web panel - wr21 (wr2110), ctrlx hmi web panel - wr21 (wr2115) +6 more +8 moreThe vulnerability allows a low privileged user that have access to the device when locked in...7.3 High
libredwgOSS-FuzzHeap-double-free in dwg_free_objectNo scorematioOSS-FuzzHeap-buffer-overflow in H5MM_xstrdupNo score- linux kernel, siemens ruggedcom rst2428p, scalance xc-300/xr-300/xc-400/xr-500wg/xr-500 family +5 more +7 moreOut-of-bounds write in Linux kernel's Linux Kernel Performance Events (perf) component7.8 High
- idattend idwebReflected Cross-site Scripting In IDAttend’s IDWeb Application7.5 High
- idattend idwebUnauthenticated SQL Injection In IDAttend’s IDWeb Application9.8 Critical
- idattend idwebUnauthenticated SQL Injection In IDAttend’s IDWeb Application9.8 Critical
- idattend idwebMissing Authentication In IDAttend’s IDWeb Application5.3 Medium
- idattend idwebMissing Authentication In IDAttend’s IDWeb Application7.5 High
- idattend idwebMissing Authentication In IDAttend’s IDWeb Application7.5 High
- idattend idwebMissing Authentication In IDAttend’s IDWeb Application7.5 High
- idattend idwebMissing Authentication In IDAttend’s IDWeb Application7.5 High
- idattend idwebMissing Authentication In IDAttend’s IDWeb Application7.5 High
- idattend idwebMissing Authentication In IDAttend’s IDWeb Application7.5 High
- idattend idwebMissing Authentication In IDAttend’s IDWeb Application5.8 Medium
- idattend idwebUnauthenticated SQL Injection In IDAttend’s IDWeb Application9.8 Critical
- idattend idwebUnauthenticated SQL Injection In IDAttend’s IDWeb Application9.8 Critical
- idattend idwebUnauthenticated SQL Injection In IDAttend’s IDWeb Application9.8 Critical
- idattend idwebUnauthenticated SQL Injection In IDAttend’s IDWeb Application9.8 Critical
- idattend idwebUnauthenticated SQL Injection In IDAttend’s IDWeb Application9.8 Critical
- idattend idwebUnauthenticated SQL Injection In IDAttend’s IDWeb Application9.8 Critical
- idattend idwebMissing Authentication In IDAttend’s IDWeb Application7.5 High
- idattend idwebMissing Authentication In IDAttend’s IDWeb Application5.3 Medium
- idattend idwebArbitrary File Upload to Web Root In IDAttend’s IDWeb Application8.8 High
- idattend idwebStored Cross-site Scripting In IDAttend’s IDWeb Application7.5 High
- idattend idwebMissing Authentication In IDAttend’s IDWeb Application7.5 High
- idattend idwebMissing Authentication In IDAttend’s IDWeb Application7.5 High
- idattend idwebMissing Authentication In IDAttend’s IDWeb Application7.5 High
- idattend idwebMissing Authentication In IDAttend’s IDWeb Application8.2 High
- idattend idwebUnauthenticated SQL Injection In IDAttend’s IDWeb Application9.8 Critical
- idattend idwebMissing Authentication In IDAttend’s IDWeb Application7.5 High
- idattend idwebMissing Authentication In IDAttend’s IDWeb Application7.5 High
- idattend idwebUnauthenticated SQL Injection In IDAttend’s IDWeb Application9.8 Critical
- idattend idwebUnauthenticated SQL Injection In IDAttend’s IDWeb Application9.8 Critical
- grafana, grafana worldmap panel, worldmap-panel +2 moreGrafana is an open-source platform for monitoring and observability. The WorldMap panel plugin,...7.3 High
- wpvnteam wp extra, wpvncom wp extra – one click optimize +1 moreWP EXtra <= 6.2 - Missing Authorization to .htaccess File Modification8.8 High
- vmware vcenter server, cloud foundation (vmware vcenter server) +1 moreVMware vCenter Server Partial Information Disclosure Vulnerability4.3 Medium
- vmware vcenter server, cloud foundation, cloud foundation (vmware vcenter server) +2 moreVMware vCenter Server Out-of-Bounds Write Vulnerability9.8 Critical
dotnet6Ubuntu,dotnet7Ubuntu +1 more.Net regressionsNo score- ibm websphere application server libertyIBM WebSphere Application Server session fixation4.9 Medium
- ping identity pingfederateUser Attribute Disclosure via DynamoDB Data Stores2.6 Low
- ping identity pingfederateAdmin Console Denial of Service via Java class enumeration7.5 High
- ping identity pingfederateAuthentication Bypass via HTML Form & Identifier First Adapter8.1 High
- stellar rs-stellar-strkeyPanic in SignedPayload::from_payload5.3 Medium
- ubiquiti unifi network applicationInstances of UniFi Network Application that (i) are run on a UniFi Gateway Console, and (ii) are...10.0 Critical
- Show moreLoading…