CVEs published in October 2023
2,902 vulnerabilities, 370 critical, 18 exploited.
- apple macosA privacy issue was addressed with improved private data redaction for log entries. This issue is...3.3 Low
- apple macosA privacy issue was addressed with improved private data redaction for log entries. This issue is...4.4 Medium
- apple ipados, macos, ios and ipados +1 more +3 moreThe issue was addressed with improved handling of caches. This issue is fixed in macOS Sonoma 14...4.3 Medium
- apple macosThe issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.6.1. An app...5.5 Medium
- apple macos, mac os +1 moreThe issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.1,...7.8 High
- apple ipados, macos, safari +4 more +6 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 17.1 and iPadOS...8.8 High
- apple ipados, macos, watchos +2 more +4 moreThis issue was addressed by restricting options offered on a locked device. This issue is fixed...4.6 Medium
- apple ipados, macos, ios and ipados +1 more +3 moreThe issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.1,...7.8 High
- apple ipados, macos, ios and ipados +1 more +3 moreA privacy issue was addressed with improved private data redaction for log entries. This issue is...3.3 Low
- apple macosThis issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14...4.3 Medium
- apple macosA logic issue was addressed with improved state management. This issue is fixed in macOS Sonoma...6.5 Medium
- apple macosThe issue was addressed with improved permissions logic. This issue is fixed in macOS Sonoma 14.1...5.5 Medium
- apple ipados, tvos, watchos +2 more +4 moreThis issue was addressed by removing the vulnerable code. This issue is fixed in watchOS 10.1,...5.3 Medium
- apple ipados, macos, ios and ipados +1 more +3 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 17.1 and iPadOS...6.5 Medium
- apple macosA permissions issue was addressed with additional restrictions. This issue is fixed in macOS...5.5 Medium
- apple macosThe issue was addressed with additional permissions checks. This issue is fixed in macOS Ventura...7.5 High
- apple ipados, macos, ios and ipados +1 more +3 moreA logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1, iOS...7.5 High
- xwiki, xwiki xwiki-platform +1 moreorg.xwiki.platform:xwiki-platform-office-importer vulnerable to arbitrary server side file writing from account through office converter10.0 Critical
- xwiki xwiki-renderingXWiki Rendering's footnote macro vulnerable to privilege escalation via the footnote macro10.0 Critical
- xwiki, xwiki xwiki-platform +1 moreorg.xwiki.platform:xwiki-platform-oldcore may leak data through deleted and re-created documents6.5 Medium
- xwiki, xwiki xwiki-platform +1 moreorg.xwiki.platform:xwiki-platform-attachment-api vulnerable to Missing Authorization on Attachment Move8.1 High
- hp print and scan doctor, hp inc. print and scan doctor for windows +1 moreHP Print and Scan Doctor for Windows may potentially be vulnerable to escalation of privilege. HP...7.8 High
- xwiki, xwiki xwiki-platform +1 morePrivilege escalation (PR)/remote code execution from account through Menu.UIExtensionSheet10.0 Critical
- xwiki xwiki-renderingorg.xwiki.rendering:xwiki-rendering-xml Improper Neutralization of Invalid Characters in Identifiers in Web Pages vulnerability9.1 Critical
- google chrome, debian linux, fedoraproject fedora +2 moreUse after free in Profiles in Google Chrome prior to 118.0.5993.117 allowed a remote attacker to...8.8 High
- combodo itopiTop XSS vulnerability on pages/UI.php8.8 High
- combodo itopiTop XSS vulnerability on pages/preferences.php8.8 High
- busbaer eisbaer scada, eisbaer scada v3.0.6433.1964 +1 moreEisBaer Scada - CWE-749: Exposed Dangerous Method or Function7.5 High
- busbaer eisbaer scada, eisbaer scada v3.0.6433.1964 +1 moreEisBaer Scada - CWE-256: Plaintext Storage of a Password7.1 High
- busbaer eisbaer scada, eisbaer scada v3.0.6433.1964 +1 moreEisBaer Scada - CWE-321: Use of Hard-coded Cryptographic Key7.1 High
- busbaer eisbaer scada, eisbaer scada v3.0.6433.1964 +1 moreEisBaer Scada - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor7.5 High
- busbaer eisbaer scada, eisbaer scada v3.0.6433.1964 +1 moreEisBaer Scada - CWE-732: Incorrect Permission Assignment for Critical Resource7.5 High
- hewlett packard enterprise (hpe) hpe oneview, hpe oneview +1 moreA remote code execution issue exists in HPE OneView.7.2 High
- busbaer eisbaer scada, eisbaer scada v3.0.6433.1964 +1 moreEisBaer Scada - CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')7.5 High
- busbaer eisbaer scada, eisbaer scada scada +1 moreEisBaer Scada - CWE-285: Improper Authorization8.8 High
- man d-tale, man-group dtale +1 moreD-Tale vulnerable to Remote Code Execution through the Custom Filter Input6.1 Medium
- bosch rexroth ag ctrlx hmi web panel - wr21 (wr2107), ctrlx hmi web panel - wr21 (wr2110), ctrlx hmi web panel - wr21 (wr2115) +6 more +8 moreThe Android Client application, when enrolled to the AppHub server, connects to an MQTT broker to...8.8 High
- bosch rexroth ag ctrlx hmi web panel - wr21 (wr2107), ctrlx hmi web panel - wr21 (wr2110), ctrlx hmi web panel - wr21 (wr2115) +4 more +6 moreThe Android Client application, when enrolled to the AppHub server,connects to an MQTT broker...8.8 High
- bosch rexroth ag ctrlx hmi web panel - wr21 (wr2107), ctrlx hmi web panel - wr21 (wr2110), ctrlx hmi web panel - wr21 (wr2115) +4 more +6 moreThe Android Client application, when enrolled with the define method 1 (the user manually...8.3 High
- bosch rexroth ag ctrlx hmi web panel - wr21 (wr2107), ctrlx hmi web panel - wr21 (wr2110), ctrlx hmi web panel - wr21 (wr2115) +4 more +6 moreThe Android Client application, when enrolled with the define method 1(the user manually inserts...8.8 High
- bosch rexroth ag ctrlx hmi web panel - wr21 (wr2107), ctrlx hmi web panel - wr21 (wr2110), ctrlx hmi web panel - wr21 (wr2115) +6 more +8 moreThe vulnerability allows an unprivileged (untrusted) third- party application to arbitrary modify...7.8 High
- bosch rexroth ag ctrlx hmi web panel - wr21 (wr2107), ctrlx hmi web panel - wr21 (wr2110), ctrlx hmi web panel - wr21 (wr2115) +6 more +8 moreThe vulnerability allows an unprivileged(untrusted) third-party application to interact with a...7.1 High
- bosch rexroth ag ctrlx hmi web panel - wr21 (wr2107), ctrlx hmi web panel - wr21 (wr2110), ctrlx hmi web panel - wr21 (wr2115) +6 more +8 moreThe vulnerability allows an unprivileged user with access to the subnet of the TPC-110W device to...8.8 High
- jenkins zanata, jenkins project zanata plugin +1 moreNon-constant time webhook token hash comparison in Jenkins Zanata Plugin5.3 Medium
- jenkins edgewall trac, jenkins project edgewall trac plugin +1 moreJenkins Edgewall Trac Plugin vulnerable to Stored XSS5.4 Medium
- jenkins msteams webhook trigger, jenkins project msteams webhook trigger plugin +1 moreJenkins MSTeams Webhook Trigger Plugin uses non-constant time webhook token comparison5.3 Medium
- jenkins gogs, jenkins project gogs plugin +1 moreJenkins Gogs Plugin uses non-constant time webhook token comparison5.3 Medium
- jenkins multibranch scan webhook trigger, jenkins project multibranch scan webhook trigger plugin +1 moreJenkins Multibranch Scan Webhook Trigger Plugin uses non-constant time webhook token comparison5.3 Medium
- jenkins cloudbees cd, jenkins project cloudbees cd plugin +1 moreJenkins CloudBees CD Plugin vulnerable to arbitrary file read6.5 Medium
- jenkins cloudbees cd, jenkins project cloudbees cd plugin +1 moreJenkins CloudBees CD Plugin vulnerable to arbitrary file deletion8.1 High
- Show moreLoading…