CVEs published in October 2023
2,902 vulnerabilities, 370 critical, 18 exploited.
- macwk icecmsIceCMS v2.0.1 is vulnerable to Cross Site Request Forgery (CSRF).6.5 Medium
- mintty project minttyAn issue in Mintty v.3.6.4 and before allows a remote attacker to execute arbitrary code via...9.8 Critical
- egroupwareAn issue was discovered in eGroupWare 17.1.20190111. An Improper Password Storage vulnerability...4.9 Medium
- microsoft open-vm-tools, debian linux, vmware open vm tools +2 moreopen-vm-tools contains a file descriptor hijack vulnerability in the vmware-user-suid-wrapper. A...7.4 High
- vmware tools, debian linux, fedoraproject fedora +2 more +4 moreVMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has...7.1 High
- ocomon project ocomonA local file inclusion vulnerability via the lang parameter in OcoMon before v4.0.1 allows...8.8 High
- ocomon project ocomonAn information disclosure vulnerability in the component users-grid-data.php of Ocomon before v4...7.5 High
- xpand-it write-back managerXpand IT Write-back manager v2.3.1 allows attackers to perform a directory traversal via...7.5 High
- univention ucs\@schoolIncorrect LDAP ACLs in ucs-school-ldap-acls-master in UCS@school before 4.4v5-errata allow remote...6.5 Medium
- abus tvip 10000 firmware, tvip 10001 firmware, tvip 10005 firmware +44 more +46 moreAn issue was discovered on certain ABUS TVIP cameras. The CGI scripts allow remote attackers to...9.8 Critical
- abus tvip 10000 firmware, tvip 10001 firmware, tvip 10005 firmware +44 more +46 moreBuffer Overflow vulnerability in certain ABUS TVIP cameras allows attackers to gain control of...9.8 Critical
- abus tvip 10000 firmware, tvip 10001 firmware, tvip 10005 firmware +44 more +46 moreDue to incorrect access control, unauthenticated remote attackers can view the /video.mjpg video...7.5 High
- abus tvip 10000 firmware, tvip 10001 firmware, tvip 10005 firmware +44 more +46 moreHardcoded manufacturer credentials and an OS command injection vulnerability in the /cgi-bin/mft/...9.8 Critical
- abus tvip 10000 firmware, tvip 10001 firmware, tvip 10005 firmware +44 more +46 moreAn issue was discovered on certain ABUS TVIP devices. Due to a path traversal in /opt/cgi/admin...8.8 High
- elastic endpointElastic Endpoint Insertion of Sensitive Information into Log File4.6 Medium
- palantir orbital simulator, com.palantir.meta:orbital-simulator +1 moreGotham Orbital Simulator path traversal9.8 Critical
- palantir tiles, com.palantir.tiles:tiles +1 morePalantir Tiles missing authentication on API endpoints8.2 High
google.golang.org/grpcGogRPC-Go HTTP/2 Rapid Reset vulnerability7.5 High- matter-labs era-compiler-vyper, zkvyper +1 moreera-compiler-vyper First Immutable Variable Initialization vulnerability5.3 Medium
- twistedtwisted.web has disordered HTTP pipeline response5.3 Medium
- brix crypto-jscrypto-js PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard9.1 Critical
- entronad crypto-es, cryptoes +1 morecrypto-es PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard9.1 Critical
- xwiki, xwiki xwiki-platform +1 moreXWiki Platform XSS with edit right in the create document form for existing pages9.1 Critical
- xwiki, xwiki xwiki-platform +1 moreXWiki Platform web templates vulnerable to reflected XSS in the create document form if name validation is enabled9.7 Critical
- xwiki, xwiki xwiki-platform +1 moreXWiki users can be tricked to execute scripts as the create page action doesn't display the page's title9.1 Critical
- kubernetes ingress-nginxCode injection via nginx.ingress.kubernetes.io/permanent-redirect annotation7.6 High
- kubernetes ingress-nginxIngress nginx annotation injection causes arbitrary command execution7.6 High
- kubernetes ingress-nginxIngress-nginx `path` sanitization can be bypassed with `log_format` directive8.8 High
- xwiki, xwiki xwiki-platform +1 moreXWiki Platform XSS vulnerability from account in the create page form via template provider9.1 Critical
- apple macosThis issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sonoma...7.5 High
- apple ipados, macos, safari +6 more +8 moreA logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1...8.8 High
- apple macosThe issue was addressed by restricting options offered on a locked device. This issue is fixed in...6.8 Medium
- apple ipados, macos, ios and ipados +1 more +3 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 17.1 and iPadOS...7.8 High
- apple ipados, macos, watchos +2 more +4 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 17.1 and iPadOS...6.5 Medium
- apple ipados, macos, watchos +2 more +4 moreThis issue was addressed by restricting options offered on a locked device. This issue is fixed...6.8 Medium
- apple ipados, macos, ios and ipados +1 more +3 moreA privacy issue was addressed with improved private data redaction for log entries. This issue is...5.5 Medium
- apple ipados, macos, ios and ipados +1 more +3 moreAn authentication issue was addressed with improved state management. This issue is fixed in...5.3 Medium
- apple ipados, macos, watchos +2 more +4 moreAn inconsistent user interface issue was addressed with improved state management. This issue is...5.3 Medium
- apple ipados, macos, safari +4 more +6 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in iOS...8.8 High
- apple ipados, macos, ios and ipados +1 more +3 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 17.1 and iPadOS...5.5 Medium
- apple macosA use-after-free issue was addressed with improved memory management. This issue is fixed in...7.8 High
- apple ipados, ios and ipados, iphone os +2 moreThe issue was addressed with improved UI handling. This issue is fixed in iOS 17.1 and iPadOS 17...7.5 High
- apple ipados, macos, watchos +2 more +4 moreA privacy issue was addressed with improved private data redaction for log entries. This issue is...5.5 Medium
- apple ipados, macos, safari +4 more +6 moreThe issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.1,...6.5 Medium
- apple macosThe issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1. An app...5.5 Medium
- apple macosThis issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14...5.5 Medium
- apple ipados, macos, watchos +2 more +4 moreThe issue was addressed with improved handling of caches. This issue is fixed in iOS 17.1 and...5.5 Medium
- apple ipados, macos, watchos +2 more +4 moreThis issue was addressed by restricting options offered on a locked device. This issue is fixed...4.6 Medium
- apple macosA permissions issue was addressed with additional restrictions. This issue is fixed in macOS...5.5 Medium
- apple macosAn inconsistent user interface issue was addressed with improved state management. This issue is...4.3 Medium
- Show moreLoading…