CVEs published in October 2023
2,902 vulnerabilities, 370 critical, 18 exploited.
- cactiSQL Injection vulnerability in Cacti v1.2.25 allows a remote attacker to obtain sensitive...6.5 Medium
- ffmpegFFmpeg prior to commit bf814 was discovered to contain an out of bounds read via the dist-...5.5 Medium
- gougucmsA stored cross-site scripting (XSS) vulnerability in /home/user/edit_submit of gougucms v4.08.18...5.4 Medium
- gougucmsgougucms v4.08.18 was discovered to contain a password reset poisoning vulnerability which allows...7.5 High
- zentao bizZentao Biz version 8.7 and before is vulnerable to Information Disclosure.7.5 High
- zentao bizZenTao Biz version 4.1.3 and before is vulnerable to Cross Site Request Forgery (CSRF).8.8 High
- vinchin backup and recoveryVinChin Backup & Recovery v5.0.*, v6.0.*, v6.7.*, and v7.0.* was discovered to contain hardcoded...9.8 Critical
- vinchin backup and recoveryVinChin Backup & Recovery v5.0.*, v6.0.*, v6.7.*, and v7.0.* was discovered to contain a command...9.8 Critical
- cassianetworks access controllerAn issue was discovered in Cassia Access Controller 2.1.1.2303271039. The Web SSH terminal...8.8 High
- vermeg agile reporterAn issue was discovered in VERMEG AgileReporter 21.3. Attackers can gain privileges via an XSS...4.8 Medium
- vermeg agile reporterAn issue was discovered in VERMEG AgileReporter 21.3. An admin can enter an XSS payload in the...5.4 Medium
- vermeg agile reporterAn issue was discovered in VERMEG AgileReporter 21.3. XXE can occur via an XML document to the...6.5 Medium
github.com/cosmos/ibc-apps/middleware/packet-forward-middleware/v4Go,github.com/cosmos/ibc-apps/middleware/packet-forward-middleware/v5Go,github.com/cosmos/ibc-apps/middleware/packet-forward-middleware/v6Go +2 moreCosmos packet-forward-middleware vulnerable to chain-haltNo score- simple real estate portal system project real estate portal system, sourcecodester simple real estate portal system +1 moreSourceCodester Simple Real Estate Portal System view_estate.php sql injection6.3 Medium
- basercmsbaserCMS Code Injection Vulnerability in Mail Form Feature5.3 Medium
- basercmsbaserCMS CSRF vulnerability in Content preview Feature4.7 Medium
- basercmsbaserCMS Directory Traversal vulnerability in Form submission data management Feature4.9 Medium
- basercmsbaserCMS Cross-site Scripting vulnerability in File upload Feature6.1 Medium
- basercmsbasercms XSS Vulnerability via Favorites Feature6.1 Medium
- sielco polyeco1000, polyeco1000 firmware, polyeco300 firmware +1 more +3 moreImproper Access Control in Sielco PolyEco10009.8 Critical
- f5 big-ip, big-ip configuration utility, big-ip access policy manager +19 more +21 moreBIG-IP Configuration utility authenticated SQL injection vulnerability8.8 High
- f5 big-ip, big-ip configuration utility, big-ip access policy manager +19 more +21 moreBIG-IP Configuration utility unauthenticated remote code execution vulnerability9.8 Critical
- sielco polyeco1000, polyeco1000 firmware, polyeco300 firmware +1 more +3 moreImproper Access Control in Sielco PolyEco10007.5 High
- sielco polyeco1000, polyeco1000 firmware, polyeco300 firmware +1 more +3 moreImproper Access Control in Sielco PolyEco10007.5 High
- phpgurukul nipah virus testing management systemPHPGurukul Nipah Virus Testing Management System login.php sql injection7.3 High
- sielco polyeco1000, polyeco1000 firmware, polyeco300 firmware +1 more +3 moreImproper Access Control in Sielco PolyEco10007.5 High
- sielco polyeco1000, polyeco1000 firmware, polyeco300 firmware +1 more +3 moreImproper Access Control in Sielco PolyEco10009.8 Critical
- sielco polyeco1000, polyeco1000 firmware, polyeco300 firmware +1 more +3 moreImproper Restriction of Excessive Authentication Attempts in Sielco PolyEco10009.1 Critical
- sielco polyeco1000, polyeco1000 firmware, polyeco300 firmware +1 more +3 moreSession FIxation in Sielco PolyEco10008.8 High
- ashlar argon, cobalt, lithium +3 more +5 moreAshlar-Vellum Cobalt, Xenon, Argon, Lithium Out-of-bounds Write7.8 High
- ashlar graphiteAshlar-Vellum Graphite Out-of-bounds Read7.8 High
- projectworlds online art galleryOnline Art Gallery v1.0 - Multiple Unauthenticated SQL Injections (SQLi)9.8 Critical
- elastic cloud on kubernetesElastic Cloud on Kubernetes (ECK) secret token configuration issue5.3 Medium
- elastic elasticsearchElasticsearch Insertion of sensitive information in audit logs4.1 Medium
- elastic elasticsearch, cloud enterprise +1 moreElasticsearch uncontrolled resource consumption7.5 High
- codeastro pos systemCodeAstro POS System Logo setting unrestricted upload6.3 Medium
- codeastro pos systemCodeAstro POS System Profile Picture profil unrestricted upload6.3 Medium
- elastic elasticsearchElasticsearch StackOverflow vulnerability6.5 Medium
- phpgurukul online railway catering system, online railway catering management system +1 morePHPGurukul Online Railway Catering System Login index.php sql injection7.3 High
- flusity cms, flusity +1 moreflusity CMS Dashboard customblock.php loadCustomBlocCreateForm cross site scripting3.5 Low
- tenable nessus network monitorBlind SQL Injection7.2 High
- remyandrade sticky notes appSourceCodester Sticky Notes App delete-note.php sql injection6.3 Medium
- remyandrade sticky notes appSourceCodester Sticky Notes App add-note.php cross site scripting3.5 Low
- tenable nessus network monitorPrivilege Escalation7.0 High
- sielco analog fm transmitter, radio link, analog fm transmitter exc1000gt firmware +14 more +16 moreSielco Radio Link and Analog FM Transmitters Privilege Defined With Unsafe Actions6.5 Medium
- sielco analog fm transmitter, radio link, analog fm transmitter exc1000gt firmware +14 more +16 moreSielco Radio Link and Analog FM Transmitters Improper Access Control6.5 Medium
- tenable nessus network monitorPrivilege Escalation7.1 High
- sielco analog fm transmitter, radio link, analog fm transmitter exc1000gt firmware +14 more +16 moreSielco Radio Link and Analog FM Transmitters Cross-Site Request Forgery8.8 High
- elastic sharepoint online python connectorElastic Sharepoint Online Python Connector Improper Access Control5.3 Medium
- sielco analog fm transmitter, radio link, analog fm transmitter exc1000gt firmware +14 more +16 moreSielco Radio Link and Analog FM Transmitters Improper Access Control9.8 Critical
- Show moreLoading…