CVEs published in October 2023
2,902 vulnerabilities, 370 critical, 18 exploited.
- lenovo g263dns firmware, gm265dn firmware, gm266dns firmware +4 more +6 moreA remote code execution vulnerability was found in the firmware used in some Lenovo printers,...8.8 High
- vimInteger Overflow in :history command in Vim4.0 Medium
- rockwell automation factorytalk® view site edition, rockwellautomation factorytalk view +1 moreRockwell Automation FactoryTalk® View Site Edition Vulnerable to Improper Input Validation7.5 High
- rockwell automation factorytalk® services platform, rockwellautomation factorytalk services platform +1 moreRockwell Automation FactoryTalk Services Platform Elevated Privileges Vulnerability8.1 High
- citrix netscaler adc, netscaler gateway, netscaler application delivery controller +2 moreDenial of service8.2 High
- flyte flyteadminFlyteAdmin SQL Injection in List Filters3.5 Low
- cti monitoring and early warning system project monitoring and early warning system, shanghai cti navigation cti monitoring and early warning system +1 moreShanghai CTI Navigation CTI Monitoring and Early Warning System UserEdit.aspx sql injection5.5 Medium
- netentsec application security gateway, ns-asg application security gateway +1 moreNetentsec NS-ASG Application Security Gateway list_onlineuser.php sql injection5.5 Medium
- apache activemq, activemq legacy openwire module, debian linux +3 more +5 moreApache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack10.0 Critical
python-bugzillaopenSUSESecurity update for python-bugzillaNo scorephpOSS-FuzzSegv on unknown address in cleanup_live_varsNo scorematioOSS-FuzzHeap-buffer-overflow in H5D__scatter_memNo scoreigraphOSS-FuzzUNKNOWN READ in igraph_strvector_set_lenNo scoreigraphOSS-FuzzHeap-use-after-free in igraph_pajek_yyparseNo score- e-invoice project e-invoiceUser Enumeration in EDM Informatic's E-Invoice Software7.5 High
- arslansoft education portalSQLi in TRtek Software's Education Portal9.8 Critical
- inohom home manager gatewayUser Enumeration in Inohom's Home Manager Gateway7.5 High
- i13websolution thumbnail slider with lightboxThe Thumbnail Slider With Lightbox plugin for WordPress is vulnerable to Cross-Site Request...9.6 Critical
- i13websolution thumbnail carousel sliderThe Thumbnail carousel slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in...4.3 Medium
- vektor,inc. vk filter searchVK Filter Search <= 2.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- red hat ironic content for red hat openshift container platform 4.12, openstack platform 17.1 for rhel 8, openstack platform 17.1 for rhel 9 +5 more +7 morePython-eventlet: patch regression for cve-2021-21419 in some red hat builds5.3 Medium
- eralion neon textNeon text <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- eralion animated countersAnimated Counters <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- triberrWordPress Triberr Plugin <= 4.1.1 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- eric teubert archivist – custom archive templates, ericteubert archivist - custom archive templates +1 moreWordPress Archivist – Custom Archive Templates Plugin <= 1.7.5 is vulnerable to Cross Site Scripting (XSS)5.8 Medium
- sonicwall netextenderSonicWall NetExtender Windows (32-bit and 64-bit) client 10.2.336 and earlier versions have a DLL...7.3 High
- internet marketing ninjas internal link buildingWordPress Internal Link Building Plugin <= 1.2.3 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- monsterinsights userfeedback, syed balkhi user feedback +1 moreWordPress User Feedback Plugin <= 1.0.9 is vulnerable to Cross Site Scripting (XSS)7.1 High
- lionscripts webmaster toolsWordPress Webmaster Tools Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- bala krishna, sergey yakovlev category seo meta tagsWordPress Category SEO Meta Tags Plugin <= 2.5 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- sonicwall directory services connectorA local privilege escalation vulnerability in SonicWall Directory Services Connector Windows MSI...7.8 High
- vmware toolsVMware Tools contains a local privilege escalation vulnerability. A malicious actor with local...7.8 High
- callrail phone call trackingCallRail Phone Call Tracking <= 0.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- oretnom23 task reminder systemSourceCodester Task Reminder System sql injection6.3 Medium
- oretnom23 task reminder systemSourceCodester Task Reminder System sql injection6.3 Medium
- flusity cms, flusity +1 moreflusity CMS upload.php handleFileUpload unrestricted upload4.7 Medium
- flusity cms, flusity +1 moreflusity CMS posts.php loadPostAddForm cross site scripting2.4 Low
- flusity cms, flusity +1 moreflusity CMS posts.php loadPostAddForm cross site scripting2.4 Low
- memcachedIn Memcached before 1.6.22, an off-by-one error exists when processing proxy requests in proxy...9.8 Critical
- memcachedIn Memcached before 1.6.22, a buffer overflow exists when processing multiget requests in proxy...7.5 High
- ispconfigAn issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the...7.2 High
- sugarcrmAn issue was discovered in SugarCRM 12 before 12.0.4 and 13 before 13.0.2. A Server Site Template...8.8 High
- sugarcrmAn issue was discovered in SugarCRM 12 before 12.0.4 and 13 before 13.0.2. An Unrestricted File...8.8 High
- linux kernelAn issue was discovered in the Linux kernel before 6.5.9, exploitable by local users with...7.0 High
- xnviewBuffer Overflow vulnerability in XnView Classic v.2.51.5 allows a local attacker to execute...7.8 High
- zioncom a7000r, a7000r firmware +1 moreAn issue in ZIONCOM (Hong Kong) Technology Limited A7000R v.4.1cu.4154 allows an attacker to...9.8 Critical
- contec solarview compact, solarview compact firmware +1 moreAn issue in Contec SolarView Compact v.6.0 and before allows an attacker to execute arbitrary...9.8 Critical
- pwncyn fancmsCross Site Scripting vulnerability in FanCMS v.1.0.0 allows an attacker to execute arbitrary code...6.1 Medium
- pwncyn yxbookcmsCross Site Scripting (XSS) vulnerability in PwnCYN YXBOOKCMS v.1.0.2 allows a physically...5.4 Medium
- pwncyn yxbookcmsCross Site Scripting (XSS) vulnerability in PwnCYN YXBOOKCMS v.1.0.2 allows a remote attacker to...6.1 Medium
- Show moreLoading…