CVEs published in October 2023
2,902 vulnerabilities, 370 critical, 18 exploited.
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar information disclosure6.5 Medium
- linkstack, linkstackorg linkstackorg/linkstack +1 moreWeak Password Recovery Mechanism for Forgotten Password in linkstackorg/linkstack6.5 Medium
- linkstack, linkstackorg linkstackorg/linkstack +1 moreInsufficient Session Expiration in linkstackorg/linkstack4.1 Medium
- hestiacp, hestiacp hestiacp/hestiacp, control panel +2 morePrivilege Chaining in hestiacp/hestiacp8.8 High
- peppermintPeppermint Ticket Management through 0.2.4 allows remote attackers to read arbitrary files via a ...5.3 Medium
- peppermintPeppermint Ticket Management before 0.2.4 allows remote attackers to read arbitrary files via a ...7.5 High
- linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreAn issue was discovered in the Linux kernel through 6.5.9. During a race with SQ thread exit, an...4.7 Medium
- moodle** DISPUTED ** Moodle 4.3 allows /grade/report/grader/index.php?searchvalue= reflected XSS when...5.4 Medium
- alexanderlivanov fotoscms2AlexanderLivanov FotosCMS2 Cookie profile.php cross site scripting3.5 Low
- sourcecodester task reminder system, task reminder system project reminder system +1 moreSourceCodester Task Reminder System sql injection6.3 Medium
- hu60 hu60wap6hu60t hu60wap6 ubbparser.php markdown cross site scripting3.5 Low
ghostscriptOSS-FuzzHeap-buffer-overflow in Calc_LengthNo score- gandhihitesh9 post meta data managerPost Meta Data Manager <=1.2.0 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation8.8 High
- gandhihitesh9 post meta data managerPost Meta Data Manager <=1.2.0 - Missing Authorization to User, Term, and Post Meta Deletion7.5 High
- apache airflow, airflow celery provider +1 moreApache Airflow Celery provider, Apache Airflow: Sensitive information logged as clear text when rediss, amqp, rpc protocols are used as Celery result backend7.5 High
- proxmox proxmox-widget-toolkitProxmox proxmox-widget-toolkit before 4.0.9, as used in multiple Proxmox products, allows XSS via...5.4 Medium
- radare radare2An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32 function of libr...9.8 Critical
- radare radare2An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32_fpu function of...9.8 Critical
- juzaweb cmsjuzawebCMS Injection vulnerability7.8 High
- juzaweb cmsCross Site Scripting vulnerability in juzawebCMS v.3.4 and before allows a remote attacker to...5.4 Medium
- namjaejeon exfatprogsexfatprogs before 1.2.2 allows out-of-bounds memory access, such as in read_file_dentry_set.5.5 Medium
- zpesystems nodegrid osZPE Systems, Inc Nodegrid OS v5.0.0 to v5.0.17, v5.2.0 to v5.2.19, v5.4.0 to v5.4.16, v5.6.0 to...8.8 High
org.owasp.esapi:esapiMavenDoS vulnerabilities persist in ESAPI file uploads despite remediation of CVE-2023-249987.5 High- hashicorp vagrantVagrant’s Windows Installer Allowed Directory Junction Write3.8 Low
- projectworlds leave management system, projectworlds pvt. limited leave management system project +1 moreLeave Management System Project v1.0 - Multiple Authenticated SQL Injections (SQLi)8.8 High
- g5theme grid plus – unlimited grid layout, grid-plus +1 moreWordPress Grid Plus Plugin <= 1.3.2 is vulnerable to Cross Site Scripting (XSS)7.1 High
- columbiasoft document locatorColumbiaSoft Document Locator WebTools login improper authentication7.3 High
- stylemix motors – car dealer, classifieds & listing, stylemixthemes motors - car dealer\, classifieds \& listing +1 moreWordPress Motors – Car Dealer & Classified Ads Plugin <= 1.4.6 is vulnerable to Cross Site Scripting (XSS)7.1 High
- google androidIn FillUi of FillUi.java, there is a possible way to view another user's images due to a confused...5.5 Medium
- google androidIn FillUi of FillUi.java, there is a possible way to view another user's images due to a confused...3.3 Low
- google androidIn multiple functions of DialogFillUi.java, there is a possible way to view another user's images...3.3 Low
- google androidIn setHeader of DialogFillUi.java, there is a possible way to view another user's images due to a...3.3 Low
- google androidIn applyCustomDescription of SaveUi.java, there is a possible way to view another user's images...3.3 Low
- google androidIn isFullScreen of FillUi.java, there is a possible way to view another user's images due to a...3.3 Low
- google androidIn multiple locations of DialogFillUi.java, there is a possible way to view another user's images...5.5 Medium
- brainstorm force ultimate addons for wpbakery page builderWordPress Ultimate Addons for WPBakery Page Builder Plugin <= 3.19.14 is vulnerable to Cross Site Scripting (XSS)6.5 Medium
- google androidIn onBindingDied of CallRedirectionProcessor.java, there is a possible permission bypass due to a...7.8 High
- alkaweb eonet manual user approveWordPress Eonet Manual User Approve Plugin <= 2.1.3 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- stephen darlington, wandle software limited smart app bannerWordPress Smart App Banner Plugin <= 1.1.3 is vulnerable to Cross Site Scripting (XSS)5.9 Medium
- admission management system project management system, code-projects admission management system +1 morecode-projects Admission Management System student_avatar.php unrestricted upload6.3 Medium
- lenovo vantage hardwarescan plugin, hardware scan addin, hardware scan plugin +1 more +3 moreA denial of service vulnerability was reported in Lenovo Vantage HardwareScan Plugin version 1.3...6.1 Medium
- lenovo vantage systemupdate plugin, hardware scan addin, hardware scan plugin +1 more +3 moreA privilege elevation vulnerability was reported in the Lenovo Vantage SystemUpdate plugin...7.8 High
- lenovo vantage systemupdate plugin, hardware scan addin, hardware scan plugin +1 more +3 moreA Time of Check Time of Use (TOCTOU) vulnerability was reported in the Lenovo Vantage...6.1 Medium
- nanning ontall longxing industrial development zone project construction and installation management system, ontall longxing industrial development zone project +1 moreNanning Ontall Longxing Industrial Development Zone Project Construction and Installation Management System login.aspx sql injection7.3 High
- motorola mr2600, mr2600 router +1 moreA vulnerability has been identified in the MR2600 router v1.0.18 and earlier that could allow an...6.5 Medium
- lenovo app store, app store app +1 moreAn information disclosure vulnerability has been identified in the Lenovo App Store which may...7.6 High
- rockwell automation arena simulation, rockwellautomation arena +1 moreRockwell Automation Arena® Simulation Uninitialized Pointer Vulnerability7.8 High
- lenovo g263dns firmware, gm265dn firmware, gm266dns firmware +4 more +6 moreA denial-of-service vulnerability was found in the firmware used in Lenovo printers, where users...6.5 Medium
- rockwell automation arena simulation, rockwellautomation arena +1 moreRockwell Automation Arena® Simulation Out of Bounds Read Vulnerability7.8 High
- lenovo g263dns firmware, gm265dn firmware, gm266dns firmware +4 more +6 moreStandard users can directly operate and set printer configuration information , such as IP, in...4.3 Medium
- Show moreLoading…