CVEs published in October 2023
2,902 vulnerabilities, 370 critical, 18 exploited.
- 1234n minicmsStored Cross Site Scripting (XSS) vulnerability in MiniCMS 1.1.1 allows attackers to run...5.4 Medium
- artifex jbig2decArtifex Software jbig2dec v0.20 was discovered to contain a SEGV vulnerability via jbig2_error at...6.5 Medium
- blmodules csv feeds proIn the module "CSV Feeds PRO" (csvfeeds) before 2.6.1 from Bl Modules for PrestaShop, a guest can...9.8 Critical
- get-simple getsimplecmsCross Site Scripting vulnerability in GetSimpleCMS v.3.4.0a allows a remote attacker to execute...5.4 Medium
- slims senayan library management system, senayan library management system bulian +1 moreSQL injection vulnerability in Senayan Library Management Systems Slims v.9 and Bulian v.9.6.1...8.8 High
- nanoleaf lightstrip firmwareAn issue discovered in Nanoleaf Light strip v3.5.10 allows attackers to cause a denial of service...7.5 High
- idnovate superuserAn issue in the component SuperUserSetuserModuleFrontController:init() of idnovate superuser...7.5 High
- hdclic prestablogIn the module "PrestaBlog" (prestablog) version 4.4.7 and before from HDclic for PrestaShop, a...9.8 Critical
- clickstudios passwordstateCross Site Request Forgery vulnerability in Click Studios (SA) Pty Ltd Passwordstate v.Build 9785...3.5 Low
- franfinanceAn issue in franfinance before v.2.0.27 allows a remote attacker to execute arbitrary code via...9.8 Critical
- turing edge\+ evc5fd, edge\+ evc5fd firmware +1 moreAn issue in Turing Video Turing Edge+ EVC5FD v.1.38.6 allows remote attacker to execute arbitrary...9.8 Critical
- elenos etg150 fm, etg150 firmware +1 moreInsufficient session expiration in Elenos ETG150 FM Transmitter v3.12 allows attackers to...5.3 Medium
- tp-link tapo c100, tapo c100 firmware +1 moreAn issue in TP-Link Tapo C100 v1.1.15 Build 211130 Rel.15378n(4555) and before allows attackers...6.5 Medium
- univention corporate serverAn issue in Univention UCS v.5.0 allows a local attacker to execute arbitrary code and gain...7.9 High
- elenos etg150 fm, etg150 firmware +1 moreImproper access control in Elenos ETG150 FM transmitter v3.12 allows attackers to make arbitrary...2.7 Low
- elenos etg150 fm, etg150 firmware +1 moreA lack of rate limiting in Elenos ETG150 FM transmitter v3.12 allows attackers to obtain user...7.5 High
- elenos etg150 fm, etg150 firmware +1 moreAn issue discovered in Elenos ETG150 FM transmitter v3.12 allows attackers to enumerate user...5.3 Medium
- store-opart op\'art limit quantityPrestashop opartlimitquantity 1.4.5 and before is vulnerable to SQL Injection....9.8 Critical
- artifex mupdfMuPDF v1.21.1 was discovered to contain an infinite recursion in the component pdf_mark_list_push...5.5 Medium
- themevolty theme volty cms blogSQL injection vulnerability found in PrestaShop themevolty v.4.0.8 and before allow a remote...9.8 Critical
- cure53 dompurifyDOMPurify Open Redirect vulnerability6.1 Medium
- jhipstergenerator-jhipster allows a timing attack against validateToken due to a string comparison that stops at the first character7.5 High
- kernelsuKernelSU signature validation mismatch5.0 Medium
- fit2cloud jumpserverJumpServer default admin user email leak password reset3.7 Low
- linuxfoundation nats-server, nats nkeys +1 morexkeys Seal encryption used fixed key for all encryption7.5 High
- blakeblackshear frigateFrigate unsafe deserialization in `load_config_with_no_duplicates` of `frigate/util/builtin.py`7.5 High
- blakeblackshear frigateFrigate reflected XSS through `/<camera_name>` API endpoints4.7 Medium
- blakeblackshear frigateFrigate cross-site request forgery in `config_save` and `config_set` request handlers7.5 High
- fit2cloud cloudexplorer lite, cloudexplorer-dev cloudexplorer-lite +1 moreCloudExplorer Lite permission bypass vulnerability7.5 High
- bigbluebuttonBigBlueButton Blind SSRF When Uploading Presentation (mitigation bypass)5.6 Medium
- bigbluebuttonBigBlueButton Stored Cross-site Scripting vulnerability at Guest Lobby6.3 Medium
- bigbluebuttonBigBlueButton Path Traversal – Reading Certain File Extensions3.1 Low
- bigbluebuttonBigBlueButton Unrestricted File Upload vulnerability5.3 Medium
- google androidIn Print Service, there is a possible background activity launch due to a logic error in the code...7.3 High
- google androidIn collapse of canonicalize_md.c, there is a possible out of bounds read due to a missing bounds...5.5 Medium
- google androidIn sdksandbox, there is a possible strandhogg style overlay attack due to a logic error in the...7.8 High
- google androidIn Setup Wizard, there is a possible way to save a WiFi network due to an insecure default value....7.8 High
- google androidIn Activity Manager, there is a possible background activity launch due to a logic error in the...7.8 High
- google androidIn Bluetooth, there is a possible out of bounds read due to a use after free. This could lead to...6.5 Medium
- google androidIn Telecomm, there is a possible bypass of a multi user security boundary due to a confused...5.5 Medium
- google androidIn Settings, there is a possible way for the user to change SIM due to a missing permission check...7.8 High
- google androidIn Bluetooth, there is a possible way to corrupt memory due to a use after free. This could lead...8.8 High
- google androidIn Messaging, there is a possible way to disable the messaging application due to improper input...7.5 High
- google androidIn Sim, there is a possible way to evade mobile preference restrictions due to a permission...7.8 High
- google androidIn Settings, there is a possible bypass of profile owner restrictions due to a missing permission...7.8 High
- google androidIn Settings, there is a possible restriction bypass due to a missing permission check. This could...7.8 High
- google androidIn User Backup Manager, there is a possible way to leak a token to bypass user confirmation for...4.4 Medium
- google androidIn Whitechapel, there is a possible out of bounds read due to memory corruption. This could lead...5.5 Medium
- google androidIn Package Manager, there is a possible possible permissions bypass due to an unsafe...5.5 Medium
- google androidIn Settings, there is a possible way for the user to unintentionally send extra data due to an...5.5 Medium
- Show moreLoading…