CVE-2023 records published in September 2023
This page lists the 1,999 CVE-2023 records published in September 2023, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 22 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2023 list filters these records by severity or signal.
- Critical
- 30815.4% of these records
- Listed in CISA KEV
- 221.1% of these records
- Reported exploited
- 40.2% of these records
- Detection signal
- 572.9% of these records
- Exploit code
- 1155.8% of these records
- Actionable vendor fix
- 1,36968.5% of these records
Figures as of 2026-10-24 13:46 UTC. Records published in September 2023 have had from about 37 months to about 38 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2023-44488 | Webmproject libvpx improper exception handling | 7.5v3.1 | 1.9% | 2023-09-30 | Fix |
| CVE-2023-43735 | Os Commerce cross-site scripting Reflected (XSS) | 5.4v3.1 | 0.4% | 2023-09-30 | |
| CVE-2023-43734 | Os Commerce cross-site scripting Reflected (XSS) | 5.4v3.1 | 0.4% | 2023-09-30 | |
| CVE-2023-43733 | Os Commerce cross-site scripting Reflected (XSS) | 5.4v3.1 | 0.4% | 2023-09-30 | |
| CVE-2023-43732 | Os Commerce cross-site scripting Reflected (XSS) | 5.4v3.1 | 0.4% | 2023-09-30 | |
| CVE-2023-43731 | Os Commerce cross-site scripting Reflected (XSS) | 5.4v3.1 | 0.4% | 2023-09-30 | |
| CVE-2023-43730 | Os Commerce cross-site scripting Reflected (XSS) | 5.4v3.1 | 0.4% | 2023-09-30 | |
| CVE-2023-43729 | Os Commerce cross-site scripting Reflected (XSS) | 5.4v3.1 | 0.4% | 2023-09-30 | |
| CVE-2023-43728 | Os Commerce cross-site scripting Reflected (XSS) | 5.4v3.1 | 0.4% | 2023-09-30 | |
| CVE-2023-43727 | Os Commerce cross-site scripting Reflected (XSS) | 5.4v3.1 | 0.4% | 2023-09-30 | |
| CVE-2023-43726 | Os Commerce cross-site scripting Reflected (XSS) | 5.4v3.1 | 0.4% | 2023-09-30 | |
| CVE-2023-43725 | Os Commerce cross-site scripting Reflected (XSS) | 5.4v3.1 | 0.4% | 2023-09-30 | |
| CVE-2023-43724 | Os Commerce cross-site scripting Reflected (XSS) | 5.4v3.1 | 0.4% | 2023-09-30 | |
| CVE-2023-43723 | Os Commerce cross-site scripting Reflected (XSS) | 5.4v3.1 | 0.4% | 2023-09-30 | |
| CVE-2023-43722 | Os Commerce cross-site scripting Reflected (XSS) | 5.4v3.1 | 0.4% | 2023-09-30 | |
| CVE-2023-43721 | Os Commerce cross-site scripting Reflected (XSS) | 5.4v3.1 | 0.4% | 2023-09-30 | |
| CVE-2023-43720 | Os Commerce cross-site scripting Reflected (XSS) | 5.4v3.1 | 0.4% | 2023-09-30 | |
| CVE-2023-43719 | Os Commerce cross-site scripting Reflected (XSS) | 5.4v3.1 | 0.4% | 2023-09-30 | |
| CVE-2023-43718 | Os Commerce cross-site scripting Reflected (XSS) | 5.4v3.1 | 0.4% | 2023-09-30 | |
| CVE-2023-43717 | Os Commerce cross-site scripting Reflected (XSS) | 5.4v3.1 | 0.4% | 2023-09-30 | |
| CVE-2023-43716 | Os Commerce cross-site scripting Reflected (XSS) | 5.4v3.1 | 0.4% | 2023-09-30 | |
| CVE-2023-43715 | Os Commerce cross-site scripting Reflected (XSS) | 5.4v3.1 | 0.4% | 2023-09-30 | |
| CVE-2023-43714 | Os Commerce cross-site scripting Reflected (XSS) | 5.4v3.1 | 0.4% | 2023-09-30 | |
| CVE-2023-43713 | Os Commerce cross-site scripting Reflected (XSS) | 5.4v3.1 | 0.4% | 2023-09-30 | |
| CVE-2023-43712 | Os Commerce cross-site scripting Reflected (XSS) | 5.4v3.1 | 0.4% | 2023-09-30 | |
| CVE-2023-43711 | Os Commerce cross-site scripting Reflected (XSS) | 5.4v3.1 | 0.4% | 2023-09-30 | |
| CVE-2023-43710 | Os Commerce cross-site scripting Reflected (XSS) | 5.4v3.1 | 0.4% | 2023-09-30 | |
| CVE-2023-43709 | Os Commerce cross-site scripting Reflected (XSS) | 5.4v3.1 | 0.4% | 2023-09-30 | |
| CVE-2023-43708 | Os Commerce cross-site scripting Reflected (XSS) | 5.4v3.1 | 0.4% | 2023-09-30 | |
| CVE-2023-43707 | Os Commerce cross-site scripting Reflected (XSS) | 5.4v3.1 | 0.4% | 2023-09-30 | |
| CVE-2023-43706 | Os Commerce cross-site scripting Reflected (XSS) | 5.4v3.1 | 0.4% | 2023-09-30 | |
| CVE-2023-43705 | Os Commerce cross-site scripting Reflected (XSS) | 5.4v3.1 | 0.4% | 2023-09-30 | |
| CVE-2023-43704 | Os Commerce cross-site scripting Reflected (XSS) | 5.4v3.1 | 0.4% | 2023-09-30 | |
| CVE-2023-43703 | Os Commerce cross-site scripting Reflected (XSS) | 5.4v3.1 | 0.4% | 2023-09-30 | |
| CVE-2023-43702 | Os Commerce cross-site scripting Reflected (XSS) | 5.4v3.1 | 0.4% | 2023-09-30 | |
| CVE-2023-5321 | Missing authorization in hamza417/Inure | 5.5v3.1 | 0.3% | 2023-09-30 | Fix |
| CVE-2023-5320 | Cross-site scripting (XSS) DOM in thorsten/phpMyFAQ | 6.1NVD v3.1 | 0.6% | 2023-09-30 | Fix |
| CVE-2023-5319 | Cross-site scripting (XSS) Stored in thorsten/phpMyFAQ | 5.4NVD v3.1 | 0.5% | 2023-09-30 | Fix |
| CVE-2023-5318 | Microweber uses hard coded credentials | 7.5v3.1 | 0.5% | 2023-09-30 | Fix |
| CVE-2023-5317 | Cross-site scripting (XSS) Stored in thorsten/phpMyFAQ | 5.4v3.1 | 0.3% | 2023-09-30 | Fix |
| CVE-2023-5316 | Cross-site scripting (XSS) DOM in thorsten/phpMyFAQ | 6.1NVD v3.1 | 0.5% | 2023-09-30 | Fix |
| CVE-2023-5313 | phpkobo Ajax Poll Script ajax-poll.php improper enforcement of a single, unique action | 3.7NVD v3.1 | 0.6% | 2023-09-30 | |
| CVE-2023-5305 | Online Banquet Booking System Contact Us page mail.php cross-site scripting | 6.1v3.1 | 0.3% | 2023-09-30 | |
| CVE-2023-5304 | Online Banquet Booking System Service Booking book-services.php cross-site scripting | 6.1v3.1 | 0.3% | 2023-09-30 | |
| CVE-2023-5303 | Online Banquet Booking System Account Detail view-booking-detail.php cross-site scripting | 6.1v3.1 | 0.3% | 2023-09-30 | |
| CVE-2023-5302 | SourceCodester Best Courier Management System Manage Account page cross-site scripting | 5.4v3.1 | 0.6% | 2023-09-30 | |
| CVE-2023-5301 | DedeCMS album_add.php AddMyAddon os command injection | 8.8v3.1 | 7.4% | 2023-09-30 | |
| CVE-2023-5300 | TTSPlanning SQL injection | 9.8v3.1 | 0.5% | 2023-09-30 | |
| CVE-2023-5298 | Tongda OA 2017 delete.php SQL injection | 7.5v3.1 | 0.6% | 2023-09-30 | |
| CVE-2023-5295 | Comments by Startbit WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-09-30 | |
| CVE-2023-5227 | Unrestricted upload of file with dangerous type in thorsten/phpMyFAQ | 9.8v3.1 | 0.5% | 2023-09-30 | Fix |
| CVE-2023-5207 | Execution with unnecessary privileges in GitLab | 8.2CNA v3.1 | 1.2% | 2023-09-30 | Fix |
| CVE-2023-5201 | OpenHook WordPress plugin authenticated (Subscriber+) remote code execution via shortcode | 8.8NVD v3.1 | 1.7% | 2023-09-30 | Fix |
| CVE-2023-5112 | Os Commerce cross-site scripting Reflected (XSS) | 5.4v3.1 | 0.4% | 2023-09-30 | |
| CVE-2023-5111 | Os Commerce cross-site scripting Reflected (XSS) | 5.4v3.1 | 0.4% | 2023-09-30 | |
| CVE-2023-44469 | lemonldap-ng Lemonldap OpenID Connect Issuer server-side request forgery | 4.3v3.1 | 0.5% | 2023-09-29 | Fix |
| CVE-2023-44466 | Linux kernel buffer overflow | 8.8v3.1 | 45.3% | 2023-09-29 | Fix |
| CVE-2023-44464 | pretix allows Pillow to parse EPS files | 7.8v3.1 | 0.3% | 2023-09-29 | Fix |
| CVE-2023-44270 | PostCSS line return parsing error | 5.3v3.1 | 0.8% | 2023-09-29 | Fix |
| CVE-2023-43944 | oretnom23 Task Management System cross-site scripting | 5.4v3.1 | 0.4% | 2023-09-29 | |
| CVE-2023-43909 | Hospital Management System SQL injection | 9.1v3.1 | 0.7% | 2023-09-29 | |
| CVE-2023-43655 | composer remote code execution via web-accessible composer.phar | 6.4CNA v3.1 | 1.5% | 2023-09-29 | Fix |
| CVE-2023-41691 | WooCommerce PensoPay WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-09-29 | Fix |
| CVE-2023-41687 | Goods Catalog WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2023-09-29 | |
| CVE-2023-41666 | Stock Quotes List WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2023-09-29 | Fix |
| CVE-2023-41663 | WP Bannerize Pro WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-09-29 | Fix |
| CVE-2023-41662 | WP-dTree WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-09-29 | |
| CVE-2023-41661 | Smarty for WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-09-29 | Fix |
| CVE-2023-41658 | Photo Gallery Slideshow and Masonry Tiled Gallery WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-09-29 | Fix |
| CVE-2023-41657 | HollerBox WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2023-09-29 | Fix |
| CVE-2023-41655 | authLdap WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2023-09-29 | Fix |
| CVE-2023-39410 | Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK | 7.5v3.1 | 1.8% | 2023-09-29 | Fix |
| CVE-2023-39308 | User Feedback WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.6% | 2023-09-29 | Fix |
| CVE-2023-32477 | Dell Common Event Enabler improper access control | 7.8CNA v3.1 | 0.2% | 2023-09-29 | Fix |
| CVE-2023-30591 | NodeBB Pre-authentication denial of service | 7.5v3.1 | 58.7% | 2023-09-29 | |
| CVE-2023-26218 | TIBCO Nimbus reflected cross-site scripting (XSS) | 8.0CNA v3.1 | 0.6% | 2023-09-29 | |
| CVE-2023-26148 | ithewei/libhv CRLF injection | 5.3v3.1 | 0.4% | 2023-09-29 | |
| CVE-2023-26147 | ithewei/libhv HTTP response splitting | 6.1v3.1 | 0.4% | 2023-09-29 | |
| CVE-2023-26146 | ithewei/libhv cross-site scripting | 6.1v3.1 | 0.4% | 2023-09-29 | |
| CVE-2023-5297 | Xinhu RockOA backup function information disclosure | 7.5v3.1 | 0.7% | 2023-09-29 | |
| CVE-2023-5296 | Xinhu RockOA Password password recovery | 7.5v3.1 | 0.4% | 2023-09-29 | |
| CVE-2023-5294 | ECshop order.php SQL injection | 8.8v3.1 | 0.5% | 2023-09-29 | |
| CVE-2023-5293 | ECshop leancloud.php SQL injection | 6.5v3.1 | 0.5% | 2023-09-29 | |
| CVE-2023-5289 | Allocation of resources without limits or throttling in ikus060/rdiffweb | 8.8v3.1 | 0.7% | 2023-09-29 | Fix |
| CVE-2023-5288 | SICK SIM1012 improper access control | 9.8CNA v3.1 | 0.8% | 2023-09-29 | |
| CVE-2023-5287 | Beecms cross-site scripting | 4.8v3.1 | 0.4% | 2023-09-29 | |
| CVE-2023-5286 | SourceCodester Expense Tracker App Category add_category.php cross-site scripting | 5.4v3.1 | 0.4% | 2023-09-29 | |
| CVE-2023-5285 | Tongda OA 2017 delete.php SQL injection | 7.5v3.1 | 0.6% | 2023-09-29 | |
| CVE-2023-5284 | SourceCodester Engineers Online Portal upload_save_student.php unrestricted upload | 8.8v3.1 | 0.8% | 2023-09-29 | |
| CVE-2023-5283 | SourceCodester Engineers Online Portal teacher_signup.php SQL injection | 8.8v3.1 | 0.6% | 2023-09-29 | |
| CVE-2023-5282 | SourceCodester Engineers Online Portal seed_message_student.php SQL injection | 9.8v3.1 | 0.7% | 2023-09-29 | |
| CVE-2023-5281 | SourceCodester Engineers Online Portal remove_inbox_message.php SQL injection | 9.8v3.1 | 0.7% | 2023-09-29 | |
| CVE-2023-5280 | SourceCodester Engineers Online Portal my_students.php SQL injection | 9.8v3.1 | 0.7% | 2023-09-29 | |
| CVE-2023-5279 | SourceCodester Engineers Online Portal my_classmates.php SQL injection | 9.8v3.1 | 0.7% | 2023-09-29 | |
| CVE-2023-5278 | SourceCodester Engineers Online Portal login.php SQL injection | 9.8v3.1 | 0.7% | 2023-09-29 | |
| CVE-2023-5277 | SourceCodester Engineers Online Portal student_avatar.php unrestricted upload | 9.8v3.1 | 0.8% | 2023-09-29 | |
| CVE-2023-5276 | SourceCodester Engineers Online Portal downloadable_student.php SQL injection | 9.8v3.1 | 0.7% | 2023-09-29 | |
| CVE-2023-5273 | SourceCodester Best Courier Management System manage_parcel_status.php cross-site scripting | 5.4v3.1 | 0.5% | 2023-09-29 | |
| CVE-2023-5272 | SourceCodester Best Courier Management System GET parameter edit_parcel.php SQL injection | 8.8v3.1 | 0.6% | 2023-09-29 | |
| CVE-2023-5271 | SourceCodester Best Courier Management System edit_parcel.php SQL injection | 8.8v3.1 | 0.6% | 2023-09-29 | |
| CVE-2023-5270 | SourceCodester Best Courier Management System view_parcel.php SQL injection | 8.8v3.1 | 0.6% | 2023-09-29 | |
| CVE-2023-5269 | SourceCodester Best Courier Management System GET parameter parcel_list.php SQL injection | 8.8v3.1 | 0.8% | 2023-09-29 | |
| CVE-2023-5268 | DedeBIZ makehtml_taglist_action.php SQL injection | 7.2v3.1 | 0.5% | 2023-09-29 | |
| CVE-2023-5267 | Tongda OA 2017 delete.php SQL injection | 9.8v3.1 | 0.8% | 2023-09-29 | |
| CVE-2023-5266 | DedeBIZ tags_main.php SQL injection | 8.8v3.1 | 0.5% | 2023-09-29 | |
| CVE-2023-5265 | Tongda OA 2017 delete.php SQL injection | 9.8v3.1 | 0.8% | 2023-09-29 | |
| CVE-2023-5264 | Huakecms cms_content.php SQL injection | 7.2v3.1 | 0.5% | 2023-09-29 | |
| CVE-2023-5263 | Zzzcms Database Backup file save.php restore permission | 8.8v3.1 | 0.6% | 2023-09-29 | |
| CVE-2023-5262 | OpenRapid RapidCMS uploadicon.php isImg unrestricted upload | 8.8v3.1 | 0.6% | 2023-09-29 | |
| CVE-2023-5261 | Tongda OA 2017 delete.php SQL injection | 9.8v3.1 | 0.8% | 2023-09-29 | |
| CVE-2023-5260 | SourceCodester Simple Membership System group_validator.php SQL injection | 9.8v3.1 | 0.7% | 2023-09-29 | |
| CVE-2023-5259 | ForU CMS cms_admin.php denial of service | 4.9v3.1 | 1.0% | 2023-09-29 | |
| CVE-2023-5258 | OpenRapid RapidCMS addgood.php SQL injection | 9.8v3.1 | 0.6% | 2023-09-29 | |
| CVE-2023-5257 | WhiteHSBG JNDIExploit HTTPServer.java handleFileRequest path traversal | 5.7v3.1 | 0.8% | 2023-09-29 | |
| CVE-2023-5198 | Incorrect authorization in GitLab | 4.3CNA v3.1 | 0.5% | 2023-09-29 | Fix |
| CVE-2023-5196 | Mattermost DoS via Channel Notification Properties | 6.5CNA v3.1 | 0.7% | 2023-09-29 | Fix |
| CVE-2023-5195 | Mattermost A team member can soft delete other teams that they are not part of | 6.5CNA v3.1 | 0.5% | 2023-09-29 | Fix |
| CVE-2023-5194 | Mattermost A system/user manager can demote / deactivate another manager | 2.7CNA v3.1 | 0.4% | 2023-09-29 | Fix |
| CVE-2023-5193 | Mattermost system Role with manage posts permission can read posts of Direct messages | 4.9CNA v3.1 | 0.6% | 2023-09-29 | Fix |
| CVE-2023-5159 | Mattermost A User Manager role with user edit permissions could manage/update bots | 3.8CNA v3.1 | 0.4% | 2023-09-29 | Fix |
| CVE-2023-5077 | HashiCorp Vault incorrect permission assignment for critical resource | 7.6CNA v3.1 | 0.5% | 2023-09-29 | Fix |
| CVE-2023-4532 | Incorrect authorization in GitLab | 4.3CNA v3.1 | 0.5% | 2023-09-29 | Fix |
| CVE-2023-3979 | Incorrect authorization in GitLab | 3.1CNA v3.1 | 0.5% | 2023-09-29 | Fix |
| CVE-2023-3922 | URL redirection to untrusted site (open redirect) in GitLab | 3.0CNA v3.1 | 0.4% | 2023-09-29 | Fix |
| CVE-2023-3920 | Incorrect authorization in GitLab | 4.3CNA v3.1 | 0.5% | 2023-09-29 | Fix |
| CVE-2023-3917 | Improper validation of specified type of input in GitLab | 4.3CNA v3.1 | 0.9% | 2023-09-29 | Fix |
| CVE-2023-3914 | Incorrect user management in GitLab | 5.4CNA v3.1 | 0.4% | 2023-09-29 | Fix |
| CVE-2023-3906 | Improper validation of specified type of input in GitLab | 3.5CNA v3.1 | 0.6% | 2023-09-29 | Fix |
| CVE-2023-3775 | Vault Enterprise's Sentinel RGP Policies Allowed for Cross-Namespace denial of service | 4.2CNA v3.1 | 0.5% | 2023-09-29 | Fix |
| CVE-2023-3413 | Insertion of sensitive information into sent data in GitLab | 6.5CNA v3.1 | 0.7% | 2023-09-29 | Fix |
| CVE-2023-3115 | Incorrect user management in GitLab | 5.4CNA v3.1 | 0.4% | 2023-09-29 | Fix |
| CVE-2023-3024 | silabs.com GSDK out-of-bounds write | 5.9CNA v3.1 | 0.3% | 2023-09-29 | Fix |
| CVE-2023-2233 | Missing authorization in GitLab | 3.1CNA v3.1 | 0.5% | 2023-09-29 | Fix |
| CVE-2023-0989 | Improper Ownership Management in GitLab | 4.3CNA v3.1 | 0.5% | 2023-09-29 | Fix |
| CVE-2023-44276 | OPNsense cross-site scripting | 5.4v3.1 | 0.5% | 2023-09-28 | |
| CVE-2023-44275 | OPNsense cross-site scripting | 5.4v3.1 | 0.5% | 2023-09-28 | |
| CVE-2023-44273 | Gnark-crypto doesn't range check input values during ECDSA and EdDSA signature deserialization | 9.8v3.1 | 0.8% | 2023-09-28 | Fix |
| CVE-2023-44174 | Online Movie Ticket Booking System stored cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-09-28 | |
| CVE-2023-44173 | Online Movie Ticket Booking System reflected cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2023-09-28 | |
| CVE-2023-44166 | Online Movie Ticket Booking System multiple Unauthenticated SQL Injections (SQLi) | 9.8v3.1 | 0.8% | 2023-09-28 | |
| CVE-2023-44164 | Online Movie Ticket Booking System multiple Unauthenticated SQL Injections (SQLi) | 9.8v3.1 | 0.8% | 2023-09-28 | |
| CVE-2023-44163 | Online Movie Ticket Booking System multiple Unauthenticated SQL Injections (SQLi) | 9.8v3.1 | 0.8% | 2023-09-28 | |
| CVE-2023-43884 | Subrion CMS cross-site scripting | 5.4v3.1 | 0.4% | 2023-09-28 | |
| CVE-2023-43879 | Ritecms cross-site scripting | 4.8v3.1 | 0.5% | 2023-09-28 | Exploit code |
| CVE-2023-43878 | Ritecms cross-site scripting | 5.4v3.1 | 0.5% | 2023-09-28 | Exploit code |
| CVE-2023-43876 | octobercms october installation cross-site scripting | 5.4v3.1 | 0.4% | 2023-09-28 | Exploit codeFix |
| CVE-2023-43874 | e107 CMS e017 CMS v.2.3.2 cross-site scripting | 5.4v3.1 | 0.6% | 2023-09-28 | Exploit code |
| CVE-2023-43873 | e107 CMS e017 CMS v.2.3.2 cross-site scripting | 5.4v3.1 | 0.5% | 2023-09-28 | Exploit code |
| CVE-2023-43872 | CMS Made Simple CMSmadesimple v.2.2.18 file upload | 5.4NVD v3.1 | 0.6% | 2023-09-28 | |
| CVE-2023-43871 | WBCE_CMS A file upload | 5.4v3.1 | 0.4% | 2023-09-28 | Exploit code |
| CVE-2023-43869 | D-Link DIR-619L out-of-bounds write | 9.8v3.1 | 1.0% | 2023-09-28 | |
| CVE-2023-43868 | D-Link DIR-619L out-of-bounds write | 7.5v3.1 | 0.8% | 2023-09-28 | |
| CVE-2023-43867 | D-Link DIR-619L out-of-bounds write | 7.5v3.1 | 0.8% | 2023-09-28 | |
| CVE-2023-43866 | D-Link DIR-619L out-of-bounds write | 7.5v3.1 | 0.8% | 2023-09-28 | |
| CVE-2023-43865 | D-Link DIR-619L out-of-bounds write | 7.5v3.1 | 0.8% | 2023-09-28 | |
| CVE-2023-43864 | D-Link DIR-619L out-of-bounds write | 7.5v3.1 | 0.8% | 2023-09-28 | |
| CVE-2023-43863 | D-Link DIR-619L out-of-bounds write | 7.5v3.1 | 0.8% | 2023-09-28 | |
| CVE-2023-43862 | D-Link DIR-619L out-of-bounds write | 7.5v3.1 | 0.7% | 2023-09-28 | |
| CVE-2023-43861 | D-Link DIR-619L out-of-bounds write | 7.5v3.1 | 0.8% | 2023-09-28 | |
| CVE-2023-43860 | D-Link DIR-619L out-of-bounds write | 7.5v3.1 | 0.7% | 2023-09-28 | |
| CVE-2023-43740 | Online Book Store Project insecure file upload | 8.8v3.1 | 1.2% | 2023-09-28 | |
| CVE-2023-43739 | Online Book Store Project unauthenticated SQL injection (SQLi) | 9.8v3.1 | 0.8% | 2023-09-28 | |
| CVE-2023-43664 | Employee without any access rights can list all installed modules in PrestaShop | 4.3CNA v3.1 | 0.5% | 2023-09-28 | Fix |
| CVE-2023-43663 | Improper privilege management in PrestaShop | 6.3CNA v3.1 | 0.4% | 2023-09-28 | Fix |
| CVE-2023-43662 | ShokoAnime ShokoServer arbitrary file read vulnerability in Shoko Server | 8.6CNA v3.1 | 9.1% | 2023-09-28 | Nuclei |
| CVE-2023-43657 | Discourse discourse-encrypt plugin cross-site scripting | 7.2CNA v3.1 | 0.6% | 2023-09-28 | Fix |
| CVE-2023-43654 | TorchServe server-side request forgery | 10.0CNA v3.1 | 42.5% | 2023-09-28 | Reported exploitedNucleiMetasploitExploit codeKCVFix |
| CVE-2023-43323 | mooSocial external control of a configuration setting | 6.5v3.1 | 1.9% | 2023-09-28 | NucleiExploit code |
| CVE-2023-43226 | DedeCMS dede/baidunews.php arbitrary file upload | 8.8v3.1 | 0.9% | 2023-09-28 | |
| CVE-2023-43044 | IBM License Metric Tool directory traversal | 5.3CNA v3.1 | 1.1% | 2023-09-28 | Fix |
| CVE-2023-43014 | Asset Management System authenticated SQL injection (SQLi) | 8.8v3.1 | 0.6% | 2023-09-28 | |
| CVE-2023-43013 | Asset Management System unauthenticated SQL injection (SQLi) | 9.8v3.1 | 0.7% | 2023-09-28 | |
| CVE-2023-42756 | Kernel: Netfilter: Race condition between ipset_cmd_add and ipset_cmd_swap | 4.7NVD v3.1 | 0.3% | 2023-09-28 | Fix |
| CVE-2023-42222 | WebCatalog shell.openExternal function vulnerability | 8.8v3.1 | 1.4% | 2023-09-28 | Exploit codeFix |
| CVE-2023-41911 | Samsung Exynos 2200 double free | 5.5v3.1 | 0.1% | 2023-09-28 | Fix |
| CVE-2023-41450 | phpkobo Ajaxnewsticker code injection | 8.8v3.1 | 1.1% | 2023-09-28 | |
| CVE-2023-41447 | phpkobo Ajaxnewsticker cross-site scripting | 6.1v3.1 | 0.6% | 2023-09-28 | |
| CVE-2023-41446 | phpkobo Ajaxnewsticker cross-site scripting | 6.1v3.1 | 0.6% | 2023-09-28 | |
| CVE-2023-41444 | Binalyze Irec code injection | 7.8v3.1 | 0.3% | 2023-09-28 | |
| CVE-2023-40375 | IBM i privilege escalation | 7.4CNA v3.1 | 0.2% | 2023-09-28 | Fix |
| CVE-2023-40307 | Privileges memory corruption (out-of-bound write) | 6.3CNA v3.1 | 0.2% | 2023-09-28 | |
| CVE-2023-38877 | Economizzer host header injection | 8.8v3.1 | 0.9% | 2023-09-28 | |
| CVE-2023-38874 | Economizzer remote code execution | 8.8v3.1 | 31.6% | 2023-09-28 | |
| CVE-2023-38873 | Economizzer vulnerable to clickjacking | 6.5v3.1 | 0.6% | 2023-09-28 | Exploit code |
| CVE-2023-38872 | Economizzer insecure direct object reference | 3.7v3.1 | 0.6% | 2023-09-28 | |
| CVE-2023-38871 | Economizzer observable discrepancy | 5.3v3.1 | 0.6% | 2023-09-28 | |
| CVE-2023-38870 | Economizzer gugoan SQL injection | 9.8v3.1 | 0.8% | 2023-09-28 | |
| CVE-2023-30415 | oretnom23 Packers And Movers Management System SQL injection | 9.8v3.1 | 0.8% | 2023-09-28 | |
| CVE-2023-26149 | Quill-mention cross-site scripting | 6.1v3.1 | 0.6% | 2023-09-28 | Fix |
| CVE-2023-26145 | pydash command injection | 8.1v3.1 | 2.9% | 2023-09-28 | Fix |
| CVE-2023-5256 | Drupal Core Critical cache poisoning SA-CORE-2023-006 | 7.5v3.1 | 0.7% | 2023-09-28 | Fix |
| CVE-2023-5244 | Cross-site scripting (XSS) Reflected in microweber/microweber | 6.1v3.1 | 1.1% | 2023-09-28 | NucleiFix |
| CVE-2023-5233 | Font Awesome Integration WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-09-28 | |
| CVE-2023-5232 | Font Awesome More Icons WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-09-28 | |
| CVE-2023-5230 | TM WooCommerce Compare and Wishlist WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2023-09-28 | |
| CVE-2023-5217 | Google Chromium libvpx heap buffer overflow | 8.8v3.1 | 49.0% | 2023-09-28 | KEVExploit codeFix |
| CVE-2023-5215 | Libnbd: Crash or misbehaviour when nbd server returns an unexpected block size | 5.3CNA v3.1 | 0.8% | 2023-09-28 | Fix |
| CVE-2023-5187 | Google Chrome extensions use-after-free | 8.8v3.1 | 0.8% | 2023-09-28 | Fix |
| CVE-2023-5186 | Google Chrome Passwords use-after-free | 8.8v3.1 | 1.0% | 2023-09-28 | Fix |
| CVE-2023-5185 | Gym Management System Project insecure file upload | 8.8NVD v3.1 | 1.5% | 2023-09-28 | |
| CVE-2023-5053 | SQL injection in hospital-management-system-in-php 378c157 in index.php | 9.8v3.1 | 0.9% | 2023-09-28 | |
| CVE-2023-5004 | Hospital-management-system-in-php 378c157 blind SQL injection | 9.8v3.1 | 0.9% | 2023-09-28 | |
| CVE-2023-4316 | Zod regular expression denial of service | 7.5v3.1 | 0.8% | 2023-09-28 | Fix |
| CVE-2023-44216 | AMD Ryzen 5 7600x observable discrepancy | 5.3v3.1 | 1.8% | 2023-09-27 | |
| CVE-2023-44207 | Acronis Cyber Protect 15 protection plan name stored cross-site scripting | 6.7CNA v3.0 | 0.6% | 2023-09-27 | Fix |
| CVE-2023-44206 | Acronis Cyber Protect 15 insecure direct object reference | 7.1CNA v3.0 | 1.0% | 2023-09-27 | Fix |
| CVE-2023-44205 | Acronis Cyber Protect 15 insecure direct object reference | 3.5CNA v3.0 | 0.7% | 2023-09-27 | Fix |
| CVE-2023-44172 | Seacms path traversal | 9.8v3.1 | 1.2% | 2023-09-27 | |
| CVE-2023-44171 | Seacms path traversal | 9.8v3.1 | 1.2% | 2023-09-27 | |
| CVE-2023-44170 | Seacms path traversal | 9.8v3.1 | 1.2% | 2023-09-27 | |
| CVE-2023-44169 | Seacms path traversal | 9.8v3.1 | 1.2% | 2023-09-27 | |
| CVE-2023-44161 | Acronis Cyber Protect 15 cross-site request forgery | 3.1CNA v3.0 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-44160 | Acronis Cyber Protect 15 cross-site request forgery | 3.1CNA v3.0 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-44159 | Acronis Cyber Protect 15 cleartext storage of sensitive information | 5.5CNA v3.0 | 0.7% | 2023-09-27 | Fix |
| CVE-2023-44158 | Acronis Cyber Protect 15 insufficiently protected credentials | 3.5CNA v3.0 | 0.8% | 2023-09-27 | Fix |
| CVE-2023-44157 | Acronis Cyber Protect 15 incorrect default permissions | 3.3CNA v3.0 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-44156 | Acronis Cyber Protect 15 personal information exposure | 5.7CNA v3.0 | 1.0% | 2023-09-27 | Fix |
| CVE-2023-44155 | Acronis Cyber Protect 15 sensitive information in log files | 4.4CNA v3.0 | 1.1% | 2023-09-27 | Fix |
| CVE-2023-44154 | Acronis Cyber Protect 15 insecure direct object reference | 4.6CNA v3.0 | 0.8% | 2023-09-27 | Fix |
| CVE-2023-44153 | Acronis Cyber Protect 15 cleartext storage of sensitive information in memory | 2.2CNA v3.0 | 0.4% | 2023-09-27 | Fix |
| CVE-2023-44152 | Acronis Cyber Protect 15 missing authentication | 6.1CNA v3.0 | 0.9% | 2023-09-27 | Fix |
| CVE-2023-44129 | LG Electronics LG V60 Thin Q 5G(LMV600VM) improper export of Android application components | 3.6CNA v3.1 | 0.1% | 2023-09-27 | Fix |
| CVE-2023-44128 | LG Electronics LG V60 Thin Q 5G LGInstallService Deletion of arbitrary files with system privilege | 5.0CNA v3.1 | 0.1% | 2023-09-27 | Fix |
| CVE-2023-44127 | LG Electronics LG V60 Thin Q 5G(LMV600VM) implicit intent for sensitive communication | 3.6CNA v3.1 | 0.1% | 2023-09-27 | Fix |
| CVE-2023-44126 | LG Electronics LG V60 Thin Q 5G(LMV600VM) improper intent verification | 3.6CNA v3.1 | 0.1% | 2023-09-27 | Fix |
| CVE-2023-44125 | LG Electronics LG V60 Thin Q 5G(LMV600VM) improper authorization | 6.1CNA v3.1 | 0.1% | 2023-09-27 | Fix |
| CVE-2023-44124 | LG Electronics LG V60 Thin Q 5G screen recording Theft of arbitrary files with system privilege | 6.1CNA v3.1 | 0.1% | 2023-09-27 | Fix |
| CVE-2023-44123 | LG Electronics LG V60 Thin Q 5G(LMV600VM) improper authorization | 6.1CNA v3.1 | 0.1% | 2023-09-27 | Fix |
| CVE-2023-44122 | LG Electronics LG V60 Thin Q 5G LockScreenSettings Theft arbitrary files with system privilege | 6.1CNA v3.1 | 0.1% | 2023-09-27 | Fix |
| CVE-2023-44121 | LG ThinQ Service Intent redirection with system privilege/LaunchAnyWhere | 5.0CNA v3.1 | 0.1% | 2023-09-27 | Fix |
| CVE-2023-44080 | Pgyer Codefever OS command injection | 9.8v3.1 | 0.9% | 2023-09-27 | |
| CVE-2023-44048 | oretnom23 Expense Tracker cross-site scripting | 5.4v3.1 | 0.4% | 2023-09-27 | |
| CVE-2023-44047 | oretnom23 Toll Tax Management System SQL injection | 7.2v3.1 | 0.7% | 2023-09-27 | |
| CVE-2023-44044 | Super Store Finder SQL injection | 7.2v3.1 | 0.9% | 2023-09-27 | |
| CVE-2023-44043 | Blackcat CMS /install/index.php of Black Cat CMS reflected cross-site scripting | 6.1v3.1 | 0.5% | 2023-09-27 | |
| CVE-2023-44042 | Blackcat CMS /settings/index.php of Black Cat CMS stored cross-site scripting | 5.4v3.1 | 0.5% | 2023-09-27 | |
| CVE-2023-44023 | Tendacn AC10U stack-based buffer overflow | 9.8v3.1 | 0.9% | 2023-09-27 | |
| CVE-2023-44022 | Tendacn AC10U stack-based buffer overflow | 9.8v3.1 | 0.9% | 2023-09-27 | |
| CVE-2023-44021 | Tendacn AC10U stack-based buffer overflow | 9.8v3.1 | 0.9% | 2023-09-27 | |
| CVE-2023-44020 | Tendacn AC10U stack-based buffer overflow | 9.8v3.1 | 0.9% | 2023-09-27 | |
| CVE-2023-44019 | Tendacn AC10U stack-based buffer overflow | 9.8v3.1 | 0.9% | 2023-09-27 | |
| CVE-2023-44018 | Tendacn AC10U stack-based buffer overflow | 9.8v3.1 | 15.8% | 2023-09-27 | |
| CVE-2023-44017 | Tendacn AC10U stack-based buffer overflow | 9.8v3.1 | 0.9% | 2023-09-27 | |
| CVE-2023-44016 | Tendacn AC10U stack-based buffer overflow | 9.8v3.1 | 0.9% | 2023-09-27 | |
| CVE-2023-44015 | Tendacn AC10U stack-based buffer overflow | 9.8v3.1 | 0.6% | 2023-09-27 | |
| CVE-2023-44014 | Tendacn AC10U stack-based buffer overflow | 9.8v3.1 | 0.9% | 2023-09-27 | |
| CVE-2023-44013 | Tendacn AC10U stack-based buffer overflow | 9.8v3.1 | 0.9% | 2023-09-27 | |
| CVE-2023-43857 | iteachyou Dreamer CMS cross-site scripting | 5.4v3.1 | 0.4% | 2023-09-27 | |
| CVE-2023-43856 | iteachyou Dreamer CMS files accessible to external parties | 7.5v3.1 | 0.8% | 2023-09-27 | |
| CVE-2023-43830 | Subrion CMS XSS in /panel/configuration/financial/ | 5.4v3.1 | 0.5% | 2023-09-27 | |
| CVE-2023-43828 | Subrion CMS cross-site scripting vulnerability in /panel/languages | 5.4v3.1 | 0.5% | 2023-09-27 | |
| CVE-2023-43825 | EKAKIN Shihonkanri Plus relative path traversal | 7.8v3.1 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-43775 | Security issue in SMP Gateway automation platform | 4.7CNA v3.1 | 0.8% | 2023-09-27 | Fix |
| CVE-2023-43660 | SSH key password bypassed in warpgate | 4.8CNA v3.1 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-43656 | Sandbox escape for instances that have enabled transformation functions in matrix-hookshot | 5.6CNA v3.1 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-43652 | Non-MFA account takeover via using only SSH public key to login in jumpserver | 8.2CNA v3.1 | 0.8% | 2023-09-27 | Fix |
| CVE-2023-43651 | Remote code execution on the host system via MongoDB shell in jumpserver | 8.6CNA v3.1 | 2.1% | 2023-09-27 | Fix |
| CVE-2023-43650 | Non-MFA account takeover via brute-force attack on weak password reset code in jumpserver | 8.2CNA v3.1 | 0.6% | 2023-09-27 | Fix |
| CVE-2023-43646 | Inefficient regular expression complexity in get-func-name | 8.6CNA v3.1 | 1.4% | 2023-09-27 | Exploit codeFix |
| CVE-2023-43645 | Denial of service from circular relationship definitions in OpenFGA | 5.9CNA v3.1 | 0.9% | 2023-09-27 | Fix |
| CVE-2023-43614 | Collne Welcart e-Commerce Order Data Edit page cross-site scripting | 6.1v3.1 | 0.6% | 2023-09-27 | Fix |
| CVE-2023-43610 | Collne Welcart e-Commerce Order Data Edit page SQL injection | 8.8v3.1 | 0.9% | 2023-09-27 | Fix |
| CVE-2023-43493 | Collne Welcart e-Commerce Item List page SQL injection | 4.9v3.1 | 0.8% | 2023-09-27 | Fix |
| CVE-2023-43484 | Collne Welcart e-Commerce Item List page cross-site scripting | 6.1v3.1 | 0.6% | 2023-09-27 | Fix |
| CVE-2023-43381 | Tianchoy Blog SQL injection | 7.5v3.1 | 1.0% | 2023-09-27 | |
| CVE-2023-43331 | Small CRM Add User function cross-site scripting | 5.4v3.1 | 0.5% | 2023-09-27 | |
| CVE-2023-43320 | Proxmox Mail Gateway privilege escalation | 8.8v3.1 | 1.0% | 2023-09-27 | |
| CVE-2023-43314 | Zyxel PMG2005-T20B buffer overflow | 7.5CNA v3.1 | 0.8% | 2023-09-27 | |
| CVE-2023-43291 | emlog deserialization of untrusted data | 9.8v3.1 | 1.6% | 2023-09-27 | |
| CVE-2023-43263 | Froala Editor cross-site scripting | 6.1v3.1 | 0.7% | 2023-09-27 | Exploit code |
| CVE-2023-43234 | DedeBIZ code injection | 9.8v3.1 | 1.0% | 2023-09-27 | |
| CVE-2023-43233 | Yzncms cms/content/edit component stored cross-site scripting | 6.1v3.1 | 0.3% | 2023-09-27 | |
| CVE-2023-43232 | DedeBIZ Website column management function stored cross-site scripting | 5.4v3.1 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-43222 | Seacms code injection | 9.8v3.1 | 0.8% | 2023-09-27 | |
| CVE-2023-43216 | Seacms path traversal | 9.8v3.1 | 1.2% | 2023-09-27 | |
| CVE-2023-43192 | Jrecms SpringBootCMS newly created part of the SQL injection | 8.8v3.1 | 0.7% | 2023-09-27 | |
| CVE-2023-43191 | Jrecms SpringBootCMS cross-site scripting | 5.4v3.1 | 0.3% | 2023-09-27 | |
| CVE-2023-43187 | NodeBB xmlrpc.php endpoint remote code execution | 9.8v3.1 | 46.9% | 2023-09-27 | Nuclei |
| CVE-2023-43154 | Macs Cms type confusion | 9.8v3.1 | 1.0% | 2023-09-27 | Exploit code |
| CVE-2023-43125 | BIG-IP APM Clients TunnelCrack vulnerability | 6.8CNA v3.1 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-43124 | BIG-IP APM Clients TunnelCrack vulnerability | 5.3CNA v3.1 | 0.2% | 2023-09-27 | Fix |
| CVE-2023-42822 | Unchecked access to font glyph info in xrdp | 4.6CNA v3.1 | 0.7% | 2023-09-27 | Fix |
| CVE-2023-42820 | Random seed leakage in Jumpserver | 7.0CNA v3.1 | 6.3% | 2023-09-27 | Exploit codeFix |
| CVE-2023-42819 | Path traversal in Jumpserver | 8.9CNA v3.1 | 2.2% | 2023-09-27 | Exploit codeFix |
| CVE-2023-42818 | SSH public key login without private key challenge if mfa is enabled in jumpserver | 5.4CNA v3.1 | 0.7% | 2023-09-27 | Fix |
| CVE-2023-42657 | WS_FTP Server directory traversal | 9.9CNA v3.1 | 16.0% | 2023-09-27 | Fix |
| CVE-2023-42487 | Soundminer improper limitation of a pathname to a restricted directory (path traversal) | 7.5v3.1 | 0.9% | 2023-09-27 | |
| CVE-2023-42486 | Fortect unquoted search path or element | 7.8v3.1 | 0.2% | 2023-09-27 | |
| CVE-2023-42462 | File deletion through document upload process in GLPI | 7.7CNA v3.1 | 1.3% | 2023-09-27 | Fix |
| CVE-2023-42461 | SQL injection in ITIL actors in GLPI | 6.5CNA v3.1 | 1.2% | 2023-09-27 | Fix |
| CVE-2023-42460 | _abi_decode input not validated in complex expressions in Vyper | 5.3CNA v3.1 | 0.7% | 2023-09-27 | Fix |
| CVE-2023-42453 | Improper validation of receipts allows forged read receipts in Matrix synapse | 3.1CNA v3.1 | 0.8% | 2023-09-27 | Fix |
| CVE-2023-41996 | The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.6. Apps that fail verification checks may still launch. | 5.5v3.1 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-41995 | Apple macOS use-after-free | 7.8v3.1 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-41986 | Apple macOS, iOS and iPadOS file system protections vulnerability | 5.5v3.1 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-41984 | Apple macOS code injection | 7.8v3.1 | 0.5% | 2023-09-27 | Fix |
| CVE-2023-41981 | Apple macOS code execution | 4.4v3.1 | 0.4% | 2023-09-27 | Fix |
| CVE-2023-41980 | Apple macOS insecure permissions | 5.5v3.1 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-41979 | Apple macOS race condition | 4.7v3.1 | 0.2% | 2023-09-27 | Fix |
| CVE-2023-41968 | Apple macOS link following | 5.5v3.1 | 0.4% | 2023-09-27 | Fix |
| CVE-2023-41962 | Collne Welcart e-Commerce Credit Card Payment Setup page cross-site scripting | 6.1v3.1 | 0.6% | 2023-09-27 | Fix |
| CVE-2023-41904 | Zoho ManageEngine ADManager Plus improper authentication | 5.4v3.1 | 2.0% | 2023-09-27 | Fix |
| CVE-2023-41888 | Phishing through a login page malicious URL in GLPI | 5.3CNA v3.1 | 0.5% | 2023-09-27 | Fix |
| CVE-2023-41878 | Weak password of selenium VNC in MeterSphere | 4.6CNA v3.1 | 0.7% | 2023-09-27 | Fix |
| CVE-2023-41861 | tickera Restrict reflected cross-site scripting | 6.1NVD v3.1 | 0.4% | 2023-09-27 | Fix |
| CVE-2023-41860 | Travel Map WordPress plugin cross-site scripting (XSS) | 6.1v3.1 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-41653 | Sermon'e Sermons Online WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-09-27 | |
| CVE-2023-41453 | phpkobo Ajaxnewsticker cross-site scripting | 6.1v3.1 | 0.6% | 2023-09-27 | |
| CVE-2023-41452 | phpkobo Ajaxnewsticker cross-site request forgery | 8.8v3.1 | 0.5% | 2023-09-27 | |
| CVE-2023-41451 | phpkobo Ajaxnewsticker cross-site scripting | 6.1v3.1 | 0.6% | 2023-09-27 | |
| CVE-2023-41449 | phpkobo Ajaxnewsticker server-side request forgery | 9.8v3.1 | 1.1% | 2023-09-27 | |
| CVE-2023-41448 | phpkobo Ajaxnewsticker cross-site scripting | 6.1v3.1 | 0.6% | 2023-09-27 | |
| CVE-2023-41445 | phpkobo Ajaxnewsticker cross-site scripting | 6.1v3.1 | 0.5% | 2023-09-27 | |
| CVE-2023-41335 | Temporary storage of plaintext passwords during password changes in Matrix synapse | 3.7CNA v3.1 | 0.4% | 2023-09-27 | Fix |
| CVE-2023-41333 | cilium bypass of namespace restrictions in CiliumNetworkPolicy | 6.9CNA v3.1 | 0.5% | 2023-09-27 | Fix |
| CVE-2023-41332 | Denial of service via Kubernetes annotations in specific Cilium configurations | 3.5CNA v3.1 | 0.5% | 2023-09-27 | Fix |
| CVE-2023-41326 | Account takeover via Kanban feature in GLPI | 8.1CNA v3.1 | 35.6% | 2023-09-27 | Emerging ThreatsFix |
| CVE-2023-41324 | Account takeover through API in GLPI | 8.1CNA v3.1 | 0.9% | 2023-09-27 | Fix |
| CVE-2023-41323 | Users login enumeration by unauthenticated user in GLPI | 5.3CNA v3.1 | 33.9% | 2023-09-27 | Emerging ThreatsFix |
| CVE-2023-41322 | Privilege escalation from technician to super-admin in GLPI | 4.9CNA v3.1 | 0.9% | 2023-09-27 | Fix |
| CVE-2023-41321 | Sensitive fields enumeration through API in GLPI | 4.9CNA v3.1 | 0.9% | 2023-09-27 | Fix |
| CVE-2023-41320 | Account takeover via SQL injection in UI layout preferences in GLPI | 8.1CNA v3.1 | 35.3% | 2023-09-27 | Emerging ThreatsFix |
| CVE-2023-41312 | Huawei HarmonyOS permission control vulnerability in the audio module | 5.3v3.1 | 0.4% | 2023-09-27 | Fix |
| CVE-2023-41311 | Huawei HarmonyOS permission control vulnerability in the audio module | 5.3v3.1 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-41310 | Huawei HarmonyOS keep-alive vulnerability in the sticky broadcast mechanism | 3.3v3.1 | 0.2% | 2023-09-27 | Fix |
| CVE-2023-41309 | Huawei HarmonyOS permission control vulnerability in the MediaPlaybackController module | 7.5v3.1 | 0.5% | 2023-09-27 | Fix |
| CVE-2023-41308 | Huawei HarmonyOS screenshot vulnerability in the input module | 7.5v3.1 | 0.5% | 2023-09-27 | Fix |
| CVE-2023-41307 | Huawei HarmonyOS memory overwriting vulnerability in the security module | 7.5v3.1 | 0.6% | 2023-09-27 | Fix |
| CVE-2023-41306 | Huawei HarmonyOS vulnerability of mutex management in the bone voice ID trusted application module | 3.7v3.1 | 0.4% | 2023-09-27 | Fix |
| CVE-2023-41305 | Huawei HarmonyOS inadequate encryption strength | 7.5v3.1 | 0.4% | 2023-09-27 | Fix |
| CVE-2023-41242 | Snap Pixel WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-41241 | SureCart WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-41238 | Social Media and Share Icons WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-09-27 | Fix |
| CVE-2023-41237 | Arya Multipurpose Pro WordPress theme cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-09-27 | |
| CVE-2023-41236 | Happy Elementor Addons Pro WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-09-27 | Fix |
| CVE-2023-41235 | Everest News Pro WordPress theme cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-09-27 | |
| CVE-2023-41233 | Collne Welcart e-Commerce Item List page registration process cross-site scripting | 6.1v3.1 | 0.6% | 2023-09-27 | Fix |
| CVE-2023-41232 | Apple macOS out-of-bounds read | 5.5v3.1 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-41174 | Apple tvOS arbitrary code execution | 7.8v3.1 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-41079 | Apple macOS Privacy preferences vulnerability | 5.5v3.1 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-41078 | Apple macOS incorrect authorization | 5.5v3.1 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-41073 | Apple iOS, iPadOS, macOS, tvOS and watchOS incorrect authorization | 5.5v3.1 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-41071 | Apple macOS use-after-free | 7.8v3.1 | 0.4% | 2023-09-27 | Fix |
| CVE-2023-41070 | Apple macOS logic flaw | 5.5v3.1 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-41068 | Apple tvOS privilege escalation | 7.8v3.1 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-41067 | Apple macOS logic flaw | 5.5v3.1 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-41066 | Apple macOS secure text fields information disclosure | 5.5v3.1 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-41065 | Apple tvOS information disclosure | 3.3v3.1 | 0.4% | 2023-09-27 | Fix |
| CVE-2023-41063 | Apple macOS arbitrary code execution | 7.8v3.1 | 0.4% | 2023-09-27 | Fix |
| CVE-2023-40677 | Vertical Marquee WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-09-27 | |
| CVE-2023-40676 | Slimstat Analytics WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-09-27 | Fix |
| CVE-2023-40675 | Landing Page Builder WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-09-27 | Fix |
| CVE-2023-40669 | Collapse-O-Matic WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-09-27 | |
| CVE-2023-40668 | Save as PDF plugin by Pdfcrowd WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-09-27 | Fix |
| CVE-2023-40667 | Simple URLs WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-09-27 | Fix |
| CVE-2023-40665 | Save as Image plugin by Pdfcrowd WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-09-27 | Fix |
| CVE-2023-40664 | Donations Made Easy Smart Donations WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-09-27 | |
| CVE-2023-40663 | WP VR WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-09-27 | Fix |
| CVE-2023-40605 | Typing Effect WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-09-27 | Fix |
| CVE-2023-40604 | Cookies by JM WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-09-27 | |
| CVE-2023-40541 | This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Sonoma 14. A shortcut may output sensitive user data without consent. | 5.5v3.1 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-40532 | Collne Welcart e-Commerce path traversal | 4.3v3.1 | 0.6% | 2023-09-27 | Fix |
| CVE-2023-40520 | Apple iOS and iPadOS Photos temporary directory vulnerability | 3.3v3.1 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-40456 | Apple iOS, iPadOS, tvOS and watchOS Photos vulnerability | 3.3v3.1 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-40455 | Apple macOS insecure permissions | 10.0v3.1 | 1.0% | 2023-09-27 | Fix |
| CVE-2023-40454 | Apple macOS insecure permissions | 7.1v3.1 | 0.4% | 2023-09-27 | Fix |
| CVE-2023-40452 | Apple macOS arbitrary file write | 7.1v3.1 | 0.4% | 2023-09-27 | Fix |
| CVE-2023-40451 | Apple Safari arbitrary code execution | 8.8v3.1 | 1.0% | 2023-09-27 | Fix |
| CVE-2023-40450 | Apple macOS Gatekeeper security feature bypass | 5.5v3.1 | 0.2% | 2023-09-27 | Fix |
| CVE-2023-40448 | Apple tvOS sandbox escape | 8.6v3.1 | 1.6% | 2023-09-27 | Exploit codeFix |
| CVE-2023-40443 | Apple iOS and iPadOS privilege escalation | 7.8v3.1 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-40441 | Apple macOS resource exhaustion | 6.5v3.1 | 0.9% | 2023-09-27 | Fix |
| CVE-2023-40436 | Apple macOS out-of-bounds read | 9.1v3.1 | 1.0% | 2023-09-27 | Fix |
| CVE-2023-40435 | This issue was addressed by enabling hardened runtime. This issue is fixed in Xcode 15. An app may be able to access App Store credentials. | 5.5v3.1 | 0.2% | 2023-09-27 | Fix |
| CVE-2023-40434 | Apple iOS, iPadOS and macOS Photos Library information disclosure | 3.3v3.1 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-40432 | Apple tvOS arbitrary code execution | 7.8v3.1 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-40431 | Apple iOS and iPadOS arbitrary code execution | 7.8v3.1 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-40429 | Apple tvOS insecure permissions | 5.5v3.1 | 0.6% | 2023-09-27 | Exploit codeFix |
| CVE-2023-40428 | Apple iOS and iPadOS information disclosure | 5.5v3.1 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-40427 | Apple macOS information disclosure | 3.3v3.1 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-40426 | Apple macOS insecure permissions | 5.5v3.1 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-40424 | Apple iOS, iPadOS, macOS and watchOS information disclosure | 5.5v3.1 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-40422 | Apple macOS denial of service | 5.5v3.1 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-40420 | Apple macOS denial of service | 6.5v3.1 | 1.2% | 2023-09-27 | Fix |
| CVE-2023-40419 | Apple tvOS privilege escalation | 7.8v3.1 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-40418 | Apple Watch Ultra Depth app vulnerability | 5.5v3.1 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-40417 | Apple Safari spoofing | 5.4v3.1 | 0.8% | 2023-09-27 | Fix |
| CVE-2023-40412 | Apple macOS arbitrary code execution | 7.8v3.1 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-40410 | Apple macOS out-of-bounds read | 5.5v3.1 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-40409 | Apple macOS arbitrary code execution | 7.8v3.1 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-40407 | Apple macOS denial of service | 7.5v3.1 | 1.2% | 2023-09-27 | Fix |
| CVE-2023-40406 | Apple macOS arbitrary file read | 5.5v3.1 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-40403 | Apple macOS information disclosure | 6.5v3.1 | 1.1% | 2023-09-27 | Fix |
| CVE-2023-40402 | Apple macOS insecure permissions | 5.5v3.1 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-40400 | Apple tvOS arbitrary code execution | 9.8v3.1 | 1.8% | 2023-09-27 | Fix |
| CVE-2023-40399 | Apple iOS, iPadOS, macOS, tvOS and watchOS kernel information disclosure | 5.5v3.1 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-40395 | The issue was addressed with improved handling of caches. This issue is fixed in tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to access contacts. | 3.3v3.1 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-40391 | Apple iOS, iPadOS, macOS, tvOS and Xcode kernel information disclosure | 5.5v3.1 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-40388 | Apple macOS Safari vulnerability | 4.3v3.1 | 0.6% | 2023-09-27 | Fix |
| CVE-2023-40386 | Apple macOS Notes vulnerability | 3.3v3.1 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-40384 | Apple tvOS insecure permissions | 3.3v3.1 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-40333 | Bridge Core WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-09-27 | Fix |
| CVE-2023-40330 | GD Security Headers WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-09-27 | Fix |
| CVE-2023-40219 | Collne Welcart e-Commerce unrestricted file upload | 7.2v3.1 | 0.9% | 2023-09-27 | Fix |
| CVE-2023-40049 | WS_FTP Server information disclosure via directory listing | 5.3CNA v3.1 | 0.9% | 2023-09-27 | Fix |
| CVE-2023-40048 | WS_FTP Server cross-site request forgery (CSRF) | 6.8CNA v3.1 | 0.4% | 2023-09-27 | Fix |
| CVE-2023-40047 | WS_FTP Server stored cross-site scripting | 8.3CNA v3.1 | 0.4% | 2023-09-27 | Fix |
| CVE-2023-40046 | WS_FTP Server SQL injection via Administrative interface | 8.2CNA v3.1 | 1.0% | 2023-09-27 | Fix |
| CVE-2023-40045 | WS_FTP Server Ad Hoc Transfer module reflected cross-site scripting | 8.3CNA v3.1 | 0.9% | 2023-09-27 | Fix |
| CVE-2023-40044 | Progress WS_FTP Server deserialization of untrusted data | 10.0CNA v3.1 | 90.4% | 2023-09-27 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2023-40026 | argoproj argo-cd path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server | 5.0CNA v3.1 | 0.6% | 2023-09-27 | Fix |
| CVE-2023-39434 | Apple macOS use-after-free | 8.8v3.1 | 1.5% | 2023-09-27 | Fix |
| CVE-2023-39378 | SiberianCMS SQL injection | 8.8v3.1 | 0.7% | 2023-09-27 | |
| CVE-2023-39377 | SiberianCMS unrestricted file upload | 7.2v3.1 | 0.8% | 2023-09-27 | |
| CVE-2023-39376 | SiberianCMS improper access control Authorized user may disable a security feature over the network | 6.5v3.1 | 0.4% | 2023-09-27 | |
| CVE-2023-39375 | SiberianCMS improper handling of insufficient privileges | 9.8v3.1 | 0.6% | 2023-09-27 | |
| CVE-2023-39347 | Cilium NetworkPolicy bypass via pod labels | 7.6CNA v3.1 | 0.6% | 2023-09-27 | Fix |
| CVE-2023-39233 | Apple macOS information disclosure | 6.5v3.1 | 0.7% | 2023-09-27 | Fix |
| CVE-2023-38615 | Apple macOS arbitrary code execution | 7.8v3.1 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-38596 | Apple iOS and iPadOS App Transport Security vulnerability | 5.5v3.1 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-38586 | Apple macOS sandbox vulnerability | 10.0v3.1 | 1.0% | 2023-09-27 | Fix |
| CVE-2023-37448 | Apple macOS lock screen information disclosure | 3.3v3.1 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-36851 | Juniper Junos OS SRX Series missing authentication for critical function | 5.3CNA v3.1 | 1.1% | 2023-09-27 | KEVEmerging ThreatsFix |
| CVE-2023-35990 | Apple macOS incorrect authorization | 3.3v3.1 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-35984 | Apple tvOS out-of-bounds write | 4.3v3.1 | 0.7% | 2023-09-27 | Fix |
| CVE-2023-35793 | Cassia Networks Access Controller cross-site request forgery | 8.8NVD v3.1 | 1.1% | 2023-09-27 | KCV |
| CVE-2023-35074 | Apple tvOS arbitrary code execution | 8.8v3.1 | 1.4% | 2023-09-27 | Fix |
| CVE-2023-35071 | SQLi in Mrv Tech's Logging Administration Panel | 9.8CNA v3.1 | 0.7% | 2023-09-27 | Fix |
| CVE-2023-34043 | VMware Aria Operations improper privilege management | 6.7CNA v3.1 | 0.2% | 2023-09-27 | Fix |
| CVE-2023-33972 | Privilege escalation from having CREATE access on a keyspace in Scylladb | 7.2CNA v3.1 | 0.6% | 2023-09-27 | Fix |
| CVE-2023-32541 | Hancom Office 2020 footerr functionality use-after-free | 7.8v3.1 | 0.7% | 2023-09-27 | |
| CVE-2023-32458 | Dell EMC AppSync improper access control | 7.3CNA v3.1 | 0.2% | 2023-09-27 | Fix |
| CVE-2023-32421 | Apple macOS temporary file handling vulnerability | 5.5v3.1 | 0.2% | 2023-09-27 | Fix |
| CVE-2023-32396 | Apple Xcode privilege escalation | 7.8v3.1 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-32377 | Apple macOS buffer overflow | 7.8v3.1 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-32361 | Apple iOS, iPadOS, macOS, tvOS and watchOS cache handling information disclosure | 5.5v3.1 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-30961 | Palantir Gotham UI bug that could lead to incorrect data classification | 6.5CNA v3.1 | 0.4% | 2023-09-27 | Fix |
| CVE-2023-30959 | Stored XSS via javascript URI in Apollo Change requests comment | 4.1CNA v3.1 | 0.4% | 2023-09-27 | Fix |
| CVE-2023-30493 | Ultimate Addons for Contact Form 7 WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-09-27 | Fix |
| CVE-2023-30472 | URL Shortener by MyThemeShop WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-09-27 | |
| CVE-2023-30471 | WP Search Analytics WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-09-27 | Fix |
| CVE-2023-29497 | Apple macOS temporary file handling vulnerability | 3.3v3.1 | 0.2% | 2023-09-27 | Fix |
| CVE-2023-28790 | Simple Staff List WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-09-27 | Fix |
| CVE-2023-28490 | Mortgage Calculator Estatik WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-09-27 | |
| CVE-2023-28055 | Dell NetWorker improper authorization | 8.8CNA v3.1 | 0.4% | 2023-09-27 | Fix |
| CVE-2023-27628 | Sitekit WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-09-27 | Fix |
| CVE-2023-27622 | GuruWalk Affiliates WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2023-09-27 | |
| CVE-2023-27617 | David F. Carr RSVPMaker stored cross-site scripting | 4.8v3.1 | 0.4% | 2023-09-27 | Fix |
| CVE-2023-27616 | David F. Carr RSVPMaker stored cross-site scripting | 6.1NVD v3.1 | 0.4% | 2023-09-27 | Fix |
| CVE-2023-25483 | Easy Coming Soon WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-09-27 | |
| CVE-2023-23958 | Symantec Protection Engine hash leak | 6.8CNA v3.1 | 0.6% | 2023-09-27 | Fix |
| CVE-2023-23495 | Apple macOS insecure permissions | 5.5v3.1 | 0.2% | 2023-09-27 | Fix |
| CVE-2023-20268 | Cisco Access Point Software uncontrolled resource consumption | 4.7CNA v3.1 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-20262 | Cisco SD-WAN Solution crash | 5.3CNA v3.1 | 1.0% | 2023-09-27 | Fix |
| CVE-2023-20254 | Cisco SD-WAN vManage incorrect permission assignment | 7.2CNA v3.1 | 0.8% | 2023-09-27 | Fix |
| CVE-2023-20253 | Cisco SD-WAN vManage incorrect user management | 7.1CNA v3.1 | 0.2% | 2023-09-27 | Fix |
| CVE-2023-20252 | Cisco SD-WAN vManage missing authorization | 9.8CNA v3.1 | 1.1% | 2023-09-27 | Fix |
| CVE-2023-20251 | Cisco Wireless LAN Controller (WLC) memory leak | 6.1CNA v3.1 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-20231 | Cisco IOS XE Software OS command injection | 8.8CNA v3.1 | 1.0% | 2023-09-27 | Fix |
| CVE-2023-20227 | Cisco IOS XE Software denial of service | 8.6CNA v3.1 | 0.9% | 2023-09-27 | Fix |
| CVE-2023-20226 | Cisco IOS XE Software denial of service | 8.6CNA v3.1 | 0.9% | 2023-09-27 | Fix |
| CVE-2023-20223 | Cisco Digital Network Architecture Center (DNA Center) improper access control | 8.6CNA v3.1 | 0.6% | 2023-09-27 | Fix |
| CVE-2023-20202 | Cisco IOS XE Software excessive memory allocation | 6.1CNA v3.1 | 0.3% | 2023-09-27 | Fix |
| CVE-2023-20187 | Cisco IOS XE Software out-of-range pointer offset | 8.6CNA v3.1 | 0.9% | 2023-09-27 | Fix |
| CVE-2023-20186 | Cisco IOS improper authorization | 8.0CNA v3.1 | 0.8% | 2023-09-27 | Fix |
| CVE-2023-20179 | Cisco SD-WAN vManage cross-site scripting | 4.3CNA v3.1 | 0.4% | 2023-09-27 | Fix |
| CVE-2023-20176 | Cisco Aironet Access Point Software resource exhaustion | 5.8CNA v3.1 | 0.9% | 2023-09-27 | Fix |
| CVE-2023-20109 | Cisco IOS and IOS XE Group Encrypted Transport VPN out-of-bounds write | 6.6CNA v3.1 | 2.5% | 2023-09-27 | KEVFix |
| CVE-2023-20034 | Cisco SD-WAN vManage hard-coded credentials | 7.5CNA v3.1 | 0.8% | 2023-09-27 | Fix |
| CVE-2023-20033 | Cisco IOS XE Software resource exhaustion | 8.6CNA v3.1 | 0.9% | 2023-09-27 | Fix |
| CVE-2023-5223 | HimitZH HOJ Topic Handler vulnerability | 9.9v3.1 | 0.9% | 2023-09-27 | |
| CVE-2023-5222 | Viessmann Vitogate 300 Web Management interface vitogate.cgi isValidUser hard-coded password | 9.8v3.1 | 80.2% | 2023-09-27 | Reported exploitedNucleiExploit codeFix |
| CVE-2023-5221 | ForU CMS index.php code injection | 9.8v3.1 | 1.3% | 2023-09-27 | |
| CVE-2023-5192 | Excessive Data Query Operations in a Large Data Table in pimcore/demo | 6.5v3.1 | 0.8% | 2023-09-27 | Fix |
| CVE-2023-5184 | Zephyr IPM driver buffer overflow | 7.0CNA v3.1 | 0.4% | 2023-09-27 | |
| CVE-2023-5183 | Illumio Core PCE authenticated RCE due to unsafe JSON deserialization | 9.9CNA v3.1 | 1.8% | 2023-09-27 | Fix |
| CVE-2023-5176 | Mozilla Firefox memory safety bugs | 9.8v3.1 | 1.2% | 2023-09-27 | Fix |
| CVE-2023-5175 | Mozilla Firefox use-after-free | 9.8v3.1 | 0.8% | 2023-09-27 | Fix |
| CVE-2023-5174 | Mozilla Firefox use-after-free | 9.8v3.1 | 1.0% | 2023-09-27 | Fix |
| CVE-2023-5173 | Mozilla Firefox integer overflow | 7.5v3.1 | 0.7% | 2023-09-27 | Fix |
| CVE-2023-5172 | Mozilla Firefox use-after-free | 9.8v3.1 | 0.8% | 2023-09-27 | Fix |
| CVE-2023-5171 | Mozilla Firefox use-after-free | 6.5v3.1 | 1.0% | 2023-09-27 | Fix |
| CVE-2023-5170 | Mozilla Firefox memory leak | 7.4v3.1 | 0.6% | 2023-09-27 | Fix |
| CVE-2023-5169 | Mozilla Firefox out-of-bounds write | 6.5v3.1 | 1.0% | 2023-09-27 | Fix |
| CVE-2023-5168 | Mozilla Firefox out-of-bounds write | 9.8v3.1 | 0.9% | 2023-09-27 | Fix |
| CVE-2023-5162 | Options for Twenty Seventeen WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.6% | 2023-09-27 | Fix |
| CVE-2023-5161 | Modal Window WordPress plugin authenticated (Contributor+) stored cross-site scripting via shortcode | 5.4v3.1 | 0.6% | 2023-09-27 | Fix |
| CVE-2023-5157 | MariaDB: Node crashes with transport endpoint is not connected mysqld got signal 6 | 7.5NVD v3.1 | 2.2% | 2023-09-27 | Fix |
| CVE-2023-5135 | Simple Cloudflare Turnstile WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.6% | 2023-09-27 | Fix |
| CVE-2023-4934 | Usta AYBS insecure direct object reference | 8.8CNA v3.1 | 1.2% | 2023-09-27 | Fix |
| CVE-2023-4737 | SQLi in Hedef Trackings Admin Panel | 9.8CNA v3.1 | 1.0% | 2023-09-27 | Fix |
| CVE-2023-4565 | Huawei HarmonyOS broadcast permission control vulnerability in the framework module | 5.3v3.1 | 0.5% | 2023-09-27 | Fix |
| CVE-2023-4523 | Real Time Automation 460 Series cross-site scripting | 6.1NVD v3.1 | 0.4% | 2023-09-27 | Fix |
| CVE-2023-4506 | Active Directory Integration / LDAP Integration WordPress plugin LDAP Passback | 6.5v3.1 | 0.7% | 2023-09-27 | Fix |
| CVE-2023-4505 | Staff / Employee Business Directory for Active Directory WordPress plugin LDAP Passback | 4.9v3.1 | 0.7% | 2023-09-27 | Fix |
| CVE-2023-4423 | WP Event Manager WordPress plugin stored cross-site scripting | 4.8v3.1 | 0.5% | 2023-09-27 | Fix |
| CVE-2023-4264 | Potential buffer overflow vulnerabilities in the Zephyr Bluetooth subsystem | 7.1CNA v3.1 | 1.1% | 2023-09-27 | |
| CVE-2023-4260 | Potential off-by-one buffer overflow vulnerability in the Zephyr FS subsystem | 6.3CNA v3.1 | 0.9% | 2023-09-27 | |
| CVE-2023-4129 | Dell Data Protection Central inadequate encryption strength | 5.9CNA v3.1 | 0.2% | 2023-09-27 | Fix |
| CVE-2023-4066 | Red Hat RHEL-8 based Middleware Containers cleartext storage of sensitive information | 5.5CNA v3.1 | 0.2% | 2023-09-27 | Fix |
| CVE-2023-4065 | Red Hat RHEL-8 based Middleware Containers operator: Plaintext password in operator log | 5.5CNA v3.1 | 0.2% | 2023-09-27 | Fix |
| CVE-2023-4003 | One Identity Password Manager Unauthenticated physical access privilege escalation | 6.8NVD v3.1 | 0.5% | 2023-09-27 | |
| CVE-2023-3767 | OS command injection on EasyPHP Webserver | 9.8v3.1 | 1.5% | 2023-09-27 | Fix |
| CVE-2023-3223 | Red Hat Fuse Undertow: Outofmemoryerror due to @multipartconfig handling | 7.5CNA v3.1 | 2.7% | 2023-09-27 | Fix |
| CVE-2023-2358 | Hitachi Vantara Pentaho Business Analytics Server Password Stored in a Recoverable Format | 4.9v3.1 | 0.2% | 2023-09-27 | Fix |
| CVE-2023-2315 | Path traversal in OpenCart to | 8.8v3.1 | 0.8% | 2023-09-27 | Fix |
| CVE-2023-0833 | Red Hat A-mq Streams: Component version with information disclosure flaw | 4.7CNA v3.1 | 0.4% | 2023-09-27 | Fix |
| CVE-2023-0456 | Red Hat APIcast OIDC module improper authorization | 7.5NVD v3.1 | 0.6% | 2023-09-27 | |
| CVE-2023-43325 | mooSocial data[redirect_url] parameter reflected cross-site scripting | 6.1NVD v3.1 | 2.0% | 2023-09-26 | Nuclei |
| CVE-2023-41074 | Apple tvOS code injection | 8.8NVD v3.1 | 4.1% | 2023-09-26 | Fix |
| CVE-2023-5197 | Linux kernel A use-after-free | 6.6NVD v3.1 | 0.4% | 2023-09-26 | Fix |
| CVE-2023-4259 | Potential buffer overflow vulnerabilities in the Zephyr eS-WiFi driver | 7.1CNA v3.1 | 0.8% | 2023-09-26 | |
| CVE-2023-43644 | Improper authentication in the SOCKS5 inbound in sing-box | 9.1CNA v3.1 | 0.8% | 2023-09-25 | Fix |
| CVE-2023-43642 | Missing upper bound check on chunk length in snappy-java | 7.5CNA v3.1 | 1.2% | 2023-09-25 | Fix |
| CVE-2023-43458 | Resort Reservation System cross-site scripting | 5.4v3.1 | 0.5% | 2023-09-25 | |
| CVE-2023-43457 | oretnom23 Service Provider Management System improper privilege management | 9.8v3.1 | 1.0% | 2023-09-25 | |
| CVE-2023-43456 | oretnom23 Service Provider Management System cross-site scripting | 5.4v3.1 | 0.7% | 2023-09-25 | |
| CVE-2023-43382 | iteachyou Dreamer CMS itechyou path traversal | 8.8v3.1 | 1.5% | 2023-09-25 | |
| CVE-2023-43339 | CMS Made Simple cmsmadesimple v.2.2.18 cross-site scripting | 6.1v3.1 | 0.6% | 2023-09-25 | Exploit code |
| CVE-2023-43326 | mooSocial multiple url reflected cross-site scripting | 6.1v3.1 | 1.6% | 2023-09-25 | NucleiExploit code |
| CVE-2023-43319 | IceWarp WebClient Sign-In page cross-site scripting | 6.1v3.1 | 0.4% | 2023-09-25 | |
| CVE-2023-43278 | Seacms admin_manager.php cross-site request forgery | 8.8v3.1 | 0.2% | 2023-09-25 | |
| CVE-2023-43256 | Gladys Assistant path traversal | 6.5v3.1 | 0.7% | 2023-09-25 | |
| CVE-2023-43141 | TOTOLINK A3700R improper access control | 9.8v3.1 | 0.7% | 2023-09-25 | |
| CVE-2023-43132 | Szvone Vmqphp SQL injection | 6.5v3.1 | 0.6% | 2023-09-25 | |
| CVE-2023-43131 | Maxiguvenlik General Device Manager buffer overflow | 9.8v3.1 | 0.9% | 2023-09-25 | |
| CVE-2023-42817 | Cross-site scripting (XSS) in pimcore admin-ui-classic-bundle translations | 5.4CNA v3.1 | 0.4% | 2023-09-25 | Fix |
| CVE-2023-42753 | Kernel: Netfilter: Potential slab-out-of-bound access due to integer underflow | 7.8NVD v3.1 | 0.5% | 2023-09-25 | Fix |
| CVE-2023-42426 | Froala Editor cross-site scripting | 6.1v3.1 | 0.8% | 2023-09-25 | Exploit code |
| CVE-2023-41949 | iFolders WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2023-09-25 | Fix |
| CVE-2023-41948 | Cookie Notice and Consent WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2023-09-25 | Fix |
| CVE-2023-41874 | Order Delivery Date for WooCommerce WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-09-25 | Fix |
| CVE-2023-41872 | WoodMart WordPress theme cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-09-25 | Fix |
| CVE-2023-41871 | Poll Maker WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-09-25 | Fix |
| CVE-2023-41868 | Stagtools WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-09-25 | Fix |
| CVE-2023-41867 | AcyMailing SMTP Newsletter WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-09-25 | Fix |
| CVE-2023-41863 | PeproDev CF7 Database WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-09-25 | Fix |
| CVE-2023-41419 | Gevent allows remote attacker to escalate privileges | 9.8v3.1 | 1.3% | 2023-09-25 | Fix |
| CVE-2023-41303 | Huawei HarmonyOS command injection vulnerability in the distributed file system module | 7.5v3.1 | 0.6% | 2023-09-25 | Fix |
| CVE-2023-41302 | Huawei HarmonyOS redirection permission verification vulnerability in the home screen module | 7.5v3.1 | 0.5% | 2023-09-25 | Fix |
| CVE-2023-41301 | Huawei HarmonyOS vulnerability of unauthorized API access in the PMS module | 7.5v3.1 | 0.4% | 2023-09-25 | Fix |
| CVE-2023-41300 | Huawei HarmonyOS vulnerability of parameters not being strictly verified in the PMS module | 7.5v3.1 | 0.4% | 2023-09-25 | Fix |
| CVE-2023-41299 | Huawei HarmonyOS DoS vulnerability in the PMS module | 7.5v3.1 | 0.4% | 2023-09-25 | Fix |
| CVE-2023-41298 | Huawei HarmonyOS vulnerability of permission control in the window module | 7.5v3.1 | 0.3% | 2023-09-25 | Fix |
| CVE-2023-41297 | Huawei HarmonyOS and EMUI HiviewTunner module vulnerability | 9.8v3.1 | 0.4% | 2023-09-25 | Fix |
| CVE-2023-41296 | Huawei HarmonyOS vulnerability of missing authorization in the kernel module | 9.1v3.1 | 0.3% | 2023-09-25 | Fix |
| CVE-2023-41295 | Huawei HarmonyOS vulnerability of improper permission management in the displayengine module | 5.3v3.1 | 0.2% | 2023-09-25 | Fix |
| CVE-2023-41294 | Huawei HarmonyOS resource exhaustion | 9.8v3.1 | 0.4% | 2023-09-25 | Fix |
| CVE-2023-41293 | Huawei HarmonyOS data security classification vulnerability in the DDMP module | 7.5v3.1 | 0.3% | 2023-09-25 | Fix |
| CVE-2023-40581 | yt-dlp command injection when using `%q` in `--exec` on Windows | 8.4CNA v3.1 | 1.3% | 2023-09-25 | Fix |
| CVE-2023-40163 | Accusoft ImageGear out-of-bounds write | 9.8v3.1 | 1.0% | 2023-09-25 | |
| CVE-2023-39640 | Uplight Cookie Law SQL injection | 9.8v3.1 | 0.5% | 2023-09-25 | Fix |
| CVE-2023-39453 | Accusoft ImageGear tif_parse_sub_IFD functionality use-after-free | 9.8v3.1 | 1.2% | 2023-09-25 | |
| CVE-2023-39409 | Huawei HarmonyOS DoS vulnerability in the PMS module | 7.5v3.1 | 0.4% | 2023-09-25 | Fix |
| CVE-2023-39408 | Huawei HarmonyOS DoS vulnerability in the PMS module | 7.5v3.1 | 0.4% | 2023-09-25 | Fix |
| CVE-2023-39407 | Huawei HarmonyOS path traversal | 9.1v3.1 | 0.4% | 2023-09-25 | Fix |
| CVE-2023-38907 | TP-Link Tapo session key encryption vulnerability | 7.5v3.1 | 0.7% | 2023-09-25 | |
| CVE-2023-35002 | Accusoft ImageGear pictwread functionality heap-based buffer overflow | 9.8v3.1 | 1.3% | 2023-09-25 | Fix |
| CVE-2023-32653 | Accusoft ImageGear dcm_pixel_data_decode functionality out-of-bounds write | 8.8NVD v3.1 | 1.1% | 2023-09-25 | |
| CVE-2023-32614 | Accusoft ImageGear create_png_object functionality heap-based buffer overflow | 9.8v3.1 | 0.7% | 2023-09-25 | |
| CVE-2023-32284 | Accusoft ImageGear tiff_planar_adobe functionality out-of-bounds write | 9.8v3.1 | 0.8% | 2023-09-25 | |
| CVE-2023-28393 | Accusoft ImageGear stack-based buffer overflow | 8.8v3.1 | 0.5% | 2023-09-25 | |
| CVE-2023-23567 | Accusoft ImageGear CreateDIBfromPict functionality heap-based buffer overflow | 8.8v3.1 | 1.0% | 2023-09-25 | |
| CVE-2023-5166 | Docker Desktop allows Access Token theft via a crafted extension icon URL | 8.0CNA v3.1 | 0.8% | 2023-09-25 | Fix |
| CVE-2023-5165 | Docker Desktop allows Enhanced Container Isolation bypass via debug shell | 7.1CNA v3.1 | 0.3% | 2023-09-25 | Fix |
| CVE-2023-5158 | Linux kernel vhost driver denial of service | 5.5NVD v3.1 | 0.2% | 2023-09-25 | Fix |
| CVE-2023-5156 | Glibc: Dos due to memory leak in getaddrinfo.c | 7.5NVD v3.1 | 1.6% | 2023-09-25 | Fix |
| CVE-2023-5154 | D-Link DAR-8000 changelogo.php unrestricted upload | 8.8v3.1 | 15.1% | 2023-09-25 | Fix |
| CVE-2023-5153 | D-Link DAR-8000 querysql.php SQL injection | 6.5v3.1 | 1.7% | 2023-09-25 | Fix |
| CVE-2023-5152 | D-Link DAR-7000/DAR-8000 importexport.php SQL injection | 6.5v3.1 | 8.5% | 2023-09-25 | Fix |
| CVE-2023-5151 | D-Link DAR-8000 autheditpwd.php SQL injection | 8.8v3.1 | 81.5% | 2023-09-25 | Fix |
| CVE-2023-5150 | D-Link DAR-7000/DAR-8000 web.php unrestricted upload | 8.8v3.1 | 22.8% | 2023-09-25 | Fix |
| CVE-2023-5149 | D-Link DAR-7000 userattestation.php unrestricted upload | 8.8v3.1 | 21.0% | 2023-09-25 | Fix |
| CVE-2023-5148 | D-Link DAR-7000/DAR-8000 uploadfile.php unrestricted upload | 8.8v3.1 | 30.7% | 2023-09-25 | Fix |
| CVE-2023-5147 | D-Link DAR-7000 updateos.php unrestricted upload | 8.8v3.1 | 26.6% | 2023-09-25 | Fix |
| CVE-2023-5146 | D-Link DAR-7000/DAR-8000 updatelib.php unrestricted upload | 8.8v3.1 | 32.9% | 2023-09-25 | Fix |
| CVE-2023-5145 | D-Link DAR-7000 licence.php unrestricted upload | 8.8v3.1 | 34.3% | 2023-09-25 | Fix |
| CVE-2023-4892 | Teedy stored cross-site scripting (XSS) | 4.6v3.1 | 0.4% | 2023-09-25 | |
| CVE-2023-4631 | DoLogin Security WordPress plugin IP spoofing | 5.3NVD v3.1 | 0.7% | 2023-09-25 | Exploit codeFix |
| CVE-2023-4549 | DoLogin Security WordPress plugin unauthenticated stored cross-site scripting | 6.1NVD v3.1 | 0.7% | 2023-09-25 | Exploit codeFix |
| CVE-2023-4521 | Import XML and RSS Feeds WordPress plugin unauthenticated RCE | 9.8NVD v3.1 | 40.8% | 2023-09-25 | NucleiFix |
| CVE-2023-4502 | Translate WordPress with GTranslate plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2023-09-25 | Fix |
| CVE-2023-4490 | WP Job Portal WordPress plugin unauthenticated SQLi | 9.8NVD v3.1 | 3.6% | 2023-09-25 | NucleiFix |
| CVE-2023-4476 | Locatoraid Store Locator WordPress plugin reflected XSS | 6.1NVD v3.1 | 0.5% | 2023-09-25 | Fix |
| CVE-2023-4300 | Import XML and RSS Feeds WordPress plugin Admin+ arbitrary file upload | 7.2NVD v3.1 | 2.0% | 2023-09-25 | Fix |
| CVE-2023-4281 | Activity Log WordPress plugin IP spoofing | 5.3NVD v3.1 | 0.7% | 2023-09-25 | Exploit codeFix |
| CVE-2023-4258 | Zephyr Bluetooth mesh provisioning vulnerability | 8.6CNA v3.1 | 0.6% | 2023-09-25 | Fix |
| CVE-2023-4238 | miniOrange Prevent files / folders access arbitrary file upload | 7.2NVD v3.1 | 1.6% | 2023-09-25 | Fix |
| CVE-2023-4156 | gawk heap out of bound read in builtin.c | 7.1NVD v3.1 | 0.4% | 2023-09-25 | Fix |
| CVE-2023-4148 | Ditty WordPress plugin reflected XSS | 6.1NVD v3.1 | 0.8% | 2023-09-25 | NucleiFix |
| CVE-2023-3664 | FileOrganizer WordPress plugin Admin+ arbitrary file access | 7.2NVD v3.1 | 0.8% | 2023-09-25 | Fix |
| CVE-2023-3550 | Stored XSS leads to privilege escalation in MediaWiki | 9.0NVD v3.1 | 1.4% | 2023-09-25 | Fix |
| CVE-2023-3547 | All in One B2B for WooCommerce WordPress plugin Multiple CSRF | 8.8NVD v3.1 | 0.4% | 2023-09-25 | |
| CVE-2023-3226 | Popup Builder WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.4% | 2023-09-25 | Fix |
| CVE-2023-0633 | In Docker Desktop on Windows an argument injection to installer may result in LPE | 7.2CNA v3.1 | 0.4% | 2023-09-25 | Fix |
| CVE-2023-0627 | Docker Desktop.x allows --no-windows-containers flag bypass | 6.7CNA v3.1 | 0.3% | 2023-09-25 | Fix |
| CVE-2023-0626 | Docker Desktop is vulnerable to RCE via query parameters in message-box route | 8.0CNA v3.1 | 0.9% | 2023-09-25 | Fix |
| CVE-2023-0625 | Docker Desktop is vulnerable to RCE via a crafted extension description or changelog | 8.0CNA v3.1 | 0.9% | 2023-09-25 | Fix |
| CVE-2023-5144 | D-Link DAR-7000/DAR-8000 updateos.php unrestricted upload | 8.8v3.1 | 6.0% | 2023-09-24 | Fix |
| CVE-2023-5143 | D-Link DAR-7000 webmailattach.php privilege escalation | 9.8v3.1 | 3.6% | 2023-09-24 | Fix |
| CVE-2023-5142 | H3C ER6300G2 Config file userLogin.asp path traversal | 5.3v3.1 | 2.3% | 2023-09-24 | Exploit code |
| CVE-2023-1636 | openstack-barbican incomplete container isolation | 5.0NVD v3.1 | 0.5% | 2023-09-24 | |
| CVE-2023-1633 | Insecure Barbican configuration file leaking credential | 5.5NVD v3.1 | 0.2% | 2023-09-24 | Fix |
| CVE-2023-1625 | openstack-heat information leak in API | 5.0NVD v3.1 | 0.7% | 2023-09-24 | Fix |
| CVE-2023-1260 | kube-apiserver authentication bypass | 8.0CNA v3.1 | 1.6% | 2023-09-24 | Fix |
| CVE-2023-43470 | Janobe Online Voting System SQL injection | 9.8v3.1 | 1.2% | 2023-09-23 | |
| CVE-2023-43469 | Online Job Portal janobe SQL injection | 9.8v3.1 | 1.0% | 2023-09-23 | |
| CVE-2023-43468 | Online Job Portal janobe SQL injection | 9.8v3.1 | 1.2% | 2023-09-23 | |
| CVE-2023-43338 | Cesanta mJS out-of-bounds write | 9.8v3.1 | 0.9% | 2023-09-23 | |
| CVE-2023-5134 | Easy Registration Forms WordPress plugin information disclosure | 4.3CNA v3.1 | 0.5% | 2023-09-23 | Fix |
| CVE-2023-5125 | Contact Form by FormGet WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-09-23 | Fix |
| CVE-2023-43784 | Plesk onyx resource exposure | 7.5v3.1 | 0.5% | 2023-09-22 | Fix |
| CVE-2023-43783 | Falktx Cadence symlink following | 7.5v3.1 | 0.6% | 2023-09-22 | |
| CVE-2023-43782 | Falktx Cadence resource exposure | 5.5v3.1 | 0.3% | 2023-09-22 | |
| CVE-2023-43771 | Mikebrady Not Quite Ptp crash | 5.5v3.1 | 0.2% | 2023-09-22 | Fix |
| CVE-2023-43770 | Roundcube Webmail persistent cross-site scripting (XSS) | 6.1v3.1 | 63.7% | 2023-09-22 | KEVEmerging ThreatsExploit codeKCVFix |
| CVE-2023-43767 | F-Secure Elements Endpoint Protection denial of service | 7.5v3.1 | 0.5% | 2023-09-22 | |
| CVE-2023-43766 | F-Secure Elements Endpoint Protection improper privilege management | 7.8v3.1 | 0.2% | 2023-09-22 | |
| CVE-2023-43765 | F-Secure Elements Endpoint Protection denial of service | 7.5v3.1 | 0.5% | 2023-09-22 | |
| CVE-2023-43763 | WithSecure F-secure Policy Manager cross-site scripting | 6.1v3.1 | 0.3% | 2023-09-22 | |
| CVE-2023-43762 | WithSecure Policy Manager Proxy unauthenticated remote code execution | 9.8v3.1 | 1.1% | 2023-09-22 | |
| CVE-2023-43761 | F-Secure Elements Endpoint Protection infinite loop | 7.5v3.1 | 0.5% | 2023-09-22 | |
| CVE-2023-43760 | F-Secure Elements Endpoint Protection denial of service | 7.5v3.1 | 0.5% | 2023-09-22 | |
| CVE-2023-43640 | TaxonWorks SQL injection | 6.5CNA v3.1 | 0.5% | 2023-09-22 | Fix |
| CVE-2023-43270 | dst-admin code injection | 9.8v3.1 | 1.4% | 2023-09-22 | |
| CVE-2023-43144 | Projectworlds Asset Management System Project In PHP SQL injection | 9.8v3.1 | 0.9% | 2023-09-22 | Exploit code |
| CVE-2023-43130 | D-Link Dir-806 OS command injection | 9.8v3.1 | 2.4% | 2023-09-22 | |
| CVE-2023-43129 | D-Link Dir-806 OS command injection | 9.8v3.1 | 2.4% | 2023-09-22 | |
| CVE-2023-43090 | Gnome-shell: Screenshot tool allows viewing open windows when session is locked | 5.5NVD v3.1 | 0.3% | 2023-09-22 | Fix |
| CVE-2023-42821 | Github.com/gomarkdown/markdown out-of-bounds read while parsing citations | 7.5CNA v3.1 | 1.3% | 2023-09-22 | Fix |
| CVE-2023-42812 | Galaxy vulnerable to server side request forgery during data imports | 6.3CNA v3.1 | 0.4% | 2023-09-22 | Fix |
| CVE-2023-42811 | AEADs/Aes-gcm: Plaintext exposed in decrypt_in_place_detached even on tag verification failure | 4.7CNA v3.1 | 0.2% | 2023-09-22 | Fix |
| CVE-2023-42798 | AutomataCI Release Job can Revert Repo to First Commit | 8.2CNA v3.1 | 0.4% | 2023-09-22 | Fix |
| CVE-2023-41031 | Juplink RX4-1500 homemng.htm command injection | 8.8v3.1 | 1.7% | 2023-09-22 | |
| CVE-2023-41029 | Juplink RX4-1500 command injection | 8.8v3.1 | 2.2% | 2023-09-22 | |
| CVE-2023-41027 | Juplink RX4-1500 credential disclosure | 8.8v3.1 | 0.8% | 2023-09-22 | |
| CVE-2023-40989 | SQL injection in JeecgBoot | 9.8v3.1 | 1.8% | 2023-09-22 | Exploit codeFix |
| CVE-2023-38346 | Wind River Vxworks path traversal | 8.8v3.1 | 1.2% | 2023-09-22 | Fix |
| CVE-2023-34319 | Linux: Buffer overrun in netback due to unusual packet | 7.8NVD v3.1 | 0.3% | 2023-09-22 | Fix |
| CVE-2023-31719 | frangoteam FUXA SQL injection | 9.8v3.1 | 26.0% | 2023-09-22 | Exploit code |
| CVE-2023-31718 | FUXA local file inclusion | 7.5v3.1 | 1.5% | 2023-09-22 | Exploit code |
| CVE-2023-31717 | frangoteam FUXA SQL injection | 7.5v3.1 | 1.6% | 2023-09-22 | Exploit code |
| CVE-2023-31716 | FUXA vulnerable to local file inclusion | 7.5v3.1 | 1.2% | 2023-09-22 | Exploit code |
| CVE-2023-23766 | Incorrect comparison vulnerability in GitHub Enterprise Server leading to commit smuggling | 4.5CNA v3.1 | 0.7% | 2023-09-22 | Fix |
| CVE-2023-23364 | QNAP Multimedia Console buffer overflow | 8.1CNA v3.1 | 0.9% | 2023-09-22 | Fix |
| CVE-2023-23363 | QNAP QTS buffer overflow | 8.1CNA v3.1 | 0.9% | 2023-09-22 | Fix |
| CVE-2023-23362 | QNAP QTS, QuTS hero and QuTScloud OS command injection | 8.8CNA v3.1 | 1.6% | 2023-09-22 | Fix |
| CVE-2023-5002 | pgAdmin 4 Pgadmin4: Remote code execution by an authenticated user | 8.8NVD v3.1 | 1.8% | 2023-09-22 | Fix |
| CVE-2023-4774 | WP-Matomo Integration (WP-Piwik) WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.6% | 2023-09-22 | Fix |
| CVE-2023-4716 | Media Library Assistant WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2023-09-22 | Fix |
| CVE-2023-43669 | Tungstenite allows remote attackers to cause a denial of service | 7.5v3.1 | 1.6% | 2023-09-21 | Fix |
| CVE-2023-43637 | LF-Edge, Zededa EVE OS Vault Key Partially Predetermined | 7.8v3.1 | 0.1% | 2023-09-21 | Fix |
| CVE-2023-43634 | LF-Edge, Zededa EVE OS Config Partition not Protected by Measured Boot | 8.8v3.1 | 0.2% | 2023-09-21 | Fix |
| CVE-2023-43633 | LF-Edge, Zededa EVE OS Debug Functions Unlockable without Triggering Measured Boot | 8.8v3.1 | 0.2% | 2023-09-21 | Fix |
| CVE-2023-43632 | LF-Edge, Zededa EVE OS Freely Allocate Buffer on the Stack with Data from Socket | 9.9v3.1 | 0.5% | 2023-09-21 | Fix |
| CVE-2023-43631 | LF-Edge, Zededa EVE OS SSH as Root Unlockable without Triggering Measured Boot | 8.8v3.1 | 0.2% | 2023-09-21 | Fix |
| CVE-2023-43309 | Webmin There is a stored cross-site scripting | 4.8v3.1 | 0.4% | 2023-09-21 | |
| CVE-2023-43274 | PHP Jabbers PHP Shopping Cart SQL injection | 7.5v3.1 | 0.6% | 2023-09-21 | |
| CVE-2023-43242 | D-Link DIR-816 A2 stack-based buffer overflow | 9.8v3.1 | 1.0% | 2023-09-21 | Emerging Threats |
| CVE-2023-43241 | D-Link DIR-823G out-of-bounds write | 9.8v3.1 | 1.0% | 2023-09-21 | Emerging Threats |
| CVE-2023-43240 | D-Link DIR-816 A2 out-of-bounds write | 9.8v3.1 | 13.3% | 2023-09-21 | Emerging Threats |
| CVE-2023-43239 | D-Link DIR-816 A2 stack-based buffer overflow | 9.8v3.1 | 13.3% | 2023-09-21 | Emerging Threats |
| CVE-2023-43238 | D-Link DIR-816 A2 stack-based buffer overflow | 9.8v3.1 | 1.0% | 2023-09-21 | Emerging Threats |
| CVE-2023-43237 | D-Link DIR-816 A2 stack-based buffer overflow | 9.8v3.1 | 13.3% | 2023-09-21 | Emerging Threats |
| CVE-2023-43236 | D-Link DIR-816 A2 stack-based buffer overflow | 9.8v3.1 | 0.9% | 2023-09-21 | |
| CVE-2023-43235 | D-Link DIR-823G out-of-bounds write | 9.8v3.1 | 1.0% | 2023-09-21 | Emerging Threats |
| CVE-2023-43128 | D-Link Dir-806 command injection | 9.8v3.1 | 2.4% | 2023-09-21 | |
| CVE-2023-42810 | Systeminformation SSID command injection | 9.8CNA v3.1 | 2.2% | 2023-09-21 | Fix |
| CVE-2023-42807 | Frappe LMS SQL injection issue on People page | 6.3CNA v3.1 | 0.4% | 2023-09-21 | |
| CVE-2023-42806 | input-output-hk hydra snapshot signature not including HeadID will allow replay attacks | 6.5CNA v3.1 | 0.5% | 2023-09-21 | Fix |
| CVE-2023-42805 | quinn-rs quinn quinn-proto denial of service | 7.5CNA v3.1 | 0.9% | 2023-09-21 | Fix |
| CVE-2023-42482 | Samsung Exynos 2200 use-after-free | 7.5v3.1 | 0.3% | 2023-09-21 | Fix |
| CVE-2023-42458 | Zope vulnerable to stored cross-site scripting with SVG images | 3.7CNA v3.1 | 0.7% | 2023-09-21 | Fix |
| CVE-2023-42457 | plone.REST vulnerable to denial of service when ++API++ is used many times | 7.5CNA v3.1 | 1.0% | 2023-09-21 | Fix |
| CVE-2023-42456 | sudo-rs Session file relative path traversal | 3.3CNA v3.1 | 0.6% | 2023-09-21 | Fix |
| CVE-2023-42280 | Springernature Mee-Admin path traversal | 7.5v3.1 | 0.9% | 2023-09-21 | |
| CVE-2023-42279 | iteachyou Dreamer CMS SQL injection | 9.8v3.1 | 0.7% | 2023-09-21 | |
| CVE-2023-42261 | Opensecurity Mobile Security Framework incorrect default permissions | 7.5v3.1 | 0.7% | 2023-09-21 | Fix |
| CVE-2023-41993 | Apple Multiple Products WebKit code execution | 8.8v3.1 | 24.5% | 2023-09-21 | KEVExploit codeKCVFix |
| CVE-2023-41992 | Apple Multiple Products Kernel privilege escalation | 7.8v3.1 | 9.6% | 2023-09-21 | KEVExploit codeKCVFix |
| CVE-2023-41991 | Apple Multiple Products improper certificate validation | 5.5v3.1 | 13.4% | 2023-09-21 | KEVExploit codeKCVFix |
| CVE-2023-41616 | Student Management System Search Student function reflected cross-site scripting | 4.8v3.1 | 0.4% | 2023-09-21 | |
| CVE-2023-41614 | PHPGurukul Zoo Management System Add Animal Details function stored cross-site scripting | 4.8v3.1 | 0.4% | 2023-09-21 | |
| CVE-2023-41048 | Plone.Namedfile vulnerable to stored cross-site scripting with SVG images | 3.7CNA v3.1 | 0.6% | 2023-09-21 | Fix |
| CVE-2023-40183 | DataEase has a vulnerability to obtain user cookies | 7.5CNA v3.1 | 0.8% | 2023-09-21 | Fix |
| CVE-2023-39252 | Dell Secure Connect Gateway (SCG) Policy Manager weak cryptographic algorithm | 5.9CNA v3.1 | 0.4% | 2023-09-21 | Fix |
| CVE-2023-38344 | Ivanti Endpoint Manager arbitrary file read | 6.5v3.1 | 1.0% | 2023-09-21 | Fix |
| CVE-2023-38343 | Ivanti Endpoint Manager CSEP component XML external entity injection | 7.5v3.1 | 1.4% | 2023-09-21 | Fix |
| CVE-2023-34577 | Planned Popup Prestashop opartplannedpopup SQL injection | 9.8v3.1 | 0.7% | 2023-09-21 | |
| CVE-2023-34576 | Store-opart Op'art Product FAQ updatepos.php in PrestaShop opartfaq SQL injection | 9.8v3.1 | 0.6% | 2023-09-21 | Fix |
| CVE-2023-5104 | Improper input validation in nocodb/nocodb | 6.5v3.1 | 0.6% | 2023-09-21 | Fix |
| CVE-2023-5068 | Delta Electronics DIAScreen out-of-bounds write | 7.8v3.1 | 0.2% | 2023-09-21 | Fix |
| CVE-2023-4760 | Remote code execution in Eclipse RAP on Windows | 7.6CNA v3.1 | 1.3% | 2023-09-21 | |
| CVE-2023-4753 | OpenHarmony version has a system call function usage error | 3.9CNA v3.1 | 0.2% | 2023-09-21 | |
| CVE-2023-4504 | OpenPrinting CUPS/libppd Postscript Parsing heap overflow | 7.0v3.1 | 0.7% | 2023-09-21 | Exploit codeFix |
| CVE-2023-4292 | Frauscher FDS101 for FAdC/FAdCi SQL injection | 5.3CNA v3.1 | 0.5% | 2023-09-21 | |
| CVE-2023-4291 | Frauscher FDS101 for FAdC/FAdCi remote code execution | 9.8CNA v3.1 | 1.2% | 2023-09-21 | |
| CVE-2023-4152 | Frauscher FDS101 for FAdC/FAdCi path traversal | 7.5CNA v3.1 | 1.0% | 2023-09-21 | |
| CVE-2023-43636 | EVE Doesn't Protect Rootfs | 8.8v3.1 | 0.1% | 2023-09-20 | Fix |
| CVE-2023-43635 | LF-Edge, Zededa EVE OS Vault Key Sealed with SHA1 PCRs | 8.8v3.1 | 0.1% | 2023-09-20 | Fix |
| CVE-2023-43630 | LF-Edge, Zededa EVE OS Config Partition not Measured from 2 Fronts | 8.8v3.1 | 0.1% | 2023-09-20 | Fix |
| CVE-2023-43621 | Croc may expose secret to local users | 4.7v3.1 | 0.3% | 2023-09-20 | Fix |
| CVE-2023-43620 | Croc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device | 7.8v3.1 | 0.3% | 2023-09-20 | Fix |
| CVE-2023-43619 | Croc sender may send dangerous new files to receiver | 7.8v3.1 | 0.3% | 2023-09-20 | Fix |
| CVE-2023-43618 | Croc requires senders to provide local IP addresses in cleartext | 5.3v3.1 | 0.4% | 2023-09-20 | Fix |
| CVE-2023-43617 | Schollz Croc cros secrets may be disclosed to untrusted relay | 5.3v3.1 | 0.6% | 2023-09-20 | Fix |
| CVE-2023-43616 | Sender can cause a receiver to overwrite files during ZIP extraction in Croc | 5.5v3.1 | 0.4% | 2023-09-20 | Fix |
| CVE-2023-43502 | Jenkins Build Failure Analyzer Plugin cross-site request forgery | 4.3v3.1 | 0.3% | 2023-09-20 | Fix |
| CVE-2023-43501 | Jenkins Build Failure Analyzer Plugin missing permission check | 6.5v3.1 | 0.5% | 2023-09-20 | Fix |
| CVE-2023-43500 | Jenkins Build Failure Analyzer Plugin cross-site request forgery | 8.8v3.1 | 0.4% | 2023-09-20 | Fix |
| CVE-2023-43499 | Jenkins Build Failure Analyzer Plugin cross-site scripting | 5.4v3.1 | 0.5% | 2023-09-20 | Fix |
| CVE-2023-43498 | Jenkins temporary uploaded file created with insecure permissions | 8.1v3.1 | 0.8% | 2023-09-20 | Fix |
| CVE-2023-43497 | Jenkins temporary uploaded file created with insecure permissions | 8.1v3.1 | 0.8% | 2023-09-20 | Fix |
| CVE-2023-43496 | Jenkins temporary plugin file created with insecure permissions | 8.8v3.1 | 0.9% | 2023-09-20 | Fix |
| CVE-2023-43495 | Jenkins cross-site scripting | 5.4v3.1 | 0.9% | 2023-09-20 | Fix |
| CVE-2023-43494 | Jenkins does not exclude sensitive build variables from search | 4.3v3.1 | 3.4% | 2023-09-20 | Exploit codeFix |
| CVE-2023-43478 | Unauthenticated configuration restore and firmware update | 9.8NVD v3.1 | 18.0% | 2023-09-20 | Fix |
| CVE-2023-43477 | Post-Auth command injection in Telstra Smart Modem Gen 2 (Arcadyan LH1000) | 8.8NVD v3.1 | 17.7% | 2023-09-20 | Fix |
| CVE-2023-43377 | digitaldruid HotelDruid cross-site scripting | 5.4v3.1 | 0.4% | 2023-09-20 | Fix |
| CVE-2023-43376 | digitaldruid HotelDruid cross-site scripting | 5.4v3.1 | 0.4% | 2023-09-20 | Fix |
| CVE-2023-43375 | digitaldruid HotelDruid SQL injection | 9.8v3.1 | 0.6% | 2023-09-20 | Fix |
| CVE-2023-43374 | digitaldruid HotelDruid SQL injection | 9.8v3.1 | 3.3% | 2023-09-20 | NucleiFix |
| CVE-2023-43373 | digitaldruid HotelDruid SQL injection | 9.8v3.1 | 3.8% | 2023-09-20 | NucleiFix |
| CVE-2023-43371 | digitaldruid HotelDruid SQL injection | 9.8v3.1 | 0.9% | 2023-09-20 | Fix |
| CVE-2023-43207 | D-Link Dwl-6610ap command injection | 9.8v3.1 | 2.3% | 2023-09-20 | |
| CVE-2023-43206 | D-Link Dwl-6610ap command injection | 9.8v3.1 | 2.3% | 2023-09-20 | |
| CVE-2023-43204 | D-Link Dwl-6610ap command injection | 9.8v3.1 | 2.3% | 2023-09-20 | |
| CVE-2023-43203 | D-Link Dwl-6610ap stack-based buffer overflow | 9.8v3.1 | 0.8% | 2023-09-20 | |
| CVE-2023-43202 | D-Link Dwl-6610ap command injection | 9.8v3.1 | 2.3% | 2023-09-20 | |
| CVE-2023-43201 | D-Link Di-7200g out-of-bounds write | 9.8v3.1 | 0.9% | 2023-09-20 | |
| CVE-2023-43200 | D-Link Di-7200g out-of-bounds write | 9.8v3.1 | 0.8% | 2023-09-20 | |
| CVE-2023-43199 | D-Link Di-7200g out-of-bounds write | 9.8v3.1 | 0.8% | 2023-09-20 | |
| CVE-2023-43198 | D-Link Di-7200g out-of-bounds write | 9.8v3.1 | 0.8% | 2023-09-20 | |
| CVE-2023-43197 | D-Link Di-7200g out-of-bounds write | 9.8v3.1 | 0.8% | 2023-09-20 | |
| CVE-2023-43196 | D-Link Di-7200g out-of-bounds write | 9.8v3.1 | 0.8% | 2023-09-20 | |
| CVE-2023-43138 | TP-Link Tl-er5120g command injection | 8.8v3.1 | 2.1% | 2023-09-20 | |
| CVE-2023-43137 | TP-Link Tl-er5120g command injection | 8.8v3.1 | 2.1% | 2023-09-20 | |
| CVE-2023-43135 | TP-Link Tl-er5120g There is an unauthorized access | 9.8v3.1 | 0.8% | 2023-09-20 | |
| CVE-2023-43134 | Netis Systems 360R unauthorized access | 9.8v3.1 | 0.8% | 2023-09-20 | |
| CVE-2023-42660 | MOVEit Transfer Machine Interface SQL injection | 8.8CNA v3.1 | 0.7% | 2023-09-20 | Fix |
| CVE-2023-42656 | MOVEit Transfer reflected XSS | 6.1CNA v3.1 | 0.6% | 2023-09-20 | Fix |
| CVE-2023-42464 | Netatalk type confusion | 9.8v3.1 | 1.8% | 2023-09-20 | Fix |
| CVE-2023-42335 | FL3XX Dispatch arbitrary file upload | 8.8v3.1 | 1.1% | 2023-09-20 | |
| CVE-2023-42334 | FL3XX Dispatch insecure direct object reference | 6.5v3.1 | 0.6% | 2023-09-20 | |
| CVE-2023-42331 | Elite Cms A file upload | 8.8v3.1 | 1.2% | 2023-09-20 | |
| CVE-2023-42322 | Icmsdev iCMS insecure permissions | 9.8v3.1 | 0.6% | 2023-09-20 | |
| CVE-2023-42321 | Icmsdev iCMS cross-site request forgery | 8.8v3.1 | 0.4% | 2023-09-20 | |
| CVE-2023-42147 | fit2cloud CloudExplorer-Lite cleartext transmission of sensitive information | 7.5v3.1 | 0.4% | 2023-09-20 | |
| CVE-2023-41902 | Corecode Macupdater unrestricted file upload | 7.8v3.1 | 0.2% | 2023-09-20 | Fix |
| CVE-2023-41484 | CImg JPEG file parser memory leak | 8.1v3.1 | 0.6% | 2023-09-20 | Fix |
| CVE-2023-41375 | JTEKT ELECTRONICS Kostac PLC Programming Software use-after-free | 7.8v3.1 | 0.2% | 2023-09-20 | Fix |
| CVE-2023-41374 | JTEKT ELECTRONICS Kostac PLC Programming Software double free | 7.8v3.1 | 0.2% | 2023-09-20 | Fix |
| CVE-2023-40930 | Skyworth OS path traversal | 6.8v3.1 | 1.2% | 2023-09-20 | Exploit code |
| CVE-2023-40619 | phppgadmin deserialization of untrusted data | 9.8v3.1 | 1.1% | 2023-09-20 | Fix |
| CVE-2023-40618 | Openknowledgemaps HEAD Start reflected cross-site scripting | 6.1v3.1 | 0.5% | 2023-09-20 | |
| CVE-2023-40368 | IBM Storage Protect information disclosure | 4.4CNA v3.1 | 0.2% | 2023-09-20 | Fix |
| CVE-2023-40043 | MOVEit Transfer System Administrator SQL injection | 7.2CNA v3.1 | 0.7% | 2023-09-20 | Fix |
| CVE-2023-39677 | Updateproducts information disclosure | 7.5v3.1 | 32.1% | 2023-09-20 | Nuclei |
| CVE-2023-39675 | Myprestamodules Product Catalog (csv, Excel) Import SQL injection | 9.8v3.1 | 0.8% | 2023-09-20 | |
| CVE-2023-39575 | Isl Arp-guard url_str URL parameter reflected cross-site scripting | 5.4v3.1 | 0.3% | 2023-09-20 | |
| CVE-2023-39052 | Earthgarden Waiting information disclosure | 6.5v3.1 | 0.4% | 2023-09-20 | |
| CVE-2023-39045 | Kokoroe Members Card kokoroe_members card Line information disclosure | 6.5v3.1 | 0.4% | 2023-09-20 | |
| CVE-2023-39044 | Ajino-shiretoko An information disclosure | 6.5v3.1 | 0.4% | 2023-09-20 | |
| CVE-2023-39041 | Kukurudeli An information disclosure | 6.5v3.1 | 0.4% | 2023-09-20 | |
| CVE-2023-38888 | Cross-site scripting vulnerability in Dolibarr ERP CRM | 9.6v3.1 | 1.1% | 2023-09-20 | Fix |
| CVE-2023-38887 | File upload vulnerability in Dolibarr ERP CRM | 8.8v3.1 | 1.2% | 2023-09-20 | Fix |
| CVE-2023-38886 | Dolibarr allows a remote privileged attacker to execute arbitrary code via a crafted command/script | 7.2v3.1 | 31.7% | 2023-09-20 | Fix |
| CVE-2023-38876 | Msaad1999 Php-login-system msaad1999's reflected cross-site scripting | 6.1v3.1 | 0.7% | 2023-09-20 | |
| CVE-2023-38875 | Msaad1999 Php-login-system msaad1999's reflected cross-site scripting | 6.1v3.1 | 0.8% | 2023-09-20 | Nuclei |
| CVE-2023-38718 | IBM Robotic Process Automation information disclosure | 3.7CNA v3.1 | 0.5% | 2023-09-20 | Fix |
| CVE-2023-37410 | IBM Personal Communications privilege escalation | 8.4CNA v3.1 | 0.2% | 2023-09-20 | Fix |
| CVE-2023-37279 | Faktory Web Dashboard can lead to denial of service(DOS) via malicious user input | 7.5CNA v3.1 | 0.9% | 2023-09-20 | Fix |
| CVE-2023-36319 | Openupload file upload | 8.8v3.1 | 1.7% | 2023-09-20 | Exploit code |
| CVE-2023-36234 | NetBox cross-site scripting | 5.4v3.1 | 0.4% | 2023-09-20 | |
| CVE-2023-36109 | JerryScript buffer overflow | 9.8v3.1 | 2.0% | 2023-09-20 | Exploit code |
| CVE-2023-34575 | Store-opart Op'art Save Cart PrestaShop opartsavecart SQL injection | 9.8v3.1 | 0.7% | 2023-09-20 | |
| CVE-2023-34047 | Exposure of data and identity to wrong session in Spring for GraphQL | 3.1CNA v3.1 | 0.4% | 2023-09-20 | Fix |
| CVE-2023-31015 | NVIDIA DGX H100 BMC improper authentication | 6.6CNA v3.1 | 0.2% | 2023-09-20 | Fix |
| CVE-2023-31014 | NVIDIA GeForce NOW implicit intent for sensitive communication | 4.2CNA v3.1 | 0.1% | 2023-09-20 | Exploit codeFix |
| CVE-2023-31013 | NVIDIA DGX H100 BMC improper input validation | 6.1CNA v3.1 | 0.6% | 2023-09-20 | Fix |
| CVE-2023-31012 | NVIDIA DGX H100 BMC improper input validation | 6.1CNA v3.1 | 0.6% | 2023-09-20 | Fix |
| CVE-2023-31011 | NVIDIA DGX H100 BMC improper input validation | 5.2CNA v3.1 | 0.6% | 2023-09-20 | Fix |
| CVE-2023-31010 | NVIDIA DGX H100 BMC improper input validation | 6.8CNA v3.1 | 0.7% | 2023-09-20 | Fix |
| CVE-2023-31009 | NVIDIA DGX H100 BMC improper input validation | 8.3CNA v3.1 | 0.7% | 2023-09-20 | Fix |
| CVE-2023-31008 | NVIDIA DGX H100 BMC improper input validation | 7.3CNA v3.1 | 0.2% | 2023-09-20 | Fix |
| CVE-2023-26144 | graphql uncontrolled resource consumption | 5.3v3.1 | 1.2% | 2023-09-20 | Exploit codeFix |
| CVE-2023-25534 | NVIDIA DGX H100 BMC improper input validation | 5.7CNA v3.1 | 0.6% | 2023-09-20 | Fix |
| CVE-2023-25533 | NVIDIA DGX H100 BMC improper input validation | 8.3CNA v3.1 | 0.8% | 2023-09-20 | Fix |
| CVE-2023-25532 | NVIDIA DGX H100 BMC insufficiently protected credentials | 6.5CNA v3.1 | 0.6% | 2023-09-20 | Fix |
| CVE-2023-25531 | NVIDIA DGX H100 BMC insufficiently protected credentials | 7.6CNA v3.1 | 0.5% | 2023-09-20 | Fix |
| CVE-2023-25530 | NVIDIA DGX H100 BMC improper input validation | 8.0CNA v3.1 | 0.8% | 2023-09-20 | Fix |
| CVE-2023-25529 | NVIDIA DGX H100 BMC timing side channel | 8.0CNA v3.1 | 0.6% | 2023-09-20 | Fix |
| CVE-2023-25528 | NVIDIA DGX H100 BMC stack-based buffer overflow | 8.8CNA v3.1 | 0.9% | 2023-09-20 | Fix |
| CVE-2023-25527 | NVIDIA DGX H100 BMC code execution | 7.8CNA v3.1 | 0.2% | 2023-09-20 | Fix |
| CVE-2023-25526 | NVIDIA Cumulus Linux uncaught exception | 6.5CNA v3.1 | 0.3% | 2023-09-20 | Fix |
| CVE-2023-25525 | NVIDIA Cumulus Linux information disclosure | 7.5CNA v3.1 | 0.6% | 2023-09-20 | Fix |
| CVE-2023-22644 | SUSE neuvector JWT token compromise can allow malicious actions including remote code execution | 9.4CNA v4.0 | 0.5% | 2023-09-20 | Fix |
| CVE-2023-22024 | Oracle Linux RDS module denial of service | 5.5CNA v3.1 | 0.2% | 2023-09-20 | Fix |
| CVE-2023-20597 | AMD Ryzen™ 3000 Series Desktop Processors “Matisse” DXE driver improper initialization | 5.5v3.1 | 0.2% | 2023-09-20 | Fix |
| CVE-2023-20594 | AMD Ryzen™ 3000 Series Desktop Processors “Matisse” DXE driver improper initialization | 4.4v3.1 | 0.2% | 2023-09-20 | Fix |
| CVE-2023-5084 | Cross-site scripting (XSS) Reflected in hestiacp/hestiacp | 6.1v3.1 | 0.4% | 2023-09-20 | Fix |
| CVE-2023-5074 | Authentication bypass in D-Link D-View 8 | 9.8NVD v3.1 | 69.6% | 2023-09-20 | NucleiFix |
| CVE-2023-5063 | Widget Responsive for Youtube WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-09-20 | Fix |
| CVE-2023-5062 | WordPress Charts plugin authenticated (Contributor+) stored cross-site scripting via shortcode | 5.4v3.1 | 0.4% | 2023-09-20 | |
| CVE-2023-5042 | Acronis Cyber Protect Home Office incorrect default permissions | 5.5CNA v3.0 | 0.4% | 2023-09-20 | Fix |
| CVE-2023-4853 | Quarkus: Http security policy bypass | 8.1CNA v3.1 | 1.4% | 2023-09-20 | Fix |
| CVE-2023-4236 | ISC BIND 9 named may terminate unexpectedly under high DNS-over-TLS query load | 7.5CNA v3.1 | 2.2% | 2023-09-20 | Fix |
| CVE-2023-4088 | Mitsubishi Electric GX Works3 incorrect default permissions | 9.3CNA v3.1 | 0.2% | 2023-09-20 | Fix |
| CVE-2023-3341 | ISC BIND 9 A stack exhaustion flaw in control channel code may cause named to terminate unexpectedly | 7.5CNA v3.1 | 2.9% | 2023-09-20 | Fix |
| CVE-2023-2508 | CSRF in PaperCutNG Mobility Print leads to sophisticated phishing | 6.5v3.1 | 0.2% | 2023-09-20 | Fix |
| CVE-2023-2262 | Rockwell Automation Select Logix Communication modules vulnerable to email object buffer overflow | 9.8CNA v3.1 | 1.3% | 2023-09-20 | Fix |
| CVE-2023-2163 | Linux kernel BPF verifier incorrect calculation | 8.8NVD v3.1 | 3.7% | 2023-09-20 | Exploit codeFix |
| CVE-2023-0829 | Cross-site scripting (XSS) vulnerability in Plesk | 9.0v3.1 | 0.6% | 2023-09-20 | Fix |
| CVE-2023-0462 | foreman arbitrary code execution through yaml global parameters | 8.0CNA v3.1 | 1.0% | 2023-09-20 | Fix |
| CVE-2023-0118 | Foreman: Arbitrary code execution through templates | 9.1CNA v3.1 | 1.4% | 2023-09-20 | Fix |
| CVE-2023-43566 | JetBrains TeamCity cross-site scripting | 3.5CNA v3.1 | 1.0% | 2023-09-19 | Fix |
| CVE-2023-42793 | JetBrains TeamCity authentication bypass | 9.8CNA v3.1 | 100.0% | 2023-09-19 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2023-42452 | Mastodon vulnerable to stored XSS through the translation feature | 6.1CNA v3.1 | 0.4% | 2023-09-19 | Fix |
| CVE-2023-42451 | Mastodon Invalid Domain Name Normalization vulnerability | 7.4CNA v3.1 | 0.7% | 2023-09-19 | Fix |
| CVE-2023-42450 | Mastodon server-side request forgery | 5.4CNA v3.1 | 0.5% | 2023-09-19 | Fix |
| CVE-2023-42447 | whisperfish blurhash-rs blurhash panics on parsing crafted inputs | 8.6CNA v3.1 | 0.6% | 2023-09-19 | Fix |
| CVE-2023-42444 | Phonenumber panics on parsing crafted RF3966 inputs | 8.6CNA v3.1 | 0.9% | 2023-09-19 | Fix |
| CVE-2023-42399 | Jodit Editor vulnerable to cross-site scripting | 6.1v3.1 | 0.4% | 2023-09-19 | |
| CVE-2023-41890 | Sustainsys Saml2 Sustainsys.Saml2 Insufficient Identity Provider Issuer Validation | 7.5CNA v3.1 | 0.8% | 2023-09-19 | Fix |
| CVE-2023-41834 | Apache Flink Stateful Functions HTTP headers CRLF injection | 6.1v3.1 | 1.6% | 2023-09-19 | Fix |
| CVE-2023-41599 | JFinalCMS path traversal | 5.3v3.1 | 12.4% | 2023-09-19 | Nuclei |
| CVE-2023-41387 | Patreon Flutter Downloader flutter_downloader component SQL injection | 9.1v3.1 | 0.7% | 2023-09-19 | Fix |
| CVE-2023-41179 | Trend Micro Apex One and Worry-Free Business Security remote code execution | 7.2v3.1 | 4.5% | 2023-09-19 | KEVFix |
| CVE-2023-40934 | Nagios XI SQL injection | 7.2v3.1 | 3.2% | 2023-09-19 | Fix |
| CVE-2023-40933 | Nagios XI SQL injection | 8.8v3.1 | 3.1% | 2023-09-19 | Exploit codeFix |
| CVE-2023-40932 | Nagios XI cross-site scripting | 5.4v3.1 | 0.9% | 2023-09-19 | Fix |
| CVE-2023-40931 | Nagios XI SQL injection | 6.5v3.1 | 12.5% | 2023-09-19 | NucleiExploit codeFix |
| CVE-2023-40788 | Bladex SpringBlade unauthorized access | 5.3v3.1 | 0.6% | 2023-09-19 | |
| CVE-2023-38356 | MiniTool Power DATA Recovery improper certificate validation | 8.1v3.1 | 0.6% | 2023-09-19 | |
| CVE-2023-38355 | MiniTool Movie Maker improper certificate validation | 8.1v3.1 | 0.6% | 2023-09-19 | |
| CVE-2023-38354 | MiniTool Shadowmaker improper certificate validation | 8.1v3.1 | 0.6% | 2023-09-19 | |
| CVE-2023-38353 | MiniTool Power DATA Recovery improper certificate validation | 5.9v3.1 | 0.4% | 2023-09-19 | |
| CVE-2023-38352 | MiniTool Partition Wizard improper certificate validation | 8.1v3.1 | 0.6% | 2023-09-19 | |
| CVE-2023-38351 | MiniTool Partition Wizard improper certificate validation | 8.1v3.1 | 0.6% | 2023-09-19 | |
| CVE-2023-32649 | DoS on IDS parsing of malformed asset fields in Guardian/CMC and | 8.2CNA v4.0 | 0.6% | 2023-09-19 | Fix |
| CVE-2023-32186 | RKE2 supervisor port is vulnerable to unauthenticated remote denial of service attack | 7.5CNA v3.1 | 0.7% | 2023-09-19 | Fix |
| CVE-2023-32184 | opensuse-welcome insecure storage of sensitive information | 7.8CNA v3.1 | 0.3% | 2023-09-19 | Fix |
| CVE-2023-32182 | SUSE Linux Enterprise Desktop 15 SP5 link following | 5.9CNA v3.1 | 0.3% | 2023-09-19 | Fix |
| CVE-2023-31808 | Technicolor TG670 hard-coded credentials | 7.2v3.1 | 0.6% | 2023-09-19 | |
| CVE-2023-29245 | SQL injection on IDS parsing of malformed asset fields in Guardian/CMC and | 9.2CNA v4.0 | 0.6% | 2023-09-19 | Fix |
| CVE-2023-26143 | blamer vulnerable to arbitrary argument injection via the blameByFile API | 9.1v3.1 | 0.9% | 2023-09-19 | Fix |
| CVE-2023-23957 | Open redirection vulnerability in Symantec Identity Portal | 5.4v3.1 | 0.3% | 2023-09-19 | Fix |
| CVE-2023-22513 | Atlassian Bitbucket Data Center code injection | 8.5CNA v3.0 | 15.3% | 2023-09-19 | Fix |
| CVE-2023-5060 | Cross-site scripting (XSS) DOM in librenms/librenms | 6.1NVD v3.1 | 0.6% | 2023-09-19 | Fix |
| CVE-2023-5054 | Super Store Finder WordPress plugin unauthenticated email Creation/Sending | 5.3v3.1 | 0.5% | 2023-09-19 | Fix |
| CVE-2023-5009 | Incorrect authorization in GitLab | 9.6CNA v3.1 | 9.7% | 2023-09-19 | Fix |
| CVE-2023-4376 | Serial Codes Generator and Validator with WooCommerce Support WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2023-09-19 | Fix |
| CVE-2023-4096 | Weak password recovery mechanism vulnerability in Fujitsu Arconte Áurea | 8.2v3.1 | 0.3% | 2023-09-19 | Fix |
| CVE-2023-4095 | Fujitsu Arconte Áurea response discrepancy | 5.3v3.1 | 0.4% | 2023-09-19 | Fix |
| CVE-2023-4094 | Weak authentication vulnerability in Fujitsu Arconte Áurea | 8.2v3.1 | 0.4% | 2023-09-19 | Fix |
| CVE-2023-4093 | Reflected and persistent XSS vulnerability in Fujitsu Arconte Áurea | 6.1v3.1 | 0.3% | 2023-09-19 | Fix |
| CVE-2023-4092 | SQL injection vulnerability in Fujitsu Arconte Áurea | 9.8v3.1 | 0.6% | 2023-09-19 | Fix |
| CVE-2023-3892 | MIM Assistant unsafe XML parsing of 3rd party DICOM private tags may lead to XXE | 5.6CNA v3.1 | 0.2% | 2023-09-19 | Fix |
| CVE-2023-2995 | Leyka WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.4% | 2023-09-19 | Fix |
| CVE-2023-2567 | Authenticated SQL injection on Query functionality in Guardian/CMC and | 8.7CNA v4.0 | 0.6% | 2023-09-19 | Fix |
| CVE-2023-0773 | Unauthorized access Control vulnerability in Uniview IP Camera | 9.8v3.1 | 1.2% | 2023-09-19 | Fix |
| CVE-2023-43115 | Artifex Ghostscript remote code execution | 8.8NVD v3.1 | 6.0% | 2023-09-18 | Fix |
| CVE-2023-43114 | Qt GDI font engine denial of service | 5.5v3.1 | 0.2% | 2023-09-18 | Fix |
| CVE-2023-42526 | WithSecure Elements Endpoint Protection crash | 7.5v3.1 | 0.5% | 2023-09-18 | |
| CVE-2023-42525 | WithSecure Elements Endpoint Protection infinite loop | 7.5v3.1 | 0.5% | 2023-09-18 | |
| CVE-2023-42524 | WithSecure Elements Endpoint Protection infinite loop | 7.5v3.1 | 0.5% | 2023-09-18 | |
| CVE-2023-42523 | WithSecure Elements Endpoint Protection crash | 7.5v3.1 | 0.5% | 2023-09-18 | |
| CVE-2023-42522 | WithSecure Elements Endpoint Protection crash | 7.5v3.1 | 0.5% | 2023-09-18 | |
| CVE-2023-42521 | WithSecure Elements Endpoint Protection crash | 7.5v3.1 | 0.5% | 2023-09-18 | |
| CVE-2023-42520 | WithSecure Elements Endpoint Protection crash | 7.5v3.1 | 0.5% | 2023-09-18 | |
| CVE-2023-42454 | SQLpage vulnerable to public exposure of database credentials | 10.0CNA v3.1 | 0.7% | 2023-09-18 | Fix |
| CVE-2023-42446 | Pow Mnesia cache doesn't invalidate all expired keys on startup | 6.5CNA v3.1 | 0.5% | 2023-09-18 | Fix |
| CVE-2023-42443 | Vyper vulnerable to memory corruption in certain builtins utilizing `msize` | 8.1CNA v3.1 | 0.8% | 2023-09-18 | Fix |
| CVE-2023-42441 | Vyper has incorrect re-entrancy lock when key is empty string | 5.3CNA v3.1 | 0.5% | 2023-09-18 | Fix |
| CVE-2023-42387 | Tdsql Chitu information disclosure | 7.5v3.1 | 0.7% | 2023-09-18 | |
| CVE-2023-42371 | Summernote Rich Text Editor cross-site scripting | 5.4v3.1 | 0.5% | 2023-09-18 | |
| CVE-2023-42359 | Exam Form Submission In PHP With Source Code SQL injection | 9.8v3.1 | 0.7% | 2023-09-18 | |
| CVE-2023-42328 | peppermint hard-coded credentials | 8.8v3.1 | 1.2% | 2023-09-18 | |
| CVE-2023-42320 | Tenda AC10 buffer overflow | 9.8v3.1 | 0.9% | 2023-09-18 | |
| CVE-2023-42253 | Vehicle Management cross-site scripting | 6.1v3.1 | 0.4% | 2023-09-18 | |
| CVE-2023-41965 | Socomec MOD3GP-SY-120K insecure storage of sensitive information | 7.5v3.1 | 0.5% | 2023-09-18 | |
| CVE-2023-41929 | Samsung Memory Card & Ufd Authentication DLL hijacking | 7.3v3.1 | 0.2% | 2023-09-18 | Fix |
| CVE-2023-41595 | Vaxilu X-ui hard-coded credentials | 7.5v3.1 | 0.5% | 2023-09-18 | |
| CVE-2023-41443 | xxyopen Novel-Plus SQL injection | 7.2v3.1 | 1.1% | 2023-09-18 | |
| CVE-2023-41349 | ASUS RT-AX88U externally-controlled format string | 8.8CNA v3.1 | 0.9% | 2023-09-18 | Fix |
| CVE-2023-41084 | Socomec MOD3GP-SY-120K reliance on cookies without validation and integrity checking | 9.8v3.1 | 0.6% | 2023-09-18 | |
| CVE-2023-41030 | Juplink RX4-1500 hard-coded credential | 9.8v3.1 | 0.6% | 2023-09-18 | |
| CVE-2023-40221 | Socomec MOD3GP-SY-120K code injection | 8.8v3.1 | 0.5% | 2023-09-18 | |
| CVE-2023-39452 | Socomec MOD3GP-SY-120K plaintext storage of a password | 7.5v3.1 | 0.5% | 2023-09-18 | |
| CVE-2023-39446 | Socomec MOD3GP-SY-120K cross-site request forgery | 8.8v3.1 | 0.2% | 2023-09-18 | |
| CVE-2023-39058 | The B Members Card THE_B_members card v13.6.1 information disclosure | 6.5v3.1 | 0.4% | 2023-09-18 | |
| CVE-2023-39056 | Coffee-jumbo An information disclosure | 6.5v3.1 | 0.4% | 2023-09-18 | |
| CVE-2023-39049 | Youmart-tokunaga An information disclosure | 6.5v3.1 | 0.4% | 2023-09-18 | |
| CVE-2023-39046 | Tonton-tei Waiting TonTon-Tei_waiting Line v13.6.1 information disclosure | 6.5v3.1 | 0.4% | 2023-09-18 | |
| CVE-2023-39043 | Ykc Tokushima Awayokocho An information disclosure | 6.5v3.1 | 0.4% | 2023-09-18 | |
| CVE-2023-39040 | Cheese Cafe Line An information disclosure | 6.5v3.1 | 0.4% | 2023-09-18 | |
| CVE-2023-39039 | Camp Style Project Line An information disclosure | 6.5v3.1 | 0.4% | 2023-09-18 | |
| CVE-2023-38582 | Socomec MOD3GP-SY-120K cross-site scripting | 5.4v3.1 | 0.4% | 2023-09-18 | |
| CVE-2023-38255 | Socomec MOD3GP-SY-120K cross-site scripting | 6.1v3.1 | 0.3% | 2023-09-18 | |
| CVE-2023-37611 | Neos CMS cross-site scripting | 5.4v3.1 | 0.6% | 2023-09-18 | Fix |
| CVE-2023-35851 | Sunnet WMPro SQL injection | 7.5v3.1 | 0.6% | 2023-09-18 | Fix |
| CVE-2023-35850 | Sunnet WMPro command injection | 7.2CNA v3.1 | 0.9% | 2023-09-18 | Fix |
| CVE-2023-34999 | RTS VLink Virtual Matrix Software command injection | 8.4CNA v3.1 | 1.2% | 2023-09-18 | Fix |
| CVE-2023-34195 | InsydeH2O code injection | 7.8v3.1 | 0.2% | 2023-09-18 | Fix |
| CVE-2023-33831 | A remote command execution (RCE) vulnerability in the /API/runscript endpoint of FUXA | 9.8v3.1 | 26.0% | 2023-09-18 | NucleiExploit code |
| CVE-2023-32187 | K3s apiserver port is vulnerable to unauthenticated remote denial of service attack | 7.5CNA v3.1 | 0.7% | 2023-09-18 | Fix |
| CVE-2023-5036 | Cross-site request forgery (CSRF) in usememos/memos | 8.8v3.1 | 0.3% | 2023-09-18 | Fix |
| CVE-2023-5034 | SourceCodester My Food Recipe Image upload index.php unrestricted upload | 9.8v3.1 | 0.6% | 2023-09-18 | |
| CVE-2023-5033 | OpenRapid RapidCMS cate-edit-run.php SQL injection | 7.2v3.1 | 0.6% | 2023-09-18 | |
| CVE-2023-5032 | OpenRapid RapidCMS article-edit-run.php SQL injection | 7.2v3.1 | 0.5% | 2023-09-18 | |
| CVE-2023-5031 | OpenRapid RapidCMS article-add.php SQL injection | 6.5v3.1 | 0.4% | 2023-09-18 | |
| CVE-2023-4806 | Glibc: Potential use-after-free in getaddrinfo | 5.9NVD v3.1 | 1.6% | 2023-09-18 | Fix |
| CVE-2023-4527 | Glibc: Stack read overflow in getaddrinfo in no-aaaa mode | 6.5NVD v3.1 | 1.7% | 2023-09-18 | Fix |
| CVE-2023-38040 | Revive Adserver reflected cross-site scripting | 6.1v3.1 | 2.0% | 2023-09-17 | Nuclei |
| CVE-2023-5030 | Tongda OA delete.php SQL injection | 8.8v3.1 | 0.6% | 2023-09-17 | |
| CVE-2023-5029 | mccms 1 SQL injection | 8.8v3.1 | 0.6% | 2023-09-17 | |
| CVE-2023-5028 | China Unicom TEWA-800G debug log file | 4.6v3.1 | 0.4% | 2023-09-17 | |
| CVE-2023-5027 | SourceCodester Simple Membership System club_validator.php SQL injection | 7.5v3.1 | 0.5% | 2023-09-17 | |
| CVE-2023-5026 | Tongda OA cross-site scripting | 6.1v3.1 | 0.5% | 2023-09-17 | |
| CVE-2023-5025 | Koha MARC search.pl cross-site scripting | 5.4v3.1 | 0.5% | 2023-09-17 | |
| CVE-2023-5024 | Planno Comment cross-site scripting | 4.8v3.1 | 0.6% | 2023-09-17 | Exploit code |
| CVE-2023-5023 | Tongda OA delete.php SQL injection | 8.8v3.1 | 0.6% | 2023-09-17 | |
| CVE-2023-5022 | DedeCMS select_templets_post.php absolute path traversal | 8.8v3.1 | 0.7% | 2023-09-17 | |
| CVE-2023-5021 | SourceCodester AC Repair and Services System cross-site scripting | 6.1v3.1 | 0.3% | 2023-09-17 | |
| CVE-2023-5020 | 07FLY CRM Administrator Login page SQL injection | 9.8v3.1 | 0.7% | 2023-09-17 | |
| CVE-2023-5019 | Tongda OA delete.php SQL injection | 9.8v3.1 | 0.7% | 2023-09-17 | |
| CVE-2023-5018 | SourceCodester Lost and Found Information System POST parameter SQL injection | 9.8v3.1 | 0.4% | 2023-09-17 | |
| CVE-2023-5017 | Lmxcms admin.php SQL injection | 9.8v3.1 | 0.4% | 2023-09-17 | |
| CVE-2023-5016 | spider-flow API DataSourceController.java DriverManager.getConnection deserialization | 9.8v3.1 | 0.9% | 2023-09-17 | |
| CVE-2023-5015 | UCMS cross-site scripting | 6.1v3.1 | 0.4% | 2023-09-17 | |
| CVE-2023-5014 | Sakshi2610 Food Ordering Website categoryfood.php SQL injection | 9.8v3.1 | 0.6% | 2023-09-17 | |
| CVE-2023-42336 | Netis Systems WF2409E hard-coded credentials | 9.8v3.1 | 1.1% | 2023-09-16 | |
| CVE-2023-41436 | Cskaza CSZ CMS CSZCMS v.1.3.0 cross-site scripting | 5.4v3.1 | 0.5% | 2023-09-16 | Exploit code |
| CVE-2023-41157 | Webmin Usermin Multiple stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-09-16 | Fix |
| CVE-2023-39777 | vBulletin Admin Control Panel cross-site scripting | 5.4v3.1 | 0.4% | 2023-09-16 | |
| CVE-2023-39612 | filebrowser A cross-site scripting | 9.0v3.1 | 0.7% | 2023-09-16 | |
| CVE-2023-36160 | Smart Plug 10A UART console vulnerability | 5.5v3.1 | 0.2% | 2023-09-16 | |
| CVE-2023-5013 | Pluck CMS Installation install.php cross-site scripting | 5.4v3.1 | 0.5% | 2023-09-16 | |
| CVE-2023-5012 | Topaz OFD Protection Module Warsaw core.exe unquoted search path | 7.8v3.1 | 0.2% | 2023-09-16 | |
| CVE-2023-5001 | Horizontal scrolling announcement WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2023-09-16 | Fix |
| CVE-2023-4994 | Allow PHP in Posts and Pages WordPress plugin remote code execution | 6.4NVD v3.1 | 0.9% | 2023-09-16 | Fix |
| CVE-2023-3025 | Dropbox Folder Share WordPress plugin unauthenticated server-side request forgery via link | 7.2CNA v3.1 | 0.5% | 2023-09-16 | Fix |
| CVE-2023-42442 | JumpServer session replays download without authentication | 8.2CNA v3.1 | 63.0% | 2023-09-15 | NucleiExploit codeFix |
| CVE-2023-42439 | GeoNode SSRF Bypass to return internal host data | 7.5CNA v3.1 | 1.0% | 2023-09-15 | Fix |
| CVE-2023-42398 | zzcms server-side request forgery | 9.8v3.1 | 1.3% | 2023-09-15 | |
| CVE-2023-42270 | Grocy cross-site request forgery | 8.8v3.1 | 0.4% | 2023-09-15 | |
| CVE-2023-41900 | Jetty's OpenId Revoked authentication allows one request | 3.5CNA v3.1 | 0.9% | 2023-09-15 | Fix |
| CVE-2023-41889 | Ss-proj SHIRASAGI improper unicode handling | 5.3CNA v3.1 | 0.7% | 2023-09-15 | Fix |
| CVE-2023-41887 | OpenRefine remote Code exec in project import with mysql jdbc URL attack | 9.8CNA v3.1 | 42.5% | 2023-09-15 | Fix |
| CVE-2023-41886 | OpenRefine vulnerable to arbitrary file read in project import with mysql jdbc URL attack | 7.5CNA v3.1 | 1.0% | 2023-09-15 | Fix |
| CVE-2023-41880 | Bytecode Alliance Wasmtime i64x2.shr_s instruction off-by-one error | 2.2CNA v3.1 | 0.7% | 2023-09-15 | Fix |
| CVE-2023-41626 | Gradio arbitrary file upload | 4.8v3.1 | 0.3% | 2023-09-15 | Fix |
| CVE-2023-41325 | OP-TEE double free in shdr_verify_signature | 7.4CNA v3.1 | 0.4% | 2023-09-15 | Fix |
| CVE-2023-41043 | Discourse DoS via SvgSprite cache | 6.5CNA v3.1 | 0.6% | 2023-09-15 | Fix |
| CVE-2023-41042 | Discourse DoS via remote theme assets | 4.9CNA v3.1 | 0.6% | 2023-09-15 | Fix |
| CVE-2023-40986 | Webmin Usermin Configuration function stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-09-15 | |
| CVE-2023-40985 | Webmin cross-site scripting | 5.4v3.1 | 0.4% | 2023-09-15 | |
| CVE-2023-40984 | Webmin File Manager function reflected cross-site scripting | 5.4v3.1 | 0.4% | 2023-09-15 | |
| CVE-2023-40983 | Webmin File Manager function reflected cross-site scripting | 6.1v3.1 | 0.5% | 2023-09-15 | |
| CVE-2023-40982 | Webmin A stored cross-site scripting | 5.4v3.1 | 0.5% | 2023-09-15 | |
| CVE-2023-40958 | Didotech Engineering Lifecycle Management SQL injection | 8.8v3.1 | 1.1% | 2023-09-15 | |
| CVE-2023-40957 | Didotech Engineering Lifecycle Management SQL injection | 8.8v3.1 | 1.1% | 2023-09-15 | |
| CVE-2023-40956 | Cloudroits Wesite Job Search SQL injection | 8.8v3.1 | 1.0% | 2023-09-15 | |
| CVE-2023-40955 | Didotech Engineering Lifecycle Management SQL injection | 8.8v3.1 | 1.1% | 2023-09-15 | |
| CVE-2023-40588 | Discourse DoS via 2FA and Security Key Names | 6.5CNA v3.1 | 0.6% | 2023-09-15 | Fix |
| CVE-2023-40167 | Jetty accepts + prefixed value in Content-Length | 5.3CNA v3.1 | 1.3% | 2023-09-15 | Fix |
| CVE-2023-40019 | FreeSWITCH allows authorized users to cause a denial of service attack | 7.5CNA v3.1 | 0.9% | 2023-09-15 | Fix |
| CVE-2023-40018 | SignalWire FreeSWITCH ICE candidate handler out-of-bounds write | 7.5CNA v3.1 | 1.0% | 2023-09-15 | Fix |
| CVE-2023-39643 | Blmodules Xmlfeeds Pro SQL injection | 9.8v3.1 | 0.7% | 2023-09-15 | |
| CVE-2023-39642 | Cartsguru SQL injection | 9.8v3.1 | 0.7% | 2023-09-15 | |
| CVE-2023-39641 | Activedesign Full Affiliates SQL injection | 9.8v3.1 | 0.7% | 2023-09-15 | |
| CVE-2023-39639 | LeoTheme Leoblog SQL injection | 9.8v3.1 | 0.7% | 2023-09-15 | |
| CVE-2023-38706 | Discourse vulnerable to DoS via drafts | 6.5CNA v3.1 | 0.8% | 2023-09-15 | Fix |
| CVE-2023-38507 | Strapi Improper Rate Limiting vulnerability | 7.3CNA v3.1 | 1.0% | 2023-09-15 | Fix |
| CVE-2023-38039 | curl resource exhaustion | 7.5v3.1 | 56.4% | 2023-09-15 | Exploit codeFix |
| CVE-2023-37459 | contiki-ng out-of-bounds read when processing a received IPv6 packet | 5.3CNA v3.1 | 0.5% | 2023-09-15 | Fix |
| CVE-2023-37281 | contiki-ng out-of-bounds read during IPHC address decompression | 5.3CNA v3.1 | 0.5% | 2023-09-15 | Fix |
| CVE-2023-37263 | Strapi's field level permissions not being respected in relationship title | 6.8CNA v3.1 | 0.6% | 2023-09-15 | Fix |
| CVE-2023-36735 | Microsoft Edge (Chromium-based) elevation of privilege | 9.6CNA v3.1 | 2.1% | 2023-09-15 | Fix |
| CVE-2023-36727 | Microsoft Edge (Chromium-based) spoofing | 6.1CNA v3.1 | 1.0% | 2023-09-15 | Fix |
| CVE-2023-36659 | OPSWAT MetaDefender Kiosk buffer overflow | 9.8v3.1 | 0.7% | 2023-09-15 | Fix |
| CVE-2023-36658 | OPSWAT MetaDefender Kiosk unquoted search path | 7.8v3.1 | 0.2% | 2023-09-15 | Fix |
| CVE-2023-36657 | OPSWAT MetaDefender Kiosk improper privilege management | 9.8v3.1 | 0.6% | 2023-09-15 | Fix |
| CVE-2023-36562 | Microsoft Edge (Chromium-based) elevation of privilege | 7.1CNA v3.1 | 1.0% | 2023-09-15 | Fix |
| CVE-2023-36479 | Jetty vulnerable to errant command quoting in CGI Servlet | 3.5CNA v3.1 | 1.2% | 2023-09-15 | Fix |
| CVE-2023-36472 | Strapi may leak sensitive user information, user reset password, tokens via content-manager views | 5.8CNA v3.1 | 0.7% | 2023-09-15 | Fix |
| CVE-2023-32461 | Dell PowerEdge Platform heap-based buffer overflow | 5.0CNA v3.1 | 0.2% | 2023-09-15 | Fix |
| CVE-2023-28614 | Freewillsolutions Smart Trade OS command injection | 9.8v3.1 | 2.3% | 2023-09-15 | |
| CVE-2023-4991 | NextBX QWAlerter QWAlerter.exe unquoted search path | 7.8v3.1 | 0.2% | 2023-09-15 | |
| CVE-2023-4988 | Bettershop LaikeTui unrestricted upload | 9.8v3.1 | 0.5% | 2023-09-15 | |
| CVE-2023-4987 | infinitietech taskhub GET parameter get_tasks_list SQL injection | 8.0v3.1 | 0.7% | 2023-09-15 | |
| CVE-2023-4986 | Supcon InPlant SCADA Project.xml unknown vulnerability | 2.5v3.1 | 0.2% | 2023-09-15 | |
| CVE-2023-4985 | Supcon InPlant SCADA Project.xml improper authentication | 7.8v3.1 | 0.4% | 2023-09-15 | |
| CVE-2023-4984 | didi KnowSearch user security API vulnerability | 6.5v3.1 | 0.5% | 2023-09-15 | |
| CVE-2023-4983 | app1pro Shopicial search cross-site scripting | 6.1v3.1 | 0.4% | 2023-09-15 | |
| CVE-2023-4982 | Cross-site scripting (XSS) Stored in librenms/librenms | 5.4NVD v3.1 | 0.7% | 2023-09-15 | Fix |
| CVE-2023-4981 | Cross-site scripting (XSS) DOM in librenms/librenms | 5.4NVD v3.1 | 0.7% | 2023-09-15 | Fix |
| CVE-2023-4980 | Cross-site scripting (XSS) Generic in librenms/librenms | 5.4NVD v3.1 | 0.7% | 2023-09-15 | Fix |
| CVE-2023-4979 | Cross-site scripting (XSS) Reflected in librenms/librenms | 5.4NVD v3.1 | 0.7% | 2023-09-15 | Fix |
| CVE-2023-4978 | Cross-site scripting (XSS) DOM in librenms/librenms | 6.1NVD v3.1 | 0.7% | 2023-09-15 | Fix |