CVE-2023 records published in September 2023

This page lists the 1,999 CVE-2023 records published in September 2023, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 22 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2023 list filters these records by severity or signal.

Critical
30815.4% of these records
Listed in CISA KEV
221.1% of these records
Reported exploited
40.2% of these records
Detection signal
572.9% of these records
Exploit code
1155.8% of these records
Actionable vendor fix
1,36968.5% of these records

Figures as of 2026-10-24 13:46 UTC. Records published in September 2023 have had from about 37 months to about 38 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.

CVE-2023 records published in September 2023, newest first: records 1 to 1,000 of 1,999
CVE Summary CVSS EPSS Published Signals
CVE-2023-44488Webmproject libvpx improper exception handling7.5v3.11.9%2023-09-30Fix
CVE-2023-43735Os Commerce cross-site scripting Reflected (XSS)5.4v3.10.4%2023-09-30
CVE-2023-43734Os Commerce cross-site scripting Reflected (XSS)5.4v3.10.4%2023-09-30
CVE-2023-43733Os Commerce cross-site scripting Reflected (XSS)5.4v3.10.4%2023-09-30
CVE-2023-43732Os Commerce cross-site scripting Reflected (XSS)5.4v3.10.4%2023-09-30
CVE-2023-43731Os Commerce cross-site scripting Reflected (XSS)5.4v3.10.4%2023-09-30
CVE-2023-43730Os Commerce cross-site scripting Reflected (XSS)5.4v3.10.4%2023-09-30
CVE-2023-43729Os Commerce cross-site scripting Reflected (XSS)5.4v3.10.4%2023-09-30
CVE-2023-43728Os Commerce cross-site scripting Reflected (XSS)5.4v3.10.4%2023-09-30
CVE-2023-43727Os Commerce cross-site scripting Reflected (XSS)5.4v3.10.4%2023-09-30
CVE-2023-43726Os Commerce cross-site scripting Reflected (XSS)5.4v3.10.4%2023-09-30
CVE-2023-43725Os Commerce cross-site scripting Reflected (XSS)5.4v3.10.4%2023-09-30
CVE-2023-43724Os Commerce cross-site scripting Reflected (XSS)5.4v3.10.4%2023-09-30
CVE-2023-43723Os Commerce cross-site scripting Reflected (XSS)5.4v3.10.4%2023-09-30
CVE-2023-43722Os Commerce cross-site scripting Reflected (XSS)5.4v3.10.4%2023-09-30
CVE-2023-43721Os Commerce cross-site scripting Reflected (XSS)5.4v3.10.4%2023-09-30
CVE-2023-43720Os Commerce cross-site scripting Reflected (XSS)5.4v3.10.4%2023-09-30
CVE-2023-43719Os Commerce cross-site scripting Reflected (XSS)5.4v3.10.4%2023-09-30
CVE-2023-43718Os Commerce cross-site scripting Reflected (XSS)5.4v3.10.4%2023-09-30
CVE-2023-43717Os Commerce cross-site scripting Reflected (XSS)5.4v3.10.4%2023-09-30
CVE-2023-43716Os Commerce cross-site scripting Reflected (XSS)5.4v3.10.4%2023-09-30
CVE-2023-43715Os Commerce cross-site scripting Reflected (XSS)5.4v3.10.4%2023-09-30
CVE-2023-43714Os Commerce cross-site scripting Reflected (XSS)5.4v3.10.4%2023-09-30
CVE-2023-43713Os Commerce cross-site scripting Reflected (XSS)5.4v3.10.4%2023-09-30
CVE-2023-43712Os Commerce cross-site scripting Reflected (XSS)5.4v3.10.4%2023-09-30
CVE-2023-43711Os Commerce cross-site scripting Reflected (XSS)5.4v3.10.4%2023-09-30
CVE-2023-43710Os Commerce cross-site scripting Reflected (XSS)5.4v3.10.4%2023-09-30
CVE-2023-43709Os Commerce cross-site scripting Reflected (XSS)5.4v3.10.4%2023-09-30
CVE-2023-43708Os Commerce cross-site scripting Reflected (XSS)5.4v3.10.4%2023-09-30
CVE-2023-43707Os Commerce cross-site scripting Reflected (XSS)5.4v3.10.4%2023-09-30
CVE-2023-43706Os Commerce cross-site scripting Reflected (XSS)5.4v3.10.4%2023-09-30
CVE-2023-43705Os Commerce cross-site scripting Reflected (XSS)5.4v3.10.4%2023-09-30
CVE-2023-43704Os Commerce cross-site scripting Reflected (XSS)5.4v3.10.4%2023-09-30
CVE-2023-43703Os Commerce cross-site scripting Reflected (XSS)5.4v3.10.4%2023-09-30
CVE-2023-43702Os Commerce cross-site scripting Reflected (XSS)5.4v3.10.4%2023-09-30
CVE-2023-5321Missing authorization in hamza417/Inure5.5v3.10.3%2023-09-30Fix
CVE-2023-5320Cross-site scripting (XSS) DOM in thorsten/phpMyFAQ6.1NVD v3.10.6%2023-09-30Fix
CVE-2023-5319Cross-site scripting (XSS) Stored in thorsten/phpMyFAQ5.4NVD v3.10.5%2023-09-30Fix
CVE-2023-5318Microweber uses hard coded credentials7.5v3.10.5%2023-09-30Fix
CVE-2023-5317Cross-site scripting (XSS) Stored in thorsten/phpMyFAQ5.4v3.10.3%2023-09-30Fix
CVE-2023-5316Cross-site scripting (XSS) DOM in thorsten/phpMyFAQ6.1NVD v3.10.5%2023-09-30Fix
CVE-2023-5313phpkobo Ajax Poll Script ajax-poll.php improper enforcement of a single, unique action3.7NVD v3.10.6%2023-09-30
CVE-2023-5305Online Banquet Booking System Contact Us page mail.php cross-site scripting6.1v3.10.3%2023-09-30
CVE-2023-5304Online Banquet Booking System Service Booking book-services.php cross-site scripting6.1v3.10.3%2023-09-30
CVE-2023-5303Online Banquet Booking System Account Detail view-booking-detail.php cross-site scripting6.1v3.10.3%2023-09-30
CVE-2023-5302SourceCodester Best Courier Management System Manage Account page cross-site scripting5.4v3.10.6%2023-09-30
CVE-2023-5301DedeCMS album_add.php AddMyAddon os command injection8.8v3.17.4%2023-09-30
CVE-2023-5300TTSPlanning SQL injection9.8v3.10.5%2023-09-30
CVE-2023-5298Tongda OA 2017 delete.php SQL injection7.5v3.10.6%2023-09-30
CVE-2023-5295Comments by Startbit WordPress plugin stored cross-site scripting5.4v3.10.4%2023-09-30
CVE-2023-5227Unrestricted upload of file with dangerous type in thorsten/phpMyFAQ9.8v3.10.5%2023-09-30Fix
CVE-2023-5207Execution with unnecessary privileges in GitLab8.2CNA v3.11.2%2023-09-30Fix
CVE-2023-5201OpenHook WordPress plugin authenticated (Subscriber+) remote code execution via shortcode8.8NVD v3.11.7%2023-09-30Fix
CVE-2023-5112Os Commerce cross-site scripting Reflected (XSS)5.4v3.10.4%2023-09-30
CVE-2023-5111Os Commerce cross-site scripting Reflected (XSS)5.4v3.10.4%2023-09-30
CVE-2023-44469lemonldap-ng Lemonldap OpenID Connect Issuer server-side request forgery4.3v3.10.5%2023-09-29Fix
CVE-2023-44466Linux kernel buffer overflow8.8v3.145.3%2023-09-29Fix
CVE-2023-44464pretix allows Pillow to parse EPS files7.8v3.10.3%2023-09-29Fix
CVE-2023-44270PostCSS line return parsing error5.3v3.10.8%2023-09-29Fix
CVE-2023-43944oretnom23 Task Management System cross-site scripting5.4v3.10.4%2023-09-29
CVE-2023-43909Hospital Management System SQL injection9.1v3.10.7%2023-09-29
CVE-2023-43655composer remote code execution via web-accessible composer.phar6.4CNA v3.11.5%2023-09-29Fix
CVE-2023-41691WooCommerce PensoPay WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-09-29Fix
CVE-2023-41687Goods Catalog WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2023-09-29
CVE-2023-41666Stock Quotes List WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2023-09-29Fix
CVE-2023-41663WP Bannerize Pro WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-09-29Fix
CVE-2023-41662WP-dTree WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-09-29
CVE-2023-41661Smarty for WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-09-29Fix
CVE-2023-41658Photo Gallery Slideshow and Masonry Tiled Gallery WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-09-29Fix
CVE-2023-41657HollerBox WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2023-09-29Fix
CVE-2023-41655authLdap WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2023-09-29Fix
CVE-2023-39410Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK7.5v3.11.8%2023-09-29Fix
CVE-2023-39308User Feedback WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.6%2023-09-29Fix
CVE-2023-32477Dell Common Event Enabler improper access control7.8CNA v3.10.2%2023-09-29Fix
CVE-2023-30591NodeBB Pre-authentication denial of service7.5v3.158.7%2023-09-29
CVE-2023-26218TIBCO Nimbus reflected cross-site scripting (XSS)8.0CNA v3.10.6%2023-09-29
CVE-2023-26148ithewei/libhv CRLF injection5.3v3.10.4%2023-09-29
CVE-2023-26147ithewei/libhv HTTP response splitting6.1v3.10.4%2023-09-29
CVE-2023-26146ithewei/libhv cross-site scripting6.1v3.10.4%2023-09-29
CVE-2023-5297Xinhu RockOA backup function information disclosure7.5v3.10.7%2023-09-29
CVE-2023-5296Xinhu RockOA Password password recovery7.5v3.10.4%2023-09-29
CVE-2023-5294ECshop order.php SQL injection8.8v3.10.5%2023-09-29
CVE-2023-5293ECshop leancloud.php SQL injection6.5v3.10.5%2023-09-29
CVE-2023-5289Allocation of resources without limits or throttling in ikus060/rdiffweb8.8v3.10.7%2023-09-29Fix
CVE-2023-5288SICK SIM1012 improper access control9.8CNA v3.10.8%2023-09-29
CVE-2023-5287Beecms cross-site scripting4.8v3.10.4%2023-09-29
CVE-2023-5286SourceCodester Expense Tracker App Category add_category.php cross-site scripting5.4v3.10.4%2023-09-29
CVE-2023-5285Tongda OA 2017 delete.php SQL injection7.5v3.10.6%2023-09-29
CVE-2023-5284SourceCodester Engineers Online Portal upload_save_student.php unrestricted upload8.8v3.10.8%2023-09-29
CVE-2023-5283SourceCodester Engineers Online Portal teacher_signup.php SQL injection8.8v3.10.6%2023-09-29
CVE-2023-5282SourceCodester Engineers Online Portal seed_message_student.php SQL injection9.8v3.10.7%2023-09-29
CVE-2023-5281SourceCodester Engineers Online Portal remove_inbox_message.php SQL injection9.8v3.10.7%2023-09-29
CVE-2023-5280SourceCodester Engineers Online Portal my_students.php SQL injection9.8v3.10.7%2023-09-29
CVE-2023-5279SourceCodester Engineers Online Portal my_classmates.php SQL injection9.8v3.10.7%2023-09-29
CVE-2023-5278SourceCodester Engineers Online Portal login.php SQL injection9.8v3.10.7%2023-09-29
CVE-2023-5277SourceCodester Engineers Online Portal student_avatar.php unrestricted upload9.8v3.10.8%2023-09-29
CVE-2023-5276SourceCodester Engineers Online Portal downloadable_student.php SQL injection9.8v3.10.7%2023-09-29
CVE-2023-5273SourceCodester Best Courier Management System manage_parcel_status.php cross-site scripting5.4v3.10.5%2023-09-29
CVE-2023-5272SourceCodester Best Courier Management System GET parameter edit_parcel.php SQL injection8.8v3.10.6%2023-09-29
CVE-2023-5271SourceCodester Best Courier Management System edit_parcel.php SQL injection8.8v3.10.6%2023-09-29
CVE-2023-5270SourceCodester Best Courier Management System view_parcel.php SQL injection8.8v3.10.6%2023-09-29
CVE-2023-5269SourceCodester Best Courier Management System GET parameter parcel_list.php SQL injection8.8v3.10.8%2023-09-29
CVE-2023-5268DedeBIZ makehtml_taglist_action.php SQL injection7.2v3.10.5%2023-09-29
CVE-2023-5267Tongda OA 2017 delete.php SQL injection9.8v3.10.8%2023-09-29
CVE-2023-5266DedeBIZ tags_main.php SQL injection8.8v3.10.5%2023-09-29
CVE-2023-5265Tongda OA 2017 delete.php SQL injection9.8v3.10.8%2023-09-29
CVE-2023-5264Huakecms cms_content.php SQL injection7.2v3.10.5%2023-09-29
CVE-2023-5263Zzzcms Database Backup file save.php restore permission8.8v3.10.6%2023-09-29
CVE-2023-5262OpenRapid RapidCMS uploadicon.php isImg unrestricted upload8.8v3.10.6%2023-09-29
CVE-2023-5261Tongda OA 2017 delete.php SQL injection9.8v3.10.8%2023-09-29
CVE-2023-5260SourceCodester Simple Membership System group_validator.php SQL injection9.8v3.10.7%2023-09-29
CVE-2023-5259ForU CMS cms_admin.php denial of service4.9v3.11.0%2023-09-29
CVE-2023-5258OpenRapid RapidCMS addgood.php SQL injection9.8v3.10.6%2023-09-29
CVE-2023-5257WhiteHSBG JNDIExploit HTTPServer.java handleFileRequest path traversal5.7v3.10.8%2023-09-29
CVE-2023-5198Incorrect authorization in GitLab4.3CNA v3.10.5%2023-09-29Fix
CVE-2023-5196Mattermost DoS via Channel Notification Properties6.5CNA v3.10.7%2023-09-29Fix
CVE-2023-5195Mattermost A team member can soft delete other teams that they are not part of6.5CNA v3.10.5%2023-09-29Fix
CVE-2023-5194Mattermost A system/user manager can demote / deactivate another manager2.7CNA v3.10.4%2023-09-29Fix
CVE-2023-5193Mattermost system Role with manage posts permission can read posts of Direct messages4.9CNA v3.10.6%2023-09-29Fix
CVE-2023-5159Mattermost A User Manager role with user edit permissions could manage/update bots3.8CNA v3.10.4%2023-09-29Fix
CVE-2023-5077HashiCorp Vault incorrect permission assignment for critical resource7.6CNA v3.10.5%2023-09-29Fix
CVE-2023-4532Incorrect authorization in GitLab4.3CNA v3.10.5%2023-09-29Fix
CVE-2023-3979Incorrect authorization in GitLab3.1CNA v3.10.5%2023-09-29Fix
CVE-2023-3922URL redirection to untrusted site (open redirect) in GitLab3.0CNA v3.10.4%2023-09-29Fix
CVE-2023-3920Incorrect authorization in GitLab4.3CNA v3.10.5%2023-09-29Fix
CVE-2023-3917Improper validation of specified type of input in GitLab4.3CNA v3.10.9%2023-09-29Fix
CVE-2023-3914Incorrect user management in GitLab5.4CNA v3.10.4%2023-09-29Fix
CVE-2023-3906Improper validation of specified type of input in GitLab3.5CNA v3.10.6%2023-09-29Fix
CVE-2023-3775Vault Enterprise's Sentinel RGP Policies Allowed for Cross-Namespace denial of service4.2CNA v3.10.5%2023-09-29Fix
CVE-2023-3413Insertion of sensitive information into sent data in GitLab6.5CNA v3.10.7%2023-09-29Fix
CVE-2023-3115Incorrect user management in GitLab5.4CNA v3.10.4%2023-09-29Fix
CVE-2023-3024silabs.com GSDK out-of-bounds write5.9CNA v3.10.3%2023-09-29Fix
CVE-2023-2233Missing authorization in GitLab3.1CNA v3.10.5%2023-09-29Fix
CVE-2023-0989Improper Ownership Management in GitLab4.3CNA v3.10.5%2023-09-29Fix
CVE-2023-44276OPNsense cross-site scripting5.4v3.10.5%2023-09-28
CVE-2023-44275OPNsense cross-site scripting5.4v3.10.5%2023-09-28
CVE-2023-44273Gnark-crypto doesn't range check input values during ECDSA and EdDSA signature deserialization9.8v3.10.8%2023-09-28Fix
CVE-2023-44174Online Movie Ticket Booking System stored cross-site scripting (XSS)5.4v3.10.4%2023-09-28
CVE-2023-44173Online Movie Ticket Booking System reflected cross-site scripting (XSS)5.4v3.10.3%2023-09-28
CVE-2023-44166Online Movie Ticket Booking System multiple Unauthenticated SQL Injections (SQLi)9.8v3.10.8%2023-09-28
CVE-2023-44164Online Movie Ticket Booking System multiple Unauthenticated SQL Injections (SQLi)9.8v3.10.8%2023-09-28
CVE-2023-44163Online Movie Ticket Booking System multiple Unauthenticated SQL Injections (SQLi)9.8v3.10.8%2023-09-28
CVE-2023-43884Subrion CMS cross-site scripting5.4v3.10.4%2023-09-28
CVE-2023-43879Ritecms cross-site scripting4.8v3.10.5%2023-09-28Exploit code
CVE-2023-43878Ritecms cross-site scripting5.4v3.10.5%2023-09-28Exploit code
CVE-2023-43876octobercms october installation cross-site scripting5.4v3.10.4%2023-09-28Exploit codeFix
CVE-2023-43874e107 CMS e017 CMS v.2.3.2 cross-site scripting5.4v3.10.6%2023-09-28Exploit code
CVE-2023-43873e107 CMS e017 CMS v.2.3.2 cross-site scripting5.4v3.10.5%2023-09-28Exploit code
CVE-2023-43872CMS Made Simple CMSmadesimple v.2.2.18 file upload5.4NVD v3.10.6%2023-09-28
CVE-2023-43871WBCE_CMS A file upload5.4v3.10.4%2023-09-28Exploit code
CVE-2023-43869D-Link DIR-619L out-of-bounds write9.8v3.11.0%2023-09-28
CVE-2023-43868D-Link DIR-619L out-of-bounds write7.5v3.10.8%2023-09-28
CVE-2023-43867D-Link DIR-619L out-of-bounds write7.5v3.10.8%2023-09-28
CVE-2023-43866D-Link DIR-619L out-of-bounds write7.5v3.10.8%2023-09-28
CVE-2023-43865D-Link DIR-619L out-of-bounds write7.5v3.10.8%2023-09-28
CVE-2023-43864D-Link DIR-619L out-of-bounds write7.5v3.10.8%2023-09-28
CVE-2023-43863D-Link DIR-619L out-of-bounds write7.5v3.10.8%2023-09-28
CVE-2023-43862D-Link DIR-619L out-of-bounds write7.5v3.10.7%2023-09-28
CVE-2023-43861D-Link DIR-619L out-of-bounds write7.5v3.10.8%2023-09-28
CVE-2023-43860D-Link DIR-619L out-of-bounds write7.5v3.10.7%2023-09-28
CVE-2023-43740Online Book Store Project insecure file upload8.8v3.11.2%2023-09-28
CVE-2023-43739Online Book Store Project unauthenticated SQL injection (SQLi)9.8v3.10.8%2023-09-28
CVE-2023-43664Employee without any access rights can list all installed modules in PrestaShop4.3CNA v3.10.5%2023-09-28Fix
CVE-2023-43663Improper privilege management in PrestaShop6.3CNA v3.10.4%2023-09-28Fix
CVE-2023-43662ShokoAnime ShokoServer arbitrary file read vulnerability in Shoko Server8.6CNA v3.19.1%2023-09-28Nuclei
CVE-2023-43657Discourse discourse-encrypt plugin cross-site scripting7.2CNA v3.10.6%2023-09-28Fix
CVE-2023-43654TorchServe server-side request forgery10.0CNA v3.142.5%2023-09-28Reported exploitedNucleiMetasploitExploit codeKCVFix
CVE-2023-43323mooSocial external control of a configuration setting6.5v3.11.9%2023-09-28NucleiExploit code
CVE-2023-43226DedeCMS dede/baidunews.php arbitrary file upload8.8v3.10.9%2023-09-28
CVE-2023-43044IBM License Metric Tool directory traversal5.3CNA v3.11.1%2023-09-28Fix
CVE-2023-43014Asset Management System authenticated SQL injection (SQLi)8.8v3.10.6%2023-09-28
CVE-2023-43013Asset Management System unauthenticated SQL injection (SQLi)9.8v3.10.7%2023-09-28
CVE-2023-42756Kernel: Netfilter: Race condition between ipset_cmd_add and ipset_cmd_swap4.7NVD v3.10.3%2023-09-28Fix
CVE-2023-42222WebCatalog shell.openExternal function vulnerability8.8v3.11.4%2023-09-28Exploit codeFix
CVE-2023-41911Samsung Exynos 2200 double free5.5v3.10.1%2023-09-28Fix
CVE-2023-41450phpkobo Ajaxnewsticker code injection8.8v3.11.1%2023-09-28
CVE-2023-41447phpkobo Ajaxnewsticker cross-site scripting6.1v3.10.6%2023-09-28
CVE-2023-41446phpkobo Ajaxnewsticker cross-site scripting6.1v3.10.6%2023-09-28
CVE-2023-41444Binalyze Irec code injection7.8v3.10.3%2023-09-28
CVE-2023-40375IBM i privilege escalation7.4CNA v3.10.2%2023-09-28Fix
CVE-2023-40307Privileges memory corruption (out-of-bound write)6.3CNA v3.10.2%2023-09-28
CVE-2023-38877Economizzer host header injection8.8v3.10.9%2023-09-28
CVE-2023-38874Economizzer remote code execution8.8v3.131.6%2023-09-28
CVE-2023-38873Economizzer vulnerable to clickjacking6.5v3.10.6%2023-09-28Exploit code
CVE-2023-38872Economizzer insecure direct object reference3.7v3.10.6%2023-09-28
CVE-2023-38871Economizzer observable discrepancy5.3v3.10.6%2023-09-28
CVE-2023-38870Economizzer gugoan SQL injection9.8v3.10.8%2023-09-28
CVE-2023-30415oretnom23 Packers And Movers Management System SQL injection9.8v3.10.8%2023-09-28
CVE-2023-26149Quill-mention cross-site scripting6.1v3.10.6%2023-09-28Fix
CVE-2023-26145pydash command injection8.1v3.12.9%2023-09-28Fix
CVE-2023-5256Drupal Core Critical cache poisoning SA-CORE-2023-0067.5v3.10.7%2023-09-28Fix
CVE-2023-5244Cross-site scripting (XSS) Reflected in microweber/microweber6.1v3.11.1%2023-09-28NucleiFix
CVE-2023-5233Font Awesome Integration WordPress plugin stored cross-site scripting5.4v3.10.4%2023-09-28
CVE-2023-5232Font Awesome More Icons WordPress plugin stored cross-site scripting5.4v3.10.4%2023-09-28
CVE-2023-5230TM WooCommerce Compare and Wishlist WordPress plugin stored cross-site scripting5.4v3.10.3%2023-09-28
CVE-2023-5217Google Chromium libvpx heap buffer overflow8.8v3.149.0%2023-09-28KEVExploit codeFix
CVE-2023-5215Libnbd: Crash or misbehaviour when nbd server returns an unexpected block size5.3CNA v3.10.8%2023-09-28Fix
CVE-2023-5187Google Chrome extensions use-after-free8.8v3.10.8%2023-09-28Fix
CVE-2023-5186Google Chrome Passwords use-after-free8.8v3.11.0%2023-09-28Fix
CVE-2023-5185Gym Management System Project insecure file upload8.8NVD v3.11.5%2023-09-28
CVE-2023-5053SQL injection in hospital-management-system-in-php 378c157 in index.php9.8v3.10.9%2023-09-28
CVE-2023-5004Hospital-management-system-in-php 378c157 blind SQL injection9.8v3.10.9%2023-09-28
CVE-2023-4316Zod regular expression denial of service7.5v3.10.8%2023-09-28Fix
CVE-2023-44216AMD Ryzen 5 7600x observable discrepancy5.3v3.11.8%2023-09-27
CVE-2023-44207Acronis Cyber Protect 15 protection plan name stored cross-site scripting6.7CNA v3.00.6%2023-09-27Fix
CVE-2023-44206Acronis Cyber Protect 15 insecure direct object reference7.1CNA v3.01.0%2023-09-27Fix
CVE-2023-44205Acronis Cyber Protect 15 insecure direct object reference3.5CNA v3.00.7%2023-09-27Fix
CVE-2023-44172Seacms path traversal9.8v3.11.2%2023-09-27
CVE-2023-44171Seacms path traversal9.8v3.11.2%2023-09-27
CVE-2023-44170Seacms path traversal9.8v3.11.2%2023-09-27
CVE-2023-44169Seacms path traversal9.8v3.11.2%2023-09-27
CVE-2023-44161Acronis Cyber Protect 15 cross-site request forgery3.1CNA v3.00.3%2023-09-27Fix
CVE-2023-44160Acronis Cyber Protect 15 cross-site request forgery3.1CNA v3.00.3%2023-09-27Fix
CVE-2023-44159Acronis Cyber Protect 15 cleartext storage of sensitive information5.5CNA v3.00.7%2023-09-27Fix
CVE-2023-44158Acronis Cyber Protect 15 insufficiently protected credentials3.5CNA v3.00.8%2023-09-27Fix
CVE-2023-44157Acronis Cyber Protect 15 incorrect default permissions3.3CNA v3.00.3%2023-09-27Fix
CVE-2023-44156Acronis Cyber Protect 15 personal information exposure5.7CNA v3.01.0%2023-09-27Fix
CVE-2023-44155Acronis Cyber Protect 15 sensitive information in log files4.4CNA v3.01.1%2023-09-27Fix
CVE-2023-44154Acronis Cyber Protect 15 insecure direct object reference4.6CNA v3.00.8%2023-09-27Fix
CVE-2023-44153Acronis Cyber Protect 15 cleartext storage of sensitive information in memory2.2CNA v3.00.4%2023-09-27Fix
CVE-2023-44152Acronis Cyber Protect 15 missing authentication6.1CNA v3.00.9%2023-09-27Fix
CVE-2023-44129LG Electronics LG V60 Thin Q 5G(LMV600VM) improper export of Android application components3.6CNA v3.10.1%2023-09-27Fix
CVE-2023-44128LG Electronics LG V60 Thin Q 5G LGInstallService Deletion of arbitrary files with system privilege5.0CNA v3.10.1%2023-09-27Fix
CVE-2023-44127LG Electronics LG V60 Thin Q 5G(LMV600VM) implicit intent for sensitive communication3.6CNA v3.10.1%2023-09-27Fix
CVE-2023-44126LG Electronics LG V60 Thin Q 5G(LMV600VM) improper intent verification3.6CNA v3.10.1%2023-09-27Fix
CVE-2023-44125LG Electronics LG V60 Thin Q 5G(LMV600VM) improper authorization6.1CNA v3.10.1%2023-09-27Fix
CVE-2023-44124LG Electronics LG V60 Thin Q 5G screen recording Theft of arbitrary files with system privilege6.1CNA v3.10.1%2023-09-27Fix
CVE-2023-44123LG Electronics LG V60 Thin Q 5G(LMV600VM) improper authorization6.1CNA v3.10.1%2023-09-27Fix
CVE-2023-44122LG Electronics LG V60 Thin Q 5G LockScreenSettings Theft arbitrary files with system privilege6.1CNA v3.10.1%2023-09-27Fix
CVE-2023-44121LG ThinQ Service Intent redirection with system privilege/LaunchAnyWhere5.0CNA v3.10.1%2023-09-27Fix
CVE-2023-44080Pgyer Codefever OS command injection9.8v3.10.9%2023-09-27
CVE-2023-44048oretnom23 Expense Tracker cross-site scripting5.4v3.10.4%2023-09-27
CVE-2023-44047oretnom23 Toll Tax Management System SQL injection7.2v3.10.7%2023-09-27
CVE-2023-44044Super Store Finder SQL injection7.2v3.10.9%2023-09-27
CVE-2023-44043Blackcat CMS /install/index.php of Black Cat CMS reflected cross-site scripting6.1v3.10.5%2023-09-27
CVE-2023-44042Blackcat CMS /settings/index.php of Black Cat CMS stored cross-site scripting5.4v3.10.5%2023-09-27
CVE-2023-44023Tendacn AC10U stack-based buffer overflow9.8v3.10.9%2023-09-27
CVE-2023-44022Tendacn AC10U stack-based buffer overflow9.8v3.10.9%2023-09-27
CVE-2023-44021Tendacn AC10U stack-based buffer overflow9.8v3.10.9%2023-09-27
CVE-2023-44020Tendacn AC10U stack-based buffer overflow9.8v3.10.9%2023-09-27
CVE-2023-44019Tendacn AC10U stack-based buffer overflow9.8v3.10.9%2023-09-27
CVE-2023-44018Tendacn AC10U stack-based buffer overflow9.8v3.115.8%2023-09-27
CVE-2023-44017Tendacn AC10U stack-based buffer overflow9.8v3.10.9%2023-09-27
CVE-2023-44016Tendacn AC10U stack-based buffer overflow9.8v3.10.9%2023-09-27
CVE-2023-44015Tendacn AC10U stack-based buffer overflow9.8v3.10.6%2023-09-27
CVE-2023-44014Tendacn AC10U stack-based buffer overflow9.8v3.10.9%2023-09-27
CVE-2023-44013Tendacn AC10U stack-based buffer overflow9.8v3.10.9%2023-09-27
CVE-2023-43857iteachyou Dreamer CMS cross-site scripting5.4v3.10.4%2023-09-27
CVE-2023-43856iteachyou Dreamer CMS files accessible to external parties7.5v3.10.8%2023-09-27
CVE-2023-43830Subrion CMS XSS in /panel/configuration/financial/5.4v3.10.5%2023-09-27
CVE-2023-43828Subrion CMS cross-site scripting vulnerability in /panel/languages5.4v3.10.5%2023-09-27
CVE-2023-43825EKAKIN Shihonkanri Plus relative path traversal7.8v3.10.3%2023-09-27Fix
CVE-2023-43775Security issue in SMP Gateway automation platform4.7CNA v3.10.8%2023-09-27Fix
CVE-2023-43660SSH key password bypassed in warpgate4.8CNA v3.10.3%2023-09-27Fix
CVE-2023-43656Sandbox escape for instances that have enabled transformation functions in matrix-hookshot5.6CNA v3.10.3%2023-09-27Fix
CVE-2023-43652Non-MFA account takeover via using only SSH public key to login in jumpserver8.2CNA v3.10.8%2023-09-27Fix
CVE-2023-43651Remote code execution on the host system via MongoDB shell in jumpserver8.6CNA v3.12.1%2023-09-27Fix
CVE-2023-43650Non-MFA account takeover via brute-force attack on weak password reset code in jumpserver8.2CNA v3.10.6%2023-09-27Fix
CVE-2023-43646Inefficient regular expression complexity in get-func-name8.6CNA v3.11.4%2023-09-27Exploit codeFix
CVE-2023-43645Denial of service from circular relationship definitions in OpenFGA5.9CNA v3.10.9%2023-09-27Fix
CVE-2023-43614Collne Welcart e-Commerce Order Data Edit page cross-site scripting6.1v3.10.6%2023-09-27Fix
CVE-2023-43610Collne Welcart e-Commerce Order Data Edit page SQL injection8.8v3.10.9%2023-09-27Fix
CVE-2023-43493Collne Welcart e-Commerce Item List page SQL injection4.9v3.10.8%2023-09-27Fix
CVE-2023-43484Collne Welcart e-Commerce Item List page cross-site scripting6.1v3.10.6%2023-09-27Fix
CVE-2023-43381Tianchoy Blog SQL injection7.5v3.11.0%2023-09-27
CVE-2023-43331Small CRM Add User function cross-site scripting5.4v3.10.5%2023-09-27
CVE-2023-43320Proxmox Mail Gateway privilege escalation8.8v3.11.0%2023-09-27
CVE-2023-43314Zyxel PMG2005-T20B buffer overflow7.5CNA v3.10.8%2023-09-27
CVE-2023-43291emlog deserialization of untrusted data9.8v3.11.6%2023-09-27
CVE-2023-43263Froala Editor cross-site scripting6.1v3.10.7%2023-09-27Exploit code
CVE-2023-43234DedeBIZ code injection9.8v3.11.0%2023-09-27
CVE-2023-43233Yzncms cms/content/edit component stored cross-site scripting6.1v3.10.3%2023-09-27
CVE-2023-43232DedeBIZ Website column management function stored cross-site scripting5.4v3.10.3%2023-09-27Fix
CVE-2023-43222Seacms code injection9.8v3.10.8%2023-09-27
CVE-2023-43216Seacms path traversal9.8v3.11.2%2023-09-27
CVE-2023-43192Jrecms SpringBootCMS newly created part of the SQL injection8.8v3.10.7%2023-09-27
CVE-2023-43191Jrecms SpringBootCMS cross-site scripting5.4v3.10.3%2023-09-27
CVE-2023-43187NodeBB xmlrpc.php endpoint remote code execution9.8v3.146.9%2023-09-27Nuclei
CVE-2023-43154Macs Cms type confusion9.8v3.11.0%2023-09-27Exploit code
CVE-2023-43125BIG-IP APM Clients TunnelCrack vulnerability6.8CNA v3.10.3%2023-09-27Fix
CVE-2023-43124BIG-IP APM Clients TunnelCrack vulnerability5.3CNA v3.10.2%2023-09-27Fix
CVE-2023-42822Unchecked access to font glyph info in xrdp4.6CNA v3.10.7%2023-09-27Fix
CVE-2023-42820Random seed leakage in Jumpserver7.0CNA v3.16.3%2023-09-27Exploit codeFix
CVE-2023-42819Path traversal in Jumpserver8.9CNA v3.12.2%2023-09-27Exploit codeFix
CVE-2023-42818SSH public key login without private key challenge if mfa is enabled in jumpserver5.4CNA v3.10.7%2023-09-27Fix
CVE-2023-42657WS_FTP Server directory traversal9.9CNA v3.116.0%2023-09-27Fix
CVE-2023-42487Soundminer improper limitation of a pathname to a restricted directory (path traversal)7.5v3.10.9%2023-09-27
CVE-2023-42486Fortect unquoted search path or element7.8v3.10.2%2023-09-27
CVE-2023-42462File deletion through document upload process in GLPI7.7CNA v3.11.3%2023-09-27Fix
CVE-2023-42461SQL injection in ITIL actors in GLPI6.5CNA v3.11.2%2023-09-27Fix
CVE-2023-42460_abi_decode input not validated in complex expressions in Vyper5.3CNA v3.10.7%2023-09-27Fix
CVE-2023-42453Improper validation of receipts allows forged read receipts in Matrix synapse3.1CNA v3.10.8%2023-09-27Fix
CVE-2023-41996The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.6. Apps that fail verification checks may still launch.5.5v3.10.3%2023-09-27Fix
CVE-2023-41995Apple macOS use-after-free7.8v3.10.3%2023-09-27Fix
CVE-2023-41986Apple macOS, iOS and iPadOS file system protections vulnerability5.5v3.10.3%2023-09-27Fix
CVE-2023-41984Apple macOS code injection7.8v3.10.5%2023-09-27Fix
CVE-2023-41981Apple macOS code execution4.4v3.10.4%2023-09-27Fix
CVE-2023-41980Apple macOS insecure permissions5.5v3.10.3%2023-09-27Fix
CVE-2023-41979Apple macOS race condition4.7v3.10.2%2023-09-27Fix
CVE-2023-41968Apple macOS link following5.5v3.10.4%2023-09-27Fix
CVE-2023-41962Collne Welcart e-Commerce Credit Card Payment Setup page cross-site scripting6.1v3.10.6%2023-09-27Fix
CVE-2023-41904Zoho ManageEngine ADManager Plus improper authentication5.4v3.12.0%2023-09-27Fix
CVE-2023-41888Phishing through a login page malicious URL in GLPI5.3CNA v3.10.5%2023-09-27Fix
CVE-2023-41878Weak password of selenium VNC in MeterSphere4.6CNA v3.10.7%2023-09-27Fix
CVE-2023-41861tickera Restrict reflected cross-site scripting6.1NVD v3.10.4%2023-09-27Fix
CVE-2023-41860Travel Map WordPress plugin cross-site scripting (XSS)6.1v3.10.3%2023-09-27Fix
CVE-2023-41653Sermon'e Sermons Online WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-09-27
CVE-2023-41453phpkobo Ajaxnewsticker cross-site scripting6.1v3.10.6%2023-09-27
CVE-2023-41452phpkobo Ajaxnewsticker cross-site request forgery8.8v3.10.5%2023-09-27
CVE-2023-41451phpkobo Ajaxnewsticker cross-site scripting6.1v3.10.6%2023-09-27
CVE-2023-41449phpkobo Ajaxnewsticker server-side request forgery9.8v3.11.1%2023-09-27
CVE-2023-41448phpkobo Ajaxnewsticker cross-site scripting6.1v3.10.6%2023-09-27
CVE-2023-41445phpkobo Ajaxnewsticker cross-site scripting6.1v3.10.5%2023-09-27
CVE-2023-41335Temporary storage of plaintext passwords during password changes in Matrix synapse3.7CNA v3.10.4%2023-09-27Fix
CVE-2023-41333cilium bypass of namespace restrictions in CiliumNetworkPolicy6.9CNA v3.10.5%2023-09-27Fix
CVE-2023-41332Denial of service via Kubernetes annotations in specific Cilium configurations3.5CNA v3.10.5%2023-09-27Fix
CVE-2023-41326Account takeover via Kanban feature in GLPI8.1CNA v3.135.6%2023-09-27Emerging ThreatsFix
CVE-2023-41324Account takeover through API in GLPI8.1CNA v3.10.9%2023-09-27Fix
CVE-2023-41323Users login enumeration by unauthenticated user in GLPI5.3CNA v3.133.9%2023-09-27Emerging ThreatsFix
CVE-2023-41322Privilege escalation from technician to super-admin in GLPI4.9CNA v3.10.9%2023-09-27Fix
CVE-2023-41321Sensitive fields enumeration through API in GLPI4.9CNA v3.10.9%2023-09-27Fix
CVE-2023-41320Account takeover via SQL injection in UI layout preferences in GLPI8.1CNA v3.135.3%2023-09-27Emerging ThreatsFix
CVE-2023-41312Huawei HarmonyOS permission control vulnerability in the audio module5.3v3.10.4%2023-09-27Fix
CVE-2023-41311Huawei HarmonyOS permission control vulnerability in the audio module5.3v3.10.3%2023-09-27Fix
CVE-2023-41310Huawei HarmonyOS keep-alive vulnerability in the sticky broadcast mechanism3.3v3.10.2%2023-09-27Fix
CVE-2023-41309Huawei HarmonyOS permission control vulnerability in the MediaPlaybackController module7.5v3.10.5%2023-09-27Fix
CVE-2023-41308Huawei HarmonyOS screenshot vulnerability in the input module7.5v3.10.5%2023-09-27Fix
CVE-2023-41307Huawei HarmonyOS memory overwriting vulnerability in the security module7.5v3.10.6%2023-09-27Fix
CVE-2023-41306Huawei HarmonyOS vulnerability of mutex management in the bone voice ID trusted application module3.7v3.10.4%2023-09-27Fix
CVE-2023-41305Huawei HarmonyOS inadequate encryption strength7.5v3.10.4%2023-09-27Fix
CVE-2023-41242Snap Pixel WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2023-09-27Fix
CVE-2023-41241SureCart WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2023-09-27Fix
CVE-2023-41238Social Media and Share Icons WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-09-27Fix
CVE-2023-41237Arya Multipurpose Pro WordPress theme cross-site scripting (XSS)6.1NVD v3.10.4%2023-09-27
CVE-2023-41236Happy Elementor Addons Pro WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-09-27Fix
CVE-2023-41235Everest News Pro WordPress theme cross-site scripting (XSS)6.1NVD v3.10.4%2023-09-27
CVE-2023-41233Collne Welcart e-Commerce Item List page registration process cross-site scripting6.1v3.10.6%2023-09-27Fix
CVE-2023-41232Apple macOS out-of-bounds read5.5v3.10.3%2023-09-27Fix
CVE-2023-41174Apple tvOS arbitrary code execution7.8v3.10.3%2023-09-27Fix
CVE-2023-41079Apple macOS Privacy preferences vulnerability5.5v3.10.3%2023-09-27Fix
CVE-2023-41078Apple macOS incorrect authorization5.5v3.10.3%2023-09-27Fix
CVE-2023-41073Apple iOS, iPadOS, macOS, tvOS and watchOS incorrect authorization5.5v3.10.3%2023-09-27Fix
CVE-2023-41071Apple macOS use-after-free7.8v3.10.4%2023-09-27Fix
CVE-2023-41070Apple macOS logic flaw5.5v3.10.3%2023-09-27Fix
CVE-2023-41068Apple tvOS privilege escalation7.8v3.10.3%2023-09-27Fix
CVE-2023-41067Apple macOS logic flaw5.5v3.10.3%2023-09-27Fix
CVE-2023-41066Apple macOS secure text fields information disclosure5.5v3.10.3%2023-09-27Fix
CVE-2023-41065Apple tvOS information disclosure3.3v3.10.4%2023-09-27Fix
CVE-2023-41063Apple macOS arbitrary code execution7.8v3.10.4%2023-09-27Fix
CVE-2023-40677Vertical Marquee WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-09-27
CVE-2023-40676Slimstat Analytics WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-09-27Fix
CVE-2023-40675Landing Page Builder WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-09-27Fix
CVE-2023-40669Collapse-O-Matic WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-09-27
CVE-2023-40668Save as PDF plugin by Pdfcrowd WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-09-27Fix
CVE-2023-40667Simple URLs WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-09-27Fix
CVE-2023-40665Save as Image plugin by Pdfcrowd WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-09-27Fix
CVE-2023-40664Donations Made Easy Smart Donations WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-09-27
CVE-2023-40663WP VR WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-09-27Fix
CVE-2023-40605Typing Effect WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-09-27Fix
CVE-2023-40604Cookies by JM WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-09-27
CVE-2023-40541This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Sonoma 14. A shortcut may output sensitive user data without consent.5.5v3.10.3%2023-09-27Fix
CVE-2023-40532Collne Welcart e-Commerce path traversal4.3v3.10.6%2023-09-27Fix
CVE-2023-40520Apple iOS and iPadOS Photos temporary directory vulnerability3.3v3.10.3%2023-09-27Fix
CVE-2023-40456Apple iOS, iPadOS, tvOS and watchOS Photos vulnerability3.3v3.10.3%2023-09-27Fix
CVE-2023-40455Apple macOS insecure permissions10.0v3.11.0%2023-09-27Fix
CVE-2023-40454Apple macOS insecure permissions7.1v3.10.4%2023-09-27Fix
CVE-2023-40452Apple macOS arbitrary file write7.1v3.10.4%2023-09-27Fix
CVE-2023-40451Apple Safari arbitrary code execution8.8v3.11.0%2023-09-27Fix
CVE-2023-40450Apple macOS Gatekeeper security feature bypass5.5v3.10.2%2023-09-27Fix
CVE-2023-40448Apple tvOS sandbox escape8.6v3.11.6%2023-09-27Exploit codeFix
CVE-2023-40443Apple iOS and iPadOS privilege escalation7.8v3.10.3%2023-09-27Fix
CVE-2023-40441Apple macOS resource exhaustion6.5v3.10.9%2023-09-27Fix
CVE-2023-40436Apple macOS out-of-bounds read9.1v3.11.0%2023-09-27Fix
CVE-2023-40435This issue was addressed by enabling hardened runtime. This issue is fixed in Xcode 15. An app may be able to access App Store credentials.5.5v3.10.2%2023-09-27Fix
CVE-2023-40434Apple iOS, iPadOS and macOS Photos Library information disclosure3.3v3.10.3%2023-09-27Fix
CVE-2023-40432Apple tvOS arbitrary code execution7.8v3.10.3%2023-09-27Fix
CVE-2023-40431Apple iOS and iPadOS arbitrary code execution7.8v3.10.3%2023-09-27Fix
CVE-2023-40429Apple tvOS insecure permissions5.5v3.10.6%2023-09-27Exploit codeFix
CVE-2023-40428Apple iOS and iPadOS information disclosure5.5v3.10.3%2023-09-27Fix
CVE-2023-40427Apple macOS information disclosure3.3v3.10.3%2023-09-27Fix
CVE-2023-40426Apple macOS insecure permissions5.5v3.10.3%2023-09-27Fix
CVE-2023-40424Apple iOS, iPadOS, macOS and watchOS information disclosure5.5v3.10.3%2023-09-27Fix
CVE-2023-40422Apple macOS denial of service5.5v3.10.3%2023-09-27Fix
CVE-2023-40420Apple macOS denial of service6.5v3.11.2%2023-09-27Fix
CVE-2023-40419Apple tvOS privilege escalation7.8v3.10.3%2023-09-27Fix
CVE-2023-40418Apple Watch Ultra Depth app vulnerability5.5v3.10.3%2023-09-27Fix
CVE-2023-40417Apple Safari spoofing5.4v3.10.8%2023-09-27Fix
CVE-2023-40412Apple macOS arbitrary code execution7.8v3.10.3%2023-09-27Fix
CVE-2023-40410Apple macOS out-of-bounds read5.5v3.10.3%2023-09-27Fix
CVE-2023-40409Apple macOS arbitrary code execution7.8v3.10.3%2023-09-27Fix
CVE-2023-40407Apple macOS denial of service7.5v3.11.2%2023-09-27Fix
CVE-2023-40406Apple macOS arbitrary file read5.5v3.10.3%2023-09-27Fix
CVE-2023-40403Apple macOS information disclosure6.5v3.11.1%2023-09-27Fix
CVE-2023-40402Apple macOS insecure permissions5.5v3.10.3%2023-09-27Fix
CVE-2023-40400Apple tvOS arbitrary code execution9.8v3.11.8%2023-09-27Fix
CVE-2023-40399Apple iOS, iPadOS, macOS, tvOS and watchOS kernel information disclosure5.5v3.10.3%2023-09-27Fix
CVE-2023-40395The issue was addressed with improved handling of caches. This issue is fixed in tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to access contacts.3.3v3.10.3%2023-09-27Fix
CVE-2023-40391Apple iOS, iPadOS, macOS, tvOS and Xcode kernel information disclosure5.5v3.10.3%2023-09-27Fix
CVE-2023-40388Apple macOS Safari vulnerability4.3v3.10.6%2023-09-27Fix
CVE-2023-40386Apple macOS Notes vulnerability3.3v3.10.3%2023-09-27Fix
CVE-2023-40384Apple tvOS insecure permissions3.3v3.10.3%2023-09-27Fix
CVE-2023-40333Bridge Core WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-09-27Fix
CVE-2023-40330GD Security Headers WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-09-27Fix
CVE-2023-40219Collne Welcart e-Commerce unrestricted file upload7.2v3.10.9%2023-09-27Fix
CVE-2023-40049WS_FTP Server information disclosure via directory listing5.3CNA v3.10.9%2023-09-27Fix
CVE-2023-40048WS_FTP Server cross-site request forgery (CSRF)6.8CNA v3.10.4%2023-09-27Fix
CVE-2023-40047WS_FTP Server stored cross-site scripting8.3CNA v3.10.4%2023-09-27Fix
CVE-2023-40046WS_FTP Server SQL injection via Administrative interface8.2CNA v3.11.0%2023-09-27Fix
CVE-2023-40045WS_FTP Server Ad Hoc Transfer module reflected cross-site scripting8.3CNA v3.10.9%2023-09-27Fix
CVE-2023-40044Progress WS_FTP Server deserialization of untrusted data10.0CNA v3.190.4%2023-09-27KEVNucleiMetasploitEmerging ThreatsExploit codeFix
CVE-2023-40026argoproj argo-cd path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server5.0CNA v3.10.6%2023-09-27Fix
CVE-2023-39434Apple macOS use-after-free8.8v3.11.5%2023-09-27Fix
CVE-2023-39378SiberianCMS SQL injection8.8v3.10.7%2023-09-27
CVE-2023-39377SiberianCMS unrestricted file upload7.2v3.10.8%2023-09-27
CVE-2023-39376SiberianCMS improper access control Authorized user may disable a security feature over the network6.5v3.10.4%2023-09-27
CVE-2023-39375SiberianCMS improper handling of insufficient privileges9.8v3.10.6%2023-09-27
CVE-2023-39347Cilium NetworkPolicy bypass via pod labels7.6CNA v3.10.6%2023-09-27Fix
CVE-2023-39233Apple macOS information disclosure6.5v3.10.7%2023-09-27Fix
CVE-2023-38615Apple macOS arbitrary code execution7.8v3.10.3%2023-09-27Fix
CVE-2023-38596Apple iOS and iPadOS App Transport Security vulnerability5.5v3.10.3%2023-09-27Fix
CVE-2023-38586Apple macOS sandbox vulnerability10.0v3.11.0%2023-09-27Fix
CVE-2023-37448Apple macOS lock screen information disclosure3.3v3.10.3%2023-09-27Fix
CVE-2023-36851Juniper Junos OS SRX Series missing authentication for critical function5.3CNA v3.11.1%2023-09-27KEVEmerging ThreatsFix
CVE-2023-35990Apple macOS incorrect authorization3.3v3.10.3%2023-09-27Fix
CVE-2023-35984Apple tvOS out-of-bounds write4.3v3.10.7%2023-09-27Fix
CVE-2023-35793Cassia Networks Access Controller cross-site request forgery8.8NVD v3.11.1%2023-09-27KCV
CVE-2023-35074Apple tvOS arbitrary code execution8.8v3.11.4%2023-09-27Fix
CVE-2023-35071SQLi in Mrv Tech's Logging Administration Panel9.8CNA v3.10.7%2023-09-27Fix
CVE-2023-34043VMware Aria Operations improper privilege management6.7CNA v3.10.2%2023-09-27Fix
CVE-2023-33972Privilege escalation from having CREATE access on a keyspace in Scylladb7.2CNA v3.10.6%2023-09-27Fix
CVE-2023-32541Hancom Office 2020 footerr functionality use-after-free7.8v3.10.7%2023-09-27
CVE-2023-32458Dell EMC AppSync improper access control7.3CNA v3.10.2%2023-09-27Fix
CVE-2023-32421Apple macOS temporary file handling vulnerability5.5v3.10.2%2023-09-27Fix
CVE-2023-32396Apple Xcode privilege escalation7.8v3.10.3%2023-09-27Fix
CVE-2023-32377Apple macOS buffer overflow7.8v3.10.3%2023-09-27Fix
CVE-2023-32361Apple iOS, iPadOS, macOS, tvOS and watchOS cache handling information disclosure5.5v3.10.3%2023-09-27Fix
CVE-2023-30961Palantir Gotham UI bug that could lead to incorrect data classification6.5CNA v3.10.4%2023-09-27Fix
CVE-2023-30959Stored XSS via javascript URI in Apollo Change requests comment4.1CNA v3.10.4%2023-09-27Fix
CVE-2023-30493Ultimate Addons for Contact Form 7 WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-09-27Fix
CVE-2023-30472URL Shortener by MyThemeShop WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-09-27
CVE-2023-30471WP Search Analytics WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-09-27Fix
CVE-2023-29497Apple macOS temporary file handling vulnerability3.3v3.10.2%2023-09-27Fix
CVE-2023-28790Simple Staff List WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-09-27Fix
CVE-2023-28490Mortgage Calculator Estatik WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-09-27
CVE-2023-28055Dell NetWorker improper authorization8.8CNA v3.10.4%2023-09-27Fix
CVE-2023-27628Sitekit WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-09-27Fix
CVE-2023-27622GuruWalk Affiliates WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2023-09-27
CVE-2023-27617David F. Carr RSVPMaker stored cross-site scripting4.8v3.10.4%2023-09-27Fix
CVE-2023-27616David F. Carr RSVPMaker stored cross-site scripting6.1NVD v3.10.4%2023-09-27Fix
CVE-2023-25483Easy Coming Soon WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-09-27
CVE-2023-23958Symantec Protection Engine hash leak6.8CNA v3.10.6%2023-09-27Fix
CVE-2023-23495Apple macOS insecure permissions5.5v3.10.2%2023-09-27Fix
CVE-2023-20268Cisco Access Point Software uncontrolled resource consumption4.7CNA v3.10.3%2023-09-27Fix
CVE-2023-20262Cisco SD-WAN Solution crash5.3CNA v3.11.0%2023-09-27Fix
CVE-2023-20254Cisco SD-WAN vManage incorrect permission assignment7.2CNA v3.10.8%2023-09-27Fix
CVE-2023-20253Cisco SD-WAN vManage incorrect user management7.1CNA v3.10.2%2023-09-27Fix
CVE-2023-20252Cisco SD-WAN vManage missing authorization9.8CNA v3.11.1%2023-09-27Fix
CVE-2023-20251Cisco Wireless LAN Controller (WLC) memory leak6.1CNA v3.10.3%2023-09-27Fix
CVE-2023-20231Cisco IOS XE Software OS command injection8.8CNA v3.11.0%2023-09-27Fix
CVE-2023-20227Cisco IOS XE Software denial of service8.6CNA v3.10.9%2023-09-27Fix
CVE-2023-20226Cisco IOS XE Software denial of service8.6CNA v3.10.9%2023-09-27Fix
CVE-2023-20223Cisco Digital Network Architecture Center (DNA Center) improper access control8.6CNA v3.10.6%2023-09-27Fix
CVE-2023-20202Cisco IOS XE Software excessive memory allocation6.1CNA v3.10.3%2023-09-27Fix
CVE-2023-20187Cisco IOS XE Software out-of-range pointer offset8.6CNA v3.10.9%2023-09-27Fix
CVE-2023-20186Cisco IOS improper authorization8.0CNA v3.10.8%2023-09-27Fix
CVE-2023-20179Cisco SD-WAN vManage cross-site scripting4.3CNA v3.10.4%2023-09-27Fix
CVE-2023-20176Cisco Aironet Access Point Software resource exhaustion5.8CNA v3.10.9%2023-09-27Fix
CVE-2023-20109Cisco IOS and IOS XE Group Encrypted Transport VPN out-of-bounds write6.6CNA v3.12.5%2023-09-27KEVFix
CVE-2023-20034Cisco SD-WAN vManage hard-coded credentials7.5CNA v3.10.8%2023-09-27Fix
CVE-2023-20033Cisco IOS XE Software resource exhaustion8.6CNA v3.10.9%2023-09-27Fix
CVE-2023-5223HimitZH HOJ Topic Handler vulnerability9.9v3.10.9%2023-09-27
CVE-2023-5222Viessmann Vitogate 300 Web Management interface vitogate.cgi isValidUser hard-coded password9.8v3.180.2%2023-09-27Reported exploitedNucleiExploit codeFix
CVE-2023-5221ForU CMS index.php code injection9.8v3.11.3%2023-09-27
CVE-2023-5192Excessive Data Query Operations in a Large Data Table in pimcore/demo6.5v3.10.8%2023-09-27Fix
CVE-2023-5184Zephyr IPM driver buffer overflow7.0CNA v3.10.4%2023-09-27
CVE-2023-5183Illumio Core PCE authenticated RCE due to unsafe JSON deserialization9.9CNA v3.11.8%2023-09-27Fix
CVE-2023-5176Mozilla Firefox memory safety bugs9.8v3.11.2%2023-09-27Fix
CVE-2023-5175Mozilla Firefox use-after-free9.8v3.10.8%2023-09-27Fix
CVE-2023-5174Mozilla Firefox use-after-free9.8v3.11.0%2023-09-27Fix
CVE-2023-5173Mozilla Firefox integer overflow7.5v3.10.7%2023-09-27Fix
CVE-2023-5172Mozilla Firefox use-after-free9.8v3.10.8%2023-09-27Fix
CVE-2023-5171Mozilla Firefox use-after-free6.5v3.11.0%2023-09-27Fix
CVE-2023-5170Mozilla Firefox memory leak7.4v3.10.6%2023-09-27Fix
CVE-2023-5169Mozilla Firefox out-of-bounds write6.5v3.11.0%2023-09-27Fix
CVE-2023-5168Mozilla Firefox out-of-bounds write9.8v3.10.9%2023-09-27Fix
CVE-2023-5162Options for Twenty Seventeen WordPress plugin stored cross-site scripting5.4v3.10.6%2023-09-27Fix
CVE-2023-5161Modal Window WordPress plugin authenticated (Contributor+) stored cross-site scripting via shortcode5.4v3.10.6%2023-09-27Fix
CVE-2023-5157MariaDB: Node crashes with transport endpoint is not connected mysqld got signal 67.5NVD v3.12.2%2023-09-27Fix
CVE-2023-5135Simple Cloudflare Turnstile WordPress plugin stored cross-site scripting5.4v3.10.6%2023-09-27Fix
CVE-2023-4934Usta AYBS insecure direct object reference8.8CNA v3.11.2%2023-09-27Fix
CVE-2023-4737SQLi in Hedef Trackings Admin Panel9.8CNA v3.11.0%2023-09-27Fix
CVE-2023-4565Huawei HarmonyOS broadcast permission control vulnerability in the framework module5.3v3.10.5%2023-09-27Fix
CVE-2023-4523Real Time Automation 460 Series cross-site scripting6.1NVD v3.10.4%2023-09-27Fix
CVE-2023-4506Active Directory Integration / LDAP Integration WordPress plugin LDAP Passback6.5v3.10.7%2023-09-27Fix
CVE-2023-4505Staff / Employee Business Directory for Active Directory WordPress plugin LDAP Passback4.9v3.10.7%2023-09-27Fix
CVE-2023-4423WP Event Manager WordPress plugin stored cross-site scripting4.8v3.10.5%2023-09-27Fix
CVE-2023-4264Potential buffer overflow vulnerabilities in the Zephyr Bluetooth subsystem7.1CNA v3.11.1%2023-09-27
CVE-2023-4260Potential off-by-one buffer overflow vulnerability in the Zephyr FS subsystem6.3CNA v3.10.9%2023-09-27
CVE-2023-4129Dell Data Protection Central inadequate encryption strength5.9CNA v3.10.2%2023-09-27Fix
CVE-2023-4066Red Hat RHEL-8 based Middleware Containers cleartext storage of sensitive information5.5CNA v3.10.2%2023-09-27Fix
CVE-2023-4065Red Hat RHEL-8 based Middleware Containers operator: Plaintext password in operator log5.5CNA v3.10.2%2023-09-27Fix
CVE-2023-4003One Identity Password Manager Unauthenticated physical access privilege escalation6.8NVD v3.10.5%2023-09-27
CVE-2023-3767OS command injection on EasyPHP Webserver9.8v3.11.5%2023-09-27Fix
CVE-2023-3223Red Hat Fuse Undertow: Outofmemoryerror due to @multipartconfig handling7.5CNA v3.12.7%2023-09-27Fix
CVE-2023-2358Hitachi Vantara Pentaho Business Analytics Server Password Stored in a Recoverable Format4.9v3.10.2%2023-09-27Fix
CVE-2023-2315Path traversal in OpenCart to8.8v3.10.8%2023-09-27Fix
CVE-2023-0833Red Hat A-mq Streams: Component version with information disclosure flaw4.7CNA v3.10.4%2023-09-27Fix
CVE-2023-0456Red Hat APIcast OIDC module improper authorization7.5NVD v3.10.6%2023-09-27
CVE-2023-43325mooSocial data[redirect_url] parameter reflected cross-site scripting6.1NVD v3.12.0%2023-09-26Nuclei
CVE-2023-41074Apple tvOS code injection8.8NVD v3.14.1%2023-09-26Fix
CVE-2023-5197Linux kernel A use-after-free6.6NVD v3.10.4%2023-09-26Fix
CVE-2023-4259Potential buffer overflow vulnerabilities in the Zephyr eS-WiFi driver7.1CNA v3.10.8%2023-09-26
CVE-2023-43644Improper authentication in the SOCKS5 inbound in sing-box9.1CNA v3.10.8%2023-09-25Fix
CVE-2023-43642Missing upper bound check on chunk length in snappy-java7.5CNA v3.11.2%2023-09-25Fix
CVE-2023-43458Resort Reservation System cross-site scripting5.4v3.10.5%2023-09-25
CVE-2023-43457oretnom23 Service Provider Management System improper privilege management9.8v3.11.0%2023-09-25
CVE-2023-43456oretnom23 Service Provider Management System cross-site scripting5.4v3.10.7%2023-09-25
CVE-2023-43382iteachyou Dreamer CMS itechyou path traversal8.8v3.11.5%2023-09-25
CVE-2023-43339CMS Made Simple cmsmadesimple v.2.2.18 cross-site scripting6.1v3.10.6%2023-09-25Exploit code
CVE-2023-43326mooSocial multiple url reflected cross-site scripting6.1v3.11.6%2023-09-25NucleiExploit code
CVE-2023-43319IceWarp WebClient Sign-In page cross-site scripting6.1v3.10.4%2023-09-25
CVE-2023-43278Seacms admin_manager.php cross-site request forgery8.8v3.10.2%2023-09-25
CVE-2023-43256Gladys Assistant path traversal6.5v3.10.7%2023-09-25
CVE-2023-43141TOTOLINK A3700R improper access control9.8v3.10.7%2023-09-25
CVE-2023-43132Szvone Vmqphp SQL injection6.5v3.10.6%2023-09-25
CVE-2023-43131Maxiguvenlik General Device Manager buffer overflow9.8v3.10.9%2023-09-25
CVE-2023-42817Cross-site scripting (XSS) in pimcore admin-ui-classic-bundle translations5.4CNA v3.10.4%2023-09-25Fix
CVE-2023-42753Kernel: Netfilter: Potential slab-out-of-bound access due to integer underflow7.8NVD v3.10.5%2023-09-25Fix
CVE-2023-42426Froala Editor cross-site scripting6.1v3.10.8%2023-09-25Exploit code
CVE-2023-41949iFolders WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2023-09-25Fix
CVE-2023-41948Cookie Notice and Consent WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2023-09-25Fix
CVE-2023-41874Order Delivery Date for WooCommerce WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-09-25Fix
CVE-2023-41872WoodMart WordPress theme cross-site scripting (XSS)6.1NVD v3.10.4%2023-09-25Fix
CVE-2023-41871Poll Maker WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-09-25Fix
CVE-2023-41868Stagtools WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-09-25Fix
CVE-2023-41867AcyMailing SMTP Newsletter WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-09-25Fix
CVE-2023-41863PeproDev CF7 Database WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-09-25Fix
CVE-2023-41419Gevent allows remote attacker to escalate privileges9.8v3.11.3%2023-09-25Fix
CVE-2023-41303Huawei HarmonyOS command injection vulnerability in the distributed file system module7.5v3.10.6%2023-09-25Fix
CVE-2023-41302Huawei HarmonyOS redirection permission verification vulnerability in the home screen module7.5v3.10.5%2023-09-25Fix
CVE-2023-41301Huawei HarmonyOS vulnerability of unauthorized API access in the PMS module7.5v3.10.4%2023-09-25Fix
CVE-2023-41300Huawei HarmonyOS vulnerability of parameters not being strictly verified in the PMS module7.5v3.10.4%2023-09-25Fix
CVE-2023-41299Huawei HarmonyOS DoS vulnerability in the PMS module7.5v3.10.4%2023-09-25Fix
CVE-2023-41298Huawei HarmonyOS vulnerability of permission control in the window module7.5v3.10.3%2023-09-25Fix
CVE-2023-41297Huawei HarmonyOS and EMUI HiviewTunner module vulnerability9.8v3.10.4%2023-09-25Fix
CVE-2023-41296Huawei HarmonyOS vulnerability of missing authorization in the kernel module9.1v3.10.3%2023-09-25Fix
CVE-2023-41295Huawei HarmonyOS vulnerability of improper permission management in the displayengine module5.3v3.10.2%2023-09-25Fix
CVE-2023-41294Huawei HarmonyOS resource exhaustion9.8v3.10.4%2023-09-25Fix
CVE-2023-41293Huawei HarmonyOS data security classification vulnerability in the DDMP module7.5v3.10.3%2023-09-25Fix
CVE-2023-40581yt-dlp command injection when using `%q` in `--exec` on Windows8.4CNA v3.11.3%2023-09-25Fix
CVE-2023-40163Accusoft ImageGear out-of-bounds write9.8v3.11.0%2023-09-25
CVE-2023-39640Uplight Cookie Law SQL injection9.8v3.10.5%2023-09-25Fix
CVE-2023-39453Accusoft ImageGear tif_parse_sub_IFD functionality use-after-free9.8v3.11.2%2023-09-25
CVE-2023-39409Huawei HarmonyOS DoS vulnerability in the PMS module7.5v3.10.4%2023-09-25Fix
CVE-2023-39408Huawei HarmonyOS DoS vulnerability in the PMS module7.5v3.10.4%2023-09-25Fix
CVE-2023-39407Huawei HarmonyOS path traversal9.1v3.10.4%2023-09-25Fix
CVE-2023-38907TP-Link Tapo session key encryption vulnerability7.5v3.10.7%2023-09-25
CVE-2023-35002Accusoft ImageGear pictwread functionality heap-based buffer overflow9.8v3.11.3%2023-09-25Fix
CVE-2023-32653Accusoft ImageGear dcm_pixel_data_decode functionality out-of-bounds write8.8NVD v3.11.1%2023-09-25
CVE-2023-32614Accusoft ImageGear create_png_object functionality heap-based buffer overflow9.8v3.10.7%2023-09-25
CVE-2023-32284Accusoft ImageGear tiff_planar_adobe functionality out-of-bounds write9.8v3.10.8%2023-09-25
CVE-2023-28393Accusoft ImageGear stack-based buffer overflow8.8v3.10.5%2023-09-25
CVE-2023-23567Accusoft ImageGear CreateDIBfromPict functionality heap-based buffer overflow8.8v3.11.0%2023-09-25
CVE-2023-5166Docker Desktop allows Access Token theft via a crafted extension icon URL8.0CNA v3.10.8%2023-09-25Fix
CVE-2023-5165Docker Desktop allows Enhanced Container Isolation bypass via debug shell7.1CNA v3.10.3%2023-09-25Fix
CVE-2023-5158Linux kernel vhost driver denial of service5.5NVD v3.10.2%2023-09-25Fix
CVE-2023-5156Glibc: Dos due to memory leak in getaddrinfo.c7.5NVD v3.11.6%2023-09-25Fix
CVE-2023-5154D-Link DAR-8000 changelogo.php unrestricted upload8.8v3.115.1%2023-09-25Fix
CVE-2023-5153D-Link DAR-8000 querysql.php SQL injection6.5v3.11.7%2023-09-25Fix
CVE-2023-5152D-Link DAR-7000/DAR-8000 importexport.php SQL injection6.5v3.18.5%2023-09-25Fix
CVE-2023-5151D-Link DAR-8000 autheditpwd.php SQL injection8.8v3.181.5%2023-09-25Fix
CVE-2023-5150D-Link DAR-7000/DAR-8000 web.php unrestricted upload8.8v3.122.8%2023-09-25Fix
CVE-2023-5149D-Link DAR-7000 userattestation.php unrestricted upload8.8v3.121.0%2023-09-25Fix
CVE-2023-5148D-Link DAR-7000/DAR-8000 uploadfile.php unrestricted upload8.8v3.130.7%2023-09-25Fix
CVE-2023-5147D-Link DAR-7000 updateos.php unrestricted upload8.8v3.126.6%2023-09-25Fix
CVE-2023-5146D-Link DAR-7000/DAR-8000 updatelib.php unrestricted upload8.8v3.132.9%2023-09-25Fix
CVE-2023-5145D-Link DAR-7000 licence.php unrestricted upload8.8v3.134.3%2023-09-25Fix
CVE-2023-4892Teedy stored cross-site scripting (XSS)4.6v3.10.4%2023-09-25
CVE-2023-4631DoLogin Security WordPress plugin IP spoofing5.3NVD v3.10.7%2023-09-25Exploit codeFix
CVE-2023-4549DoLogin Security WordPress plugin unauthenticated stored cross-site scripting6.1NVD v3.10.7%2023-09-25Exploit codeFix
CVE-2023-4521Import XML and RSS Feeds WordPress plugin unauthenticated RCE9.8NVD v3.140.8%2023-09-25NucleiFix
CVE-2023-4502Translate WordPress with GTranslate plugin Admin+ stored XSS4.8NVD v3.10.5%2023-09-25Fix
CVE-2023-4490WP Job Portal WordPress plugin unauthenticated SQLi9.8NVD v3.13.6%2023-09-25NucleiFix
CVE-2023-4476Locatoraid Store Locator WordPress plugin reflected XSS6.1NVD v3.10.5%2023-09-25Fix
CVE-2023-4300Import XML and RSS Feeds WordPress plugin Admin+ arbitrary file upload7.2NVD v3.12.0%2023-09-25Fix
CVE-2023-4281Activity Log WordPress plugin IP spoofing5.3NVD v3.10.7%2023-09-25Exploit codeFix
CVE-2023-4258Zephyr Bluetooth mesh provisioning vulnerability8.6CNA v3.10.6%2023-09-25Fix
CVE-2023-4238miniOrange Prevent files / folders access arbitrary file upload7.2NVD v3.11.6%2023-09-25Fix
CVE-2023-4156gawk heap out of bound read in builtin.c7.1NVD v3.10.4%2023-09-25Fix
CVE-2023-4148Ditty WordPress plugin reflected XSS6.1NVD v3.10.8%2023-09-25NucleiFix
CVE-2023-3664FileOrganizer WordPress plugin Admin+ arbitrary file access7.2NVD v3.10.8%2023-09-25Fix
CVE-2023-3550Stored XSS leads to privilege escalation in MediaWiki9.0NVD v3.11.4%2023-09-25Fix
CVE-2023-3547All in One B2B for WooCommerce WordPress plugin Multiple CSRF8.8NVD v3.10.4%2023-09-25
CVE-2023-3226Popup Builder WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.4%2023-09-25Fix
CVE-2023-0633In Docker Desktop on Windows an argument injection to installer may result in LPE7.2CNA v3.10.4%2023-09-25Fix
CVE-2023-0627Docker Desktop.x allows --no-windows-containers flag bypass6.7CNA v3.10.3%2023-09-25Fix
CVE-2023-0626Docker Desktop is vulnerable to RCE via query parameters in message-box route8.0CNA v3.10.9%2023-09-25Fix
CVE-2023-0625Docker Desktop is vulnerable to RCE via a crafted extension description or changelog8.0CNA v3.10.9%2023-09-25Fix
CVE-2023-5144D-Link DAR-7000/DAR-8000 updateos.php unrestricted upload8.8v3.16.0%2023-09-24Fix
CVE-2023-5143D-Link DAR-7000 webmailattach.php privilege escalation9.8v3.13.6%2023-09-24Fix
CVE-2023-5142H3C ER6300G2 Config file userLogin.asp path traversal5.3v3.12.3%2023-09-24Exploit code
CVE-2023-1636openstack-barbican incomplete container isolation5.0NVD v3.10.5%2023-09-24
CVE-2023-1633Insecure Barbican configuration file leaking credential5.5NVD v3.10.2%2023-09-24Fix
CVE-2023-1625openstack-heat information leak in API5.0NVD v3.10.7%2023-09-24Fix
CVE-2023-1260kube-apiserver authentication bypass8.0CNA v3.11.6%2023-09-24Fix
CVE-2023-43470Janobe Online Voting System SQL injection9.8v3.11.2%2023-09-23
CVE-2023-43469Online Job Portal janobe SQL injection9.8v3.11.0%2023-09-23
CVE-2023-43468Online Job Portal janobe SQL injection9.8v3.11.2%2023-09-23
CVE-2023-43338Cesanta mJS out-of-bounds write9.8v3.10.9%2023-09-23
CVE-2023-5134Easy Registration Forms WordPress plugin information disclosure4.3CNA v3.10.5%2023-09-23Fix
CVE-2023-5125Contact Form by FormGet WordPress plugin stored cross-site scripting5.4v3.10.4%2023-09-23Fix
CVE-2023-43784Plesk onyx resource exposure7.5v3.10.5%2023-09-22Fix
CVE-2023-43783Falktx Cadence symlink following7.5v3.10.6%2023-09-22
CVE-2023-43782Falktx Cadence resource exposure5.5v3.10.3%2023-09-22
CVE-2023-43771Mikebrady Not Quite Ptp crash5.5v3.10.2%2023-09-22Fix
CVE-2023-43770Roundcube Webmail persistent cross-site scripting (XSS)6.1v3.163.7%2023-09-22KEVEmerging ThreatsExploit codeKCVFix
CVE-2023-43767F-Secure Elements Endpoint Protection denial of service7.5v3.10.5%2023-09-22
CVE-2023-43766F-Secure Elements Endpoint Protection improper privilege management7.8v3.10.2%2023-09-22
CVE-2023-43765F-Secure Elements Endpoint Protection denial of service7.5v3.10.5%2023-09-22
CVE-2023-43763WithSecure F-secure Policy Manager cross-site scripting6.1v3.10.3%2023-09-22
CVE-2023-43762WithSecure Policy Manager Proxy unauthenticated remote code execution9.8v3.11.1%2023-09-22
CVE-2023-43761F-Secure Elements Endpoint Protection infinite loop7.5v3.10.5%2023-09-22
CVE-2023-43760F-Secure Elements Endpoint Protection denial of service7.5v3.10.5%2023-09-22
CVE-2023-43640TaxonWorks SQL injection6.5CNA v3.10.5%2023-09-22Fix
CVE-2023-43270dst-admin code injection9.8v3.11.4%2023-09-22
CVE-2023-43144Projectworlds Asset Management System Project In PHP SQL injection9.8v3.10.9%2023-09-22Exploit code
CVE-2023-43130D-Link Dir-806 OS command injection9.8v3.12.4%2023-09-22
CVE-2023-43129D-Link Dir-806 OS command injection9.8v3.12.4%2023-09-22
CVE-2023-43090Gnome-shell: Screenshot tool allows viewing open windows when session is locked5.5NVD v3.10.3%2023-09-22Fix
CVE-2023-42821Github.com/gomarkdown/markdown out-of-bounds read while parsing citations7.5CNA v3.11.3%2023-09-22Fix
CVE-2023-42812Galaxy vulnerable to server side request forgery during data imports6.3CNA v3.10.4%2023-09-22Fix
CVE-2023-42811AEADs/Aes-gcm: Plaintext exposed in decrypt_in_place_detached even on tag verification failure4.7CNA v3.10.2%2023-09-22Fix
CVE-2023-42798AutomataCI Release Job can Revert Repo to First Commit8.2CNA v3.10.4%2023-09-22Fix
CVE-2023-41031Juplink RX4-1500 homemng.htm command injection8.8v3.11.7%2023-09-22
CVE-2023-41029Juplink RX4-1500 command injection8.8v3.12.2%2023-09-22
CVE-2023-41027Juplink RX4-1500 credential disclosure8.8v3.10.8%2023-09-22
CVE-2023-40989SQL injection in JeecgBoot9.8v3.11.8%2023-09-22Exploit codeFix
CVE-2023-38346Wind River Vxworks path traversal8.8v3.11.2%2023-09-22Fix
CVE-2023-34319Linux: Buffer overrun in netback due to unusual packet7.8NVD v3.10.3%2023-09-22Fix
CVE-2023-31719frangoteam FUXA SQL injection9.8v3.126.0%2023-09-22Exploit code
CVE-2023-31718FUXA local file inclusion7.5v3.11.5%2023-09-22Exploit code
CVE-2023-31717frangoteam FUXA SQL injection7.5v3.11.6%2023-09-22Exploit code
CVE-2023-31716FUXA vulnerable to local file inclusion7.5v3.11.2%2023-09-22Exploit code
CVE-2023-23766Incorrect comparison vulnerability in GitHub Enterprise Server leading to commit smuggling4.5CNA v3.10.7%2023-09-22Fix
CVE-2023-23364QNAP Multimedia Console buffer overflow8.1CNA v3.10.9%2023-09-22Fix
CVE-2023-23363QNAP QTS buffer overflow8.1CNA v3.10.9%2023-09-22Fix
CVE-2023-23362QNAP QTS, QuTS hero and QuTScloud OS command injection8.8CNA v3.11.6%2023-09-22Fix
CVE-2023-5002pgAdmin 4 Pgadmin4: Remote code execution by an authenticated user8.8NVD v3.11.8%2023-09-22Fix
CVE-2023-4774WP-Matomo Integration (WP-Piwik) WordPress plugin stored cross-site scripting5.4v3.10.6%2023-09-22Fix
CVE-2023-4716Media Library Assistant WordPress plugin stored cross-site scripting5.4v3.10.5%2023-09-22Fix
CVE-2023-43669Tungstenite allows remote attackers to cause a denial of service7.5v3.11.6%2023-09-21Fix
CVE-2023-43637LF-Edge, Zededa EVE OS Vault Key Partially Predetermined7.8v3.10.1%2023-09-21Fix
CVE-2023-43634LF-Edge, Zededa EVE OS Config Partition not Protected by Measured Boot8.8v3.10.2%2023-09-21Fix
CVE-2023-43633LF-Edge, Zededa EVE OS Debug Functions Unlockable without Triggering Measured Boot8.8v3.10.2%2023-09-21Fix
CVE-2023-43632LF-Edge, Zededa EVE OS Freely Allocate Buffer on the Stack with Data from Socket9.9v3.10.5%2023-09-21Fix
CVE-2023-43631LF-Edge, Zededa EVE OS SSH as Root Unlockable without Triggering Measured Boot8.8v3.10.2%2023-09-21Fix
CVE-2023-43309Webmin There is a stored cross-site scripting4.8v3.10.4%2023-09-21
CVE-2023-43274PHP Jabbers PHP Shopping Cart SQL injection7.5v3.10.6%2023-09-21
CVE-2023-43242D-Link DIR-816 A2 stack-based buffer overflow9.8v3.11.0%2023-09-21Emerging Threats
CVE-2023-43241D-Link DIR-823G out-of-bounds write9.8v3.11.0%2023-09-21Emerging Threats
CVE-2023-43240D-Link DIR-816 A2 out-of-bounds write9.8v3.113.3%2023-09-21Emerging Threats
CVE-2023-43239D-Link DIR-816 A2 stack-based buffer overflow9.8v3.113.3%2023-09-21Emerging Threats
CVE-2023-43238D-Link DIR-816 A2 stack-based buffer overflow9.8v3.11.0%2023-09-21Emerging Threats
CVE-2023-43237D-Link DIR-816 A2 stack-based buffer overflow9.8v3.113.3%2023-09-21Emerging Threats
CVE-2023-43236D-Link DIR-816 A2 stack-based buffer overflow9.8v3.10.9%2023-09-21
CVE-2023-43235D-Link DIR-823G out-of-bounds write9.8v3.11.0%2023-09-21Emerging Threats
CVE-2023-43128D-Link Dir-806 command injection9.8v3.12.4%2023-09-21
CVE-2023-42810Systeminformation SSID command injection9.8CNA v3.12.2%2023-09-21Fix
CVE-2023-42807Frappe LMS SQL injection issue on People page6.3CNA v3.10.4%2023-09-21
CVE-2023-42806input-output-hk hydra snapshot signature not including HeadID will allow replay attacks6.5CNA v3.10.5%2023-09-21Fix
CVE-2023-42805quinn-rs quinn quinn-proto denial of service7.5CNA v3.10.9%2023-09-21Fix
CVE-2023-42482Samsung Exynos 2200 use-after-free7.5v3.10.3%2023-09-21Fix
CVE-2023-42458Zope vulnerable to stored cross-site scripting with SVG images3.7CNA v3.10.7%2023-09-21Fix
CVE-2023-42457plone.REST vulnerable to denial of service when ++API++ is used many times7.5CNA v3.11.0%2023-09-21Fix
CVE-2023-42456sudo-rs Session file relative path traversal3.3CNA v3.10.6%2023-09-21Fix
CVE-2023-42280Springernature Mee-Admin path traversal7.5v3.10.9%2023-09-21
CVE-2023-42279iteachyou Dreamer CMS SQL injection9.8v3.10.7%2023-09-21
CVE-2023-42261Opensecurity Mobile Security Framework incorrect default permissions7.5v3.10.7%2023-09-21Fix
CVE-2023-41993Apple Multiple Products WebKit code execution8.8v3.124.5%2023-09-21KEVExploit codeKCVFix
CVE-2023-41992Apple Multiple Products Kernel privilege escalation7.8v3.19.6%2023-09-21KEVExploit codeKCVFix
CVE-2023-41991Apple Multiple Products improper certificate validation5.5v3.113.4%2023-09-21KEVExploit codeKCVFix
CVE-2023-41616Student Management System Search Student function reflected cross-site scripting4.8v3.10.4%2023-09-21
CVE-2023-41614PHPGurukul Zoo Management System Add Animal Details function stored cross-site scripting4.8v3.10.4%2023-09-21
CVE-2023-41048Plone.Namedfile vulnerable to stored cross-site scripting with SVG images3.7CNA v3.10.6%2023-09-21Fix
CVE-2023-40183DataEase has a vulnerability to obtain user cookies7.5CNA v3.10.8%2023-09-21Fix
CVE-2023-39252Dell Secure Connect Gateway (SCG) Policy Manager weak cryptographic algorithm5.9CNA v3.10.4%2023-09-21Fix
CVE-2023-38344Ivanti Endpoint Manager arbitrary file read6.5v3.11.0%2023-09-21Fix
CVE-2023-38343Ivanti Endpoint Manager CSEP component XML external entity injection7.5v3.11.4%2023-09-21Fix
CVE-2023-34577Planned Popup Prestashop opartplannedpopup SQL injection9.8v3.10.7%2023-09-21
CVE-2023-34576Store-opart Op'art Product FAQ updatepos.php in PrestaShop opartfaq SQL injection9.8v3.10.6%2023-09-21Fix
CVE-2023-5104Improper input validation in nocodb/nocodb6.5v3.10.6%2023-09-21Fix
CVE-2023-5068Delta Electronics DIAScreen out-of-bounds write7.8v3.10.2%2023-09-21Fix
CVE-2023-4760Remote code execution in Eclipse RAP on Windows7.6CNA v3.11.3%2023-09-21
CVE-2023-4753OpenHarmony version has a system call function usage error3.9CNA v3.10.2%2023-09-21
CVE-2023-4504OpenPrinting CUPS/libppd Postscript Parsing heap overflow7.0v3.10.7%2023-09-21Exploit codeFix
CVE-2023-4292Frauscher FDS101 for FAdC/FAdCi SQL injection5.3CNA v3.10.5%2023-09-21
CVE-2023-4291Frauscher FDS101 for FAdC/FAdCi remote code execution9.8CNA v3.11.2%2023-09-21
CVE-2023-4152Frauscher FDS101 for FAdC/FAdCi path traversal7.5CNA v3.11.0%2023-09-21
CVE-2023-43636EVE Doesn't Protect Rootfs8.8v3.10.1%2023-09-20Fix
CVE-2023-43635LF-Edge, Zededa EVE OS Vault Key Sealed with SHA1 PCRs8.8v3.10.1%2023-09-20Fix
CVE-2023-43630LF-Edge, Zededa EVE OS Config Partition not Measured from 2 Fronts8.8v3.10.1%2023-09-20Fix
CVE-2023-43621Croc may expose secret to local users4.7v3.10.3%2023-09-20Fix
CVE-2023-43620Croc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device7.8v3.10.3%2023-09-20Fix
CVE-2023-43619Croc sender may send dangerous new files to receiver7.8v3.10.3%2023-09-20Fix
CVE-2023-43618Croc requires senders to provide local IP addresses in cleartext5.3v3.10.4%2023-09-20Fix
CVE-2023-43617Schollz Croc cros secrets may be disclosed to untrusted relay5.3v3.10.6%2023-09-20Fix
CVE-2023-43616Sender can cause a receiver to overwrite files during ZIP extraction in Croc5.5v3.10.4%2023-09-20Fix
CVE-2023-43502Jenkins Build Failure Analyzer Plugin cross-site request forgery4.3v3.10.3%2023-09-20Fix
CVE-2023-43501Jenkins Build Failure Analyzer Plugin missing permission check6.5v3.10.5%2023-09-20Fix
CVE-2023-43500Jenkins Build Failure Analyzer Plugin cross-site request forgery8.8v3.10.4%2023-09-20Fix
CVE-2023-43499Jenkins Build Failure Analyzer Plugin cross-site scripting5.4v3.10.5%2023-09-20Fix
CVE-2023-43498Jenkins temporary uploaded file created with insecure permissions8.1v3.10.8%2023-09-20Fix
CVE-2023-43497Jenkins temporary uploaded file created with insecure permissions8.1v3.10.8%2023-09-20Fix
CVE-2023-43496Jenkins temporary plugin file created with insecure permissions8.8v3.10.9%2023-09-20Fix
CVE-2023-43495Jenkins cross-site scripting5.4v3.10.9%2023-09-20Fix
CVE-2023-43494Jenkins does not exclude sensitive build variables from search4.3v3.13.4%2023-09-20Exploit codeFix
CVE-2023-43478Unauthenticated configuration restore and firmware update9.8NVD v3.118.0%2023-09-20Fix
CVE-2023-43477Post-Auth command injection in Telstra Smart Modem Gen 2 (Arcadyan LH1000)8.8NVD v3.117.7%2023-09-20Fix
CVE-2023-43377digitaldruid HotelDruid cross-site scripting5.4v3.10.4%2023-09-20Fix
CVE-2023-43376digitaldruid HotelDruid cross-site scripting5.4v3.10.4%2023-09-20Fix
CVE-2023-43375digitaldruid HotelDruid SQL injection9.8v3.10.6%2023-09-20Fix
CVE-2023-43374digitaldruid HotelDruid SQL injection9.8v3.13.3%2023-09-20NucleiFix
CVE-2023-43373digitaldruid HotelDruid SQL injection9.8v3.13.8%2023-09-20NucleiFix
CVE-2023-43371digitaldruid HotelDruid SQL injection9.8v3.10.9%2023-09-20Fix
CVE-2023-43207D-Link Dwl-6610ap command injection9.8v3.12.3%2023-09-20
CVE-2023-43206D-Link Dwl-6610ap command injection9.8v3.12.3%2023-09-20
CVE-2023-43204D-Link Dwl-6610ap command injection9.8v3.12.3%2023-09-20
CVE-2023-43203D-Link Dwl-6610ap stack-based buffer overflow9.8v3.10.8%2023-09-20
CVE-2023-43202D-Link Dwl-6610ap command injection9.8v3.12.3%2023-09-20
CVE-2023-43201D-Link Di-7200g out-of-bounds write9.8v3.10.9%2023-09-20
CVE-2023-43200D-Link Di-7200g out-of-bounds write9.8v3.10.8%2023-09-20
CVE-2023-43199D-Link Di-7200g out-of-bounds write9.8v3.10.8%2023-09-20
CVE-2023-43198D-Link Di-7200g out-of-bounds write9.8v3.10.8%2023-09-20
CVE-2023-43197D-Link Di-7200g out-of-bounds write9.8v3.10.8%2023-09-20
CVE-2023-43196D-Link Di-7200g out-of-bounds write9.8v3.10.8%2023-09-20
CVE-2023-43138TP-Link Tl-er5120g command injection8.8v3.12.1%2023-09-20
CVE-2023-43137TP-Link Tl-er5120g command injection8.8v3.12.1%2023-09-20
CVE-2023-43135TP-Link Tl-er5120g There is an unauthorized access9.8v3.10.8%2023-09-20
CVE-2023-43134Netis Systems 360R unauthorized access9.8v3.10.8%2023-09-20
CVE-2023-42660MOVEit Transfer Machine Interface SQL injection8.8CNA v3.10.7%2023-09-20Fix
CVE-2023-42656MOVEit Transfer reflected XSS6.1CNA v3.10.6%2023-09-20Fix
CVE-2023-42464Netatalk type confusion9.8v3.11.8%2023-09-20Fix
CVE-2023-42335FL3XX Dispatch arbitrary file upload8.8v3.11.1%2023-09-20
CVE-2023-42334FL3XX Dispatch insecure direct object reference6.5v3.10.6%2023-09-20
CVE-2023-42331Elite Cms A file upload8.8v3.11.2%2023-09-20
CVE-2023-42322Icmsdev iCMS insecure permissions9.8v3.10.6%2023-09-20
CVE-2023-42321Icmsdev iCMS cross-site request forgery8.8v3.10.4%2023-09-20
CVE-2023-42147fit2cloud CloudExplorer-Lite cleartext transmission of sensitive information7.5v3.10.4%2023-09-20
CVE-2023-41902Corecode Macupdater unrestricted file upload7.8v3.10.2%2023-09-20Fix
CVE-2023-41484CImg JPEG file parser memory leak8.1v3.10.6%2023-09-20Fix
CVE-2023-41375JTEKT ELECTRONICS Kostac PLC Programming Software use-after-free7.8v3.10.2%2023-09-20Fix
CVE-2023-41374JTEKT ELECTRONICS Kostac PLC Programming Software double free7.8v3.10.2%2023-09-20Fix
CVE-2023-40930Skyworth OS path traversal6.8v3.11.2%2023-09-20Exploit code
CVE-2023-40619phppgadmin deserialization of untrusted data9.8v3.11.1%2023-09-20Fix
CVE-2023-40618Openknowledgemaps HEAD Start reflected cross-site scripting6.1v3.10.5%2023-09-20
CVE-2023-40368IBM Storage Protect information disclosure4.4CNA v3.10.2%2023-09-20Fix
CVE-2023-40043MOVEit Transfer System Administrator SQL injection7.2CNA v3.10.7%2023-09-20Fix
CVE-2023-39677Updateproducts information disclosure7.5v3.132.1%2023-09-20Nuclei
CVE-2023-39675Myprestamodules Product Catalog (csv, Excel) Import SQL injection9.8v3.10.8%2023-09-20
CVE-2023-39575Isl Arp-guard url_str URL parameter reflected cross-site scripting5.4v3.10.3%2023-09-20
CVE-2023-39052Earthgarden Waiting information disclosure6.5v3.10.4%2023-09-20
CVE-2023-39045Kokoroe Members Card kokoroe_members card Line information disclosure6.5v3.10.4%2023-09-20
CVE-2023-39044Ajino-shiretoko An information disclosure6.5v3.10.4%2023-09-20
CVE-2023-39041Kukurudeli An information disclosure6.5v3.10.4%2023-09-20
CVE-2023-38888Cross-site scripting vulnerability in Dolibarr ERP CRM9.6v3.11.1%2023-09-20Fix
CVE-2023-38887File upload vulnerability in Dolibarr ERP CRM8.8v3.11.2%2023-09-20Fix
CVE-2023-38886Dolibarr allows a remote privileged attacker to execute arbitrary code via a crafted command/script7.2v3.131.7%2023-09-20Fix
CVE-2023-38876Msaad1999 Php-login-system msaad1999's reflected cross-site scripting6.1v3.10.7%2023-09-20
CVE-2023-38875Msaad1999 Php-login-system msaad1999's reflected cross-site scripting6.1v3.10.8%2023-09-20Nuclei
CVE-2023-38718IBM Robotic Process Automation information disclosure3.7CNA v3.10.5%2023-09-20Fix
CVE-2023-37410IBM Personal Communications privilege escalation8.4CNA v3.10.2%2023-09-20Fix
CVE-2023-37279Faktory Web Dashboard can lead to denial of service(DOS) via malicious user input7.5CNA v3.10.9%2023-09-20Fix
CVE-2023-36319Openupload file upload8.8v3.11.7%2023-09-20Exploit code
CVE-2023-36234NetBox cross-site scripting5.4v3.10.4%2023-09-20
CVE-2023-36109JerryScript buffer overflow9.8v3.12.0%2023-09-20Exploit code
CVE-2023-34575Store-opart Op'art Save Cart PrestaShop opartsavecart SQL injection9.8v3.10.7%2023-09-20
CVE-2023-34047Exposure of data and identity to wrong session in Spring for GraphQL3.1CNA v3.10.4%2023-09-20Fix
CVE-2023-31015NVIDIA DGX H100 BMC improper authentication6.6CNA v3.10.2%2023-09-20Fix
CVE-2023-31014NVIDIA GeForce NOW implicit intent for sensitive communication4.2CNA v3.10.1%2023-09-20Exploit codeFix
CVE-2023-31013NVIDIA DGX H100 BMC improper input validation6.1CNA v3.10.6%2023-09-20Fix
CVE-2023-31012NVIDIA DGX H100 BMC improper input validation6.1CNA v3.10.6%2023-09-20Fix
CVE-2023-31011NVIDIA DGX H100 BMC improper input validation5.2CNA v3.10.6%2023-09-20Fix
CVE-2023-31010NVIDIA DGX H100 BMC improper input validation6.8CNA v3.10.7%2023-09-20Fix
CVE-2023-31009NVIDIA DGX H100 BMC improper input validation8.3CNA v3.10.7%2023-09-20Fix
CVE-2023-31008NVIDIA DGX H100 BMC improper input validation7.3CNA v3.10.2%2023-09-20Fix
CVE-2023-26144graphql uncontrolled resource consumption5.3v3.11.2%2023-09-20Exploit codeFix
CVE-2023-25534NVIDIA DGX H100 BMC improper input validation5.7CNA v3.10.6%2023-09-20Fix
CVE-2023-25533NVIDIA DGX H100 BMC improper input validation8.3CNA v3.10.8%2023-09-20Fix
CVE-2023-25532NVIDIA DGX H100 BMC insufficiently protected credentials6.5CNA v3.10.6%2023-09-20Fix
CVE-2023-25531NVIDIA DGX H100 BMC insufficiently protected credentials7.6CNA v3.10.5%2023-09-20Fix
CVE-2023-25530NVIDIA DGX H100 BMC improper input validation8.0CNA v3.10.8%2023-09-20Fix
CVE-2023-25529NVIDIA DGX H100 BMC timing side channel8.0CNA v3.10.6%2023-09-20Fix
CVE-2023-25528NVIDIA DGX H100 BMC stack-based buffer overflow8.8CNA v3.10.9%2023-09-20Fix
CVE-2023-25527NVIDIA DGX H100 BMC code execution7.8CNA v3.10.2%2023-09-20Fix
CVE-2023-25526NVIDIA Cumulus Linux uncaught exception6.5CNA v3.10.3%2023-09-20Fix
CVE-2023-25525NVIDIA Cumulus Linux information disclosure7.5CNA v3.10.6%2023-09-20Fix
CVE-2023-22644SUSE neuvector JWT token compromise can allow malicious actions including remote code execution9.4CNA v4.00.5%2023-09-20Fix
CVE-2023-22024Oracle Linux RDS module denial of service5.5CNA v3.10.2%2023-09-20Fix
CVE-2023-20597AMD Ryzen™ 3000 Series Desktop Processors “Matisse” DXE driver improper initialization5.5v3.10.2%2023-09-20Fix
CVE-2023-20594AMD Ryzen™ 3000 Series Desktop Processors “Matisse” DXE driver improper initialization4.4v3.10.2%2023-09-20Fix
CVE-2023-5084Cross-site scripting (XSS) Reflected in hestiacp/hestiacp6.1v3.10.4%2023-09-20Fix
CVE-2023-5074Authentication bypass in D-Link D-View 89.8NVD v3.169.6%2023-09-20NucleiFix
CVE-2023-5063Widget Responsive for Youtube WordPress plugin stored cross-site scripting5.4v3.10.4%2023-09-20Fix
CVE-2023-5062WordPress Charts plugin authenticated (Contributor+) stored cross-site scripting via shortcode5.4v3.10.4%2023-09-20
CVE-2023-5042Acronis Cyber Protect Home Office incorrect default permissions5.5CNA v3.00.4%2023-09-20Fix
CVE-2023-4853Quarkus: Http security policy bypass8.1CNA v3.11.4%2023-09-20Fix
CVE-2023-4236ISC BIND 9 named may terminate unexpectedly under high DNS-over-TLS query load7.5CNA v3.12.2%2023-09-20Fix
CVE-2023-4088Mitsubishi Electric GX Works3 incorrect default permissions9.3CNA v3.10.2%2023-09-20Fix
CVE-2023-3341ISC BIND 9 A stack exhaustion flaw in control channel code may cause named to terminate unexpectedly7.5CNA v3.12.9%2023-09-20Fix
CVE-2023-2508CSRF in PaperCutNG Mobility Print leads to sophisticated phishing6.5v3.10.2%2023-09-20Fix
CVE-2023-2262Rockwell Automation Select Logix Communication modules vulnerable to email object buffer overflow9.8CNA v3.11.3%2023-09-20Fix
CVE-2023-2163Linux kernel BPF verifier incorrect calculation8.8NVD v3.13.7%2023-09-20Exploit codeFix
CVE-2023-0829Cross-site scripting (XSS) vulnerability in Plesk9.0v3.10.6%2023-09-20Fix
CVE-2023-0462foreman arbitrary code execution through yaml global parameters8.0CNA v3.11.0%2023-09-20Fix
CVE-2023-0118Foreman: Arbitrary code execution through templates9.1CNA v3.11.4%2023-09-20Fix
CVE-2023-43566JetBrains TeamCity cross-site scripting3.5CNA v3.11.0%2023-09-19Fix
CVE-2023-42793JetBrains TeamCity authentication bypass9.8CNA v3.1100.0%2023-09-19KEVNucleiMetasploitEmerging ThreatsExploit codeFix
CVE-2023-42452Mastodon vulnerable to stored XSS through the translation feature6.1CNA v3.10.4%2023-09-19Fix
CVE-2023-42451Mastodon Invalid Domain Name Normalization vulnerability7.4CNA v3.10.7%2023-09-19Fix
CVE-2023-42450Mastodon server-side request forgery5.4CNA v3.10.5%2023-09-19Fix
CVE-2023-42447whisperfish blurhash-rs blurhash panics on parsing crafted inputs8.6CNA v3.10.6%2023-09-19Fix
CVE-2023-42444Phonenumber panics on parsing crafted RF3966 inputs8.6CNA v3.10.9%2023-09-19Fix
CVE-2023-42399Jodit Editor vulnerable to cross-site scripting6.1v3.10.4%2023-09-19
CVE-2023-41890Sustainsys Saml2 Sustainsys.Saml2 Insufficient Identity Provider Issuer Validation7.5CNA v3.10.8%2023-09-19Fix
CVE-2023-41834Apache Flink Stateful Functions HTTP headers CRLF injection6.1v3.11.6%2023-09-19Fix
CVE-2023-41599JFinalCMS path traversal5.3v3.112.4%2023-09-19Nuclei
CVE-2023-41387Patreon Flutter Downloader flutter_downloader component SQL injection9.1v3.10.7%2023-09-19Fix
CVE-2023-41179Trend Micro Apex One and Worry-Free Business Security remote code execution7.2v3.14.5%2023-09-19KEVFix
CVE-2023-40934Nagios XI SQL injection7.2v3.13.2%2023-09-19Fix
CVE-2023-40933Nagios XI SQL injection8.8v3.13.1%2023-09-19Exploit codeFix
CVE-2023-40932Nagios XI cross-site scripting5.4v3.10.9%2023-09-19Fix
CVE-2023-40931Nagios XI SQL injection6.5v3.112.5%2023-09-19NucleiExploit codeFix
CVE-2023-40788Bladex SpringBlade unauthorized access5.3v3.10.6%2023-09-19
CVE-2023-38356MiniTool Power DATA Recovery improper certificate validation8.1v3.10.6%2023-09-19
CVE-2023-38355MiniTool Movie Maker improper certificate validation8.1v3.10.6%2023-09-19
CVE-2023-38354MiniTool Shadowmaker improper certificate validation8.1v3.10.6%2023-09-19
CVE-2023-38353MiniTool Power DATA Recovery improper certificate validation5.9v3.10.4%2023-09-19
CVE-2023-38352MiniTool Partition Wizard improper certificate validation8.1v3.10.6%2023-09-19
CVE-2023-38351MiniTool Partition Wizard improper certificate validation8.1v3.10.6%2023-09-19
CVE-2023-32649DoS on IDS parsing of malformed asset fields in Guardian/CMC and8.2CNA v4.00.6%2023-09-19Fix
CVE-2023-32186RKE2 supervisor port is vulnerable to unauthenticated remote denial of service attack7.5CNA v3.10.7%2023-09-19Fix
CVE-2023-32184opensuse-welcome insecure storage of sensitive information7.8CNA v3.10.3%2023-09-19Fix
CVE-2023-32182SUSE Linux Enterprise Desktop 15 SP5 link following5.9CNA v3.10.3%2023-09-19Fix
CVE-2023-31808Technicolor TG670 hard-coded credentials7.2v3.10.6%2023-09-19
CVE-2023-29245SQL injection on IDS parsing of malformed asset fields in Guardian/CMC and9.2CNA v4.00.6%2023-09-19Fix
CVE-2023-26143blamer vulnerable to arbitrary argument injection via the blameByFile API9.1v3.10.9%2023-09-19Fix
CVE-2023-23957Open redirection vulnerability in Symantec Identity Portal5.4v3.10.3%2023-09-19Fix
CVE-2023-22513Atlassian Bitbucket Data Center code injection8.5CNA v3.015.3%2023-09-19Fix
CVE-2023-5060Cross-site scripting (XSS) DOM in librenms/librenms6.1NVD v3.10.6%2023-09-19Fix
CVE-2023-5054Super Store Finder WordPress plugin unauthenticated email Creation/Sending5.3v3.10.5%2023-09-19Fix
CVE-2023-5009Incorrect authorization in GitLab9.6CNA v3.19.7%2023-09-19Fix
CVE-2023-4376Serial Codes Generator and Validator with WooCommerce Support WordPress plugin Admin+ stored XSS4.8NVD v3.10.5%2023-09-19Fix
CVE-2023-4096Weak password recovery mechanism vulnerability in Fujitsu Arconte Áurea8.2v3.10.3%2023-09-19Fix
CVE-2023-4095Fujitsu Arconte Áurea response discrepancy5.3v3.10.4%2023-09-19Fix
CVE-2023-4094Weak authentication vulnerability in Fujitsu Arconte Áurea8.2v3.10.4%2023-09-19Fix
CVE-2023-4093Reflected and persistent XSS vulnerability in Fujitsu Arconte Áurea6.1v3.10.3%2023-09-19Fix
CVE-2023-4092SQL injection vulnerability in Fujitsu Arconte Áurea9.8v3.10.6%2023-09-19Fix
CVE-2023-3892MIM Assistant unsafe XML parsing of 3rd party DICOM private tags may lead to XXE5.6CNA v3.10.2%2023-09-19Fix
CVE-2023-2995Leyka WordPress plugin Admin+ stored XSS4.8NVD v3.10.4%2023-09-19Fix
CVE-2023-2567Authenticated SQL injection on Query functionality in Guardian/CMC and8.7CNA v4.00.6%2023-09-19Fix
CVE-2023-0773Unauthorized access Control vulnerability in Uniview IP Camera9.8v3.11.2%2023-09-19Fix
CVE-2023-43115Artifex Ghostscript remote code execution8.8NVD v3.16.0%2023-09-18Fix
CVE-2023-43114Qt GDI font engine denial of service5.5v3.10.2%2023-09-18Fix
CVE-2023-42526WithSecure Elements Endpoint Protection crash7.5v3.10.5%2023-09-18
CVE-2023-42525WithSecure Elements Endpoint Protection infinite loop7.5v3.10.5%2023-09-18
CVE-2023-42524WithSecure Elements Endpoint Protection infinite loop7.5v3.10.5%2023-09-18
CVE-2023-42523WithSecure Elements Endpoint Protection crash7.5v3.10.5%2023-09-18
CVE-2023-42522WithSecure Elements Endpoint Protection crash7.5v3.10.5%2023-09-18
CVE-2023-42521WithSecure Elements Endpoint Protection crash7.5v3.10.5%2023-09-18
CVE-2023-42520WithSecure Elements Endpoint Protection crash7.5v3.10.5%2023-09-18
CVE-2023-42454SQLpage vulnerable to public exposure of database credentials10.0CNA v3.10.7%2023-09-18Fix
CVE-2023-42446Pow Mnesia cache doesn't invalidate all expired keys on startup6.5CNA v3.10.5%2023-09-18Fix
CVE-2023-42443Vyper vulnerable to memory corruption in certain builtins utilizing `msize`8.1CNA v3.10.8%2023-09-18Fix
CVE-2023-42441Vyper has incorrect re-entrancy lock when key is empty string5.3CNA v3.10.5%2023-09-18Fix
CVE-2023-42387Tdsql Chitu information disclosure7.5v3.10.7%2023-09-18
CVE-2023-42371Summernote Rich Text Editor cross-site scripting5.4v3.10.5%2023-09-18
CVE-2023-42359Exam Form Submission In PHP With Source Code SQL injection9.8v3.10.7%2023-09-18
CVE-2023-42328peppermint hard-coded credentials8.8v3.11.2%2023-09-18
CVE-2023-42320Tenda AC10 buffer overflow9.8v3.10.9%2023-09-18
CVE-2023-42253Vehicle Management cross-site scripting6.1v3.10.4%2023-09-18
CVE-2023-41965Socomec MOD3GP-SY-120K insecure storage of sensitive information7.5v3.10.5%2023-09-18
CVE-2023-41929Samsung Memory Card & Ufd Authentication DLL hijacking7.3v3.10.2%2023-09-18Fix
CVE-2023-41595Vaxilu X-ui hard-coded credentials7.5v3.10.5%2023-09-18
CVE-2023-41443xxyopen Novel-Plus SQL injection7.2v3.11.1%2023-09-18
CVE-2023-41349ASUS RT-AX88U externally-controlled format string8.8CNA v3.10.9%2023-09-18Fix
CVE-2023-41084Socomec MOD3GP-SY-120K reliance on cookies without validation and integrity checking9.8v3.10.6%2023-09-18
CVE-2023-41030Juplink RX4-1500 hard-coded credential9.8v3.10.6%2023-09-18
CVE-2023-40221Socomec MOD3GP-SY-120K code injection8.8v3.10.5%2023-09-18
CVE-2023-39452Socomec MOD3GP-SY-120K plaintext storage of a password7.5v3.10.5%2023-09-18
CVE-2023-39446Socomec MOD3GP-SY-120K cross-site request forgery8.8v3.10.2%2023-09-18
CVE-2023-39058The B Members Card THE_B_members card v13.6.1 information disclosure6.5v3.10.4%2023-09-18
CVE-2023-39056Coffee-jumbo An information disclosure6.5v3.10.4%2023-09-18
CVE-2023-39049Youmart-tokunaga An information disclosure6.5v3.10.4%2023-09-18
CVE-2023-39046Tonton-tei Waiting TonTon-Tei_waiting Line v13.6.1 information disclosure6.5v3.10.4%2023-09-18
CVE-2023-39043Ykc Tokushima Awayokocho An information disclosure6.5v3.10.4%2023-09-18
CVE-2023-39040Cheese Cafe Line An information disclosure6.5v3.10.4%2023-09-18
CVE-2023-39039Camp Style Project Line An information disclosure6.5v3.10.4%2023-09-18
CVE-2023-38582Socomec MOD3GP-SY-120K cross-site scripting5.4v3.10.4%2023-09-18
CVE-2023-38255Socomec MOD3GP-SY-120K cross-site scripting6.1v3.10.3%2023-09-18
CVE-2023-37611Neos CMS cross-site scripting5.4v3.10.6%2023-09-18Fix
CVE-2023-35851Sunnet WMPro SQL injection7.5v3.10.6%2023-09-18Fix
CVE-2023-35850Sunnet WMPro command injection7.2CNA v3.10.9%2023-09-18Fix
CVE-2023-34999RTS VLink Virtual Matrix Software command injection8.4CNA v3.11.2%2023-09-18Fix
CVE-2023-34195InsydeH2O code injection7.8v3.10.2%2023-09-18Fix
CVE-2023-33831A remote command execution (RCE) vulnerability in the /API/runscript endpoint of FUXA9.8v3.126.0%2023-09-18NucleiExploit code
CVE-2023-32187K3s apiserver port is vulnerable to unauthenticated remote denial of service attack7.5CNA v3.10.7%2023-09-18Fix
CVE-2023-5036Cross-site request forgery (CSRF) in usememos/memos8.8v3.10.3%2023-09-18Fix
CVE-2023-5034SourceCodester My Food Recipe Image upload index.php unrestricted upload9.8v3.10.6%2023-09-18
CVE-2023-5033OpenRapid RapidCMS cate-edit-run.php SQL injection7.2v3.10.6%2023-09-18
CVE-2023-5032OpenRapid RapidCMS article-edit-run.php SQL injection7.2v3.10.5%2023-09-18
CVE-2023-5031OpenRapid RapidCMS article-add.php SQL injection6.5v3.10.4%2023-09-18
CVE-2023-4806Glibc: Potential use-after-free in getaddrinfo5.9NVD v3.11.6%2023-09-18Fix
CVE-2023-4527Glibc: Stack read overflow in getaddrinfo in no-aaaa mode6.5NVD v3.11.7%2023-09-18Fix
CVE-2023-38040Revive Adserver reflected cross-site scripting6.1v3.12.0%2023-09-17Nuclei
CVE-2023-5030Tongda OA delete.php SQL injection8.8v3.10.6%2023-09-17
CVE-2023-5029mccms 1 SQL injection8.8v3.10.6%2023-09-17
CVE-2023-5028China Unicom TEWA-800G debug log file4.6v3.10.4%2023-09-17
CVE-2023-5027SourceCodester Simple Membership System club_validator.php SQL injection7.5v3.10.5%2023-09-17
CVE-2023-5026Tongda OA cross-site scripting6.1v3.10.5%2023-09-17
CVE-2023-5025Koha MARC search.pl cross-site scripting5.4v3.10.5%2023-09-17
CVE-2023-5024Planno Comment cross-site scripting4.8v3.10.6%2023-09-17Exploit code
CVE-2023-5023Tongda OA delete.php SQL injection8.8v3.10.6%2023-09-17
CVE-2023-5022DedeCMS select_templets_post.php absolute path traversal8.8v3.10.7%2023-09-17
CVE-2023-5021SourceCodester AC Repair and Services System cross-site scripting6.1v3.10.3%2023-09-17
CVE-2023-502007FLY CRM Administrator Login page SQL injection9.8v3.10.7%2023-09-17
CVE-2023-5019Tongda OA delete.php SQL injection9.8v3.10.7%2023-09-17
CVE-2023-5018SourceCodester Lost and Found Information System POST parameter SQL injection9.8v3.10.4%2023-09-17
CVE-2023-5017Lmxcms admin.php SQL injection9.8v3.10.4%2023-09-17
CVE-2023-5016spider-flow API DataSourceController.java DriverManager.getConnection deserialization9.8v3.10.9%2023-09-17
CVE-2023-5015UCMS cross-site scripting6.1v3.10.4%2023-09-17
CVE-2023-5014Sakshi2610 Food Ordering Website categoryfood.php SQL injection9.8v3.10.6%2023-09-17
CVE-2023-42336Netis Systems WF2409E hard-coded credentials9.8v3.11.1%2023-09-16
CVE-2023-41436Cskaza CSZ CMS CSZCMS v.1.3.0 cross-site scripting5.4v3.10.5%2023-09-16Exploit code
CVE-2023-41157Webmin Usermin Multiple stored cross-site scripting5.4v3.10.4%2023-09-16Fix
CVE-2023-39777vBulletin Admin Control Panel cross-site scripting5.4v3.10.4%2023-09-16
CVE-2023-39612filebrowser A cross-site scripting9.0v3.10.7%2023-09-16
CVE-2023-36160Smart Plug 10A UART console vulnerability5.5v3.10.2%2023-09-16
CVE-2023-5013Pluck CMS Installation install.php cross-site scripting5.4v3.10.5%2023-09-16
CVE-2023-5012Topaz OFD Protection Module Warsaw core.exe unquoted search path7.8v3.10.2%2023-09-16
CVE-2023-5001Horizontal scrolling announcement WordPress plugin stored cross-site scripting5.4v3.10.3%2023-09-16Fix
CVE-2023-4994Allow PHP in Posts and Pages WordPress plugin remote code execution6.4NVD v3.10.9%2023-09-16Fix
CVE-2023-3025Dropbox Folder Share WordPress plugin unauthenticated server-side request forgery via link7.2CNA v3.10.5%2023-09-16Fix
CVE-2023-42442JumpServer session replays download without authentication8.2CNA v3.163.0%2023-09-15NucleiExploit codeFix
CVE-2023-42439GeoNode SSRF Bypass to return internal host data7.5CNA v3.11.0%2023-09-15Fix
CVE-2023-42398zzcms server-side request forgery9.8v3.11.3%2023-09-15
CVE-2023-42270Grocy cross-site request forgery8.8v3.10.4%2023-09-15
CVE-2023-41900Jetty's OpenId Revoked authentication allows one request3.5CNA v3.10.9%2023-09-15Fix
CVE-2023-41889Ss-proj SHIRASAGI improper unicode handling5.3CNA v3.10.7%2023-09-15Fix
CVE-2023-41887OpenRefine remote Code exec in project import with mysql jdbc URL attack9.8CNA v3.142.5%2023-09-15Fix
CVE-2023-41886OpenRefine vulnerable to arbitrary file read in project import with mysql jdbc URL attack7.5CNA v3.11.0%2023-09-15Fix
CVE-2023-41880Bytecode Alliance Wasmtime i64x2.shr_s instruction off-by-one error2.2CNA v3.10.7%2023-09-15Fix
CVE-2023-41626Gradio arbitrary file upload4.8v3.10.3%2023-09-15Fix
CVE-2023-41325OP-TEE double free in shdr_verify_signature7.4CNA v3.10.4%2023-09-15Fix
CVE-2023-41043Discourse DoS via SvgSprite cache6.5CNA v3.10.6%2023-09-15Fix
CVE-2023-41042Discourse DoS via remote theme assets4.9CNA v3.10.6%2023-09-15Fix
CVE-2023-40986Webmin Usermin Configuration function stored cross-site scripting5.4v3.10.4%2023-09-15
CVE-2023-40985Webmin cross-site scripting5.4v3.10.4%2023-09-15
CVE-2023-40984Webmin File Manager function reflected cross-site scripting5.4v3.10.4%2023-09-15
CVE-2023-40983Webmin File Manager function reflected cross-site scripting6.1v3.10.5%2023-09-15
CVE-2023-40982Webmin A stored cross-site scripting5.4v3.10.5%2023-09-15
CVE-2023-40958Didotech Engineering Lifecycle Management SQL injection8.8v3.11.1%2023-09-15
CVE-2023-40957Didotech Engineering Lifecycle Management SQL injection8.8v3.11.1%2023-09-15
CVE-2023-40956Cloudroits Wesite Job Search SQL injection8.8v3.11.0%2023-09-15
CVE-2023-40955Didotech Engineering Lifecycle Management SQL injection8.8v3.11.1%2023-09-15
CVE-2023-40588Discourse DoS via 2FA and Security Key Names6.5CNA v3.10.6%2023-09-15Fix
CVE-2023-40167Jetty accepts + prefixed value in Content-Length5.3CNA v3.11.3%2023-09-15Fix
CVE-2023-40019FreeSWITCH allows authorized users to cause a denial of service attack7.5CNA v3.10.9%2023-09-15Fix
CVE-2023-40018SignalWire FreeSWITCH ICE candidate handler out-of-bounds write7.5CNA v3.11.0%2023-09-15Fix
CVE-2023-39643Blmodules Xmlfeeds Pro SQL injection9.8v3.10.7%2023-09-15
CVE-2023-39642Cartsguru SQL injection9.8v3.10.7%2023-09-15
CVE-2023-39641Activedesign Full Affiliates SQL injection9.8v3.10.7%2023-09-15
CVE-2023-39639LeoTheme Leoblog SQL injection9.8v3.10.7%2023-09-15
CVE-2023-38706Discourse vulnerable to DoS via drafts6.5CNA v3.10.8%2023-09-15Fix
CVE-2023-38507Strapi Improper Rate Limiting vulnerability7.3CNA v3.11.0%2023-09-15Fix
CVE-2023-38039curl resource exhaustion7.5v3.156.4%2023-09-15Exploit codeFix
CVE-2023-37459contiki-ng out-of-bounds read when processing a received IPv6 packet5.3CNA v3.10.5%2023-09-15Fix
CVE-2023-37281contiki-ng out-of-bounds read during IPHC address decompression5.3CNA v3.10.5%2023-09-15Fix
CVE-2023-37263Strapi's field level permissions not being respected in relationship title6.8CNA v3.10.6%2023-09-15Fix
CVE-2023-36735Microsoft Edge (Chromium-based) elevation of privilege9.6CNA v3.12.1%2023-09-15Fix
CVE-2023-36727Microsoft Edge (Chromium-based) spoofing6.1CNA v3.11.0%2023-09-15Fix
CVE-2023-36659OPSWAT MetaDefender Kiosk buffer overflow9.8v3.10.7%2023-09-15Fix
CVE-2023-36658OPSWAT MetaDefender Kiosk unquoted search path7.8v3.10.2%2023-09-15Fix
CVE-2023-36657OPSWAT MetaDefender Kiosk improper privilege management9.8v3.10.6%2023-09-15Fix
CVE-2023-36562Microsoft Edge (Chromium-based) elevation of privilege7.1CNA v3.11.0%2023-09-15Fix
CVE-2023-36479Jetty vulnerable to errant command quoting in CGI Servlet3.5CNA v3.11.2%2023-09-15Fix
CVE-2023-36472Strapi may leak sensitive user information, user reset password, tokens via content-manager views5.8CNA v3.10.7%2023-09-15Fix
CVE-2023-32461Dell PowerEdge Platform heap-based buffer overflow5.0CNA v3.10.2%2023-09-15Fix
CVE-2023-28614Freewillsolutions Smart Trade OS command injection9.8v3.12.3%2023-09-15
CVE-2023-4991NextBX QWAlerter QWAlerter.exe unquoted search path7.8v3.10.2%2023-09-15
CVE-2023-4988Bettershop LaikeTui unrestricted upload9.8v3.10.5%2023-09-15
CVE-2023-4987infinitietech taskhub GET parameter get_tasks_list SQL injection8.0v3.10.7%2023-09-15
CVE-2023-4986Supcon InPlant SCADA Project.xml unknown vulnerability2.5v3.10.2%2023-09-15
CVE-2023-4985Supcon InPlant SCADA Project.xml improper authentication7.8v3.10.4%2023-09-15
CVE-2023-4984didi KnowSearch user security API vulnerability6.5v3.10.5%2023-09-15
CVE-2023-4983app1pro Shopicial search cross-site scripting6.1v3.10.4%2023-09-15
CVE-2023-4982Cross-site scripting (XSS) Stored in librenms/librenms5.4NVD v3.10.7%2023-09-15Fix
CVE-2023-4981Cross-site scripting (XSS) DOM in librenms/librenms5.4NVD v3.10.7%2023-09-15Fix
CVE-2023-4980Cross-site scripting (XSS) Generic in librenms/librenms5.4NVD v3.10.7%2023-09-15Fix
CVE-2023-4979Cross-site scripting (XSS) Reflected in librenms/librenms5.4NVD v3.10.7%2023-09-15Fix
CVE-2023-4978Cross-site scripting (XSS) DOM in librenms/librenms6.1NVD v3.10.7%2023-09-15Fix