CVE-2023 records published in September 2023
Page two of two: records 1,001 to 1,999 of the 1,999 published in September 2023, newest first. The first page carries the figures for September 2023.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2023-4977 | Code injection in librenms/librenms | 5.4NVD v3.1 | 0.5% | 2023-09-15 | Fix |
| CVE-2023-4974 | Academy LMS GET parameter filter SQL injection | 9.8v3.1 | 4.9% | 2023-09-15 | Nuclei |
| CVE-2023-4973 | Academy LMS GET parameter filter cross-site scripting | 6.1v3.1 | 1.8% | 2023-09-15 | Nuclei |
| CVE-2023-4963 | WS Facebook Like Box Widget WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-09-15 | |
| CVE-2023-4959 | Quay: Cross-site request forgery (CSRF) on config-editor page | 6.5CNA v3.1 | 0.3% | 2023-09-15 | |
| CVE-2023-4835 | SQLi in CF's Oil Management Software | 9.8CNA v3.1 | 0.7% | 2023-09-15 | Fix |
| CVE-2023-4833 | SQLi in Besttem's Network Marketing Software | 9.8v3.1 | 0.6% | 2023-09-15 | Fix |
| CVE-2023-4831 | Ncode Ncep SQL command improper neutralization | 9.8CNA v3.1 | 0.6% | 2023-09-15 | Fix |
| CVE-2023-4830 | SQLi in Tura's Signalix | 9.8CNA v3.1 | 0.7% | 2023-09-15 | |
| CVE-2023-4680 | Vault's Transit Secrets Engine Allowed Nonce Specified without Convergent Encryption | 6.8CNA v3.1 | 0.4% | 2023-09-15 | Fix |
| CVE-2023-4673 | SQLi in Sanalogy's Turasistan | 9.8CNA v3.1 | 0.7% | 2023-09-15 | Fix |
| CVE-2023-4670 | SQLi in Innosa's Probbys | 9.8CNA v3.1 | 0.7% | 2023-09-15 | Fix |
| CVE-2023-4665 | Saphira Connect privilege escalation | 8.8CNA v3.1 | 1.0% | 2023-09-15 | Fix |
| CVE-2023-4664 | Saphira Connect incorrect default permissions | 8.8v3.1 | 0.8% | 2023-09-15 | Fix |
| CVE-2023-4663 | XSS in Saphira Connect | 6.1CNA v3.1 | 0.9% | 2023-09-15 | Fix |
| CVE-2023-4662 | RCE in Saphira Connect | 9.8v3.1 | 1.2% | 2023-09-15 | Fix |
| CVE-2023-4661 | SQLi in Saphira Connect | 9.8CNA v3.1 | 0.9% | 2023-09-15 | Fix |
| CVE-2023-4231 | SQLi in Cevik Informatics' Online Payment System | 9.8CNA v3.1 | 0.7% | 2023-09-15 | Fix |
| CVE-2023-3891 | Lapce privilege escalation via race condition | 7.0v3.1 | 0.3% | 2023-09-15 | Fix |
| CVE-2023-0923 | Red Hat OpenShift Data Science notebook controller Jupyter API missing authorization | 9.8NVD v3.1 | 0.9% | 2023-09-15 | Fix |
| CVE-2023-0813 | Red Hat Network Observability Loki authToken configuration vulnerability | 7.5CNA v3.1 | 0.9% | 2023-09-15 | Fix |
| CVE-2023-42503 | Apache Commons Compress: Denial of service via CPU consumption for malformed TAR file | 5.5v3.1 | 0.5% | 2023-09-14 | Fix |
| CVE-2023-42405 | fit2cloud Rackshift SQL injection | 9.8v3.1 | 1.0% | 2023-09-14 | |
| CVE-2023-42362 | Teller An arbitrary file upload | 5.4v3.1 | 0.6% | 2023-09-14 | Exploit code |
| CVE-2023-42180 | lenosp /user/upload component arbitrary file upload | 8.8v3.1 | 0.6% | 2023-09-14 | |
| CVE-2023-42178 | lenosp SQL injection | 6.5v3.1 | 0.5% | 2023-09-14 | |
| CVE-2023-41592 | Froala Editor cross-site scripting | 5.4v3.1 | 0.9% | 2023-09-14 | Fix |
| CVE-2023-41588 | Appfire Time To SLA cross-site scripting | 6.1v3.1 | 0.4% | 2023-09-14 | |
| CVE-2023-41267 | Apache HDFS Provider error message suggested installation of incorrect pip package | 7.8v3.1 | 0.5% | 2023-09-14 | Fix |
| CVE-2023-41160 | Webmin Usermin SSH configuration tab stored cross-site scripting | 5.4v3.1 | 0.5% | 2023-09-14 | Fix |
| CVE-2023-41159 | Webmin Usermin cross-site scripting | 5.4v3.1 | 0.4% | 2023-09-14 | Fix |
| CVE-2023-41156 | Webmin Usermin filter and forward mail tab stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-09-14 | Fix |
| CVE-2023-41011 | China Mobile Intelligent Home Gateway China Mobile Communications China Mobile command execution | 9.8v3.1 | 2.0% | 2023-09-14 | |
| CVE-2023-41010 | Tianyisc Tewa-700g Sichuan Tianyi Kanghe Communication Co insecure permissions | 5.5v3.1 | 0.2% | 2023-09-14 | |
| CVE-2023-40869 | mooSocial cross-site scripting | 6.1v3.1 | 1.0% | 2023-09-14 | Exploit code |
| CVE-2023-40868 | mooSocial cross-site request forgery | 8.8v3.1 | 1.2% | 2023-09-14 | Exploit code |
| CVE-2023-40779 | IceWarp Deep Castle G2 open redirect | 6.1v3.1 | 1.4% | 2023-09-14 | Nuclei |
| CVE-2023-39638 | D-Link Dir-859 A1 command injection | 9.8v3.1 | 3.0% | 2023-09-14 | |
| CVE-2023-39286 | Mitel Connect Mobility Router cross-site request forgery | 4.3v3.1 | 0.2% | 2023-09-14 | Fix |
| CVE-2023-39285 | Mitel MiVoice Connect cross-site request forgery | 4.3v3.1 | 0.2% | 2023-09-14 | Fix |
| CVE-2023-38912 | Super Store Finder PHP Script SQL injection | 9.8v3.1 | 1.4% | 2023-09-14 | |
| CVE-2023-38891 | Vtiger CRM SQL injection | 8.8v3.1 | 0.9% | 2023-09-14 | Exploit code |
| CVE-2023-38558 | Siemens SIMATIC PCS neo (Administration Console) sensitive information in an accessible file | 5.5CNA v3.1 | 0.2% | 2023-09-14 | Fix |
| CVE-2023-38557 | Siemens Spectrum Power 7 incorrect permission assignment | 8.2CNA v3.1 | 0.2% | 2023-09-14 | Fix |
| CVE-2023-38206 | Adobe ColdFusion improper access control | 5.3CNA v3.1 | 0.7% | 2023-09-14 | Fix |
| CVE-2023-38205 | Adobe ColdFusion improper access control | 7.5CNA v3.1 | 99.8% | 2023-09-14 | KEVNucleiEmerging ThreatsFix |
| CVE-2023-38204 | Adobe Bypass APSB23-41 Pre-Auth RCE ColdFusion 2021 Update 8 | 9.8CNA v3.1 | 66.9% | 2023-09-14 | Reported exploitedFix |
| CVE-2023-37756 | I-doit weak password requirements | 9.8v3.1 | 1.2% | 2023-09-14 | Exploit code |
| CVE-2023-37755 | I-doit hard-coded credentials | 9.8v3.1 | 1.1% | 2023-09-14 | Exploit code |
| CVE-2023-37739 | I-doit path traversal | 6.5v3.1 | 1.1% | 2023-09-14 | Exploit code |
| CVE-2023-36250 | Gnome-time Tracker CSV injection | 7.8v3.1 | 0.6% | 2023-09-14 | Exploit code |
| CVE-2023-32665 | glib2 gvariant deserialisation does not match spec for non-normal data | 5.5NVD v3.1 | 0.4% | 2023-09-14 | Fix |
| CVE-2023-32643 | glib heap-based buffer overflow | 7.8NVD v3.1 | 0.4% | 2023-09-14 | Fix |
| CVE-2023-32636 | glib deserialization of untrusted data | 7.5NVD v3.1 | 0.8% | 2023-09-14 | Fix |
| CVE-2023-32611 | glib2 g_variant_byteswap can take a long time with some non-normal inputs | 5.5NVD v3.1 | 0.4% | 2023-09-14 | Fix |
| CVE-2023-30909 | HPE OneView some authentication bypass | 9.8CNA v3.1 | 1.5% | 2023-09-14 | Fix |
| CVE-2023-29499 | glib2 gvariant offset table entry size is not checked in is_normal | 7.5NVD v3.1 | 0.8% | 2023-09-14 | Fix |
| CVE-2023-26141 | sidekiq denial of service | 4.9NVD v3.1 | 0.9% | 2023-09-14 | Fix |
| CVE-2023-25588 | binutils field `the_bfd` of `asymbol` is uninitialized in function `bfd_mach_o_get_synthetic_symtab` | 5.5NVD v3.1 | 0.4% | 2023-09-14 | Fix |
| CVE-2023-25586 | GNU Binutils section decompression handling uninitialized variable use | 5.5NVD v3.1 | 0.3% | 2023-09-14 | Fix |
| CVE-2023-25585 | binutils field `file_table` of `struct module *module` is uninitialized | 5.5NVD v3.1 | 0.4% | 2023-09-14 | Fix |
| CVE-2023-25584 | binutils out-of-bounds read in parse_module function in bfd/vms-alpha.c | 7.1NVD v3.1 | 0.4% | 2023-09-14 | Fix |
| CVE-2023-4972 | Information disclosure in Digital Yepas | 9.8v3.1 | 0.6% | 2023-09-14 | Fix |
| CVE-2023-4965 | phpipam header handler open redirect | 4.8v3.1 | 0.5% | 2023-09-14 | |
| CVE-2023-4951 | Green Rocket Security GreenRADIUS cross-site scripting | 2.0CNA v3.1 | 0.3% | 2023-09-14 | Fix |
| CVE-2023-4948 | WooCommerce CVR Payment Gateway WordPress plugin missing authorization authenticated CVR update | 4.3CNA v3.1 | 0.4% | 2023-09-14 | Fix |
| CVE-2023-4945 | Booster for WooCommerce WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2023-09-14 | Fix |
| CVE-2023-4944 | Awesome Weather Widget WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-09-14 | |
| CVE-2023-4841 | Feeds for YouTube WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2023-09-14 | Fix |
| CVE-2023-4832 | SQLi in Aceka Holdings Company Management | 9.8CNA v3.1 | 0.7% | 2023-09-14 | Fix |
| CVE-2023-4814 | Trellix Data Loss Prevention Endpoint privilege escalation | 7.1CNA v3.1 | 0.2% | 2023-09-14 | Fix |
| CVE-2023-4766 | SQLi in Movus Admin Panel | 9.8CNA v3.1 | 0.7% | 2023-09-14 | Fix |
| CVE-2023-4702 | Authentication bypass in Digital Yepas | 9.8v3.1 | 0.7% | 2023-09-14 | Fix |
| CVE-2023-4676 | XSS in Yordams MedasPro | 6.1CNA v3.1 | 0.4% | 2023-09-14 | Fix |
| CVE-2023-4669 | Authentication bypass in Exagate SYSGuard 3001 | 9.8v3.1 | 1.0% | 2023-09-14 | Fix |
| CVE-2023-4516 | Schneider Electric IGSS Update Service (IGSSupdateservice.exe) missing authentication | 7.8CNA v3.1 | 0.2% | 2023-09-14 | Fix |
| CVE-2023-2848 | Movim missing WebSocket origin validation | 8.8v3.1 | 0.3% | 2023-09-14 | Fix |
| CVE-2023-1108 | Red Hat EAP undertow: Infinite loop in sslconduit during close | 7.5CNA v3.1 | 1.8% | 2023-09-14 | Fix |
| CVE-2023-42469 | Fulldive Full Dialer missing authorization | 3.3v3.1 | 0.3% | 2023-09-13 | Exploit code |
| CVE-2023-42468 | Azmobileapps Color Phone improper privilege management | 5.3NVD v3.1 | 1.2% | 2023-09-13 | |
| CVE-2023-41892 | Craft CMS remote code execution | 10.0CNA v3.1 | 94.2% | 2023-09-13 | NucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2023-41162 | Webmin Usermin file manager tab reflected cross-site scripting | 6.1v3.1 | 0.4% | 2023-09-13 | Fix |
| CVE-2023-41158 | Webmin Usermin MIME type programs tab stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-09-13 | Fix |
| CVE-2023-41155 | Webmin Usermin stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-09-13 | Fix |
| CVE-2023-41154 | Webmin Usermin scheduled cron jobs tab stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-09-13 | Fix |
| CVE-2023-41152 | Webmin Usermin MIME type programs tab stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-09-13 | Fix |
| CVE-2023-41081 | Apache Tomcat Connectors: Unexpected use of first declared worker in mod_jk for unmapped request | 7.5v3.1 | 1.3% | 2023-09-13 | Fix |
| CVE-2023-40850 | Netentsec NS-ASG improper access control | 7.5v3.1 | 0.7% | 2023-09-13 | |
| CVE-2023-40717 | Fortinet FortiTester hard-coded credentials | 5.0CNA v3.1 | 0.2% | 2023-09-13 | Fix |
| CVE-2023-40715 | Fortinet FortiTester cleartext storage of sensitive information | 5.2CNA v3.1 | 0.2% | 2023-09-13 | Fix |
| CVE-2023-40617 | Openknowledgemaps HEAD Start reflected cross-site scripting | 6.1v3.1 | 0.5% | 2023-09-13 | |
| CVE-2023-39916 | NLnet Labs Routinator possible path traversal when storing RRDP responses | 9.3CNA v3.1 | 0.6% | 2023-09-13 | Fix |
| CVE-2023-39915 | NLnet Labs Routinator crashes on parsing certain invalid RPKI objects | 7.5CNA v3.1 | 0.6% | 2023-09-13 | Fix |
| CVE-2023-39914 | NLnet Labs bcder BER/CER/DER decoder panics on invalid input | 7.5CNA v3.1 | 0.7% | 2023-09-13 | Fix |
| CVE-2023-38215 | Adobe Experience Manager cross-site scripting (reflected XSS) | 5.4CNA v3.1 | 0.4% | 2023-09-13 | Fix |
| CVE-2023-38214 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.4% | 2023-09-13 | Fix |
| CVE-2023-36642 | Fortinet FortiTester command injection | 6.5CNA v3.1 | 0.2% | 2023-09-13 | Fix |
| CVE-2023-36638 | Fortinet FortiManager improper privilege management | 4.2CNA v3.1 | 0.4% | 2023-09-13 | Fix |
| CVE-2023-36634 | Fortinet FortiAP-U external control of a file path | 6.5CNA v3.1 | 0.6% | 2023-09-13 | Fix |
| CVE-2023-36551 | Fortinet FortiSIEM information disclosure | 4.2CNA v3.1 | 0.7% | 2023-09-13 | Fix |
| CVE-2023-34984 | Fortinet FortiWeb protection mechanism failure | 7.1CNA v3.1 | 0.7% | 2023-09-13 | Fix |
| CVE-2023-29306 | Adobe Connect reflected cross-site scripting (XSS) arbitrary code execution | 6.1CNA v3.1 | 0.5% | 2023-09-13 | Fix |
| CVE-2023-29305 | Adobe Connect reflected cross-site scripting (XSS) arbitrary code execution | 6.1CNA v3.1 | 0.5% | 2023-09-13 | Fix |
| CVE-2023-29183 | Fortinet FortiProxy cross-site scripting | 7.3CNA v3.1 | 1.3% | 2023-09-13 | Fix |
| CVE-2023-27998 | Fortinet FortiPresence login GUI vulnerability | 5.3CNA v3.1 | 0.5% | 2023-09-13 | Fix |
| CVE-2023-26369 | Adobe Acrobat and Reader out-of-bounds write | 7.8CNA v3.1 | 6.7% | 2023-09-13 | KEVFix |
| CVE-2023-25608 | Fortinet FortiAP-W2 incomplete filtering | 5.2CNA v3.1 | 0.6% | 2023-09-13 | Fix |
| CVE-2023-23845 | SolarWinds Platform exposed dangerous method | 6.8CNA v3.1 | 5.4% | 2023-09-13 | Fix |
| CVE-2023-23840 | SolarWinds Platform exposed dangerous method | 6.8CNA v3.1 | 5.4% | 2023-09-13 | Fix |
| CVE-2023-20236 | Cisco IOS XR Software improper signature verification | 6.7CNA v3.1 | 0.1% | 2023-09-13 | Fix |
| CVE-2023-20233 | Cisco IOS XR Software null pointer dereference | 4.3CNA v3.1 | 0.3% | 2023-09-13 | Fix |
| CVE-2023-20191 | Cisco IOS XR Software improper access control | 5.8CNA v3.1 | 0.6% | 2023-09-13 | Fix |
| CVE-2023-20190 | Cisco IOS XR Software access control weakness | 5.8CNA v3.1 | 0.7% | 2023-09-13 | Fix |
| CVE-2023-20135 | Cisco IOS XR Software improper signature verification | 5.7CNA v3.1 | 0.1% | 2023-09-13 | Fix |
| CVE-2023-4928 | SQL injection in instantsoft/icms2 | 7.2v3.1 | 0.7% | 2023-09-13 | Fix |
| CVE-2023-4917 | Leyka WordPress plugin authenticated (Subscriber+) sensitive information exposure | 6.5v3.1 | 0.6% | 2023-09-13 | Fix |
| CVE-2023-4916 | Login with phone number WordPress plugin cross-site request forgery to user password Change | 8.8CNA v3.1 | 0.4% | 2023-09-13 | Fix |
| CVE-2023-4915 | WP User Control WordPress plugin insecure password reset Mechanism | 5.3CNA v3.1 | 0.5% | 2023-09-13 | |
| CVE-2023-4828 | ITM Server Communications Hijack | 6.4CNA v3.1 | 0.4% | 2023-09-13 | Fix |
| CVE-2023-4803 | ITM Server cross-site scripting in WriteWindowTitle endpoint | 4.8CNA v3.1 | 0.4% | 2023-09-13 | Fix |
| CVE-2023-4802 | ITM Server cross-site scripting in UpdateInstalledSoftware endpoint | 4.8CNA v3.1 | 0.4% | 2023-09-13 | Fix |
| CVE-2023-4801 | Proofpoint Insider Threat Management ITM MacOS agent improper certificate validation | 7.5CNA v3.1 | 0.3% | 2023-09-13 | Fix |
| CVE-2023-4785 | Google denial of service in gRPC Core | 7.5CNA v3.1 | 0.8% | 2023-09-13 | Fix |
| CVE-2023-4568 | PaperCut NG XML-RPC interface vulnerability | 6.5NVD v3.1 | 3.9% | 2023-09-13 | NucleiExploit code |
| CVE-2023-4400 | Skyhigh Secure Web Gateway (SWG) plaintext password storage | 6.2CNA v3.1 | 0.4% | 2023-09-13 | Fix |
| CVE-2023-4213 | Simplr Registration Form Plus+ WordPress plugin insecure direct object reference | 8.8CNA v3.1 | 0.8% | 2023-09-13 | |
| CVE-2023-4155 | kernel sev-es / sev-snp vmgexit double fetch vulnerability | 5.6NVD v3.1 | 0.2% | 2023-09-13 | Fix |
| CVE-2023-4153 | BAN Users WordPress plugin privilege escalation | 8.8CNA v3.1 | 0.9% | 2023-09-13 | |
| CVE-2023-4039 | GCC's-fstack-protector fails to guard dynamically-sized local variables on AArch64 | 4.8NVD v3.1 | 1.0% | 2023-09-13 | Fix |
| CVE-2023-3935 | Wibu: Buffer overflow in CodeMeter Runtime | 9.8v3.1 | 2.0% | 2023-09-13 | Fix |
| CVE-2023-3588 | Stored cross-site scripting vulnerability affecting Teamwork Cloud from No Magic Release 2021x | 5.4CNA v3.1 | 0.3% | 2023-09-13 | |
| CVE-2023-3301 | QEMU triggerable assertion due to race condition in hot-unplug | 5.6NVD v3.1 | 0.3% | 2023-09-13 | Fix |
| CVE-2023-3280 | Cortex XDR Agent: Local Windows User can Disable the Agent | 5.5CNA v3.1 | 0.3% | 2023-09-13 | Exploit codeFix |
| CVE-2023-3255 | Qemu: Vnc: Infinite loop in inflate_buffer leads to denial of service | 6.5NVD v3.1 | 1.9% | 2023-09-13 | Fix |
| CVE-2023-2680 | QEMU DMA emulation use-after-free | 8.2NVD v3.1 | 0.2% | 2023-09-13 | Fix |
| CVE-2023-42472 | Insufficient file type validation in SAP BusinessObjects Business Intelligence Platform | 8.7CNA v3.1 | 0.6% | 2023-09-12 | Fix |
| CVE-2023-41990 | Apple Multiple Products code execution | 7.8v3.1 | 1.4% | 2023-09-12 | KEVKCVFix |
| CVE-2023-41885 | Piccolo's current `BaseUser.login` implementation is vulnerable to time based user enumeration | 5.3CNA v3.1 | 0.6% | 2023-09-12 | Fix |
| CVE-2023-41846 | Siemens Tecnomatix Plant Simulation V2201 memory corruption | 7.8CNA v3.1 | 0.2% | 2023-09-12 | Fix |
| CVE-2023-41764 | Microsoft Office spoofing | 5.5CNA v3.1 | 1.0% | 2023-09-12 | Fix |
| CVE-2023-41423 | Terry L WP Githuber MD cross-site scripting | 5.4v3.1 | 0.5% | 2023-09-12 | |
| CVE-2023-41369 | External Entity Loop vulnerability in SAP S/4HANA (Create Single Payment application) | 3.5CNA v3.1 | 0.5% | 2023-09-12 | Fix |
| CVE-2023-41368 | Insecure direct object reference (IDOR) vulnerability in S4 HANA (Manage checkbook apps) | 2.7CNA v3.1 | 0.4% | 2023-09-12 | Fix |
| CVE-2023-41367 | Missing authentication check in SAP NetWeaver (Guided Procedures) | 5.3CNA v3.1 | 0.5% | 2023-09-12 | Fix |
| CVE-2023-41331 | sofastack sofa-rpc SOFARPC remote command execution (RCE) | 9.8CNA v3.1 | 1.6% | 2023-09-12 | Fix |
| CVE-2023-41033 | Siemens Parasolid out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2023-09-12 | Fix |
| CVE-2023-41032 | Siemens Parasolid out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2023-09-12 | Fix |
| CVE-2023-41013 | IceWarp Webmail Calendar cross-site scripting | 6.1v3.1 | 0.5% | 2023-09-12 | |
| CVE-2023-40834 | OpenCart missing brute-force protection | 9.8v3.1 | 1.1% | 2023-09-12 | |
| CVE-2023-40784 | DedeCMS unrestricted file upload | 9.8v3.1 | 0.6% | 2023-09-12 | |
| CVE-2023-40732 | Siemens QMS Automotive insufficient session expiration | 3.9CNA v3.1 | 0.2% | 2023-09-12 | Fix |
| CVE-2023-40731 | Siemens QMS Automotive unrestricted file upload | 5.7CNA v3.1 | 0.5% | 2023-09-12 | Fix |
| CVE-2023-40730 | Siemens QMS Automotive denial of service | 7.1CNA v3.1 | 0.6% | 2023-09-12 | Fix |
| CVE-2023-40729 | Siemens QMS Automotive cleartext transmission of sensitive information | 7.3CNA v3.1 | 0.3% | 2023-09-12 | Fix |
| CVE-2023-40728 | Siemens QMS Automotive insecure storage of sensitive information | 7.3CNA v3.1 | 0.2% | 2023-09-12 | Fix |
| CVE-2023-40727 | Siemens QMS Automotive improper signature verification | 7.8CNA v3.1 | 0.1% | 2023-09-12 | Fix |
| CVE-2023-40726 | Siemens QMS Automotive application server vulnerability | 8.8CNA v3.1 | 0.7% | 2023-09-12 | Fix |
| CVE-2023-40725 | Siemens QMS Automotive information disclosure through error messages | 4.0CNA v3.1 | 0.2% | 2023-09-12 | Fix |
| CVE-2023-40724 | Siemens QMS Automotive cleartext storage of sensitive information in memory | 7.3CNA v3.1 | 0.1% | 2023-09-12 | Fix |
| CVE-2023-40712 | Apache Airflow: Secrets can be unmasked in the Rendered template | 6.5v3.1 | 1.5% | 2023-09-12 | Fix |
| CVE-2023-40625 | Missing authorization check in SAP Manage Purchase Contracts App | 5.4CNA v3.1 | 0.4% | 2023-09-12 | Fix |
| CVE-2023-40624 | Code injection vulnerability in SAP NetWeaver AS ABAP (applications based on Unified Rendering) | 5.5CNA v3.1 | 0.4% | 2023-09-12 | Fix |
| CVE-2023-40623 | Arbitrary file delete via Directory Junction in SAP BusinessObjects Suite(installer) | 6.2CNA v3.1 | 0.4% | 2023-09-12 | Fix |
| CVE-2023-40622 | Information disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform | 9.9CNA v3.1 | 0.7% | 2023-09-12 | Fix |
| CVE-2023-40621 | Code injection vulnerability in SAP PowerDesigner Client | 6.3CNA v3.1 | 2.9% | 2023-09-12 | Fix |
| CVE-2023-40611 | Apache Airflow Dag Runs broken access control | 4.3v3.1 | 1.3% | 2023-09-12 | Fix |
| CVE-2023-40442 | Apple macOS sensitive information in log files | 3.3v3.1 | 0.2% | 2023-09-12 | Fix |
| CVE-2023-40440 | Apple macOS S/MIME email encryption vulnerability | 7.5v3.1 | 0.5% | 2023-09-12 | Fix |
| CVE-2023-40309 | Missing authorization check in SAP CommonCryptoLib | 9.8CNA v3.1 | 0.9% | 2023-09-12 | Fix |
| CVE-2023-40308 | Memory corruption vulnerability in SAP CommonCryptoLib | 7.5CNA v3.1 | 0.8% | 2023-09-12 | Fix |
| CVE-2023-40218 | Samsung Exynos 1280 integer overflow | 3.3v3.1 | 0.2% | 2023-09-12 | Fix |
| CVE-2023-39637 | D-Link DIR-816 command injection | 9.8v3.1 | 1.7% | 2023-09-12 | |
| CVE-2023-39215 | Zoom Video Communications Zoom Clients improper authentication | 7.1CNA v3.1 | 1.1% | 2023-09-12 | |
| CVE-2023-39208 | Zoom Video Communications Zoom Desktop Client improper input validation | 6.5CNA v3.1 | 0.6% | 2023-09-12 | |
| CVE-2023-39201 | Zoom Video Communications CleanZoom untrusted search path | 7.2CNA v3.1 | 0.2% | 2023-09-12 | |
| CVE-2023-39150 | Maximus5 Conemu arbitrary code execution | 9.8v3.1 | 0.8% | 2023-09-12 | |
| CVE-2023-39073 | Voltronic Power SNMP Web Pro missing authorization | 9.8v3.1 | 0.9% | 2023-09-12 | |
| CVE-2023-38164 | Microsoft Dynamics 365 (on-premises) cross-site scripting | 7.6CNA v3.1 | 0.9% | 2023-09-12 | Fix |
| CVE-2023-38163 | Windows Defender Attack Surface Reduction security feature bypass | 7.8CNA v3.1 | 0.7% | 2023-09-12 | Fix |
| CVE-2023-38162 | Microsoft Windows DHCP server service denial of service | 7.5CNA v3.1 | 10.7% | 2023-09-12 | Fix |
| CVE-2023-38161 | Microsoft Windows GDI elevation of privilege | 7.8CNA v3.1 | 0.6% | 2023-09-12 | Fix |
| CVE-2023-38160 | Microsoft Windows TCP/IP information disclosure | 5.5CNA v3.1 | 0.9% | 2023-09-12 | Fix |
| CVE-2023-38156 | Microsoft Azure HDInsight Apache Ambari JDBC injection elevation of privilege | 7.2CNA v3.1 | 2.0% | 2023-09-12 | Fix |
| CVE-2023-38155 | Microsoft Azure DevOps Server remote code execution | 7.0CNA v3.1 | 1.3% | 2023-09-12 | Fix |
| CVE-2023-38152 | Microsoft Windows DHCP server service information disclosure | 5.3CNA v3.1 | 24.0% | 2023-09-12 | Fix |
| CVE-2023-38150 | Microsoft Windows Kernel elevation of privilege | 7.8CNA v3.1 | 0.6% | 2023-09-12 | Fix |
| CVE-2023-38149 | Microsoft Windows TCP/IP denial of service | 7.5CNA v3.1 | 4.5% | 2023-09-12 | Fix |
| CVE-2023-38148 | Microsoft Windows internet Connection Sharing (ICS) remote code execution | 8.8CNA v3.1 | 7.7% | 2023-09-12 | Fix |
| CVE-2023-38147 | Microsoft Windows Miracast Wireless Display remote code execution | 8.8CNA v3.1 | 0.9% | 2023-09-12 | Fix |
| CVE-2023-38146 | Microsoft Windows Themes remote code execution | 8.8CNA v3.1 | 37.4% | 2023-09-12 | Exploit codeFix |
| CVE-2023-38144 | Microsoft Windows Common Log File System driver elevation of privilege | 7.8CNA v3.1 | 3.7% | 2023-09-12 | Fix |
| CVE-2023-38143 | Microsoft Windows Common Log File System driver elevation of privilege | 7.8CNA v3.1 | 3.7% | 2023-09-12 | Fix |
| CVE-2023-38142 | Microsoft Windows Kernel elevation of privilege | 7.8CNA v3.1 | 6.0% | 2023-09-12 | Fix |
| CVE-2023-38141 | Microsoft Windows Kernel elevation of privilege | 7.8CNA v3.1 | 0.6% | 2023-09-12 | Fix |
| CVE-2023-38140 | Microsoft Windows Kernel information disclosure | 5.5CNA v3.1 | 1.1% | 2023-09-12 | Fix |
| CVE-2023-38139 | Microsoft Windows Kernel elevation of privilege | 7.8CNA v3.1 | 0.9% | 2023-09-12 | Fix |
| CVE-2023-38076 | Siemens JT2Go heap-based buffer overflow | 7.8CNA v3.1 | 0.4% | 2023-09-12 | Fix |
| CVE-2023-38075 | Siemens JT2Go use-after-free | 7.8CNA v3.1 | 0.5% | 2023-09-12 | Fix |
| CVE-2023-38074 | Siemens JT2Go type confusion | 7.8CNA v3.1 | 0.5% | 2023-09-12 | Fix |
| CVE-2023-38073 | Siemens JT2Go type confusion | 7.8CNA v3.1 | 0.4% | 2023-09-12 | Fix |
| CVE-2023-38072 | Siemens JT2Go out-of-bounds write | 7.8CNA v3.1 | 0.5% | 2023-09-12 | Fix |
| CVE-2023-38071 | Siemens JT2Go heap-based buffer overflow | 7.8CNA v3.1 | 0.4% | 2023-09-12 | Fix |
| CVE-2023-38070 | Siemens JT2Go stack-based buffer overflow | 7.8CNA v3.1 | 0.4% | 2023-09-12 | Fix |
| CVE-2023-37881 | Weak Access Control between Domains in Wing FTP Server | 8.8v3.1 | 0.5% | 2023-09-12 | Fix |
| CVE-2023-37879 | Exposed Session variable in Wing FTP Server | 7.5v3.1 | 0.5% | 2023-09-12 | Fix |
| CVE-2023-37878 | Insecure default Permissions in Wing FTP Server | 8.8v3.1 | 0.4% | 2023-09-12 | Fix |
| CVE-2023-37875 | Cross-site scripting vulnerability in Wing FTP Server | 5.4v3.1 | 0.2% | 2023-09-12 | Fix |
| CVE-2023-37489 | Information disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform | 5.3CNA v3.1 | 0.5% | 2023-09-12 | Fix |
| CVE-2023-36886 | Microsoft Dynamics 365 (on-premises) cross-site scripting | 7.6CNA v3.1 | 1.0% | 2023-09-12 | Fix |
| CVE-2023-36805 | Microsoft Windows MSHTML Platform security feature bypass | 7.0CNA v3.1 | 1.8% | 2023-09-12 | Fix |
| CVE-2023-36804 | Microsoft Windows GDI elevation of privilege | 7.8CNA v3.1 | 0.6% | 2023-09-12 | Fix |
| CVE-2023-36803 | Microsoft Windows Kernel information disclosure | 5.5CNA v3.1 | 1.0% | 2023-09-12 | Fix |
| CVE-2023-36802 | Microsoft Streaming Service Proxy privilege escalation | 7.8CNA v3.1 | 27.9% | 2023-09-12 | KEVExploit codeFix |
| CVE-2023-36801 | Microsoft Windows DHCP server service information disclosure | 5.3CNA v3.1 | 1.6% | 2023-09-12 | Fix |
| CVE-2023-36800 | Microsoft Dynamics Finance and Operations cross-site scripting | 7.6CNA v3.1 | 0.8% | 2023-09-12 | Fix |
| CVE-2023-36799 | Microsoft .NET Core and Visual Studio denial of service | 6.5CNA v3.1 | 4.9% | 2023-09-12 | Fix |
| CVE-2023-36796 | Visual Studio remote code execution | 7.8CNA v3.1 | 1.2% | 2023-09-12 | Fix |
| CVE-2023-36794 | Visual Studio remote code execution | 7.8CNA v3.1 | 1.2% | 2023-09-12 | Fix |
| CVE-2023-36793 | Visual Studio remote code execution | 7.8CNA v3.1 | 1.2% | 2023-09-12 | Fix |
| CVE-2023-36792 | Visual Studio remote code execution | 7.8CNA v3.1 | 1.2% | 2023-09-12 | Fix |
| CVE-2023-36788 | NET Framework remote code execution | 7.8CNA v3.1 | 1.0% | 2023-09-12 | Fix |
| CVE-2023-36777 | Microsoft Exchange Server information disclosure | 5.7CNA v3.1 | 52.0% | 2023-09-12 | Fix |
| CVE-2023-36773 | Microsoft 3D Builder remote code execution | 7.8CNA v3.1 | 0.7% | 2023-09-12 | Fix |
| CVE-2023-36772 | Microsoft 3D Builder remote code execution | 7.8CNA v3.1 | 0.7% | 2023-09-12 | Fix |
| CVE-2023-36771 | Microsoft 3D Builder remote code execution | 7.8CNA v3.1 | 0.7% | 2023-09-12 | Fix |
| CVE-2023-36770 | Microsoft 3D Builder remote code execution | 7.8CNA v3.1 | 0.7% | 2023-09-12 | Fix |
| CVE-2023-36767 | Microsoft Office security feature bypass | 4.3CNA v3.1 | 3.1% | 2023-09-12 | Fix |
| CVE-2023-36766 | Microsoft Excel information disclosure | 7.8CNA v3.1 | 1.2% | 2023-09-12 | Fix |
| CVE-2023-36765 | Microsoft Office elevation of privilege | 7.8CNA v3.1 | 1.0% | 2023-09-12 | Fix |
| CVE-2023-36764 | Microsoft SharePoint server elevation of privilege | 8.8CNA v3.1 | 2.1% | 2023-09-12 | Fix |
| CVE-2023-36763 | Microsoft Outlook information disclosure | 7.5CNA v3.1 | 2.1% | 2023-09-12 | Fix |
| CVE-2023-36762 | Microsoft Word remote code execution | 7.3CNA v3.1 | 0.8% | 2023-09-12 | Fix |
| CVE-2023-36761 | Microsoft Word information disclosure | 6.5CNA v3.1 | 19.6% | 2023-09-12 | KEVFix |
| CVE-2023-36760 | Microsoft 3D Viewer remote code execution | 7.8CNA v3.1 | 0.7% | 2023-09-12 | Fix |
| CVE-2023-36759 | Visual Studio elevation of privilege | 6.7CNA v3.1 | 0.5% | 2023-09-12 | Fix |
| CVE-2023-36758 | Visual Studio elevation of privilege | 7.8CNA v3.1 | 1.3% | 2023-09-12 | Fix |
| CVE-2023-36757 | Microsoft Exchange Server spoofing | 8.0CNA v3.1 | 36.9% | 2023-09-12 | Fix |
| CVE-2023-36756 | Microsoft Exchange Server remote code execution | 8.0CNA v3.1 | 49.2% | 2023-09-12 | Fix |
| CVE-2023-36745 | Microsoft Exchange Server remote code execution | 8.0CNA v3.1 | 79.7% | 2023-09-12 | Exploit codeFix |
| CVE-2023-36744 | Microsoft Exchange Server remote code execution | 8.0CNA v3.1 | 57.1% | 2023-09-12 | Fix |
| CVE-2023-36742 | Microsoft Visual Studio Code remote code execution | 7.8CNA v3.1 | 1.0% | 2023-09-12 | Fix |
| CVE-2023-36740 | Microsoft 3D Viewer remote code execution | 7.8CNA v3.1 | 0.7% | 2023-09-12 | Fix |
| CVE-2023-36739 | Microsoft 3D Viewer remote code execution | 7.8CNA v3.1 | 0.7% | 2023-09-12 | Fix |
| CVE-2023-36736 | Microsoft Identity Linux Broker remote code execution | 4.4CNA v3.1 | 1.4% | 2023-09-12 | Fix |
| CVE-2023-35355 | Microsoft Windows Cloud Files Mini Filter driver elevation of privilege | 7.8CNA v3.1 | 0.6% | 2023-09-12 | Fix |
| CVE-2023-34470 | AMI AptioV improper access control | 6.8CNA v3.1 | 0.2% | 2023-09-12 | Fix |
| CVE-2023-34469 | AMI AptioV Cold Rest Vulnerabiltiy | 4.9CNA v3.1 | 0.2% | 2023-09-12 | Fix |
| CVE-2023-33136 | Microsoft Azure DevOps Server remote code execution | 8.8CNA v3.1 | 1.7% | 2023-09-12 | Fix |
| CVE-2023-32558 | Node.js Node path traversal | 7.5v3.1 | 1.7% | 2023-09-12 | Fix |
| CVE-2023-32005 | Node.js Node incorrect permission assignment | 5.3v3.1 | 1.4% | 2023-09-12 | Fix |
| CVE-2023-30962 | Stored XSS in cerberus attachments | 6.8CNA v3.1 | 0.4% | 2023-09-12 | Fix |
| CVE-2023-29463 | Rockwell Automation Pavilion8 JMX Console improper authentication | 8.8CNA v3.1 | 1.5% | 2023-09-12 | Fix |
| CVE-2023-29332 | Microsoft Azure Kubernetes Service elevation of privilege | 7.5CNA v3.1 | 2.7% | 2023-09-12 | Fix |
| CVE-2023-28831 | Siemens SIMATIC BRAUMAT integer overflow | 8.7CNA v4.0 | 1.1% | 2023-09-12 | Fix |
| CVE-2023-27169 | Xpand-it Write-back Manager hard-coded credentials | 6.5v3.1 | 0.3% | 2023-09-12 | |
| CVE-2023-26142 | Crow HTTP response splitting | 6.1v3.1 | 0.5% | 2023-09-12 | |
| CVE-2023-25519 | NVIDIA BlueField 1 incorrect user management | 7.8CNA v3.1 | 0.2% | 2023-09-12 | Fix |
| CVE-2023-21523 | BlackBerry AtHoc Management console stored cross-site scripting | 5.4v3.1 | 0.3% | 2023-09-12 | |
| CVE-2023-21522 | BlackBerry AtHoc Management console reflected cross-site scripting | 6.1v3.1 | 0.3% | 2023-09-12 | Fix |
| CVE-2023-21521 | BlackBerry AtHoc Management console SQL injection | 7.2v3.1 | 0.5% | 2023-09-12 | Fix |
| CVE-2023-21520 | BlackBerry AtHoc credential recovery information disclosure | 5.3v3.1 | 0.4% | 2023-09-12 | |
| CVE-2023-4921 | Linux kernel A use-after-free | 7.8NVD v3.1 | 0.4% | 2023-09-12 | Fix |
| CVE-2023-4918 | keycloak plaintext storage of user password | 8.8CNA v3.1 | 0.6% | 2023-09-12 | Fix |
| CVE-2023-4914 | Relative path traversal in cecilapp/Cecil | 7.5v3.1 | 0.7% | 2023-09-12 | Fix |
| CVE-2023-4913 | Cross-site scripting (XSS) Reflected in cecilapp/Cecil | 6.1v3.1 | 0.4% | 2023-09-12 | Fix |
| CVE-2023-4909 | Google Chrome Interstitials inappropriate implementation | 4.3v3.1 | 0.6% | 2023-09-12 | Fix |
| CVE-2023-4908 | Google Chrome Picture in Picture inappropriate implementation | 4.3v3.1 | 0.6% | 2023-09-12 | Fix |
| CVE-2023-4907 | Google Chrome Intents inappropriate implementation | 4.3v3.1 | 0.7% | 2023-09-12 | Fix |
| CVE-2023-4906 | Google Chrome Autofill insufficient policy enforcement | 4.3v3.1 | 0.6% | 2023-09-12 | Fix |
| CVE-2023-4905 | Google Chrome Prompts inappropriate implementation | 4.3v3.1 | 0.7% | 2023-09-12 | Fix |
| CVE-2023-4904 | Google Chrome Downloads insufficient policy enforcement | 4.3v3.1 | 0.6% | 2023-09-12 | Fix |
| CVE-2023-4903 | Google Chrome Custom Mobile Tabs inappropriate implementation | 4.3v3.1 | 0.7% | 2023-09-12 | Fix |
| CVE-2023-4902 | Google Chrome Input inappropriate implementation | 4.3v3.1 | 0.7% | 2023-09-12 | Fix |
| CVE-2023-4901 | Google Chrome Prompts inappropriate implementation | 4.3v3.1 | 0.7% | 2023-09-12 | Fix |
| CVE-2023-4900 | Google Chrome Custom Tabs inappropriate implementation | 4.3v3.1 | 0.7% | 2023-09-12 | Fix |
| CVE-2023-4899 | SQL injection in mintplex-labs/anything-llm | 8.8v3.1 | 0.6% | 2023-09-12 | Fix |
| CVE-2023-4898 | Authentication bypass by primary weakness in mintplex-labs/anything-llm | 7.5v3.1 | 0.6% | 2023-09-12 | Fix |
| CVE-2023-4893 | Crayon Syntax Highlighter WordPress plugin authenticated (Contributor+) server side request forgery | 5.4v3.1 | 0.3% | 2023-09-12 | |
| CVE-2023-4890 | JQuery Accordion Menu Widget WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-09-12 | Fix |
| CVE-2023-4887 | Google Maps Plugin by Intergeo WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2023-09-12 | Fix |
| CVE-2023-4863 | Google Chromium WebP heap-based buffer overflow | 8.8NVD v3.1 | 100.0% | 2023-09-12 | KEVExploit codeFix |
| CVE-2023-4840 | MapPress Maps for WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2023-09-12 | Fix |
| CVE-2023-4813 | Glibc: Potential use-after-free in gaih_inet | 5.9NVD v3.1 | 2.2% | 2023-09-12 | Exploit codeFix |
| CVE-2023-4759 | Improper handling of case insensitive filesystems in Eclipse JGit allows arbitrary file write | 8.8CNA v3.1 | 2.2% | 2023-09-12 | Fix |
| CVE-2023-4501 | Authentication bypass in OpenText (Micro Focus) Enterprise Server | 9.8CNA v3.1 | 0.8% | 2023-09-12 | Fix |
| CVE-2023-3712 | Honeywell PM23/43 potential user privilege escalation | 6.6CNA v3.1 | 0.6% | 2023-09-12 | Fix |
| CVE-2023-3711 | Honeywell PM23/43 potential predictable session ID | 6.4CNA v3.1 | 1.0% | 2023-09-12 | Fix |
| CVE-2023-3710 | Honeywell PM23/43 printer web page invalid command execution | 9.9CNA v3.1 | 49.0% | 2023-09-12 | NucleiExploit codeFix |
| CVE-2023-3039 | Dell SD ROM Utility improper access control | 7.3CNA v3.1 | 0.2% | 2023-09-12 | Fix |
| CVE-2023-2071 | FactoryTalk View Machine Edition vulnerable to remote code execution | 9.8CNA v3.1 | 17.3% | 2023-09-12 | Fix |
| CVE-2023-0119 | Red Hat Satellite foreman: Stored cross-site scripting in host tab | 5.4CNA v3.1 | 0.6% | 2023-09-12 | Fix |
| CVE-2023-42471 | Wave-ai Wave code injection | 9.8v3.1 | 1.4% | 2023-09-11 | Exploit code |
| CVE-2023-42470 | Imoulife Life code injection | 9.8NVD v3.1 | 2.5% | 2023-09-11 | |
| CVE-2023-42467 | QEMU SCSI disk emulation divide by zero | 5.5v3.1 | 0.4% | 2023-09-11 | Fix |
| CVE-2023-41879 | Magento LTS's guest order protect code can be brute-forced too easily | 7.5CNA v3.1 | 1.3% | 2023-09-11 | Fix |
| CVE-2023-41609 | CouchCMS sanitize_url parameter open redirect | 6.1v3.1 | 0.4% | 2023-09-11 | |
| CVE-2023-41593 | PHPGurukul Dairy Farm Shop Management System Multiple cross-site scripting | 5.4v3.1 | 0.8% | 2023-09-11 | Exploit code |
| CVE-2023-41336 | symfony ux-autocomplete prevent injection of invalid entity ids for autocomplete fields | 6.5CNA v3.1 | 0.6% | 2023-09-11 | Fix |
| CVE-2023-41256 | Dover Fueling Solutions MAGLINK LX Console authentication bypass | 9.1v3.1 | 0.7% | 2023-09-11 | Fix |
| CVE-2023-41103 | Interactsoftware Interact cross-site scripting | 5.4v3.1 | 0.4% | 2023-09-11 | |
| CVE-2023-41000 | GPAC BIFS command list flushing use-after-free | 5.5v3.1 | 0.3% | 2023-09-11 | |
| CVE-2023-40946 | Schoolmate SQL injection | 9.8v3.1 | 0.6% | 2023-09-11 | |
| CVE-2023-40945 | Doctor Appointment System SQL injection | 9.8v3.1 | 0.7% | 2023-09-11 | |
| CVE-2023-40944 | Schoolmate SQL injection | 9.8v3.1 | 0.6% | 2023-09-11 | |
| CVE-2023-40786 | HkCms cross-site scripting | 5.4v3.1 | 0.3% | 2023-09-11 | Fix |
| CVE-2023-40150 | Softneta MedDream PACS exposed dangerous method or function | 9.8v3.1 | 1.0% | 2023-09-11 | Fix |
| CVE-2023-40040 | Mycrops Higrade missing authorization | 5.3v3.1 | 0.5% | 2023-09-11 | |
| CVE-2023-40039 | Arris TG1672G improper access control | 9.8v3.1 | 0.9% | 2023-09-11 | |
| CVE-2023-40032 | Potential segfault due to null pointer dereference in libvips | 5.5CNA v3.1 | 0.3% | 2023-09-11 | Fix |
| CVE-2023-39780 | ASUS RT-AX55 Routers OS command injection | 8.8v3.1 | 40.2% | 2023-09-11 | KEVEmerging Threats |
| CVE-2023-39227 | Softneta MedDream PACS plaintext storage of a password | 7.5v3.1 | 0.3% | 2023-09-11 | Fix |
| CVE-2023-39070 | Cppchecksolutions Cppcheck use-after-free | 7.8v3.1 | 0.3% | 2023-09-11 | Fix |
| CVE-2023-39069 | StrangeBee TheHive improper authentication | 9.8v3.1 | 0.7% | 2023-09-11 | |
| CVE-2023-39068 | Xiongmaitech Nbd80n32ra-kl-v3 buffer overflow | 7.5v3.1 | 0.6% | 2023-09-11 | Fix |
| CVE-2023-39067 | ZLMediaKit ZLMediaKiet v.4.0 and v.5.0 cross-site scripting | 6.1v3.1 | 0.4% | 2023-09-11 | |
| CVE-2023-39063 | Raidenftpd buffer overflow | 7.8v3.1 | 0.4% | 2023-09-11 | Exploit code |
| CVE-2023-38878 | Devcode openstamanager reflected cross-site scripting | 6.1v3.1 | 0.6% | 2023-09-11 | |
| CVE-2023-38829 | Netis Systems WF2409E command injection | 8.8v3.1 | 2.0% | 2023-09-11 | Exploit code |
| CVE-2023-38743 | Zoho ManageEngine ADManager Plus command execution | 7.2v3.1 | 11.6% | 2023-09-11 | Exploit codeFix |
| CVE-2023-38256 | Dover Fueling Solutions MAGLINK LX Console path traversal | 7.5v3.1 | 0.6% | 2023-09-11 | Fix |
| CVE-2023-36980 | ethereum Blockchain incorrect calculation | 5.3v3.1 | 0.4% | 2023-09-11 | |
| CVE-2023-36497 | Dover Fueling Solutions MAGLINK LX Web Console authentication bypass by primary weakness | 8.8v3.1 | 0.5% | 2023-09-11 | Fix |
| CVE-2023-36161 | Quboworld Smart Plug 10A denial of service | 7.5v3.1 | 0.5% | 2023-09-11 | |
| CVE-2023-36140 | PHP Jabbers Cleaning Business Software missing authorization | 9.8v3.1 | 0.4% | 2023-09-11 | |
| CVE-2023-35845 | Anaconda3 improper certificate validation | 4.7v3.1 | 0.1% | 2023-09-11 | |
| CVE-2023-35687 | Google Android MtpProperty.h memory corruption | 7.8v3.1 | 0.2% | 2023-09-11 | Exploit codeFix |
| CVE-2023-35684 | Google Android avdt_msg.cc out-of-bounds write | 8.8v3.1 | 0.1% | 2023-09-11 | Fix |
| CVE-2023-35683 | Google Android DatabaseUtils.java information disclosure | 5.5v3.1 | 0.2% | 2023-09-11 | Fix |
| CVE-2023-35682 | Google Android PackageManagerHelper.java privilege escalation | 7.8v3.1 | 0.1% | 2023-09-11 | Fix |
| CVE-2023-35681 | Google Android eatt_impl.h out-of-bounds write | 9.8v3.1 | 0.5% | 2023-09-11 | Fix |
| CVE-2023-35680 | Google Android multiple locations information disclosure | 5.5v3.1 | 0.1% | 2023-09-11 | Fix |
| CVE-2023-35679 | Google Android MtpProperty.h out-of-bounds read | 5.5v3.1 | 0.1% | 2023-09-11 | Fix |
| CVE-2023-35677 | Google Android DeviceAdminAdd.java denial of service | 5.5v3.1 | 0.1% | 2023-09-11 | Fix |
| CVE-2023-35676 | Google Android SaveImageInBackgroundTask.java privilege escalation | 7.8v3.1 | 0.1% | 2023-09-11 | Fix |
| CVE-2023-35675 | Google Android MediaResumeListener.kt information disclosure | 5.5v3.1 | 0.1% | 2023-09-11 | Fix |
| CVE-2023-35674 | Android Framework privilege escalation | 7.8v3.1 | 2.6% | 2023-09-11 | KEVExploit codeKCVFix |
| CVE-2023-35673 | Google Android gatt_sr.cc out-of-bounds write | 8.8v3.1 | 0.2% | 2023-09-11 | Fix |
| CVE-2023-35671 | Google Android HostEmulationManager.java information disclosure | 5.5NVD v3.1 | 0.2% | 2023-09-11 | Fix |
| CVE-2023-35670 | Google Android FileUtils.java privilege escalation | 7.8v3.1 | 0.1% | 2023-09-11 | Fix |
| CVE-2023-35669 | Google Android AccountManagerService.java privilege escalation | 7.8v3.1 | 0.1% | 2023-09-11 | Fix |
| CVE-2023-35667 | Google Android NotificationAccessSettings.java privilege escalation | 7.8v3.1 | 0.1% | 2023-09-11 | Fix |
| CVE-2023-35666 | Google Android bta_av_act.cc use-after-free | 7.8v3.1 | 0.1% | 2023-09-11 | Fix |
| CVE-2023-35665 | Google Android multiple files privilege escalation | 7.8v3.1 | 0.1% | 2023-09-11 | Fix |
| CVE-2023-35664 | Google Android ShimConverter.cpp out-of-bounds read | 5.5v3.1 | 0.1% | 2023-09-11 | Fix |
| CVE-2023-35658 | Google Android gatt_cl.cc privilege escalation | 8.8v3.1 | 0.2% | 2023-09-11 | Fix |
| CVE-2023-31468 | Inosoft Visiwin 7 incorrect default permissions | 7.8v3.1 | 0.8% | 2023-09-11 | Exploit codeFix |
| CVE-2023-31069 | Tsplus Remote Work cleartext storage of sensitive information | 9.8v3.1 | 3.7% | 2023-09-11 | Exploit code |
| CVE-2023-31068 | Tsplus Remote Work incorrect default permissions | 9.8v3.1 | 5.3% | 2023-09-11 | Exploit code |
| CVE-2023-31067 | TSplus Remote Access incorrect default permissions | 9.8v3.1 | 5.4% | 2023-09-11 | Exploit code |
| CVE-2023-30058 | xxyopen Novel-Plus SQL injection | 9.8v3.1 | 0.8% | 2023-09-11 | |
| CVE-2023-27470 | N-able Take Control time-of-check time-of-use race condition | 7.0v3.1 | 0.5% | 2023-09-11 | Exploit code |
| CVE-2023-4897 | Relative path traversal in mintplex-labs/anything-llm | 9.8v3.1 | 0.8% | 2023-09-11 | Fix |
| CVE-2023-4816 | Hitachi Energy Asset Suite 9 improper authentication | 6.9CNA v3.1 | 0.6% | 2023-09-11 | Fix |
| CVE-2023-4630 | Missing authorization in GitLab | 5.0CNA v3.1 | 0.5% | 2023-09-11 | Fix |
| CVE-2023-4585 | Mozilla memory safety bugs fixed in Firefox 117, Firefox ESR, and Thunderbird | 8.8v3.1 | 0.8% | 2023-09-11 | Fix |
| CVE-2023-4584 | Mozilla Firefox memory safety bugs | 8.8v3.1 | 0.8% | 2023-09-11 | Fix |
| CVE-2023-4583 | Mozilla Firefox browsing Context potentially not cleared when closing Private window | 7.5v3.1 | 0.7% | 2023-09-11 | Fix |
| CVE-2023-4582 | Mozilla Firefox buffer overflow in WebGL glGetProgramiv | 8.8v3.1 | 0.9% | 2023-09-11 | Fix |
| CVE-2023-4581 | Mozilla Firefox XLL file extensions were downloadable without warnings | 4.3v3.1 | 0.6% | 2023-09-11 | Fix |
| CVE-2023-4580 | Mozilla Firefox push notifications saved to disk unencrypted | 6.5v3.1 | 0.4% | 2023-09-11 | Fix |
| CVE-2023-4579 | Mozilla Firefox persisted search terms were formatted as URLs | 3.1v3.1 | 0.5% | 2023-09-11 | Fix |
| CVE-2023-4578 | Mozilla Firefox SpiderMonkey improper error handling | 6.5v3.1 | 0.6% | 2023-09-11 | Fix |
| CVE-2023-4577 | Mozilla Firefox memory corruption in JIT UpdateRegExpStatics | 6.5v3.1 | 0.7% | 2023-09-11 | Fix |
| CVE-2023-4576 | Mozilla Firefox integer overflow in RecordedSourceSurfaceCreation | 8.6v3.1 | 0.8% | 2023-09-11 | Fix |
| CVE-2023-4575 | Mozilla Firefox memory corruption in IPC FilePickerShownCallback | 6.5v3.1 | 0.7% | 2023-09-11 | Fix |
| CVE-2023-4574 | Mozilla Firefox memory corruption in IPC ColorPickerShownCallback | 6.5v3.1 | 0.7% | 2023-09-11 | Fix |
| CVE-2023-4573 | Mozilla Firefox memory corruption in IPC CanvasTranslator | 6.5v3.1 | 0.6% | 2023-09-11 | Fix |
| CVE-2023-4318 | Herd Effects WordPress plugin Effect deletion via CSRF | 4.3NVD v3.1 | 0.3% | 2023-09-11 | Fix |
| CVE-2023-4314 | wpDataTables WordPress plugin Admin+ PHP object injection | 7.2NVD v3.1 | 1.6% | 2023-09-11 | Fix |
| CVE-2023-4307 | Lock User Account WordPress plugin arbitrary account Lock/Unlock via CSRF | 4.3NVD v3.1 | 0.3% | 2023-09-11 | Fix |
| CVE-2023-4294 | URL Shortify WordPress plugin unauthenticated stored XSS via referer header | 6.1NVD v3.1 | 0.8% | 2023-09-11 | Exploit codeFix |
| CVE-2023-4278 | MasterStudy LMS WordPress plugin unauthenticated Instructor account creation | 7.5NVD v3.1 | 6.2% | 2023-09-11 | Exploit codeFix |
| CVE-2023-4270 | Min Max Control WordPress plugin reflected XSS | 6.1NVD v3.1 | 0.5% | 2023-09-11 | Fix |
| CVE-2023-4104 | Mozilla VPN missing authorization | 5.5v3.1 | 0.3% | 2023-09-11 | Fix |
| CVE-2023-4060 | WP Adminify WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2023-09-11 | Fix |
| CVE-2023-4022 | Herd Effects WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2023-09-11 | Fix |
| CVE-2023-3612 | Unprotected WebView access in Govee Home App | 8.8v3.1 | 0.4% | 2023-09-11 | Fix |
| CVE-2023-3510 | FTP Access WordPress plugin Subscriber+ stored XSS | 5.4NVD v3.1 | 0.2% | 2023-09-11 | |
| CVE-2023-3170 | tagDiv Composer WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.4% | 2023-09-11 | Fix |
| CVE-2023-3169 | tagDiv Composer WordPress plugin unauthenticated stored XSS | 6.1NVD v3.1 | 1.3% | 2023-09-11 | NucleiFix |
| CVE-2023-2705 | gAppointments reflected cross-site scripting | 6.1NVD v3.1 | 0.5% | 2023-09-11 | Fix |
| CVE-2023-4879 | Cross-site scripting (XSS) Stored in instantsoft/icms2 | 4.8v3.1 | 0.3% | 2023-09-10 | Fix |
| CVE-2023-4878 | Server-side request forgery (SSRF) in instantsoft/icms2 | 5.4v3.1 | 0.3% | 2023-09-10 | Fix |
| CVE-2023-4877 | Exposure of sensitive information to an unauthorized actor in hamza417/Inure | 7.5v3.1 | 0.4% | 2023-09-10 | Fix |
| CVE-2023-4876 | Exposure of sensitive information to an unauthorized actor in hamza417/Inure | 7.5v3.1 | 0.4% | 2023-09-10 | Fix |
| CVE-2023-4873 | Byzoro Smart S45F Multi-Service Secure Gateway importexport.php OS command injection | 9.8v3.1 | 22.0% | 2023-09-10 | |
| CVE-2023-4872 | SourceCodester Contact Manager App add.php SQL injection | 9.8v3.1 | 0.7% | 2023-09-10 | |
| CVE-2023-4871 | SourceCodester Contact Manager App delete.php SQL injection | 9.8v3.1 | 0.7% | 2023-09-10 | |
| CVE-2023-4870 | SourceCodester Contact Manager App Contact Information index.php cross-site scripting | 6.1v3.1 | 0.6% | 2023-09-10 | |
| CVE-2023-4869 | SourceCodester Contact Manager App update.php cross-site request forgery | 8.8v3.1 | 0.4% | 2023-09-10 | |
| CVE-2023-4868 | SourceCodester Contact Manager App add.php cross-site request forgery | 8.8v3.1 | 0.4% | 2023-09-10 | |
| CVE-2023-4867 | Xintian Smart Table Integrated Management System Added Site Page AddUpdateSites.aspx SQL injection | 8.8v3.1 | 0.6% | 2023-09-10 | |
| CVE-2023-4866 | SourceCodester Online Tours and Travels Management System booking.php exec SQL injection | 9.8v3.1 | 0.6% | 2023-09-10 | |
| CVE-2023-41915 | Openpmix race condition | 8.1v3.1 | 1.1% | 2023-09-09 | Fix |
| CVE-2023-4875 | Undefined behavior for Input to API in Mutt | 2.2CNA v3.1 | 0.6% | 2023-09-09 | Fix |
| CVE-2023-4874 | Undefined behavior for Input to API in Mutt | 4.3CNA v3.1 | 0.8% | 2023-09-09 | Fix |
| CVE-2023-4865 | SourceCodester Take-Note App cross-site request forgery | 8.8v3.1 | 0.4% | 2023-09-09 | |
| CVE-2023-4864 | SourceCodester Take-Note App index.php cross-site scripting | 6.1v3.1 | 0.5% | 2023-09-09 | |
| CVE-2023-4852 | IBOS OA optimize SQL injection | 9.8v3.1 | 0.6% | 2023-09-09 | |
| CVE-2023-4851 | IBOS OA edit&op=member SQL injection | 9.8v3.1 | 0.6% | 2023-09-09 | |
| CVE-2023-4850 | IBOS OA del SQL injection | 9.8v3.1 | 0.6% | 2023-09-09 | |
| CVE-2023-4849 | IBOS OA trash&op=del SQL injection | 9.8v3.1 | 0.6% | 2023-09-09 | |
| CVE-2023-4848 | SourceCodester Simple Book Catalog App delete_book.php SQL injection | 9.8v3.1 | 0.8% | 2023-09-09 | |
| CVE-2023-4847 | SourceCodester Simple Book Catalog App Update Book form cross-site scripting | 6.1v3.1 | 0.6% | 2023-09-09 | Fix |
| CVE-2023-4846 | SourceCodester Simple Membership System delete_member.php SQL injection | 7.5v3.1 | 0.5% | 2023-09-09 | |
| CVE-2023-4845 | SourceCodester Simple Membership System account_edit_query.php SQL injection | 9.8v3.1 | 0.6% | 2023-09-09 | |
| CVE-2023-4838 | Simple Download Counter WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2023-09-09 | Fix |
| CVE-2023-42278 | Hutool buffer overflow | 7.5v3.1 | 0.7% | 2023-09-08 | Fix |
| CVE-2023-42277 | Hutool buffer overflow | 9.8v3.1 | 0.8% | 2023-09-08 | |
| CVE-2023-42276 | Hutool buffer overflow | 9.8v3.1 | 0.8% | 2023-09-08 | |
| CVE-2023-42268 | Jeecg boot SQL injection | 9.8v3.1 | 0.7% | 2023-09-08 | |
| CVE-2023-41775 | L is B 'direct' Desktop App for macOS improper access control | 5.5v3.1 | 0.2% | 2023-09-08 | Fix |
| CVE-2023-41615 | PHPGurukul Zoo Management System SQL injection | 9.8v3.1 | 0.8% | 2023-09-08 | |
| CVE-2023-41594 | PHPGurukul Dairy Farm Shop Management System SQL injection | 7.5v3.1 | 0.8% | 2023-09-08 | |
| CVE-2023-41578 | Jeecg boot arbitrary file read | 7.5v3.1 | 0.8% | 2023-09-08 | |
| CVE-2023-41575 | PHPGurukul Blood Bank and Donor Management System Multiple stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-09-08 | Exploit code |
| CVE-2023-41564 | Cockpit CMS arbitrary file upload | 6.1v3.1 | 1.0% | 2023-09-08 | Exploit code |
| CVE-2023-41338 | Fiber unauthorized access vulnerability in `ctx.IsFromLocal` | 5.3CNA v3.1 | 0.7% | 2023-09-08 | Fix |
| CVE-2023-41318 | Unsafe media served inline on download endpoints in matrix-media-repo | 4.1CNA v3.1 | 0.5% | 2023-09-08 | Fix |
| CVE-2023-40953 | Idreamsoft iCMS cross-site request forgery | 8.8v3.1 | 0.2% | 2023-09-08 | |
| CVE-2023-40924 | Contec SolarView Compact path traversal | 7.5v3.1 | 2.9% | 2023-09-08 | NucleiExploit code |
| CVE-2023-40353 | Samsung Exynos 2100 integer overflow | 3.3v3.1 | 0.2% | 2023-09-08 | Fix |
| CVE-2023-40306 | URL redirection vulnerability in SAP S/4hana (Manage Catalog Items and Cross-Catalog search) | 6.1CNA v3.1 | 0.4% | 2023-09-08 | Fix |
| CVE-2023-40271 | Trusted Firmware-M incorrect comparison | 7.5v3.1 | 0.3% | 2023-09-08 | Fix |
| CVE-2023-39712 | Multiple cross-site scripting (XSS) vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name, Address, and Company parameters under the Add New Put section. | 6.1v3.1 | 0.6% | 2023-09-08 | Exploit code |
| CVE-2023-39676 | Fieldthemes Fieldpopupnewsletter cross-site scripting | 6.1v3.1 | 1.3% | 2023-09-08 | Nuclei |
| CVE-2023-39620 | Buffalo Terastation Nas 5410r information disclosure | 7.5v3.1 | 0.7% | 2023-09-08 | |
| CVE-2023-39584 | Hexo `include_code` has a path traversal | 7.5v3.1 | 34.5% | 2023-09-08 | Fix |
| CVE-2023-39322 | Memory exhaustion in QUIC connection handling in crypto/tls | 7.5v3.1 | 1.1% | 2023-09-08 | Fix |
| CVE-2023-39321 | Panic when processing post-handshake message on QUIC connections in crypto/tls | 7.5v3.1 | 1.1% | 2023-09-08 | Fix |
| CVE-2023-39320 | Arbitrary code execution via go.mod toolchain directive in cmd/go | 9.8v3.1 | 1.4% | 2023-09-08 | Exploit codeFix |
| CVE-2023-39319 | Improper handling of special tags within script contexts in html/template | 6.1v3.1 | 0.8% | 2023-09-08 | Fix |
| CVE-2023-39318 | Improper handling of HTML-like comments in script contexts in html/template | 6.1v3.1 | 0.8% | 2023-09-08 | Fix |
| CVE-2023-39076 | Gm Chevrolet Equinox denial of service | 4.6v3.1 | 0.3% | 2023-09-08 | |
| CVE-2023-38736 | IBM QRadar WinCollect Agent privilege escalation | 7.5CNA v3.1 | 0.4% | 2023-09-08 | Fix |
| CVE-2023-37759 | Trendylogics Crypto Currency Tracker improper access control | 9.8v3.1 | 7.0% | 2023-09-08 | Exploit code |
| CVE-2023-37377 | Samsung Exynos 2100 out-of-bounds read | 7.5v3.1 | 0.3% | 2023-09-08 | Fix |
| CVE-2023-37368 | Samsung Exynos Auto T5123 null pointer dereference | 7.5v3.1 | 0.5% | 2023-09-08 | Fix |
| CVE-2023-37367 | Samsung Exynos Auto T5123 incorrect authorization | 5.3v3.1 | 0.4% | 2023-09-08 | Fix |
| CVE-2023-36184 | Mystenlabs Sui out-of-bounds write | 7.5v3.1 | 0.9% | 2023-09-08 | |
| CVE-2023-34041 | Abuse of HTTP Hop-by-Hop headers in Cloud Foundry Gorouter | 5.3CNA v3.1 | 0.4% | 2023-09-08 | Fix |
| CVE-2023-32470 | Dell Digital Delivery denial of service | 5.0CNA v3.1 | 0.2% | 2023-09-08 | Fix |
| CVE-2023-32332 | IBM Maximo Application Suite and IBM Maximo Asset Management HTML injection | 5.4CNA v3.1 | 0.6% | 2023-09-08 | Fix |
| CVE-2023-30995 | IBM Aspera Faspex improper access control | 7.5CNA v3.1 | 0.9% | 2023-09-08 | Fix |
| CVE-2023-28010 | HCL Domino is susceptible to a sensitive information disclosure | 4.0CNA v3.1 | 0.4% | 2023-09-08 | Fix |
| CVE-2023-24965 | IBM Aspera Faspex improper access control | 5.8CNA v3.1 | 0.5% | 2023-09-08 | Fix |
| CVE-2023-4844 | SourceCodester Simple Membership System club_edit_query.php SQL injection | 7.5v3.1 | 0.5% | 2023-09-08 | |
| CVE-2023-4843 | Pegasystems Pega Platform HTML injection | 4.3CNA v3.1 | 0.3% | 2023-09-08 | Fix |
| CVE-2023-4807 | OpenSSL POLY1305 MAC implementation corrupts XMM registers on Windows | 7.8NVD v3.1 | 1.6% | 2023-09-08 | Fix |
| CVE-2023-4782 | Terraform allows arbitrary file write during Init Operation | 6.3CNA v3.1 | 0.3% | 2023-09-08 | Fix |
| CVE-2023-4777 | Incorrect permission assignment on Qualys Container Scanning Connector Plugin | 3.1CNA v3.1 | 0.4% | 2023-09-08 | |
| CVE-2023-41646 | Buttercup allows attackers to obtain the hash of the master password | 5.3v3.1 | 0.4% | 2023-09-07 | Fix |
| CVE-2023-41316 | HTML injection with email in Tolgee | 5.5CNA v3.1 | 0.5% | 2023-09-07 | Fix |
| CVE-2023-41161 | Webmin Usermin Multiple stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-09-07 | Fix |
| CVE-2023-41064 | Apple iOS, iPadOS, and macOS ImageIO buffer overflow | 7.8v3.1 | 53.4% | 2023-09-07 | KEVExploit codeKCVFix |
| CVE-2023-41061 | Apple iOS, iPadOS, and watchOS Wallet code execution | 7.8v3.1 | 3.8% | 2023-09-07 | KEVKCVFix |
| CVE-2023-40942 | Tendacn AC9 out-of-bounds write | 9.8v3.1 | 0.7% | 2023-09-07 | |
| CVE-2023-40584 | argoproj argo-cd denial of service to Argo CD repo-server | 6.5CNA v3.1 | 1.4% | 2023-09-07 | Fix |
| CVE-2023-40060 | 2FA/MFA Bypass vulnerability in Serv-U and Hotfix 1 | 7.2CNA v3.1 | 1.0% | 2023-09-07 | Fix |
| CVE-2023-40029 | argoproj argo-cd cluster secret might leak in cluster details page in Argo CD | 9.9CNA v3.1 | 1.2% | 2023-09-07 | Exploit codeFix |
| CVE-2023-39711 | Multiple cross-site scripting (XSS) vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Subtotal and Paidbill parameters under the Add New Put section. | 6.1v3.1 | 0.5% | 2023-09-07 | Exploit code |
| CVE-2023-39424 | Resort Data Processing IRM Next Generation RDPngFileUpload.dll injection | 8.8NVD v3.1 | 1.0% | 2023-09-07 | |
| CVE-2023-39423 | Resort Data Processing IRM Next Generation RDPData.dll SQL injection | 9.1NVD v3.1 | 0.6% | 2023-09-07 | |
| CVE-2023-39422 | Resort Data Processing IRM Next Generation irmdata API endpoints hard-coded credentials | 9.8NVD v3.1 | 0.4% | 2023-09-07 | |
| CVE-2023-39421 | Resort Data Processing IRM Next Generation use of hard-coded credentials in RDPWin.dll | 7.7NVD v3.1 | 0.5% | 2023-09-07 | |
| CVE-2023-39420 | Resort Data Processing IRM Next Generation use of hard-coded credentials in RDPCore.dll | 8.8NVD v3.1 | 0.7% | 2023-09-07 | |
| CVE-2023-39240 | ASUS RT-AX55、RT-AX56U_V2 format string 3 | 7.2CNA v3.1 | 1.3% | 2023-09-07 | Fix |
| CVE-2023-39239 | ASUS RT-AX55、RT-AX56U_V2、RT-AC86U format string 2 | 7.2CNA v3.1 | 1.3% | 2023-09-07 | |
| CVE-2023-39238 | ASUS RT-AX55、RT-AX56U_V2 format string 1 | 7.2CNA v3.1 | 1.4% | 2023-09-07 | Fix |
| CVE-2023-39237 | ASUS RT-AC86U command injection vulnerability 5 | 8.8CNA v3.1 | 1.4% | 2023-09-07 | Fix |
| CVE-2023-39236 | ASUS RT-AC86U command injection vulnerability 4 | 8.8CNA v3.1 | 1.4% | 2023-09-07 | Fix |
| CVE-2023-38033 | ASUS RT-AC86U command injection vulnerability 3 | 8.8CNA v3.1 | 1.4% | 2023-09-07 | Fix |
| CVE-2023-38032 | ASUS RT-AC86U command injection vulnerability 2 | 8.8CNA v3.1 | 1.4% | 2023-09-07 | Fix |
| CVE-2023-38031 | ASUS RT-AC86U command injection vulnerability 1 | 8.8v3.1 | 1.1% | 2023-09-07 | Fix |
| CVE-2023-37798 | Vanderbilt REDCap new REDCap project creation function stored cross-site scripting | 5.4v3.1 | 0.3% | 2023-09-07 | |
| CVE-2023-36635 | Fortinet FortiSwitchManager improper access control | 6.9CNA v3.1 | 0.5% | 2023-09-07 | |
| CVE-2023-34357 | Soar Cloud Ltd. HR Portal weak password recovery mechanism for forgotten password | 7.8CNA v3.1 | 0.2% | 2023-09-07 | Fix |
| CVE-2023-30908 | HPE OneView remote authentication bypass | 9.8CNA v3.1 | 1.4% | 2023-09-07 | Fix |
| CVE-2023-30800 | MikroTik RouterOS Web Interface Heap Corruption | 7.5v3.1 | 1.7% | 2023-09-07 | Exploit code |
| CVE-2023-20194 | Cisco Identity Services Engine Software improper privilege management | 4.9CNA v3.1 | 0.7% | 2023-09-07 | Fix |
| CVE-2023-20193 | Cisco Identity Services Engine Software OS command injection | 6.0CNA v3.1 | 0.2% | 2023-09-07 | Fix |
| CVE-2023-4815 | Missing authentication for critical function in answerdev/Answer | 8.8v3.1 | 0.7% | 2023-09-07 | Fix |
| CVE-2023-4792 | Inqsys Technology Duplicate Post Page Menu and Custom Post Type missing authorization | 4.3CNA v3.1 | 0.5% | 2023-09-07 | Fix |
| CVE-2023-4772 | Newsletter WordPress plugin authenticated (Contributor+) stored cross-site scripting via shortcode | 5.4v3.1 | 0.4% | 2023-09-07 | Fix |
| CVE-2023-4685 | Delta Industrial Automation CNCSoft-B DOPSoft stack-based buffer overflow | 7.8v3.1 | 0.2% | 2023-09-07 | Fix |
| CVE-2023-4528 | Jscape Mft Server unsafe deserialization on Management Port | 7.2NVD v3.1 | 31.9% | 2023-09-07 | Fix |
| CVE-2023-3747 | Insufficient Validation on Override Codes for Always-Enabled WARP Mode | 5.5CNA v3.1 | 0.2% | 2023-09-07 | Fix |
| CVE-2023-41947 | Missing permission checks in Jenkins Frugal Testing Plugin | 4.3v3.1 | 0.4% | 2023-09-06 | Fix |
| CVE-2023-41946 | CSRF vulnerability in Jenkins Frugal Testing Plugin | 3.5v3.1 | 0.3% | 2023-09-06 | Fix |
| CVE-2023-41945 | Disabled permissions granted by Jenkins Assembla Auth Plugin | 8.8v3.1 | 0.6% | 2023-09-06 | Fix |
| CVE-2023-41944 | HTML injection vulnerability in Jenkins AWS CodeCommit Trigger Plugin | 6.1v3.1 | 0.4% | 2023-09-06 | Fix |
| CVE-2023-41943 | Missing permission check in Jenkins AWS CodeCommit Trigger Plugin | 6.5v3.1 | 0.5% | 2023-09-06 | Fix |
| CVE-2023-41942 | CSRF vulnerability in Jenkins AWS CodeCommit Trigger Plugin | 4.3v3.1 | 0.3% | 2023-09-06 | Fix |
| CVE-2023-41941 | Missing permission check in Jenkins AWS CodeCommit Trigger Plugin allows enumerating credentials IDs | 4.3v3.1 | 0.4% | 2023-09-06 | Fix |
| CVE-2023-41940 | Stored XSS vulnerability in Jenkins TAP Plugin | 5.4v3.1 | 0.5% | 2023-09-06 | Fix |
| CVE-2023-41939 | Disabled permissions can be granted by Jenkins SSH2 Easy Plugin | 8.8v3.1 | 0.6% | 2023-09-06 | Fix |
| CVE-2023-41938 | CSRF vulnerability in Jenkins Ivy Plugin | 6.5v3.1 | 0.3% | 2023-09-06 | Fix |
| CVE-2023-41937 | SSRF vulnerability in Jenkins Bitbucket Push And Pull Request Plugin allows capturing credentials | 7.5v3.1 | 0.6% | 2023-09-06 | Fix |
| CVE-2023-41936 | Jenkins Google Login Plugin non-constant time token comparison | 7.5v3.1 | 0.7% | 2023-09-06 | Fix |
| CVE-2023-41935 | Non-constant time nonce comparison in Jenkins Microsoft Entra ID (previously Azure AD) Plugin | 7.5v3.1 | 0.7% | 2023-09-06 | Fix |
| CVE-2023-41934 | Improper masking of credentials in Jenkins Pipeline MAVEN Integration Plugin | 5.3v3.1 | 0.5% | 2023-09-06 | Fix |
| CVE-2023-41933 | Job Configuration History Plugin's path traversal allows exploiting XXE | 8.8v3.1 | 0.8% | 2023-09-06 | Fix |
| CVE-2023-41932 | Path traversal allows exploiting XXE vulnerability in Jenkins Job Configuration History Plugin | 6.5v3.1 | 0.6% | 2023-09-06 | Fix |
| CVE-2023-41931 | XSS vulnerability in Jenkins Job Configuration History Plugin | 5.4v3.1 | 0.4% | 2023-09-06 | Fix |
| CVE-2023-41930 | Path traversal in Jenkins Job Configuration History Plugin | 4.3v3.1 | 0.8% | 2023-09-06 | Fix |
| CVE-2023-41601 | CSZ CMS install/index.php cross-site scripting | 6.1v3.1 | 0.4% | 2023-09-06 | |
| CVE-2023-41330 | Unsafe deserialization in KnpLabs/knp-snappy | 9.8CNA v3.1 | 2.3% | 2023-09-06 | Fix |
| CVE-2023-41329 | Domain restrictions bypass via DNS Rebinding in WireMock and WireMock Studio | 3.9CNA v3.1 | 0.6% | 2023-09-06 | Fix |
| CVE-2023-41328 | Possibility limited SQL injection due to insufficient validation in Frappe | 4.2CNA v3.1 | 0.5% | 2023-09-06 | Fix |
| CVE-2023-41327 | Controlled SSRF through URL in the WireMock | 4.6CNA v3.1 | 0.5% | 2023-09-06 | Fix |
| CVE-2023-41319 | Remote code execution in Custom Integration upload in Fides | 8.8CNA v3.1 | 0.9% | 2023-09-06 | Fix |
| CVE-2023-41150 | Thinkingreed F-RevoCRM cross-site scripting | 5.4v3.1 | 0.3% | 2023-09-06 | Fix |
| CVE-2023-41149 | Thinkingreed F-RevoCRM OS command injection | 9.8v3.1 | 1.3% | 2023-09-06 | Fix |
| CVE-2023-41053 | Redis SORT_RO may bypass ACL configuration | 3.3CNA v3.1 | 0.3% | 2023-09-06 | Fix |
| CVE-2023-41050 | Information disclosure through Python's format functionality in Zope AccessControl | 6.8CNA v3.1 | 0.6% | 2023-09-06 | Fix |
| CVE-2023-40601 | Mortgage Calculator Estatik WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-09-06 | |
| CVE-2023-40591 | Denial of service via malicious p2p message in go-ethereum | 7.5CNA v3.1 | 1.1% | 2023-09-06 | Fix |
| CVE-2023-40560 | Schedule Posts Calendar WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-09-06 | Fix |
| CVE-2023-40554 | Blog2Social WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-09-06 | Fix |
| CVE-2023-40553 | Plausible Analytics WordPress plugin cross-site scripting (XSS) | 6.1v3.1 | 0.3% | 2023-09-06 | Fix |
| CVE-2023-40552 | Fitness calculators WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-09-06 | Fix |
| CVE-2023-40531 | TP-Link Archer AX6000 OS command injection | 8.0v3.1 | 0.4% | 2023-09-06 | Fix |
| CVE-2023-40397 | Apple macOS code execution | 9.8v3.1 | 1.6% | 2023-09-06 | Fix |
| CVE-2023-40392 | Apple macOS sensitive information in log files | 3.3v3.1 | 0.2% | 2023-09-06 | Fix |
| CVE-2023-40357 | TP-Link Archer AX50 OS command injection | 8.0v3.1 | 0.5% | 2023-09-06 | Fix |
| CVE-2023-40329 | Custom Admin Login Page WPZest WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-09-06 | |
| CVE-2023-40328 | WordPress Carrot plugin stored cross-site scripting | 4.8v3.1 | 0.4% | 2023-09-06 | |
| CVE-2023-40193 | TP-Link Deco M4 OS command injection | 8.0v3.1 | 0.4% | 2023-09-06 | Fix |
| CVE-2023-40007 | CT Commerce WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-09-06 | |
| CVE-2023-39967 | wiremock full read and controlled SSRF | 10.0CNA v3.1 | 1.0% | 2023-09-06 | |
| CVE-2023-39956 | Electron: Out-of-package code execution when launched with arbitrary cwd | 6.1CNA v3.1 | 0.5% | 2023-09-06 | Fix |
| CVE-2023-39935 | TP-Link Archer C5400 OS command injection | 8.0v3.1 | 0.4% | 2023-09-06 | Fix |
| CVE-2023-39511 | Stored cross-site-scripting on reports_admin.php device name in Cacti | 6.1CNA v3.1 | 0.8% | 2023-09-06 | Fix |
| CVE-2023-39265 | Apache Superset: Possible Unauthorized Registration of SQLite Database Connections | 3.8CNA v3.1 | 86.0% | 2023-09-06 | MetasploitExploit codeKCVFix |
| CVE-2023-39264 | Apache Superset: Stack traces enabled by default | 4.3CNA v3.1 | 1.1% | 2023-09-06 | Fix |
| CVE-2023-39224 | TP-Link Archer C5 OS command injection | 8.0v3.1 | 0.4% | 2023-09-06 | Fix |
| CVE-2023-38616 | Apple macOS race condition | 7.0v3.1 | 0.1% | 2023-09-06 | Fix |
| CVE-2023-38605 | This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Ventura 13.5. An app may be able to determine a user’s current location. | 3.3v3.1 | 0.2% | 2023-09-06 | Fix |
| CVE-2023-38588 | TP-Link Archer C3150 OS command injection | 8.0v3.1 | 0.4% | 2023-09-06 | Fix |
| CVE-2023-38568 | TP-Link Archer A10 OS command injection | 8.8v3.1 | 0.5% | 2023-09-06 | Fix |
| CVE-2023-38563 | TP-Link Archer C1200 OS command injection | 8.8v3.1 | 0.5% | 2023-09-06 | Fix |
| CVE-2023-38486 | Hardware Root of Trust Bypass in 9200 and 9000 Series Controllers and Gateways | 7.7CNA v3.1 | 0.3% | 2023-09-06 | Fix |
| CVE-2023-38485 | 9200 and 9000 Series Controllers and Gateways BIOS out-of-bounds write | 8.0CNA v3.1 | 0.4% | 2023-09-06 | Fix |
| CVE-2023-38484 | 9200 and 9000 Series Controllers and Gateways BIOS code injection | 8.0CNA v3.1 | 0.4% | 2023-09-06 | Fix |
| CVE-2023-37941 | Apache Superset: Metadata db write access can lead to remote code execution | 6.6CNA v3.1 | 35.5% | 2023-09-06 | MetasploitExploit codeKCVFix |
| CVE-2023-37284 | TP-Link Archer C20 Firmware improper authentication | 8.8v3.1 | 0.4% | 2023-09-06 | Fix |
| CVE-2023-36489 | TP-Link TL-WR802N OS command injection | 8.8v3.1 | 0.5% | 2023-09-06 | Fix |
| CVE-2023-36388 | Apache Superset: Improper API permission for low privilege users allows for SSRF | 4.3CNA v3.1 | 1.1% | 2023-09-06 | Fix |
| CVE-2023-36387 | Apache Superset: Improper API permission for low privilege users | 5.4CNA v3.1 | 1.1% | 2023-09-06 | Fix |
| CVE-2023-35719 | Zoho ManageEngine ADSelfService Plus GINA client authentication bypass | 6.8v3.1 | 24.6% | 2023-09-06 | Fix |
| CVE-2023-34352 | Apple macOS incorrect default permissions | 5.3v3.1 | 0.6% | 2023-09-06 | Fix |
| CVE-2023-32672 | Apache Superset: SQL parser edge case bypasses data access authorization | 4.3CNA v3.1 | 1.0% | 2023-09-06 | Fix |
| CVE-2023-32619 | TP-Link Archer C50 hard-coded credentials | 8.8v3.1 | 0.4% | 2023-09-06 | Fix |
| CVE-2023-32438 | Apple tvOS unauthorized access | 5.5v3.1 | 0.2% | 2023-09-06 | Fix |
| CVE-2023-32432 | Apple iOS, iPadOS, macOS, tvOS and watchOS temporary file handling information disclosure | 5.5v3.1 | 0.2% | 2023-09-06 | Fix |
| CVE-2023-32428 | Apple macOS privilege escalation | 7.8v3.1 | 0.6% | 2023-09-06 | Exploit codeFix |
| CVE-2023-32426 | Apple macOS improper privilege management | 7.8v3.1 | 0.2% | 2023-09-06 | Fix |
| CVE-2023-32425 | Apple watchOS privilege escalation | 7.8v3.1 | 0.2% | 2023-09-06 | Fix |
| CVE-2023-32379 | Apple macOS buffer overflow | 7.8v3.1 | 0.2% | 2023-09-06 | Fix |
| CVE-2023-32370 | Apple macOS logic flaw | 5.3v3.1 | 0.6% | 2023-09-06 | Fix |
| CVE-2023-32362 | Apple macOS information disclosure | 6.5v3.1 | 0.4% | 2023-09-06 | Fix |
| CVE-2023-32356 | Apple macOS buffer overflow | 7.8v3.1 | 0.2% | 2023-09-06 | Fix |
| CVE-2023-32163 | Wacom Drivers for Windows link following local privilege escalation | 7.8v3.1 | 0.4% | 2023-09-06 | Exploit code |
| CVE-2023-32162 | Wacom Drivers for Windows incorrect permission assignment local privilege escalation | 7.8v3.1 | 0.4% | 2023-09-06 | Exploit code |
| CVE-2023-31188 | TP-Link Archer C50 OS command injection | 8.0v3.1 | 0.5% | 2023-09-06 | Fix |
| CVE-2023-30730 | Implicit intent hijacking vulnerability in Camera prior to versions 11.0.16.43 in Android 11, 12.1.00.30, 12.0.07.53, 12.1.03.10 in Android 12, and 13.0.01.43, 13.1.00.83 in Android 13 allows local attacker to access specific file. | 3.3CNA v3.1 | 0.2% | 2023-09-06 | Fix |
| CVE-2023-30729 | Samsung Mobile Samsung Email improper certificate validation | 8.1CNA v3.1 | 0.4% | 2023-09-06 | Fix |
| CVE-2023-30728 | Intent redirection vulnerability in PackageInstallerCHN prior to version 13.1.03.00 allows local attacker to access arbitrary file. This vulnerability requires user interaction. | 4.4CNA v3.1 | 0.2% | 2023-09-06 | Fix |
| CVE-2023-30726 | PendingIntent hijacking vulnerability in GameLauncher prior to version 4.2.59.5 allows local attackers to access data. | 4.7CNA v3.1 | 0.1% | 2023-09-06 | Fix |
| CVE-2023-30725 | Samsung Mobile Gallery LocalProvier improper authentication | 5.1CNA v3.1 | 0.2% | 2023-09-06 | Fix |
| CVE-2023-30724 | Samsung Mobile Gallery improper authentication | 4.0CNA v3.1 | 0.2% | 2023-09-06 | Fix |
| CVE-2023-30723 | Samsung Mobile Samsung Health improper input validation | 5.5CNA v3.1 | 0.4% | 2023-09-06 | Fix |
| CVE-2023-30722 | Samsung Mobile Samsung Blockchain Keystore bc_tui trustlet protection mechanism failure | 5.5CNA v3.1 | 0.2% | 2023-09-06 | Fix |
| CVE-2023-30721 | Samsung Mobile Devices sensitive information in log files | 4.4CNA v3.1 | 0.2% | 2023-09-06 | Fix |
| CVE-2023-30720 | Samsung Android LmsAssemblyTrackerCTC vulnerability | 4.7CNA v3.1 | 0.1% | 2023-09-06 | Fix |
| CVE-2023-30719 | Samsung Mobile Devices InboundSmsHandler information disclosure | 4.0CNA v3.1 | 0.2% | 2023-09-06 | Fix |
| CVE-2023-30718 | Samsung Mobile Devices improper export of Android application components | 4.0CNA v3.1 | 0.1% | 2023-09-06 | Fix |
| CVE-2023-30717 | Samsung Mobile Devices SVCAgent information disclosure | 4.0CNA v3.1 | 0.2% | 2023-09-06 | Fix |
| CVE-2023-30716 | Samsung Mobile Devices SVCAgent improper access control | 4.0CNA v3.1 | 0.2% | 2023-09-06 | Fix |
| CVE-2023-30715 | Samsung Mobile Devices Weather improper access control | 4.0CNA v3.1 | 0.2% | 2023-09-06 | Fix |
| CVE-2023-30714 | Samsung Mobile Devices FolderContainerDragDelegate in One UI Home improper authorization | 4.6CNA v3.1 | 0.2% | 2023-09-06 | Fix |
| CVE-2023-30713 | Samsung Mobile Devices FolderLockNotifier in One UI Home improper privilege management | 6.2CNA v3.1 | 0.1% | 2023-09-06 | Fix |
| CVE-2023-30712 | Samsung Mobile Devices Settings Suggestions improper input validation | 6.8CNA v3.1 | 0.2% | 2023-09-06 | Fix |
| CVE-2023-30711 | Samsung Mobile Devices improper authentication | 4.0CNA v3.1 | 0.2% | 2023-09-06 | Fix |
| CVE-2023-30710 | Samsung Mobile Devices Knox AI improper input validation | 8.5CNA v3.1 | 0.2% | 2023-09-06 | Fix |
| CVE-2023-30709 | Samsung Mobile Devices Dual Messenger improper access control | 7.9CNA v3.1 | 0.2% | 2023-09-06 | Fix |
| CVE-2023-30708 | Samsung Mobile Devices SecSettings improper authentication | 4.6CNA v3.1 | 0.6% | 2023-09-06 | Fix |
| CVE-2023-30707 | Samsung Mobile Devices FileProviderStatusReceiver improper input validation | 4.0CNA v3.1 | 0.2% | 2023-09-06 | Fix |
| CVE-2023-30706 | Samsung Mobile Devices improper authorization | 7.5CNA v3.1 | 0.5% | 2023-09-06 | Fix |
| CVE-2023-30497 | LINE Notify WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-09-06 | Fix |
| CVE-2023-29441 | WebLibrarian WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-09-06 | Fix |
| CVE-2023-29198 | Context isolation bypass via nested unserializable return value in Electron | 6.0CNA v3.1 | 0.6% | 2023-09-06 | Fix |
| CVE-2023-29166 | Apple Pro Video Formats improper privilege management | 8.8v3.1 | 0.6% | 2023-09-06 | Fix |
| CVE-2023-28215 | Apple macOS buffer overflow | 7.8v3.1 | 0.2% | 2023-09-06 | Fix |
| CVE-2023-28214 | Apple macOS buffer overflow | 7.8v3.1 | 0.2% | 2023-09-06 | Fix |
| CVE-2023-28213 | Apple macOS buffer overflow | 7.8v3.1 | 0.2% | 2023-09-06 | Fix |
| CVE-2023-28212 | Apple macOS buffer overflow | 7.8v3.1 | 0.2% | 2023-09-06 | Fix |
| CVE-2023-28211 | Apple macOS buffer overflow | 7.8v3.1 | 0.2% | 2023-09-06 | Fix |
| CVE-2023-28210 | Apple macOS buffer overflow | 7.8v3.1 | 0.2% | 2023-09-06 | Fix |
| CVE-2023-28209 | Apple macOS buffer overflow | 7.8v3.1 | 0.2% | 2023-09-06 | Fix |
| CVE-2023-28208 | Apple macOS logic flaw | 4.3v3.1 | 0.3% | 2023-09-06 | Fix |
| CVE-2023-28195 | Apple macOS information disclosure | 3.3v3.1 | 0.2% | 2023-09-06 | Fix |
| CVE-2023-28188 | Apple macOS denial of service | 6.5v3.1 | 0.6% | 2023-09-06 | Fix |
| CVE-2023-28187 | Apple macOS denial of service | 6.5v3.1 | 0.6% | 2023-09-06 | Fix |
| CVE-2023-27950 | Apple macOS out-of-bounds read | 5.5v3.1 | 0.2% | 2023-09-06 | Fix |
| CVE-2023-27526 | Apache Superset: Improper authorization check on import charts | 4.3CNA v3.1 | 1.2% | 2023-09-06 | Fix |
| CVE-2023-27523 | Apache Superset: Improper data permission validation on Jinja templated queries | 5.0CNA v3.1 | 1.0% | 2023-09-06 | Fix |
| CVE-2023-23623 | Electron sandboxed renderers vulnerability | 7.5CNA v3.1 | 0.7% | 2023-09-06 | Fix |
| CVE-2023-20269 | Cisco Adaptive Security Appliance and Firepower Threat Defense unauthorized access | 5.0CNA v3.1 | 25.5% | 2023-09-06 | KEVFix |
| CVE-2023-20263 | Cisco HyperFlex HX Data Platform open redirect | 4.7CNA v3.1 | 0.6% | 2023-09-06 | Fix |
| CVE-2023-20250 | Cisco Small Business RV Series Router Firmware stack-based buffer overflow | 6.5CNA v3.1 | 1.0% | 2023-09-06 | Fix |
| CVE-2023-20243 | Cisco Identity Services Engine Software resource management error | 8.6CNA v3.1 | 0.9% | 2023-09-06 | Fix |
| CVE-2023-20238 | Cisco BroadWorks improper authentication | 10.0CNA v3.1 | 15.1% | 2023-09-06 | Fix |
| CVE-2023-4809 | FreeBSD pf incorrectly handles multiple IPv6 fragment headers | 7.5v3.1 | 0.7% | 2023-09-06 | Fix |
| CVE-2023-4779 | User Submitted Posts WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2023-09-06 | Fix |
| CVE-2023-4773 | WordPress Social Login plugin authenticated (Contributor+) stored cross-site scripting via shortcode | 6.4v3.1 | 0.4% | 2023-09-06 | |
| CVE-2023-4719 | Simple Membership WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.6% | 2023-09-06 | Fix |
| CVE-2023-4634 | Media Library Assistant WordPress plugin local file inclusion | 9.8CNA v3.1 | 85.6% | 2023-09-06 | NucleiExploit codeFix |
| CVE-2023-4623 | Linux kernel A use-after-free | 7.8NVD v3.1 | 0.3% | 2023-09-06 | Fix |
| CVE-2023-4622 | Linux kernel A use-after-free | 7.0NVD v3.1 | 0.6% | 2023-09-06 | Exploit codeFix |
| CVE-2023-4589 | Insufficient verification of data authenticity vulnerability in Delinea Secret Server | 7.2NVD v3.1 | 0.3% | 2023-09-06 | |
| CVE-2023-4588 | File accessibility vulnerability in Delinea Secret Server | 4.9v3.1 | 0.3% | 2023-09-06 | |
| CVE-2023-4498 | Authentication bypass in Tenda N300 Wireless N VDSL2 Modem Router | 5.3v3.1 | 0.4% | 2023-09-06 | |
| CVE-2023-4485 | ARDEREG Sistemas SCADA SQL injection | 9.8v3.1 | 0.7% | 2023-09-06 | |
| CVE-2023-4244 | Linux kernel A use-after-free | 7.0NVD v3.1 | 0.2% | 2023-09-06 | Fix |
| CVE-2023-4208 | Linux kernel A use-after-free | 7.8NVD v3.1 | 0.3% | 2023-09-06 | Fix |
| CVE-2023-4207 | Linux kernel A use-after-free | 7.8NVD v3.1 | 0.3% | 2023-09-06 | Fix |
| CVE-2023-4206 | Linux kernel A use-after-free | 7.8NVD v3.1 | 0.6% | 2023-09-06 | Fix |
| CVE-2023-4015 | Linux kernel A use-after-free | 7.8NVD v3.1 | 0.3% | 2023-09-06 | Fix |
| CVE-2023-3777 | Linux kernel A use-after-free | 7.8NVD v3.1 | 0.4% | 2023-09-06 | Fix |
| CVE-2023-3472 | Panasonic KW Watcher on Windows use-after-free | 8.6CNA v3.1 | 0.2% | 2023-09-06 | Fix |
| CVE-2023-3471 | Panasonic KW Watcher buffer overflow | 8.6CNA v3.1 | 0.5% | 2023-09-06 | Fix |
| CVE-2023-0925 | Software AG webMethods OneData deserialization | 9.8v3.1 | 0.6% | 2023-09-06 | |
| CVE-2023-41910 | lldpd out-of-bounds read | 9.8v3.1 | 1.0% | 2023-09-05 | Fix |
| CVE-2023-41909 | FRRouting null pointer dereference | 7.5v3.1 | 0.9% | 2023-09-05 | Fix |
| CVE-2023-41908 | Cerebrate missing authorization | 5.3v3.1 | 0.4% | 2023-09-05 | |
| CVE-2023-41508 | Super Store Finder A hard-coded credentials | 9.8v3.1 | 1.1% | 2023-09-05 | Exploit codeFix |
| CVE-2023-41507 | Super Store Finder SQL injection | 9.8v3.1 | 0.8% | 2023-09-05 | Exploit codeFix |
| CVE-2023-41317 | Unnamed Subscription operation results in denial of service in apollographql/router | 7.5CNA v3.1 | 0.8% | 2023-09-05 | Fix |
| CVE-2023-41108 | Tef Portal unrestricted file upload | 8.8v3.1 | 1.3% | 2023-09-05 | Fix |
| CVE-2023-41107 | Tef Portal cross-site scripting | 5.4v3.1 | 0.4% | 2023-09-05 | Fix |
| CVE-2023-41012 | China Mobile Intelligent Home Gateway session fixation | 9.8v3.1 | 1.3% | 2023-09-05 | |
| CVE-2023-41009 | Adlered bolo-solo file upload | 9.8v3.1 | 1.4% | 2023-09-05 | |
| CVE-2023-40918 | KnowStreaming improper privilege management | 8.8v3.1 | 0.6% | 2023-09-05 | |
| CVE-2023-40743 | Apache Axis (EOL) may allow RCE when untrusted input is passed to getService | 9.8v3.1 | 2.6% | 2023-09-05 | Fix |
| CVE-2023-40705 | i-PRO VI Web Client Map setting page stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-09-05 | Fix |
| CVE-2023-40535 | i-PRO VI Web Client view setting page stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-09-05 | Fix |
| CVE-2023-39938 | i-PRO VI Web Client reflected cross-site scripting | 6.1v3.1 | 0.5% | 2023-09-05 | Fix |
| CVE-2023-39681 | Cuppacms code injection | 9.8v3.1 | 1.4% | 2023-09-05 | |
| CVE-2023-39654 | Abuquant Abupy SQL injection | 9.8v3.1 | 0.7% | 2023-09-05 | |
| CVE-2023-39598 | IceWarp WebClient IceWarp Corporation cross-site scripting | 6.1v3.1 | 1.4% | 2023-09-05 | Nuclei |
| CVE-2023-39516 | Stored cross-site-scripting on data_sources.php debug html-block in Cacti | 6.1CNA v3.1 | 0.8% | 2023-09-05 | Fix |
| CVE-2023-39515 | Stored cross-site scripting on data_debug.php datasource path view in Cacti | 6.1CNA v3.1 | 0.8% | 2023-09-05 | Fix |
| CVE-2023-39514 | Stored cross-site scripting on graphs.php data template formated name view in Cacti | 6.1CNA v3.1 | 0.9% | 2023-09-05 | Fix |
| CVE-2023-39513 | Stored cross-site scripting on host.php verbose data-query debug view in Cacti | 6.1CNA v3.1 | 0.9% | 2023-09-05 | Fix |
| CVE-2023-39512 | Stored cross-site scripting on data_sources.php device name view in Cacti | 6.1CNA v3.1 | 0.8% | 2023-09-05 | Fix |
| CVE-2023-39510 | Stored cross-site scripting in reports_admin.php through Device-Name in select input in Cacti | 6.1CNA v3.1 | 0.8% | 2023-09-05 | Fix |
| CVE-2023-39448 | SHIRASAGI path traversal | 8.8v3.1 | 1.1% | 2023-09-05 | Fix |
| CVE-2023-39366 | Stored cross-site scripting in data_sources.php through Device-Name in select input in Cacti | 6.1CNA v3.1 | 0.9% | 2023-09-05 | Fix |
| CVE-2023-39365 | Unchecked regular expressions can lead to SQL injection and data leakage in Cacti | 4.6CNA v3.1 | 0.9% | 2023-09-05 | Fix |
| CVE-2023-39364 | Open redirect in change password functionality in Cacti | 3.5CNA v3.1 | 0.7% | 2023-09-05 | Fix |
| CVE-2023-39362 | cacti authenticated command injection in SNMP options of a Device | 7.2CNA v3.1 | 85.4% | 2023-09-05 | Exploit codeFix |
| CVE-2023-39361 | Unauthenticated SQL injection in graph_view.php in Cacti | 9.8CNA v3.1 | 88.8% | 2023-09-05 | Reported exploitedNucleiEmerging ThreatsExploit codeKCVFix |
| CVE-2023-39360 | Reflected cross-site scripting in graphs_new.php in Cacti | 6.1CNA v3.1 | 0.9% | 2023-09-05 | Fix |
| CVE-2023-39359 | Authenticated SQL injection vulnerability in graphs.php in Cacti | 8.8CNA v3.1 | 2.1% | 2023-09-05 | Fix |
| CVE-2023-39358 | Authenticated SQL injection vulnerability in reports_user.php in Cacti | 8.8CNA v3.1 | 2.0% | 2023-09-05 | Fix |
| CVE-2023-39357 | A Defect in sql_save causes multiple SQL injection vulnerabilities in Cacti | 8.8CNA v3.1 | 1.8% | 2023-09-05 | Fix |
| CVE-2023-38574 | i-PRO VI Web Client open redirect | 6.1v3.1 | 0.5% | 2023-09-05 | Fix |
| CVE-2023-38569 | SHIRASAGI stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-09-05 | Fix |
| CVE-2023-36492 | SHIRASAGI reflected cross-site scripting | 6.1v3.1 | 0.4% | 2023-09-05 | Fix |
| CVE-2023-36361 | Web-audimex Audimexee SQL injection | 9.8v3.1 | 0.6% | 2023-09-05 | |
| CVE-2023-36308 | Disintegration Imaging crash when processing crafted TIFF files | 5.5NVD v3.1 | 0.4% | 2023-09-05 | Fix |
| CVE-2023-36307 | Simonwaldherr Zplgfa index out-of-bounds leading to crash | 5.5v3.1 | 0.2% | 2023-09-05 | |
| CVE-2023-35906 | IBM Aspera Faspex improper access control | 5.3CNA v3.1 | 0.4% | 2023-09-05 | Fix |
| CVE-2023-35892 | IBM Financial Transaction Manager for SWIFT Services XML external entity injection | 7.1CNA v3.1 | 1.1% | 2023-09-05 | Fix |
| CVE-2023-35124 | Open Automation Software OAS Platform information disclosure | 4.3v3.1 | 0.5% | 2023-09-05 | |
| CVE-2023-35072 | SQLi in Coyav Travels Proagent | 9.8CNA v3.1 | 0.6% | 2023-09-05 | Fix |
| CVE-2023-35068 | SQLi in BMAs Personnel Tracking System | 9.8CNA v3.1 | 0.6% | 2023-09-05 | Fix |
| CVE-2023-35065 | SQLi in Osofts Paint Production Management | 9.8CNA v3.1 | 0.6% | 2023-09-05 | Fix |
| CVE-2023-34998 | Open Automation Software OAS Platform OAS Engine functionality authentication bypass | 8.1v3.1 | 1.2% | 2023-09-05 | |
| CVE-2023-34994 | Open Automation Software OAS Platform resource exhaustion | 4.3v3.1 | 0.7% | 2023-09-05 | |
| CVE-2023-34637 | Isarnet Isarflow IsarNet AG stored cross-site scripting | 5.4v3.1 | 0.3% | 2023-09-05 | |
| CVE-2023-34353 | Open Automation Software OAS Platform OAS Engine authentication functionality authentication bypass | 7.5v3.1 | 1.0% | 2023-09-05 | |
| CVE-2023-34317 | Open Automation Software OAS Platform improper input validation | 6.5v3.1 | 0.8% | 2023-09-05 | |
| CVE-2023-33021 | Qualcomm Snapdragon use-after-free in Graphics | 8.4CNA v3.1 | 0.1% | 2023-09-05 | Fix |
| CVE-2023-33020 | Qualcomm Snapdragon improper authorization in WLAN host | 7.5CNA v3.1 | 0.4% | 2023-09-05 | Fix |
| CVE-2023-33019 | Qualcomm Snapdragon improper authorization in WLAN host | 7.5CNA v3.1 | 0.4% | 2023-09-05 | Fix |
| CVE-2023-33016 | Qualcomm Snapdragon buffer over-read in WLAN firmware | 7.5CNA v3.1 | 0.4% | 2023-09-05 | Fix |
| CVE-2023-33015 | Qualcomm Snapdragon buffer over-read in WLAN firmware | 7.5CNA v3.1 | 0.4% | 2023-09-05 | Fix |
| CVE-2023-32615 | Open Automation Software OAS Platform external control of a file path | 8.1v3.1 | 0.7% | 2023-09-05 | |
| CVE-2023-32338 | IBM Sterling Secure Proxy information disclosure | 5.1CNA v3.1 | 0.2% | 2023-09-05 | Fix |
| CVE-2023-32271 | Open Automation Software OAS Platform information disclosure | 6.5v3.1 | 0.9% | 2023-09-05 | |
| CVE-2023-31242 | Open Automation Software OAS Platform OAS Engine functionality authentication bypass | 9.8v3.1 | 3.4% | 2023-09-05 | |
| CVE-2023-31132 | Cacti privilege escalation | 7.8CNA v3.1 | 0.4% | 2023-09-05 | Fix |
| CVE-2023-30534 | Insecure deserialization in Cacti | 4.3CNA v3.1 | 2.9% | 2023-09-05 | NucleiFix |
| CVE-2023-29261 | IBM Sterling Secure Proxy information disclosure | 5.1CNA v3.1 | 0.2% | 2023-09-05 | Fix |
| CVE-2023-28584 | Qualcomm Snapdragon improper authorization in WLAN host | 7.5CNA v3.1 | 0.4% | 2023-09-05 | Fix |
| CVE-2023-28581 | Qualcomm Snapdragon memory corruption | 9.8CNA v3.1 | 0.5% | 2023-09-05 | Fix |
| CVE-2023-28573 | Qualcomm Snapdragon improper validation of array index in WLAN HAL | 7.8CNA v3.1 | 0.1% | 2023-09-05 | Fix |
| CVE-2023-28567 | Qualcomm Snapdragon improper validation of array index in WLAN HAL | 7.8CNA v3.1 | 0.1% | 2023-09-05 | Fix |
| CVE-2023-28565 | Qualcomm Snapdragon improper validation of array index in WLAN HAL | 7.8CNA v3.1 | 0.1% | 2023-09-05 | Fix |
| CVE-2023-28564 | Qualcomm Snapdragon use of out-of-range pointer offset in WLAN HAL | 7.8CNA v3.1 | 0.1% | 2023-09-05 | Fix |
| CVE-2023-28562 | Qualcomm Snapdragon buffer copy without checking size of input in QESL | 9.8CNA v3.1 | 0.4% | 2023-09-05 | Fix |
| CVE-2023-28560 | Qualcomm Snapdragon buffer copy without checking size of input in WLAN HAL | 7.8CNA v3.1 | 0.1% | 2023-09-05 | Fix |
| CVE-2023-28559 | Qualcomm Snapdragon buffer copy without checking size of input in WLAN HAL | 7.8CNA v3.1 | 0.1% | 2023-09-05 | Fix |
| CVE-2023-28558 | Qualcomm Snapdragon improper validation of array index in WLAN HAL | 7.8CNA v3.1 | 0.1% | 2023-09-05 | Fix |
| CVE-2023-28557 | Qualcomm Snapdragon improper validation of array index in WLAN HAL | 7.8CNA v3.1 | 0.1% | 2023-09-05 | Fix |
| CVE-2023-28549 | Qualcomm Snapdragon memory corruption | 7.8CNA v3.1 | 0.1% | 2023-09-05 | Fix |
| CVE-2023-28548 | Qualcomm Snapdragon improper validation of array index in WLAN HAL | 7.8CNA v3.1 | 0.1% | 2023-09-05 | Fix |
| CVE-2023-28544 | Qualcomm Snapdragon Buffer Copy without Checking the Size of Input in WLAN firmware | 7.8CNA v3.1 | 0.1% | 2023-09-05 | Fix |
| CVE-2023-28543 | Qualcomm Snapdragon out-of-bounds read in SNPE library | 8.1CNA v3.1 | 0.4% | 2023-09-05 | Fix |
| CVE-2023-28538 | Qualcomm Snapdragon stack-based buffer overflow in WIN Product | 8.4CNA v3.1 | 0.1% | 2023-09-05 | Fix |
| CVE-2023-22870 | IBM Aspera Faspex information disclosure | 5.9CNA v3.1 | 0.3% | 2023-09-05 | Fix |
| CVE-2023-21667 | Qualcomm Snapdragon buffer over-read in Bluetooth host | 6.5CNA v3.1 | 0.4% | 2023-09-05 | Fix |
| CVE-2023-21664 | Qualcomm Snapdragon memory corruption | 7.8CNA v3.1 | 0.1% | 2023-09-05 | Fix |
| CVE-2023-21663 | Qualcomm Snapdragon Display memory corruption | 6.7CNA v3.1 | 0.1% | 2023-09-05 | Fix |
| CVE-2023-21662 | Qualcomm Snapdragon memory corruption | 7.8CNA v3.1 | 0.1% | 2023-09-05 | Fix |
| CVE-2023-21655 | Qualcomm Snapdragon integer overflow or wraparound in Display | 6.7CNA v3.1 | 0.1% | 2023-09-05 | Fix |
| CVE-2023-21654 | Qualcomm Snapdragon improper restriction of operations within the bounds of a memory buffer in Audio | 6.7CNA v3.1 | 0.1% | 2023-09-05 | Fix |
| CVE-2023-21653 | Qualcomm Snapdragon reachable assertion in Modem | 7.5CNA v3.1 | 0.4% | 2023-09-05 | Fix |
| CVE-2023-21646 | Qualcomm Snapdragon reachable assertion in Modem | 7.5CNA v3.1 | 0.4% | 2023-09-05 | Fix |
| CVE-2023-21644 | Qualcomm Snapdragon integer overflow to buffer overflow in RIL | 6.7CNA v3.1 | 0.1% | 2023-09-05 | Fix |
| CVE-2023-21636 | Qualcomm Snapdragon improper validation of array index in Linux | 6.7CNA v3.1 | 0.1% | 2023-09-05 | Fix |
| CVE-2023-20898 | Salt can cause Git Providers to get wrong data | 4.2CNA v3.1 | 0.3% | 2023-09-05 | Fix |
| CVE-2023-20897 | Salt vulnerable to denial of service | 5.3CNA v3.1 | 1.2% | 2023-09-05 | Fix |
| CVE-2023-4781 | Heap-based buffer overflow in Vim/Vim | 7.8v3.1 | 0.6% | 2023-09-05 | Fix |
| CVE-2023-4778 | Out-of-bounds read in gpac/gpac | 5.5v3.1 | 0.3% | 2023-09-05 | Fix |
| CVE-2023-4764 | Google Chrome BFCache incorrect security UI | 6.5v3.1 | 1.1% | 2023-09-05 | Fix |
| CVE-2023-4763 | Google Chrome Networks use-after-free | 8.8v3.1 | 1.2% | 2023-09-05 | Fix |
| CVE-2023-4762 | Google Chromium V8 type confusion | 8.8v3.1 | 41.1% | 2023-09-05 | KEVExploit codeFix |
| CVE-2023-4761 | Google Chrome FedCM out-of-bounds access | 8.1v3.1 | 1.3% | 2023-09-05 | Fix |
| CVE-2023-4748 | Yongyou UFIDA-NC PrintTemplateFileServlet.java path traversal | 7.5v3.1 | 0.8% | 2023-09-05 | |
| CVE-2023-4636 | WordPress File Sharing plugin authenticated (Admin+) stored cross-site scripting | 4.8v3.1 | 0.9% | 2023-09-05 | Exploit codeFix |
| CVE-2023-4540 | DoS in lua-http library | 7.5v3.1 | 0.9% | 2023-09-05 | Fix |
| CVE-2023-4531 | SQLi in Mestavs E-commerce Software | 9.8CNA v3.1 | 0.6% | 2023-09-05 | Fix |
| CVE-2023-4487 | GE Digital CIMPLICITY privilege escalation | 7.8v3.1 | 0.2% | 2023-09-05 | Fix |
| CVE-2023-4480 | PHPFusion arbitrary file read in Fusion File Manager | 5.5v3.1 | 0.6% | 2023-09-05 | |
| CVE-2023-4310 | BeyondTrust Privileged Remote Access (PRA) command injection | 9.8v3.1 | 1.4% | 2023-09-05 | |
| CVE-2023-4178 | Authentication bypass in Neutron Smart VMS | 9.8v3.1 | 0.6% | 2023-09-05 | Fix |
| CVE-2023-4034 | SQLi in Smartrise Document Management System | 9.8CNA v3.1 | 0.6% | 2023-09-05 | Fix |
| CVE-2023-3616 | SQLi in Mava Softwares Hotel Management System | 9.8v3.1 | 0.5% | 2023-09-05 | Fix |
| CVE-2023-3375 | Unrestricted file upload in Bookreen | 7.2v3.1 | 1.2% | 2023-09-05 | Fix |
| CVE-2023-3374 | Privilege escalation in Bookreen | 9.8CNA v3.1 | 0.7% | 2023-09-05 | Fix |
| CVE-2023-2453 | PHPFusion local file inclusion (LFI) in Forum Infusion via directory traversal | 8.8v3.1 | 0.7% | 2023-09-05 | |
| CVE-2023-41058 | Trigger `beforeFind` not invoked in internal query pipeline in parse-server | 7.5CNA v3.1 | 0.8% | 2023-09-04 | Fix |
| CVE-2023-41057 | Improper limitation of a pathname to a restricted directory (path traversal) in hyper-bump-it | 5.5CNA v3.1 | 0.4% | 2023-09-04 | Fix |
| CVE-2023-41055 | LibreY server-side request forgery (SSRF) vulnerability via wikipedia_language cookie | 7.5CNA v3.1 | 1.0% | 2023-09-04 | |
| CVE-2023-41054 | LibreY server-side request forgery (SSRF) vulnerability in image_proxy.php | 8.2CNA v3.1 | 1.0% | 2023-09-04 | |
| CVE-2023-41052 | Vyper: Incorrect order of evaluation of side effects for some builtins | 3.7CNA v3.1 | 0.5% | 2023-09-04 | Fix |
| CVE-2023-40214 | Business Pro WordPress theme cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-09-04 | |
| CVE-2023-40208 | Stock Ticker WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.7% | 2023-09-04 | NucleiFix |
| CVE-2023-40206 | WP 404 Auto Redirect to Similar Post WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-09-04 | Fix |
| CVE-2023-40205 | PixTypes WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-09-04 | Fix |
| CVE-2023-40197 | flowpaper WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-09-04 | Fix |
| CVE-2023-40196 | ImageRecycle pdf and image compression WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-09-04 | Fix |
| CVE-2023-40015 | Vyper: Reversed order of side effects for some operations | 3.7CNA v3.1 | 0.5% | 2023-09-04 | Fix |
| CVE-2023-39992 | Online Booking and Scheduling Calendar for WordPress by vcita plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-09-04 | Fix |
| CVE-2023-39991 | BigBlueButton WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-09-04 | |
| CVE-2023-39988 | WxSync WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-09-04 | Fix |
| CVE-2023-39987 | wSecure Lite WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-09-04 | Fix |
| CVE-2023-39919 | wpShopGermany Protected Shops WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-09-04 | Fix |
| CVE-2023-39918 | Booking Package WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-09-04 | Fix |
| CVE-2023-39164 | Molongui WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-09-04 | Fix |
| CVE-2023-39162 | User Email Verification for WooCommerce WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-09-04 | |
| CVE-2023-38554 | UNISOC chipsets wcn bsp driver out-of-bounds write | 5.5v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-38553 | UNISOC chipsets gnss service out-of-bounds write | 6.7v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-38468 | UNISOC chipsets urild service out-of-bounds write | 4.4v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-38467 | UNISOC chipsets urild service out-of-bounds write | 4.4v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-38466 | UNISOC chipsets ims service missing authorization | 5.5v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-38465 | UNISOC chipsets ims service missing authorization | 5.5v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-38464 | UNISOC chipsets vowifiservice missing authorization | 7.8v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-38463 | UNISOC chipsets vowifiservice missing authorization | 5.5v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-38462 | UNISOC chipsets vowifiservice missing authorization | 5.5v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-38461 | UNISOC chipsets vowifiservice missing authorization | 5.5v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-38460 | UNISOC chipsets vowifiservice missing authorization | 7.8v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-38459 | UNISOC chipsets vowifiservice missing authorization | 7.8v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-38458 | UNISOC chipsets vowifiservice missing authorization | 7.8v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-38457 | UNISOC chipsets vowifiservice missing authorization | 5.5v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-38456 | UNISOC chipsets vowifiservice missing authorization | 7.8v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-38455 | UNISOC chipsets vowifiservice missing authorization | 7.8v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-38454 | UNISOC chipsets vowifi service missing authorization | 5.5v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-38453 | UNISOC chipsets vowifiservice missing authorization | 7.8v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-38452 | UNISOC chipsets vowifiservice missing authorization | 7.8v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-38451 | UNISOC chipsets vowifiservice missing authorization | 7.8v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-38450 | UNISOC chipsets vowifiservice missing authorization | 7.8v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-38449 | UNISOC chipsets vowifiservice missing authorization | 7.8v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-38448 | UNISOC chipsets vowifiservice missing authorization | 5.5v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-38447 | UNISOC chipsets vowifiservice missing authorization | 5.5v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-38446 | UNISOC chipsets vowifiservice missing authorization | 5.5v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-38445 | UNISOC chipsets vowifiservice missing authorization | 5.5v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-38444 | UNISOC chipsets vowifiservice missing authorization | 7.8v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-38443 | UNISOC chipsets vowifiservice missing authorization | 7.8v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-38442 | UNISOC chipsets vowifiservice missing authorization | 5.5v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-38441 | UNISOC chipsets vowifiservice missing authorization | 5.5v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-38440 | UNISOC chipsets vowifiservice missing authorization | 5.5v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-38439 | UNISOC chipsets vowifiservice missing authorization | 5.5v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-38438 | UNISOC chipsets vowifiservice missing authorization | 5.5v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-38437 | UNISOC chipsets vowifiservice missing authorization | 5.5v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-38436 | UNISOC chipsets vowifiservice missing authorization | 5.5v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-37393 | Atarim WordPress plugin cross-site scripting (XSS) | 4.8NVD v3.1 | 0.4% | 2023-09-04 | Fix |
| CVE-2023-36382 | Media Library Categories WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-09-04 | Fix |
| CVE-2023-33918 | UNISOC chipsets vowifiservice missing authorization | 5.5v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-33917 | UNISOC chipsets vowifiservice missing authorization | 5.5v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-33916 | UNISOC chipsets vowifiservice missing authorization | 5.5v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-33915 | UNISOC chipsets LTE protocol stack missing authorization | 7.5v3.1 | 0.3% | 2023-09-04 | Fix |
| CVE-2023-33914 | UNISOC chipsets NIA0 algorithm in Security Mode command information disclosure | 7.5v3.1 | 0.4% | 2023-09-04 | Fix |
| CVE-2023-32817 | MediaTek chipsets improper input validation in gnss service | 4.4v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-32816 | MediaTek chipsets improper input validation in gnss service | 4.4v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-32815 | MediaTek chipsets improper input validation in gnss service | 4.4v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-32814 | MediaTek chipsets improper input validation in gnss service | 4.4v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-32813 | MediaTek chipsets improper input validation in gnss service | 4.4v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-32812 | MediaTek chipsets improper input validation in gnss service | 6.7v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-32811 | MediaTek chipsets improper input validation in connectivity system driver | 6.7v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-32810 | MediaTek chipsets improper input validation in bluetooth driver | 4.4v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-32809 | MediaTek chipsets improper access control for register interface in bluetooth driver | 4.4v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-32808 | MediaTek chipsets improper access control for register interface in bluetooth driver | 4.4v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-32807 | MediaTek chipsets improper input validation in connectivity system driver | 4.4v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-32806 | MediaTek chipsets improper input validation in wlan driver | 6.7v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-32805 | MediaTek MT8168, MT8675 out-of-bounds write in power | 6.5v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-32578 | Column-Matic WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-09-04 | |
| CVE-2023-32296 | Kangu para WooCommerce WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-09-04 | Fix |
| CVE-2023-32102 | Library Viewer WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-09-04 | Fix |
| CVE-2023-31220 | WP Categories Widget WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-09-04 | Fix |
| CVE-2023-30494 | ImageRecycle pdf and image compression WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-09-04 | Fix |
| CVE-2023-30485 | Avartan Slider Lite WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-09-04 | |
| CVE-2023-28072 | Dell Alienware Command Center (AWCC) deserialization of untrusted data | 7.8CNA v3.1 | 0.3% | 2023-09-04 | Fix |
| CVE-2023-25465 | wp tell a friend popup form WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-09-04 | |
| CVE-2023-20851 | MediaTek MT8188 out-of-bounds read in stc | 6.3v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-20850 | MediaTek chipsets out-of-bounds write in imgsys_cmdq | 6.5v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-20849 | MediaTek chipsets UAF in imgsys_cmdq | 6.5v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-20848 | MediaTek chipsets improper input validation in imgsys_cmdq | 6.5v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-20847 | MediaTek chipsets improper input validation in imgsys_cmdq | 4.2v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-20846 | MediaTek chipsets out-of-bounds read in imgsys_cmdq | 4.2v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-20845 | MediaTek chipsets improper input validation in imgsys | 4.2v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-20844 | MediaTek chipsets out-of-bounds read in imgsys_cmdq | 4.2v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-20843 | MediaTek chipsets improper input validation in imgsys_cmdq | 4.2v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-20842 | MediaTek chipsets improper input validation in imgsys_cmdq | 6.5v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-20841 | MediaTek chipsets buffer copy without checking size of input (classic buffer overflow) in imgsys | 6.5v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-20840 | MediaTek chipsets out-of-bounds write in imgsys | 6.5v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-20839 | MediaTek chipsets out-of-bounds read in imgsys | 4.2v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-20838 | MediaTek chipsets out-of-bounds read in imgsys | 4.0v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-20837 | MediaTek chipsets out-of-bounds write in seninf | 6.7v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-20836 | MediaTek chipsets out-of-bounds read in camsys | 4.4v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-20835 | MediaTek chipsets use-after-free in camsys | 6.4v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-20834 | MediaTek chipsets use-after-free in pda | 6.4v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-20833 | MediaTek chipsets improper input validation in keyinstall | 4.4v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-20832 | MediaTek chipsets improper input validation in gps | 6.7v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-20831 | MediaTek chipsets improper input validation in gps | 6.7v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-20830 | MediaTek chipsets improper input validation in gps | 6.7v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-20829 | MediaTek chipsets improper input validation in gps | 6.7v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-20828 | MediaTek chipsets improper input validation in gps | 6.7v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-20827 | MediaTek chipsets improper synchronization in ims service | 6.4v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-20826 | MediaTek chipsets improper input validation in cta | 5.5v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-20825 | MediaTek chipsets improper input validation in duraspeed | 5.5v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-20824 | MediaTek chipsets improper input validation in duraspeed | 5.5v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-20823 | MediaTek chipsets improper input validation in cmdq | 4.4v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-20822 | MediaTek chipsets improper input validation in netdagent | 6.7v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-20821 | MediaTek chipsets improper input validation in nvram | 6.7v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2023-20820 | MediaTek chipsets improper input validation in wlan service | 7.2v3.1 | 1.2% | 2023-09-04 | Fix |
| CVE-2023-4758 | Buffer over-read in gpac/gpac | 5.5v3.1 | 0.3% | 2023-09-04 | Fix |
| CVE-2023-4756 | Stack-based buffer overflow in gpac/gpac | 5.5v3.1 | 0.3% | 2023-09-04 | Fix |
| CVE-2023-4755 | gpac/gpac GitHub repository use-after-free | 5.5v3.1 | 0.3% | 2023-09-04 | Fix |
| CVE-2023-4754 | Out-of-bounds write in gpac/gpac | 5.5v3.1 | 0.3% | 2023-09-04 | Fix |
| CVE-2023-4752 | vim/vim GitHub repository use-after-free | 7.8v3.1 | 0.6% | 2023-09-04 | Fix |
| CVE-2023-4750 | vim/vim GitHub repository use-after-free | 7.8v3.1 | 0.5% | 2023-09-04 | Fix |
| CVE-2023-4749 | SourceCodester Inventory Management System index.php file inclusion | 9.8v3.1 | 0.9% | 2023-09-04 | |
| CVE-2023-4747 | DedeCMS tags.php SQL injection | 9.8v3.1 | 0.6% | 2023-09-04 | |
| CVE-2023-4746 | TOTOLINK N200RE V5 Validity_check format string | 8.8v3.1 | 3.2% | 2023-09-04 | |
| CVE-2023-4745 | Byzoro Smart S45F Multi-Service Secure Gateway importexport.php SQL injection | 9.8v3.1 | 3.8% | 2023-09-04 | |
| CVE-2023-4744 | Tenda AC8 formSetDeviceName stack-based overflow | 9.8v3.1 | 1.7% | 2023-09-04 | |
| CVE-2023-4733 | vim/vim GitHub repository use-after-free | 7.8v3.1 | 0.5% | 2023-09-04 | Fix |
| CVE-2023-4616 | LG Electronics LED Assistant thumbnail endpoint path traversal | 7.5CNA v3.1 | 1.6% | 2023-09-04 | Fix |
| CVE-2023-4615 | LG Electronics LED Assistant updateFile endpoint path traversal | 7.5CNA v3.1 | 1.6% | 2023-09-04 | Fix |
| CVE-2023-4614 | LG Electronics LED Assistant setThumbnailRc endpoint path traversal | 9.8CNA v3.1 | 2.5% | 2023-09-04 | Fix |
| CVE-2023-4613 | LG Electronics LED Assistant upload endpoint path traversal | 9.8CNA v3.1 | 2.5% | 2023-09-04 | Fix |
| CVE-2023-4587 | Insecure direct object reference in ZKTeco ZEM800 | 5.5NVD v3.1 | 0.2% | 2023-09-04 | Fix |
| CVE-2023-4298 | 123.chat WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2023-09-04 | Fix |
| CVE-2023-4284 | Post Timeline WordPress plugin reflected XSS | 6.1NVD v3.1 | 0.8% | 2023-09-04 | NucleiFix |
| CVE-2023-4279 | User Activity Log WordPress plugin IP spoofing | 7.5NVD v3.1 | 1.0% | 2023-09-04 | Exploit codeFix |
| CVE-2023-4269 | User Activity Log WordPress plugin Subscriber+ Log export | 4.3NVD v3.1 | 0.5% | 2023-09-04 | Fix |
| CVE-2023-4254 | Chatbot WordPress plugin Admin+ stored XSS in Language settings | 4.8NVD v3.1 | 0.5% | 2023-09-04 | Fix |
| CVE-2023-4253 | Chatbot WordPress plugin Admin+ stored XSS in FAQ Builder | 4.8NVD v3.1 | 0.5% | 2023-09-04 | Fix |
| CVE-2023-4216 | Orders Tracking for WooCommerce WordPress plugin Admin+ arbitrary file Access/Read | 2.7NVD v3.1 | 0.7% | 2023-09-04 | Fix |
| CVE-2023-4151 | Store Locator WordPress plugin reflected XSS | 6.1NVD v3.1 | 0.7% | 2023-09-04 | NucleiFix |
| CVE-2023-4059 | Profile Builder WordPress plugin unauthenticated Plugin's pages creation | 4.3NVD v3.1 | 0.2% | 2023-09-04 | Fix |
| CVE-2023-4019 | Media from FTP WordPress plugin Author+ arbitrary file access | 8.8NVD v3.1 | 0.8% | 2023-09-04 | Fix |
| CVE-2023-3814 | Advanced File Manager WordPress plugin Admin+ arbitrary File/Folder access | 4.9NVD v3.1 | 0.6% | 2023-09-04 | Fix |
| CVE-2023-3499 | Robo Gallery WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2023-09-04 | Fix |
| CVE-2023-3222 | Vulnerability in the Password Recovery mechanism of Roundcube Password Recovery Plugin | 7.5v3.1 | 0.5% | 2023-09-04 | |
| CVE-2023-3221 | User enumeration vulnerability in Roundcube Password Recovery Plugin | 5.3v3.1 | 0.5% | 2023-09-04 | |
| CVE-2023-2813 | Aapna WordPress theme multiple Themes reflected XSS | 6.1NVD v3.1 | 1.0% | 2023-09-04 | NucleiFix |
| CVE-2023-41180 | Apache NiFi MiNiFi C++: Incorrect certificate validation in InvokeHTTP for MiNiFi C++ | 5.9v3.1 | 0.4% | 2023-09-03 | Fix |
| CVE-2023-39374 | ForeScout NAC SecureConnector uncontrolled search path element | 7.8v3.1 | 0.2% | 2023-09-03 | |
| CVE-2023-39373 | Hyundai car authentication bypass by capture-replay | 6.5NVD v3.1 | 0.3% | 2023-09-03 | |
| CVE-2023-39372 | StarTrinity Softswitch cross-site request forgery | 8.8v3.1 | 0.2% | 2023-09-03 | Fix |
| CVE-2023-39371 | StarTrinity Softswitch open redirect | 6.1NVD v3.1 | 0.4% | 2023-09-03 | Fix |
| CVE-2023-39370 | StarTrinity Softswitch persistent cross-site scripting | 5.4NVD v3.1 | 0.4% | 2023-09-03 | Fix |
| CVE-2023-39369 | StarTrinity Softswitch reflected cross-site scripting | 6.1NVD v3.1 | 0.4% | 2023-09-03 | Fix |
| CVE-2023-38521 | Exifography WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-09-03 | |
| CVE-2023-38518 | Borderless WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-09-03 | Fix |
| CVE-2023-38517 | WRC Pricing Tables WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-09-03 | Fix |
| CVE-2023-38516 | Audio Player with Playlist Ultimate WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-09-03 | Fix |
| CVE-2023-38482 | Post Affiliate Pro WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-09-03 | Fix |
| CVE-2023-38476 | Client Portal: SuiteDash Direct Login WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-09-03 | Fix |
| CVE-2023-38387 | Elastic Email Sender WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-09-03 | Fix |
| CVE-2023-37222 | Farsight Tech Nordic ProVide cross-site scripting | 4.8v3.1 | 0.3% | 2023-09-03 | Fix |
| CVE-2023-37221 | 7Twenty BOT improper neutralization of input during web page generation (cross-site scripting) | 6.1NVD v3.1 | 0.4% | 2023-09-03 | Fix |
| CVE-2023-37220 | Synel Terminals download of code without integrity check | 9.8v3.1 | 0.3% | 2023-09-03 | Fix |
| CVE-2023-4751 | Heap-based buffer overflow in Vim/Vim | 7.8v3.1 | 0.6% | 2023-09-03 | Fix |
| CVE-2023-4743 | iteachyou Dreamer CMS ueditorConfig endpoint vulnerability | 4.8v3.1 | 0.5% | 2023-09-03 | |
| CVE-2023-4742 | IBOS OA export&uid=X SQL injection | 8.8v3.1 | 0.7% | 2023-09-03 | |
| CVE-2023-4741 | IBOS OA Delete Logs del SQL injection | 8.8v3.1 | 0.8% | 2023-09-03 | Exploit code |
| CVE-2023-4740 | IBOS OA Delete Draft delDraft&archiveId=0 SQL injection | 8.8v3.1 | 0.8% | 2023-09-03 | |
| CVE-2023-4739 | Byzoro Smart S85F Management Platform updateos.php unrestricted upload | 9.8v3.1 | 3.1% | 2023-09-03 | |
| CVE-2023-3703 | Proscend Advice ICR Series routers default credentials | 9.8v3.1 | 0.5% | 2023-09-03 | Fix |
| CVE-2023-39983 | MXsecurity Register Database Pollution | 5.3CNA v3.1 | 0.6% | 2023-09-02 | Fix |
| CVE-2023-39982 | MXsecurity hard-coded credential | 7.5CNA v3.1 | 0.4% | 2023-09-02 | Fix |
| CVE-2023-39981 | MXsecurity device information disclosure | 7.5CNA v3.1 | 0.8% | 2023-09-02 | Fix |
| CVE-2023-39980 | MXsecurity authenticated information disclosure due to SQL injection | 7.1CNA v3.1 | 0.7% | 2023-09-02 | Fix |
| CVE-2023-39979 | MXsecurity authentication bypass | 9.8CNA v3.1 | 1.0% | 2023-09-02 | Fix |
| CVE-2023-4738 | Heap-based buffer overflow in Vim/Vim | 7.8v3.1 | 0.6% | 2023-09-02 | Fix |
| CVE-2023-4736 | Untrusted search path in Vim/Vim | 7.8v3.1 | 0.5% | 2023-09-02 | Fix |
| CVE-2023-4735 | Out-of-bounds write in Vim/Vim | 7.8v3.1 | 0.6% | 2023-09-02 | Fix |
| CVE-2023-4734 | Integer overflow or wraparound in Vim/Vim | 7.8v3.1 | 0.6% | 2023-09-02 | Fix |
| CVE-2023-4718 | Font Awesome 4 Menus WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-09-02 | |
| CVE-2023-41633 | Fossies catdoc null pointer dereference | 5.5v3.1 | 0.2% | 2023-09-01 | |
| CVE-2023-41628 | O-RAN-SC E2 denial of service | 7.5v3.1 | 1.7% | 2023-09-01 | |
| CVE-2023-41627 | O-RAN Software Community ric-plt-lib-rmr v4.9.0 does not validate the source of the routing tables it receives, potentially allowing attackers to send forged routing tables to the device. | 7.5v3.1 | 1.2% | 2023-09-01 | Fix |
| CVE-2023-41364 | Metaways Tine SQL injection | 9.8v3.1 | 0.8% | 2023-09-01 | |
| CVE-2023-41051 | Default functions in VolatileMemory trait lack bounds checks in vm-memory | 2.5CNA v3.1 | 0.3% | 2023-09-01 | Fix |
| CVE-2023-41049 | Improper neutralization of script in attributes in @dcl/single-sign-on-client | 7.5CNA v3.1 | 0.5% | 2023-09-01 | Fix |
| CVE-2023-41046 | Velocity execution without script rights in Xwiki platform | 6.3CNA v3.1 | 0.5% | 2023-09-01 | Fix |
| CVE-2023-40980 | diaowen DWSurvey file upload | 9.8v3.1 | 1.1% | 2023-09-01 | |
| CVE-2023-40970 | SLIMS Senayan Library Management System SQL injection | 8.8v3.1 | 0.6% | 2023-09-01 | |
| CVE-2023-40969 | SLIMS Senayan Library Management System server-side request forgery | 6.1v3.1 | 0.3% | 2023-09-01 | |
| CVE-2023-40968 | Hzeller Timg buffer overflow | 7.5v3.1 | 0.8% | 2023-09-01 | Fix |
| CVE-2023-40771 | DataEase vulnerable to SQL injection | 7.5v3.1 | 0.7% | 2023-09-01 | |
| CVE-2023-40239 | Lexmark CS310 XML external entity injection | 7.5v3.1 | 0.5% | 2023-09-01 | Fix |
| CVE-2023-39714 | Multiple cross-site scripting (XSS) vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name, Address, and Company parameters under the Add New Member section. | 6.1v3.1 | 0.5% | 2023-09-01 | Exploit code |
| CVE-2023-39710 | Multiple cross-site scripting (XSS) vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name, Address, and Company parameters under the Add Customer section. | 6.1v3.1 | 0.5% | 2023-09-01 | Exploit code |
| CVE-2023-39703 | Typora Markdown Editor component cross-site scripting | 6.1v3.1 | 0.5% | 2023-09-01 | |
| CVE-2023-39685 | Hjson hson-java vulnerable to denial of service | 7.5v3.1 | 0.7% | 2023-09-01 | Fix |
| CVE-2023-39631 | Langchain vulnerable to arbitrary code execution via the evaluate function in the numexpr library | 9.8v3.1 | 1.3% | 2023-09-01 | Fix |
| CVE-2023-39582 | chamilo-lms SQL injection | 4.9v3.1 | 0.5% | 2023-09-01 | Fix |
| CVE-2023-37997 | Post List With Featured Image WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-09-01 | |
| CVE-2023-37994 | Art Decoration Shortcode WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-09-01 | |
| CVE-2023-37986 | YourMembership Single Sign On WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-09-01 | Fix |
| CVE-2023-37893 | Coming Soon Chop Chop WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-09-01 | |
| CVE-2023-37830 | General-solutions Contwise CASE2 General Solutions Steiner GmbH CASE cross-site scripting | 6.1v3.1 | 0.4% | 2023-09-01 | |
| CVE-2023-37829 | General-solutions Contwise CASE2 General Solutions Steiner GmbH CASE cross-site scripting | 6.1v3.1 | 0.4% | 2023-09-01 | |
| CVE-2023-37828 | General-solutions Contwise CASE2 General Solutions Steiner GmbH CASE cross-site scripting | 6.1v3.1 | 0.3% | 2023-09-01 | |
| CVE-2023-37827 | General-solutions Contwise CASE2 General Solutions Steiner GmbH CASE cross-site scripting | 6.1v3.1 | 0.4% | 2023-09-01 | |
| CVE-2023-37826 | General-solutions Contwise CASE2 General Solutions Steiner GmbH CASE cross-site scripting | 6.1v3.1 | 0.3% | 2023-09-01 | |
| CVE-2023-36328 | Libtommath mp_grow integer overflow | 9.8v3.1 | 1.3% | 2023-09-01 | Fix |
| CVE-2023-36327 | Relic integer overflow | 9.8v3.1 | 0.8% | 2023-09-01 | |
| CVE-2023-36326 | Relic integer overflow | 9.8v3.1 | 0.8% | 2023-09-01 | |
| CVE-2023-36187 | NETGEAR R6400v2 buffer overflow | 9.8v3.1 | 0.9% | 2023-09-01 | Fix |
| CVE-2023-36100 | Macwk IceCMS improper privilege management | 9.8v3.1 | 0.6% | 2023-09-01 | |
| CVE-2023-36088 | Vesoft Nebulagraph Studio server-side request forgery | 7.5v3.1 | 0.6% | 2023-09-01 | |
| CVE-2023-36076 | Pocketmanga Smanga SQL injection | 9.8v3.1 | 2.4% | 2023-09-01 | Exploit code |
| CVE-2023-34011 | ShopConstruct WordPress plugin cross-site scripting (XSS) | 4.8NVD v3.1 | 0.4% | 2023-09-01 | |
| CVE-2023-28366 | eclipse Mosquitto memory leak | 7.5v3.1 | 1.3% | 2023-09-01 | Fix |
| CVE-2023-25488 | WP Default Feature Image WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-09-01 | |
| CVE-2023-25477 | Video Gallery WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-09-01 | Fix |
| CVE-2023-25044 | Social Share Boost WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-09-01 | Fix |
| CVE-2023-25042 | oAuth Twitter Feed for Developers WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-09-01 | |
| CVE-2023-24675 | Bludit cross-site scripting | 4.8v3.1 | 0.5% | 2023-09-01 | |
| CVE-2023-24674 | Bludit missing authorization | 7.8v3.1 | 0.2% | 2023-09-01 | |
| CVE-2023-24412 | Image Social Feed WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-09-01 | |
| CVE-2023-23763 | Information disclosure in GitHub Enterprise Server leading to private repository leakage | 5.3CNA v3.1 | 0.7% | 2023-09-01 | Fix |
| CVE-2023-4722 | Integer overflow or wraparound in gpac/gpac | 5.5v3.1 | 0.3% | 2023-09-01 | Fix |
| CVE-2023-4721 | Out-of-bounds read in gpac/gpac | 5.5v3.1 | 0.3% | 2023-09-01 | Fix |
| CVE-2023-4720 | Floating Point Comparison with Incorrect Operator in gpac/gpac | 5.5v3.1 | 0.3% | 2023-09-01 | Fix |
| CVE-2023-4714 | PlayTube redirect information disclosure | 7.5v3.1 | 5.2% | 2023-09-01 | Nuclei |
| CVE-2023-4713 | IBOS OA addcomment addComment SQL injection | 8.8v3.1 | 0.7% | 2023-09-01 | |
| CVE-2023-4712 | Xintian Smart Table Integrated Management System AddUpdateRole.aspx SQL injection | 9.8v3.1 | 0.7% | 2023-09-01 | |
| CVE-2023-4711 | D-Link DAR-8000-10 decodmail.php os command injection | 8.1v3.1 | 6.8% | 2023-09-01 | |
| CVE-2023-4710 | TOTVS RM portal cross-site scripting | 6.1v3.1 | 0.4% | 2023-09-01 | |
| CVE-2023-4709 | TOTVS RM Portal Login.aspx cross-site scripting | 6.1NVD v3.1 | 0.4% | 2023-09-01 | |
| CVE-2023-4708 | Infosoftbd Clcknshop GET parameter all SQL injection | 9.8v3.1 | 31.2% | 2023-09-01 | Exploit code |
| CVE-2023-4707 | Infosoftbd Clcknshop all cross-site scripting | 6.1v3.1 | 0.5% | 2023-09-01 | |
| CVE-2023-4704 | External control of system or configuration setting in instantsoft/icms2 | 4.9NVD v3.1 | 0.9% | 2023-09-01 | Fix |
| CVE-2023-4698 | Improper input validation in usememos/memos | 7.5v3.1 | 0.8% | 2023-09-01 | Exploit codeFix |
| CVE-2023-4697 | Improper privilege management in usememos/memos | 8.8v3.1 | 0.7% | 2023-09-01 | Fix |
| CVE-2023-4696 | Improper access control in usememos/memos | 9.8NVD v3.1 | 1.1% | 2023-09-01 | Fix |
| CVE-2023-4695 | pkp-lib random number generator vulnerability | 8.1NVD v3.1 | 0.7% | 2023-09-01 | Fix |
| CVE-2023-4647 | Allocation of resources without limits or throttling in GitLab | 5.3CNA v3.1 | 0.7% | 2023-09-01 | Fix |
| CVE-2023-4481 | Juniper Networks Junos OS Routing protocol daemon improper input validation | 7.5CNA v3.1 | 18.2% | 2023-09-01 | Fix |
| CVE-2023-4378 | Insertion of sensitive information into sent data in GitLab | 5.5CNA v3.1 | 0.5% | 2023-09-01 | Fix |
| CVE-2023-4018 | Direct request (forced browsing) in GitLab | 4.3CNA v3.1 | 0.5% | 2023-09-01 | Fix |
| CVE-2023-3950 | Cleartext storage of sensitive information in GitLab | 5.5CNA v3.1 | 0.3% | 2023-09-01 | Fix |
| CVE-2023-3915 | Incorrect Execution-Assigned Permissions in GitLab | 6.5CNA v3.1 | 0.7% | 2023-09-01 | Fix |
| CVE-2023-3297 | Canonical AccountService use-after-free | 8.1CNA v3.1 | 0.3% | 2023-09-01 | Fix |
| CVE-2023-3210 | Inefficient regular expression complexity in GitLab | 6.5CNA v3.1 | 0.8% | 2023-09-01 | Fix |
| CVE-2023-3205 | Inefficient regular expression complexity in GitLab | 6.5CNA v3.1 | 0.8% | 2023-09-01 | Fix |
| CVE-2023-1555 | Missing authorization in GitLab | 2.7CNA v3.1 | 0.5% | 2023-09-01 | Fix |
| CVE-2023-1523 | Canonical snapd injection | 10.0CNA v3.1 | 1.4% | 2023-09-01 | Fix |
| CVE-2023-1279 | URL redirection to untrusted site in GitLab | 2.6CNA v3.1 | 0.4% | 2023-09-01 | Fix |
| CVE-2023-0120 | Incorrect authorization in GitLab | 3.5CNA v3.1 | 0.4% | 2023-09-01 | Fix |