CVE-2023 records published in October 2023

This page lists the 2,534 CVE-2023 records published in October 2023, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 19 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2023 list filters these records by severity or signal.

Critical
39315.5% of these records
Listed in CISA KEV
190.7% of these records
Reported exploited
1under 0.1% of these records
Detection signal
512.0% of these records
Exploit code
993.9% of these records
Actionable vendor fix
1,76569.7% of these records

Figures as of 2026-10-24 13:46 UTC. Records published in October 2023 have had from about 36 months to about 37 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.

CVE-2023 records published in October 2023, newest first: records 1 to 1,000 of 2,534
CVE Summary CVSS EPSS Published Signals
CVE-2023-47174Thorntech SFTP Gateway deserialization of untrusted data9.8v3.11.0%2023-10-31Fix
CVE-2023-46993TOTOLINK A3300R command injection9.8v3.11.5%2023-10-31
CVE-2023-46992TOTOLINK A3300R incorrect authorization7.5v3.10.5%2023-10-31
CVE-2023-46979TOTOLINK X6000R command injection9.8v3.11.5%2023-10-31
CVE-2023-46978TOTOLINK X6000R missing authentication7.5v3.10.5%2023-10-31
CVE-2023-46977TOTOLINK LR1200GB out-of-bounds write9.8v3.18.7%2023-10-31
CVE-2023-46976TOTOLINK A3300R command injection9.8v3.11.5%2023-10-31
CVE-2023-46723Lte-pic32-writer's sendto.txt may disclose URL and the API key8.9CNA v3.10.4%2023-10-31Fix
CVE-2023-46722Pimcore Admin Classic Bundle cross-site scripting (XSS) in PDF previews6.1CNA v3.10.5%2023-10-31Fix
CVE-2023-46622WPPizza WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.3%2023-10-31Fix
CVE-2023-46485TOTOLINK X6000R command injection9.8v3.11.2%2023-10-31
CVE-2023-46484TOTOLINK X6000R command injection9.8v3.11.2%2023-10-31
CVE-2023-46451Mayuri K Best Courier Management System cross-site scripting5.4v3.10.4%2023-10-31Exploit code
CVE-2023-463781234n MiniCMS stored cross-site scripting5.4v3.10.4%2023-10-31
CVE-2023-46361Artifex JBIG2DEC resource exhaustion6.5v3.10.8%2023-10-31Fix
CVE-2023-46356Blmodules CSV Feeds Pro SQL injection9.8v3.10.6%2023-10-31
CVE-2023-46313Zotpress WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-10-31Fix
CVE-2023-46312Smart Online Order for Clover WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.3%2023-10-31Fix
CVE-2023-46256PX4-Autopilot heap buffer overflow Bug4.4CNA v3.10.6%2023-10-31
CVE-2023-46255authzed spicedb `SPICEDB_DATASTORE_CONN_URI` is leaked when URI cannot be parsed4.2CNA v3.10.4%2023-10-31Fix
CVE-2023-46250pypdf possible infinite loop when PdfWriter(clone_from) is used with a PDF5.1CNA v3.10.2%2023-10-31Fix
CVE-2023-46249authentik potential installation takeover when default admin user is deleted9.7CNA v3.10.7%2023-10-31Fix
CVE-2023-46248Overwrite of builtin Cody commands facilitates RCE9.1CNA v3.11.1%2023-10-31Fix
CVE-2023-46245Kimai (Authenticated) SSTI to RCE by Uploading a Malicious Twig file7.2CNA v3.11.5%2023-10-31Fix
CVE-2023-46240CodeIgniter4 error handler information disclosure7.5CNA v3.10.6%2023-10-31Fix
CVE-2023-46239quic-go vulnerable to pointer dereference that can lead to panic7.5CNA v3.10.8%2023-10-31Fix
CVE-2023-46237fogproject FOG path traversal via unauthenticated endpoint5.8CNA v3.10.5%2023-10-31Fix
CVE-2023-46236fogproject FOG SSRF via unauthenticated endpoint(s)8.6CNA v3.10.5%2023-10-31Fix
CVE-2023-46235fogproject FOG stored XSS on log screen via unsanitized request logging5.4CNA v3.10.3%2023-10-31Fix
CVE-2023-46210WC Captcha WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2023-10-31
CVE-2023-46139KernelSU signature validation mismatch5.0CNA v3.10.2%2023-10-31Fix
CVE-2023-46138JumpServer default admin user email leak password reset3.7CNA v3.10.3%2023-10-31Fix
CVE-2023-46129nats-io nkeys xkeys Seal encryption used fixed key for all encryption7.5CNA v3.10.4%2023-10-31Fix
CVE-2023-46040GetSimpleCMS cross-site scripting5.4v3.10.5%2023-10-31
CVE-2023-45996SLIMS Senayan Library Management System SQL injection8.8v3.11.1%2023-10-31
CVE-2023-45955Nanoleaf Light Strip denial of service7.5v3.10.6%2023-10-31
CVE-2023-45899Idnovate Superuser incorrect authorization7.5v3.10.8%2023-10-31
CVE-2023-45378Hdclic Prestablog SQL injection9.8v3.10.5%2023-10-31Fix
CVE-2023-44484Online Blood Donation Management System stored cross-site scripting (XSS)6.1CNA v3.10.4%2023-10-31
CVE-2023-43796Synapse vulnerable to leak of remote user device information5.3CNA v3.10.9%2023-10-31Fix
CVE-2023-43295Click Studios Passwordstate cross-site request forgery3.5v3.10.2%2023-10-31
CVE-2023-43139Franfinance OS command injection9.8v3.10.9%2023-10-31
CVE-2023-42658InSpec Archive command vulnerable to Maliciously Crafted Profile8.8CNA v3.10.3%2023-10-31Fix
CVE-2023-42425Turing Edge+ EVC5FD improper certificate validation9.8v3.10.8%2023-10-31
CVE-2023-40681Groundhogg WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2023-10-31Fix
CVE-2023-40050Automate vulnerable to Malicious Content Uploaded through Embedded Compliance application9.9CNA v3.11.2%2023-10-31Fix
CVE-2023-39695Elenos ETG150 insufficient session expiration5.3v3.10.4%2023-10-31
CVE-2023-39610TP-Link Tapo C100 denial of service6.5v3.10.3%2023-10-31
CVE-2023-38994Univention Corporate Server cleartext storage of sensitive information7.8v3.10.3%2023-10-31
CVE-2023-37966User Activity Log WordPress plugin SQL injection9.8v3.10.7%2023-10-31Fix
CVE-2023-37833Elenos ETG150 improper access control2.7v3.10.4%2023-10-31
CVE-2023-37832Elenos ETG150 missing brute-force protection7.5v3.10.5%2023-10-31
CVE-2023-37831Elenos ETG150 response discrepancy5.3v3.10.5%2023-10-31
CVE-2023-37243Atera Agent Package Availability insecure temporary file7.8NVD v3.10.2%2023-10-31
CVE-2023-36508Contact Form to DB by BestWebSoft WordPress plugin SQL injection9.8v3.10.7%2023-10-31Fix
CVE-2023-36263Store-opart Op'art LIMIT Quantity SQL injection9.8v3.10.5%2023-10-31Fix
CVE-2023-35879WooCommerce Product Vendors WordPress plugin SQL injection9.8v3.10.6%2023-10-31Fix
CVE-2023-33927Multiple Page Generator Plugin MPG WordPress plugin SQL injection9.8v3.10.7%2023-10-31Fix
CVE-2023-31794Artifex MuPDF uncontrolled recursion5.5v3.10.2%2023-10-31Fix
CVE-2023-31212Contact Form Entries WordPress plugin SQL injection9.8v3.10.8%2023-10-31Fix
CVE-2023-28777LearnDash LMS WordPress plugin SQL injection8.8v3.10.7%2023-10-31Fix
CVE-2023-27846Theme Volty Cms Blog PrestaShop SQL injection9.8v3.10.6%2023-10-31Fix
CVE-2023-25047RSVPMaker WordPress plugin SQL command improper neutralization7.2v3.10.7%2023-10-31Fix
CVE-2023-25045RSVPMaker WordPress plugin SQL command improper neutralization7.2v3.10.6%2023-10-31Fix
CVE-2023-24410Contact Form Plugin WordPress plugin SQL command improper neutralization9.8v3.10.7%2023-10-31Fix
CVE-2023-24000GamiPress WordPress plugin SQL injection9.8v3.12.6%2023-10-31NucleiFix
CVE-2023-22518Atlassian Confluence Data Center and Server improper authorization10.0CNA v3.0100.0%2023-10-31KEVNucleiMetasploitEmerging ThreatsExploit codeFix
CVE-2023-20886VMware Workspace ONE UEM console open redirect8.8CNA v3.10.4%2023-10-31Fix
CVE-2023-5873Cross-site scripting (XSS) Stored in pimcore/pimcore5.4v3.10.3%2023-10-31Fix
CVE-2023-5867Cross-site scripting (XSS) Stored in thorsten/phpMyFAQ5.4v3.10.4%2023-10-31Fix
CVE-2023-5866Sensitive Cookie in HTTPS Session without Secure attribute in thorsten/phpMyFAQ5.7v3.10.3%2023-10-31Fix
CVE-2023-5865Insufficient session expiration in thorsten/phpMyFAQ9.8v3.10.6%2023-10-31Fix
CVE-2023-5864Cross-site scripting (XSS) Stored in thorsten/phpMyFAQ4.8NVD v3.10.5%2023-10-31Fix
CVE-2023-5863Cross-site scripting (XSS) Reflected in thorsten/phpMyFAQ6.1NVD v3.11.1%2023-10-31NucleiFix
CVE-2023-5862Missing authorization in hamza417/Inure3.3NVD v3.10.3%2023-10-31Fix
CVE-2023-5861Cross-site scripting (XSS) Stored in microweber/microweber4.8v3.10.4%2023-10-31Fix
CVE-2023-5739HP PC Hardware Diagnostics Windows improper privilege management7.8v3.10.2%2023-10-31Fix
CVE-2023-5519EventPrime for WordPress Booking creation via CSRF4.3NVD v3.10.2%2023-10-31Fix
CVE-2023-5464Jquery accordion slideshow WordPress plugin authenticated (Subscriber+) SQL injection via shortcode6.5NVD v3.10.8%2023-10-31Fix
CVE-2023-5458CITS Support svg, webp Media and TTF,OTF File Upload WordPress plugin Author+ stored XSS via SVG5.4NVD v3.10.4%2023-10-31Fix
CVE-2023-5439Wp photo text slider 50 WordPress plugin authenticated (Subscriber+) SQL injection via shortcode6.5NVD v3.10.8%2023-10-31Fix
CVE-2023-5438wp image slideshow WordPress plugin authenticated (Subscriber+) SQL injection via shortcode6.5NVD v3.10.8%2023-10-31Fix
CVE-2023-5437WP fade in text news WordPress plugin authenticated (Subscriber+) SQL injection via shortcode6.5NVD v3.10.8%2023-10-31Fix
CVE-2023-5436Vertical marquee WordPress plugin authenticated (Subscriber+) SQL injection via shortcode6.5NVD v3.10.8%2023-10-31Fix
CVE-2023-5435Up down image slideshow gallery WordPress plugin SQL injection6.5NVD v3.10.8%2023-10-31Fix
CVE-2023-5434Superb slideshow gallery WordPress plugin authenticated (Subscriber+) SQL injection via shortcode6.5NVD v3.10.8%2023-10-31Fix
CVE-2023-5433Message ticker WordPress plugin authenticated (Subscriber+) SQL injection via shortcode6.5NVD v3.10.8%2023-10-31Fix
CVE-2023-5431Left right image slideshow gallery WordPress plugin SQL injection6.5NVD v3.10.8%2023-10-31Fix
CVE-2023-5430Jquery news ticker WordPress plugin authenticated (Subscriber+) SQL injection via shortcode6.5NVD v3.10.8%2023-10-31Fix
CVE-2023-5429Information Reel WordPress plugin authenticated (Subscriber+) SQL injection via shortcode6.5NVD v3.10.8%2023-10-31Fix
CVE-2023-5428Image vertical reel scroll slideshow WordPress plugin SQL injection6.5NVD v3.10.8%2023-10-31Fix
CVE-2023-5412Image horizontal reel scroll slideshow WordPress plugin SQL injection6.5NVD v3.11.5%2023-10-31Exploit codeFix
CVE-2023-5360Royal Elementor Addons and Templates WordPress plugin unauthenticated arbitrary file upload9.8NVD v3.185.7%2023-10-31NucleiMetasploitEmerging ThreatsExploit codeFix
CVE-2023-5307Photos and Files Contest Gallery Contact Form WordPress plugin unauthenticated stored XSS6.1NVD v3.10.5%2023-10-31Fix
CVE-2023-5243Login screen manager WordPress plugin Admin+ stored XSS4.8NVD v3.10.4%2023-10-31
CVE-2023-5238EventPrime WordPress plugin reflected HTML injection on keyword parameter6.1NVD v3.10.4%2023-10-31Fix
CVE-2023-5237Memberlite Shortcodes WordPress plugin Contributor+ stored XSS via shortcode5.4NVD v3.10.4%2023-10-31Fix
CVE-2023-5229E2Pdf WordPress plugin Admin+ stored Cross-Site Scriping4.8NVD v3.10.4%2023-10-31Fix
CVE-2023-5211Fattura24 WordPress plugin reflected cross-site scripting6.1NVD v3.10.4%2023-10-31Fix
CVE-2023-5116Live updates from Excel WordPress plugin stored cross-site scripting5.4v3.10.4%2023-10-31Fix
CVE-2023-5114idbbee WordPress plugin authenticated (Contributor+) stored cross-site scripting via shortcode5.4v3.10.4%2023-10-31
CVE-2023-5099HTML filter and csv-file search WordPress plugin local file inclusion8.8v3.10.9%2023-10-31Fix
CVE-2023-5098Campaign Monitor Forms WordPress plugin Subscriber+ arbitrary options update8.1NVD v3.10.6%2023-10-31Fix
CVE-2023-5073iframe forms WordPress plugin stored cross-site scripting5.4v3.10.4%2023-10-31
CVE-2023-4836WordPress File Sharing plugin Subscriber+ sensitive data and files exposure via IDOR4.3NVD v3.10.5%2023-10-31Fix
CVE-2023-4823WP Meta and Date Remover WordPress plugin Subscriber+ stored XSS5.4NVD v3.10.4%2023-10-31Fix
CVE-2023-4390Popup box WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.4%2023-10-31Fix
CVE-2023-4251EventPrime WordPress plugin Booking creation via CSRF4.3NVD v3.10.2%2023-10-31Fix
CVE-2023-4250EventPrime WordPress plugin reflected XSS6.1NVD v3.10.4%2023-10-31Fix
CVE-2023-3955Kubernetes Windows nodes Insufficient input sanitization leads to privilege escalation8.8CNA v3.14.0%2023-10-31Fix
CVE-2023-3676Kubernetes Windows nodes Insufficient input sanitization leads to privilege escalation8.8CNA v3.113.2%2023-10-31Fix
CVE-2023-47104Vareille Tinyfiledialogs command injection9.8v3.10.7%2023-10-30
CVE-2023-47101Securepoint OpenVPN-Client improper privilege management7.8v3.10.2%2023-10-30
CVE-2023-47090Linux Foundation nats-server NATS.io: Adding accounts for just the system account adds auth bypass6.5v3.10.7%2023-10-30Fix
CVE-2023-46867Color Demoiccmax null pointer dereference6.5v3.10.5%2023-10-30
CVE-2023-46866Color Demoiccmax out-of-bounds write6.5v3.10.6%2023-10-30
CVE-2023-46865Craterapp crater code injection7.2v3.120.3%2023-10-30Exploit code
CVE-2023-46864peppermint path traversal5.3v3.10.7%2023-10-30
CVE-2023-46863peppermint path traversal7.5v3.10.9%2023-10-30
CVE-2023-46502OpenCRX allows a remote attacker to execute arbitrary code via a crafted request9.8v3.10.7%2023-10-30Fix
CVE-2023-46478miniCal insecure direct object reference8.8v3.11.0%2023-10-30Exploit code
CVE-2023-45956Govee Led Strip denial of service7.5v3.10.5%2023-10-30
CVE-2023-45799MLSoft TCO!stream remote code execution9.8v3.10.3%2023-10-30Fix
CVE-2023-45798Yettiesoft VestCert remote code execution9.8v3.10.6%2023-10-30Fix
CVE-2023-45797DreamSecurity MagicLine buffer overflow9.8v3.10.8%2023-10-30Fix
CVE-2023-45780Google Android Print service privilege escalation7.3v3.10.1%2023-10-30Fix
CVE-2023-45746Six Apart Movable Type Premium cross-site scripting5.4v3.10.4%2023-10-30Fix
CVE-2023-45672Frigate unsafe deserialization in `load_config_with_no_duplicates` of `Frigate/util/builtin.py`7.5CNA v3.11.4%2023-10-30Fix
CVE-2023-45671Frigate camera name API endpoint reflected cross-site scripting4.7CNA v3.11.4%2023-10-30NucleiFix
CVE-2023-45670Frigate cross-site request forgery in `config_save` and `config_set` request handlers7.5CNA v3.10.4%2023-10-30Fix
CVE-2023-44397CloudExplorer-Dev CloudExplorer-Lite CloudExplorer Lite permission bypass7.5CNA v3.10.6%2023-10-30Fix
CVE-2023-44323Adobe Acrobat for Edge PDF Jbig2 memory-corruption vulnerability MSFT T55.5CNA v3.11.4%2023-10-30Fix
CVE-2023-44141Takuya Matsuyama Inkdrop code injection7.8v3.10.3%2023-10-30Fix
CVE-2023-43798BigBlueButton blind SSRF when Uploading Presentation (mitigation bypass)5.6CNA v3.10.4%2023-10-30Fix
CVE-2023-43797BigBlueButton stored cross-site scripting vulnerability at Guest Lobby6.3CNA v3.10.4%2023-10-30Fix
CVE-2023-43792baserCMS code injection vulnerability in Mail form feature5.3CNA v3.00.6%2023-10-30Fix
CVE-2023-43649baserCMS CSRF vulnerability in Content preview feature4.7CNA v3.10.3%2023-10-30Fix
CVE-2023-43648baserCMS directory traversal vulnerability in form submission data management feature4.9CNA v3.11.0%2023-10-30Fix
CVE-2023-43647baserCMS cross-site scripting vulnerability in file upload feature6.1CNA v3.10.5%2023-10-30Fix
CVE-2023-42804BigBlueButton path traversal Reading certain file extensions3.1CNA v3.10.5%2023-10-30Fix
CVE-2023-42803BigBlueButton unrestricted file upload5.3CNA v3.10.5%2023-10-30Fix
CVE-2023-42431Hallo Welt! BlueSpice potential XSS on user preferences page5.4v3.10.3%2023-10-30
CVE-2023-42323Mnbvcxz131421 Douhaocms cross-site request forgery8.8v3.10.4%2023-10-30
CVE-2023-41891FlyteAdmin SQL injection in List Filters3.5CNA v3.10.9%2023-10-30Fix
CVE-2023-40101Google Android canonicalize_md.c out-of-bounds read5.5v3.10.1%2023-10-30Fix
CVE-2023-36920Clickjacking vulnerability in SAP Enable Now6.1CNA v3.10.4%2023-10-30Fix
CVE-2023-21398Google Android sdksandbox privilege escalation7.8v3.10.1%2023-10-30Fix
CVE-2023-21397Google Android Setup Wizard privilege escalation7.8v3.10.1%2023-10-30Fix
CVE-2023-21396Google Android Activity Manager privilege escalation7.8v3.10.1%2023-10-30Fix
CVE-2023-21395Google Android Bluetooth out-of-bounds read6.5v3.10.2%2023-10-30Fix
CVE-2023-21394Google Android TelecomServiceImpl.java information disclosure5.5v3.10.1%2023-10-30Fix
CVE-2023-21393Google Android settings privilege escalation7.8v3.10.1%2023-10-30Fix
CVE-2023-21392Google Android Bluetooth privilege escalation8.8v3.10.2%2023-10-30Fix
CVE-2023-21391Google Android Messaging denial of service7.5v3.10.4%2023-10-30Fix
CVE-2023-21390Google Android Sim privilege escalation7.8v3.10.1%2023-10-30Fix
CVE-2023-21389Google Android settings privilege escalation7.8v3.10.1%2023-10-30Fix
CVE-2023-21388Google Android settings privilege escalation7.8v3.10.1%2023-10-30Fix
CVE-2023-21387Google Android User Backup Manager information disclosure4.4v3.10.1%2023-10-30Fix
CVE-2023-21385Google Android Whitechapel out-of-bounds read5.5v3.10.1%2023-10-30Fix
CVE-2023-21384Google Android Package Manager insecure permissions5.5v3.10.1%2023-10-30Fix
CVE-2023-21383Google Android settings information disclosure5.5v3.10.1%2023-10-30Fix
CVE-2023-21382Google Android Content Resolver information disclosure5.5v3.10.1%2023-10-30Fix
CVE-2023-21381Google Android Media Resource Manager arbitrary code execution7.8v3.10.1%2023-10-30Fix
CVE-2023-21380Google Android Bluetooth out-of-bounds write6.7v3.10.1%2023-10-30Fix
CVE-2023-21379Google Android Bluetooth out-of-bounds read4.4v3.10.1%2023-10-30Fix
CVE-2023-21378Google Android Telecomm privilege escalation7.8v3.10.1%2023-10-30Fix
CVE-2023-21377Google Android SELinux Policy information disclosure5.5v3.10.1%2023-10-30Fix
CVE-2023-21376Google Android Telephony information disclosure5.5v3.10.1%2023-10-30Fix
CVE-2023-21375Google Android Sysproxy out-of-bounds write7.8v3.10.1%2023-10-30Fix
CVE-2023-21374Google Android System UI privilege escalation7.8v3.10.1%2023-10-30Fix
CVE-2023-21373Google Android Telephony privilege escalation7.8v3.10.1%2023-10-30Fix
CVE-2023-21372Google Android libdexfile out-of-bounds read7.8v3.10.1%2023-10-30Fix
CVE-2023-21371Google Android Secure Element out-of-bounds write6.7v3.10.1%2023-10-30Fix
CVE-2023-21370Google Android the Security Element API out-of-bounds write6.7v3.10.1%2023-10-30Fix
CVE-2023-21369Google Android Usage Access denial of service5.5v3.10.1%2023-10-30Fix
CVE-2023-21368Google Android Audio out-of-bounds read5.5v3.10.1%2023-10-30Fix
CVE-2023-21367Google Android Scudo out-of-bounds read5.5v3.10.1%2023-10-30Fix
CVE-2023-21366Google Android Scudo information disclosure5.5v3.10.1%2023-10-30Fix
CVE-2023-21365Google Android Contacts crash5.5v3.10.1%2023-10-30Fix
CVE-2023-21364Google Android ContactsProvider crash5.5v3.10.1%2023-10-30Fix
CVE-2023-21362Google Android Usage denial of service5.5v3.10.1%2023-10-30Fix
CVE-2023-21361Google Android use-after-free8.8v3.10.1%2023-10-30Fix
CVE-2023-21360Google Android Bluetooth out-of-bounds write6.7v3.10.1%2023-10-30Fix
CVE-2023-21359Google Android Bluetooth out-of-bounds read4.4v3.10.1%2023-10-30Fix
CVE-2023-21358Google Android improper certificate validation7.8v3.10.1%2023-10-30Fix
CVE-2023-21357Google Android NFC out-of-bounds read4.4v3.10.1%2023-10-30Fix
CVE-2023-21356Google Android Bluetooth out-of-bounds write8.8v3.10.1%2023-10-30Fix
CVE-2023-21355Google Android libaudioclient out-of-bounds write7.8v3.10.1%2023-10-30Fix
CVE-2023-21354Google Android Package Manager service information disclosure5.5v3.10.1%2023-10-30Fix
CVE-2023-21353Google Android NFA out-of-bounds read7.5v3.10.4%2023-10-30Fix
CVE-2023-21352Google Android NFA out-of-bounds read5.5v3.10.1%2023-10-30Fix
CVE-2023-21351Google Android multiple locations privilege escalation7.8v3.10.1%2023-10-30Fix
CVE-2023-21350Google Android Media Projection information disclosure5.5v3.10.1%2023-10-30Fix
CVE-2023-21349Google Android Package Manager information disclosure3.3v3.10.1%2023-10-30Fix
CVE-2023-21348Google Android Window Manager information disclosure3.3v3.10.1%2023-10-30Fix
CVE-2023-21347Google Android Bluetooth out-of-bounds read7.5v3.10.4%2023-10-30Fix
CVE-2023-21346Google Android the Device Idle controller information disclosure3.3v3.10.1%2023-10-30Fix
CVE-2023-21345Google Android Game Manager service information disclosure3.3v3.10.1%2023-10-30Fix
CVE-2023-21344Google Android Job Scheduler information disclosure5.5v3.10.1%2023-10-30Fix
CVE-2023-21343Google Android ActivityStarter privilege escalation7.8v3.10.1%2023-10-30Fix
CVE-2023-21342Google Android RemoteSpeechRecognitionService.java privilege escalation7.8v3.10.1%2023-10-30Fix
CVE-2023-21341Google Android Permission Manager privilege escalation7.8v3.10.1%2023-10-30Fix
CVE-2023-21340Google Android Telecomm information disclosure5.5v3.10.1%2023-10-30Fix
CVE-2023-21339Google Android Minikin denial of service7.5v3.10.4%2023-10-30Fix
CVE-2023-21338Google Android Input method privilege escalation5.5v3.10.1%2023-10-30Fix
CVE-2023-21337Google Android InputMethod privilege escalation7.8v3.10.1%2023-10-30Fix
CVE-2023-21336Google Android Input method information disclosure5.5v3.10.1%2023-10-30Fix
CVE-2023-21335Google Android settings information disclosure5.5v3.10.1%2023-10-30Fix
CVE-2023-21334Google Android App Ops service information disclosure5.5v3.10.1%2023-10-30Fix
CVE-2023-21333Google Android Text services information disclosure5.5v3.10.1%2023-10-30Fix
CVE-2023-21332Google Android Text services information disclosure5.5v3.10.1%2023-10-30Fix
CVE-2023-21331Google Android InputMethod information disclosure5.5v3.10.1%2023-10-30Fix
CVE-2023-21330Google Android Overlay Manager information disclosure5.5v3.10.1%2023-10-30Fix
CVE-2023-21329Google Android Activity Manager information disclosure5.5v3.10.1%2023-10-30Fix
CVE-2023-21328Google Android Package Installer privilege escalation7.8v3.10.1%2023-10-30Fix
CVE-2023-21327Google Android Permission Manager information disclosure5.5v3.10.1%2023-10-30Fix
CVE-2023-21326Google Android Package Manager service information disclosure5.5v3.10.1%2023-10-30Fix
CVE-2023-21325Google Android settings information disclosure5.5v3.10.1%2023-10-30Fix
CVE-2023-21324Google Android Package Installer privilege escalation7.8v3.10.1%2023-10-30Fix
CVE-2023-21323Google Android Activity Manager information disclosure5.5v3.10.1%2023-10-30Fix
CVE-2023-21321Google Android Package Manager information disclosure5.5v3.10.1%2023-10-30Fix
CVE-2023-21320Google Android Device Policy information disclosure5.5v3.10.1%2023-10-30Fix
CVE-2023-21319Google Android UsageStatsService information disclosure5.5v3.10.1%2023-10-30Fix
CVE-2023-21318Google Android Content information disclosure5.5v3.10.1%2023-10-30Fix
CVE-2023-21317Google Android ContentService information disclosure5.5v3.10.1%2023-10-30Fix
CVE-2023-21316Google Android Content information disclosure5.5v3.10.1%2023-10-30Fix
CVE-2023-21315Google Android Bluetooth out-of-bounds read6.5v3.10.1%2023-10-30Fix
CVE-2023-21314Google Android Bluetooth out-of-bounds read4.4v3.10.1%2023-10-30Fix
CVE-2023-21313Google Android Core privilege escalation7.8v3.10.1%2023-10-30Fix
CVE-2023-21312Google Android IntentResolver information disclosure5.5v3.10.1%2023-10-30Fix
CVE-2023-21311Google Android settings information disclosure5.5v3.10.1%2023-10-30Fix
CVE-2023-21310Google Android Bluetooth out-of-bounds write6.7v3.10.1%2023-10-30Fix
CVE-2023-21309Google Android libcore out-of-bounds read5.5v3.10.1%2023-10-30Fix
CVE-2023-21308Google Android Composer out-of-bounds read5.5v3.10.1%2023-10-30Fix
CVE-2023-21307Google Android Bluetooth information disclosure5.0v3.10.1%2023-10-30Fix
CVE-2023-21306Google Android ContentService information disclosure5.5v3.10.1%2023-10-30Fix
CVE-2023-21305Google Android Content information disclosure5.5v3.10.1%2023-10-30Fix
CVE-2023-21304Google Android Content service information disclosure5.5v3.10.1%2023-10-30Fix
CVE-2023-21303Google Android observable discrepancy5.5v3.10.1%2023-10-30Fix
CVE-2023-21302Google Android Package Manager information disclosure5.5v3.10.1%2023-10-30Fix
CVE-2023-21301Google Android ActivityManagerService privilege escalation5.5v3.10.1%2023-10-30Fix
CVE-2023-21300Google Android PackageManager information disclosure5.5v3.10.1%2023-10-30Fix
CVE-2023-21299Google Android Package Manager information disclosure5.5v3.10.1%2023-10-30Fix
CVE-2023-21298Google Android Slice privilege escalation7.8v3.10.1%2023-10-30Fix
CVE-2023-21297Google Android SEPolicy information disclosure4.4v3.10.1%2023-10-30Fix
CVE-2023-21296Google Android Permission privilege escalation5.5v3.10.1%2023-10-30Fix
CVE-2023-21295Google Android SliceManagerService information disclosure5.5v3.10.1%2023-10-30Fix
CVE-2023-21294Google Android Slice information disclosure5.5v3.10.1%2023-10-30Fix
CVE-2023-21293Google Android PackageManagerNative privilege escalation5.5v3.10.1%2023-10-30Fix
CVE-2023-5844Unverified password change in pimcore/admin-ui-classic-bundle7.2v3.10.6%2023-10-30Fix
CVE-2023-5843Ads by datafeedr.com WordPress plugin unauthenticated (limited) remote code execution9.8v3.12.2%2023-10-30Fix
CVE-2023-5842Cross-site scripting (XSS) Stored in Dolibarr/Dolibarr4.8v3.10.5%2023-10-30Fix
CVE-2023-5833Improper access control in mintplex-labs/anything-llm8.8v3.10.6%2023-10-30Fix
CVE-2023-5832Improper input validation in mintplex-labs/anything-llm9.1v3.10.7%2023-10-30Fix
CVE-2023-5666Accordion WordPress plugin authenticated (Contributor+) stored cross-site scripting via shortcode5.4v3.10.5%2023-10-30Fix
CVE-2023-5583WP Simple Galleries WordPress plugin authenticated (Contributor+) PHP object injection8.8v3.11.0%2023-10-30
CVE-2023-5566Simple Shortcodes WordPress plugin stored cross-site scripting5.4v3.10.6%2023-10-30
CVE-2023-5565Shortcode Menu WordPress plugin stored cross-site scripting5.4v3.10.4%2023-10-30
CVE-2023-5362Carousel, Recent Post Slider and Banner Slider WordPress plugin stored cross-site scripting5.4v3.10.5%2023-10-30Fix
CVE-2023-5349rmagick draw while calling getdrawinfo3.3NVD v3.10.7%2023-10-30Fix
CVE-2023-5335Buzzsprout Podcasting WordPress plugin stored cross-site scripting5.4v3.10.5%2023-10-30Fix
CVE-2023-5315Google Maps made Simple WordPress plugin authenticated (Subscriber+) SQL injection via shortcode8.8v3.10.6%2023-10-30Fix
CVE-2023-5252FareHarbor for WordPress plugin stored cross-site scripting5.4v3.10.4%2023-10-30Fix
CVE-2023-5251Grid Plus WordPress plugin missing authorization authenticated Grid Layout Add/Update/Delete5.4v3.10.5%2023-10-30Fix
CVE-2023-5250Grid Plus WordPress plugin authenticated (Subscriber+) local file inclusion via shortcode8.8v3.11.1%2023-10-30Fix
CVE-2023-5199PHP to Page WordPress plugin local file inclusion to remote code execution8.8NVD v3.11.4%2023-10-30
CVE-2023-5164Bellows Accordion Menu WordPress plugin stored cross-site scripting5.4v3.10.5%2023-10-30Fix
CVE-2023-5049Giveaways and Contests by RafflePress WordPress plugin stored cross-site scripting5.4v3.10.5%2023-10-30Fix
CVE-2023-4964Potential open redirect vulnerability in OpenText SMAX and AMX product8.2CNA v3.10.3%2023-10-30Fix
CVE-2023-4393HTML and SMTP injection in LiquidFiles6.1v3.10.3%2023-10-30Fix
CVE-2023-46862Linux kernel null pointer dereference4.7NVD v3.10.2%2023-10-29Fix
CVE-2023-46858Moodle cross-site scripting5.4v3.10.6%2023-10-29Fix
CVE-2023-43041IBM QRadar information disclosure6.5CNA v3.10.5%2023-10-29Fix
CVE-2023-40686IBM i privilege escalation4.9CNA v3.10.1%2023-10-29Fix
CVE-2023-40685IBM i privilege escalation7.4CNA v3.10.2%2023-10-29Fix
CVE-2023-5840Weak password recovery mechanism for forgotten password in LinkStackOrg/Linkstack8.8v3.10.7%2023-10-29Fix
CVE-2023-5839Privilege Chaining in GitHub repository hestiacp/hestiacp prior to 1.8.9.7.8v3.10.3%2023-10-29Fix
CVE-2023-5838Insufficient session expiration in LinkStackOrg/Linkstack9.8v3.10.5%2023-10-29Fix
CVE-2023-46854Proxmox-widget-toolkit cross-site scripting6.1v3.10.4%2023-10-28Fix
CVE-2023-46570radare2 An out-of-bounds read9.8v3.10.9%2023-10-28Fix
CVE-2023-46569radare2 An out-of-bounds read9.8v3.10.9%2023-10-28Fix
CVE-2023-46468Juzaweb Cms juzawebCMS injection7.8v3.10.5%2023-10-28
CVE-2023-46467juzaweb CMS cross-site scripting5.4v3.10.5%2023-10-28
CVE-2023-46215Apache Airflow Celery Provider insertion of sensitive information into log file7.5v3.11.2%2023-10-28Fix
CVE-2023-45897Namjaejeon Exfatprogs out-of-bounds read5.5v3.10.4%2023-10-28Fix
CVE-2023-43322Zpesystems Nodegrid OS command injection8.8v3.11.1%2023-10-28Fix
CVE-2023-5837AlexanderLivanov FotosCMS2 Cookie profile.php cross-site scripting6.1v3.10.4%2023-10-28
CVE-2023-5836SourceCodester Task Reminder System SQL injection9.8v3.10.4%2023-10-28
CVE-2023-5835hu60t hu60wap6 ubbparser.php markdown cross-site scripting6.1v3.10.4%2023-10-28
CVE-2023-5426Post Meta Data Manager WordPress plugin missing authorization to user, Term, and post Meta deletion7.5v3.10.5%2023-10-28Fix
CVE-2023-5425Post Meta Data Manager WordPress plugin missing authorization authenticated privilege escalation8.8v3.10.5%2023-10-28Fix
CVE-2023-46853Memcached off-by-one error9.8v3.10.8%2023-10-27Fix
CVE-2023-46852Memcached buffer overflow7.5v3.10.8%2023-10-27Fix
CVE-2023-46818ISPConfig code injection7.2v3.115.7%2023-10-27NucleiMetasploitExploit codeFix
CVE-2023-46816SugarCRM code injection8.8v3.10.6%2023-10-27Fix
CVE-2023-46815SugarCRM unrestricted file upload8.8v3.10.6%2023-10-27Fix
CVE-2023-46813Linux kernel race condition7.0v3.10.7%2023-10-27Exploit codeFix
CVE-2023-46604Apache ActiveMQ deserialization of untrusted data10.0CNA v3.199.9%2023-10-27KEVNucleiMetasploitEmerging ThreatsExploit codeFix
CVE-2023-46587XnView buffer overflow7.8v3.10.2%2023-10-27
CVE-2023-46510Zioncom A7000R OS command injection9.8v3.10.8%2023-10-27
CVE-2023-46509Contec SolarView Compact code injection9.8v3.10.8%2023-10-27
CVE-2023-46505Pwncyn Fancms cross-site scripting6.1v3.10.4%2023-10-27
CVE-2023-46504Pwncyn Yxbookcms cross-site scripting5.4v3.10.4%2023-10-27
CVE-2023-46503Pwncyn Yxbookcms cross-site scripting6.1v3.10.5%2023-10-27
CVE-2023-46491Zentao Biz cross-site scripting6.1v3.10.4%2023-10-27
CVE-2023-46490Cacti managers.php SQL injection6.5v3.11.4%2023-10-27Fix
CVE-2023-46407FFmpeg out-of-bounds read5.5v3.10.3%2023-10-27Fix
CVE-2023-46394gougucms /home/user/edit_submit stored cross-site scripting5.4v3.10.3%2023-10-27
CVE-2023-46393gougucms v4.08.18 was discovered to contain a password reset poisoning vulnerability which allows attackers to arbitrarily reset users' passwords via a crafted packet.7.5v3.10.4%2023-10-27
CVE-2023-46376Zentao Biz cleartext storage of sensitive information7.5v3.10.4%2023-10-27
CVE-2023-46375Zentao Biz cross-site request forgery8.8v3.10.3%2023-10-27
CVE-2023-46374Zentao Biz cross-site scripting6.1v3.10.4%2023-10-27
CVE-2023-46290Rockwell Automation FactoryTalk Services Platform Elevated Privileges vulnerability8.1CNA v3.12.7%2023-10-27Fix
CVE-2023-46289Rockwell Automation FactoryTalk® View Site Edition vulnerable to improper input validation7.5CNA v3.10.9%2023-10-27Fix
CVE-2023-46246Integer overflow in :history command in Vim4.0CNA v3.10.4%2023-10-27Fix
CVE-2023-46211Ultimate Addons for WPBakery Page Builder WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2023-10-27Fix
CVE-2023-46209Grid Plus WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.3%2023-10-27Fix
CVE-2023-46208Motors Car Dealer and Classified Ads WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.3%2023-10-27Fix
CVE-2023-46200Smart App Banner WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2023-10-27Fix
CVE-2023-46199Triberr WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2023-10-27Fix
CVE-2023-46194Archivist Custom Archive Templates WordPress plugin cross-site scripting (XSS)6.1v3.10.3%2023-10-27
CVE-2023-46192Internal Link Building WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2023-10-27
CVE-2023-46153User Feedback WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-10-27Fix
CVE-2023-46093Webmaster Tools WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2023-10-27
CVE-2023-46091Category SEO Meta Tags WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2023-10-27
CVE-2023-45499Vinchin Backup And Recovery hard-coded credentials9.8v3.17.9%2023-10-27MetasploitExploit codeKCV
CVE-2023-45498Vinchin Backup And Recovery command injection9.8v3.120.5%2023-10-27MetasploitExploit codeKCV
CVE-2023-44480Leave Management System Project multiple Authenticated SQL Injections (SQLi)8.8v3.10.6%2023-10-27
CVE-2023-44220SonicWall NetExtender uncontrolled search path7.3v3.10.3%2023-10-27Fix
CVE-2023-44219SonicWall Directory Services Connector local privilege escalation7.8v3.10.2%2023-10-27Fix
CVE-2023-42188Macwk IceCMS cross-site request forgery6.5v3.10.2%2023-10-27
CVE-2023-40140Google Android android_view_InputDevice.cpp privilege escalation7.8v3.10.2%2023-10-27Fix
CVE-2023-40139Google Android FillUi.java information disclosure5.5v3.10.1%2023-10-27Fix
CVE-2023-40138Google Android FillUi.java information disclosure3.3v3.10.1%2023-10-27Fix
CVE-2023-40137Google Android DialogFillUi.java information disclosure3.3v3.10.1%2023-10-27Fix
CVE-2023-40136Google Android DialogFillUi.java information disclosure3.3v3.10.1%2023-10-27Fix
CVE-2023-40135Google Android SaveUi.java information disclosure3.3v3.10.1%2023-10-27Fix
CVE-2023-40134Google Android FillUi.java information disclosure3.3v3.10.1%2023-10-27Fix
CVE-2023-40133Google Android DialogFillUi.java information disclosure5.5v3.10.2%2023-10-27Exploit codeFix
CVE-2023-40131Google Android GpuService.cpp use-after-free7.0v3.10.1%2023-10-27Fix
CVE-2023-40130Google Android CallRedirectionProcessor insecure permissions7.8v3.10.1%2023-10-27Exploit codeFix
CVE-2023-40129Google Android gatt_sr.cc out-of-bounds write8.8v3.10.2%2023-10-27Fix
CVE-2023-40128Google Android xmlregexp.c out-of-bounds write7.8v3.10.1%2023-10-27Fix
CVE-2023-40127Google Android multiple locations information disclosure3.3v3.10.2%2023-10-27Exploit codeFix
CVE-2023-40125Google Android ApnEditor.java privilege escalation7.8v3.10.1%2023-10-27Fix
CVE-2023-40123Google Android PipMenuView.java information disclosure5.5v3.10.1%2023-10-27Fix
CVE-2023-40121Google Android DatabaseUtils.java SQL injection5.5v3.10.2%2023-10-27Fix
CVE-2023-40120Google Android multiple locations privilege escalation7.8v3.10.1%2023-10-27Fix
CVE-2023-40117Google Android SettingsProvider.java privilege escalation7.8v3.10.1%2023-10-27Fix
CVE-2023-40116Google Android PipTaskOrganizer.java privilege escalation7.8v3.10.1%2023-10-27Fix
CVE-2023-35794Cassia Networks Access Controller improper authentication8.8NVD v3.10.9%2023-10-27KCV
CVE-2023-34059open-vm-tools improper resource release7.4CNA v3.10.4%2023-10-27Fix
CVE-2023-34058VMware Tools improper signature verification7.1CNA v3.10.7%2023-10-27Fix
CVE-2023-34057VMware Tools improper privilege management7.8CNA v3.10.2%2023-10-27Fix
CVE-2023-32738Eonet Manual User Approve WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2023-10-27
CVE-2023-29009Basercms XSS vulnerability via Favorites feature6.1CNA v3.10.5%2023-10-27Fix
CVE-2023-27858Rockwell Automation Arena® Simulation uninitialized pointer7.8CNA v3.10.2%2023-10-27Fix
CVE-2023-27854Rockwell Automation Arena® Simulation out-of-bounds read7.8CNA v3.10.3%2023-10-27Fix
CVE-2023-5834Vagrant’s Windows Installer Allowed Directory Junction Write3.8CNA v3.10.2%2023-10-27Fix
CVE-2023-5830ColumbiaSoft Document Locator WebTools login improper authentication9.8v3.161.0%2023-10-27Nuclei
CVE-2023-5829code-projects Admission Management System student_avatar.php unrestricted upload8.8v3.10.8%2023-10-27
CVE-2023-5828A vulnerability was found in Nanning Ontall Longxing Industrial Development Zone Project Construction and Installation Management System up to 20231026. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file login.aspx. The manipulation of the argume9.8v3.10.7%2023-10-27
CVE-2023-5827Shanghai CTI Navigation CTI Monitoring and Early Warning System UserEdit.aspx SQL injection9.8v3.10.7%2023-10-27
CVE-2023-5826Netentsec NS-ASG Application Security Gateway list_onlineuser.php SQL injection8.8v3.10.7%2023-10-27
CVE-2023-5821Thumbnail carousel slider WordPress plugin cross-site request forgery6.5v3.10.3%2023-10-27Fix
CVE-2023-5820Thumbnail Slider With Lightbox WordPress plugin cross-site request forgery8.8NVD v3.10.3%2023-10-27Fix
CVE-2023-5817Neon text WordPress plugin authenticated (Contributor+) stored cross-site scripting5.4v3.10.5%2023-10-27Fix
CVE-2023-5814SourceCodester Task Reminder System SQL injection8.8v3.10.4%2023-10-27
CVE-2023-5813SourceCodester Task Reminder System SQL injection8.8v3.10.4%2023-10-27
CVE-2023-5812Flusity CMS upload.php handleFileUpload unrestricted upload8.8v3.10.7%2023-10-27
CVE-2023-5811Flusity CMS posts.php loadPostAddForm cross-site scripting4.8v3.10.5%2023-10-27
CVE-2023-5810Flusity CMS posts.php loadPostAddForm cross-site scripting4.8v3.10.5%2023-10-27
CVE-2023-5807SQLi in TRtek Software's Education Portal9.8v3.10.5%2023-10-27Fix
CVE-2023-5774Animated Counters WordPress plugin stored cross-site scripting5.4v3.10.5%2023-10-27Fix
CVE-2023-5705VK Filter Search WordPress plugin stored cross-site scripting5.4v3.10.4%2023-10-27Fix
CVE-2023-5570User Enumeration in Inohom's Home Manager Gateway7.5v3.10.5%2023-10-27Fix
CVE-2023-5443User Enumeration in EDM Informatic's E-invoice software7.5v3.10.5%2023-10-27Fix
CVE-2023-5051CallRail Phone Call Tracking WordPress plugin stored cross-site scripting5.4v3.10.4%2023-10-27Fix
CVE-2023-4967Cloud Software Group NetScaler ADC denial of service8.2CNA v3.10.9%2023-10-27Fix
CVE-2023-46754Obl.ong admin incorrect authorization5.3v3.10.4%2023-10-26Fix
CVE-2023-46753FRRouting incorrect authorization5.9v3.10.8%2023-10-26Fix
CVE-2023-46752FRRouting MP_REACH_NLRI parser denial of service5.9v3.10.8%2023-10-26Fix
CVE-2023-46748F5 BIG-IP Configuration Utility SQL injection8.8CNA v3.14.5%2023-10-26KEVKCVFix
CVE-2023-46747F5 BIG-IP Configuration Utility authentication bypass9.8CNA v3.196.5%2023-10-26KEVNucleiMetasploitEmerging ThreatsExploit codeKCVFix
CVE-2023-46668Elastic Endpoint insertion of sensitive information into log file4.6CNA v3.10.3%2023-10-26Fix
CVE-2023-46667Fleet Server insertion of sensitive information into log file8.1CNA v3.10.6%2023-10-26Fix
CVE-2023-46666Elastic Sharepoint Online Python Connector improper access control5.3CNA v3.10.4%2023-10-26Fix
CVE-2023-46665Improper access control in Sielco PolyEco10009.8v3.10.7%2023-10-26
CVE-2023-46664Improper access control in Sielco PolyEco10009.1v3.10.5%2023-10-26
CVE-2023-46663Improper access control in Sielco PolyEco10008.1v3.10.4%2023-10-26
CVE-2023-46662Improper access control in Sielco PolyEco10007.5v3.10.6%2023-10-26
CVE-2023-46661Improper access control in Sielco PolyEco10009.8v3.10.5%2023-10-26
CVE-2023-46450Mayuri K Inventory Management System cross-site scripting5.4v3.10.4%2023-10-26Exploit code
CVE-2023-46449Mayuri K Inventory Management System incorrect permission assignment8.8v3.10.8%2023-10-26Exploit code
CVE-2023-46435oretnom23 Packers And Movers Management System SQL injection9.8v3.10.6%2023-10-26
CVE-2023-46345Fossies catdoc null pointer dereference7.5v3.10.6%2023-10-26
CVE-2023-46238XSS with User Avatar image in ZITADEL8.7CNA v3.10.4%2023-10-26Fix
CVE-2023-46234browserify-sign upper bound check issue in `dsaVerify` leads to a signature forgery attack6.5CNA v3.10.5%2023-10-26Fix
CVE-2023-46094Conversios Google Analytics Integration for WooCommerce reflected cross-site scripting6.1NVD v3.10.3%2023-10-26Fix
CVE-2023-46090WebDorado WDSocialWidgets reflected cross-site scripting6.1NVD v3.10.3%2023-10-26
CVE-2023-46088WP Full Stripe Free WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2023-10-26Fix
CVE-2023-46081Lava Directory Manager WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.3%2023-10-26
CVE-2023-46077The Awesome Feed Custom Feed WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.3%2023-10-26
CVE-2023-46076WooCommerce PDF Invoice Builder WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.3%2023-10-26Fix
CVE-2023-46075Contact Form Builder, Contact Widget WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.3%2023-10-26
CVE-2023-46074FreshMail For WordPress plugin cross-site scripting (XSS)6.1v3.10.3%2023-10-26
CVE-2023-46072Michael Simpson Add Shortcodes Actions And Filters reflected cross-site scripting6.1NVD v3.10.3%2023-10-26Fix
CVE-2023-45869ILIAS cross-site scripting9.0v3.10.8%2023-10-26
CVE-2023-45868ILIAS path traversal8.1v3.11.1%2023-10-26
CVE-2023-45867ILIAS path traversal6.5v3.10.9%2023-10-26
CVE-2023-45317Sielco Radio Link and Analog FM Transmitters cross-site request forgery8.8v3.10.2%2023-10-26
CVE-2023-45228Sielco Radio Link and Analog FM Transmitters improper access control6.5v3.10.4%2023-10-26
CVE-2023-44267Online Art Gallery multiple Unauthenticated SQL Injections (SQLi)9.8CNA v3.10.7%2023-10-26
CVE-2023-43906Onworks Xolo Cms cross-site scripting6.1v3.10.4%2023-10-26
CVE-2023-43905Writercms insufficiently protected credentials7.5v3.10.4%2023-10-26
CVE-2023-43352CMS Made Simple code injection7.8v3.10.5%2023-10-26Exploit code
CVE-2023-43208NextGen Healthcare Mirth Connect deserialization of untrusted data9.8NVD v3.182.7%2023-10-26KEVNucleiMetasploitEmerging ThreatsExploit codeFix
CVE-2023-42769Sielco Radio Link and Analog FM Transmitters improper access control9.8v3.10.8%2023-10-26
CVE-2023-42406D-Link DAR-7000 D-Link Online behavior audit gateway SQL injection9.8v3.11.9%2023-10-26
CVE-2023-41966Sielco Radio Link and Analog FM Transmitters privilege defined with unsafe actions8.8v3.10.6%2023-10-26
CVE-2023-41096Keys Stored in Plaintext on Secure Vault High for Silabs Ember ZNet devices6.8CNA v3.10.1%2023-10-26
CVE-2023-41095Keys Stored in Plaintext on Secure Vault High for Silabs OpenThread devices6.8CNA v3.10.2%2023-10-26
CVE-2023-39936Ashlar-Vellum Graphite out-of-bounds read7.8v3.10.3%2023-10-26Fix
CVE-2023-39726Mintty static code injection9.8v3.11.0%2023-10-26
CVE-2023-39427Ashlar-Vellum Cobalt, Xenon, Argon, Lithium out-of-bounds write7.8v3.10.2%2023-10-26Fix
CVE-2023-38328egroupware insufficiently protected credentials4.9v3.10.6%2023-10-26Fix
CVE-2023-33559OcoMon inclusion of untrusted functionality8.8v3.10.7%2023-10-26
CVE-2023-33558OcoMon component users-grid-data.php information disclosure7.5v3.10.5%2023-10-26
CVE-2023-32116Custom post types WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2023-10-26Fix
CVE-2023-31422Kibana insertion of sensitive information into log file9.0CNA v3.10.8%2023-10-26Fix
CVE-2023-31421Beats, Elastic Agent, APM Server, and Fleet Server improper certificate validation issue5.9CNA v3.10.3%2023-10-26Fix
CVE-2023-31419Elasticsearch vulnerable to stack overflow in the search API6.5CNA v3.161.7%2023-10-26Exploit codeFix
CVE-2023-31418Elasticsearch uncontrolled resource consumption7.5CNA v3.12.1%2023-10-26Fix
CVE-2023-31417Elasticsearch Insertion of sensitive information in audit logs4.1CNA v3.10.2%2023-10-26Fix
CVE-2023-31416Elastic Cloud on Kubernetes (ECK) secret token configuration issue5.3CNA v3.10.4%2023-10-26Fix
CVE-2023-30969Palantir Tiles missing authentication on API endpoints8.2CNA v3.10.4%2023-10-26Fix
CVE-2023-30967Gotham Orbital Simulator path traversal9.8CNA v3.10.6%2023-10-26Fix
CVE-2023-30492Minimum Purchase for WooCommerce WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2023-10-26
CVE-2023-27170Xpand-it Write-back Manager path traversal7.5v3.10.9%2023-10-26
CVE-2023-5805SourceCodester Simple Real Estate Portal System view_estate.php SQL injection9.8v3.10.6%2023-10-26
CVE-2023-5804PHPGurukul Nipah Virus Testing Management System login.php SQL injection9.8v3.10.7%2023-10-26
CVE-2023-5802WP Knowledgebase WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-26
CVE-2023-5798Assistant WordPress plugin Editor+ SSRF8.8NVD v3.10.7%2023-10-26Fix
CVE-2023-5796CodeAstro POS System Logo setting unrestricted upload8.8v3.10.7%2023-10-26
CVE-2023-5795CodeAstro POS System Profile Picture profil unrestricted upload8.8v3.10.8%2023-10-26
CVE-2023-5794PHPGurukul Online Railway Catering System Login index.php SQL injection9.8v3.10.7%2023-10-26
CVE-2023-5793Flusity CMS Dashboard customblock.php loadCustomBlocCreateForm cross-site scripting5.4v3.10.4%2023-10-26
CVE-2023-5792SourceCodester Sticky Notes App delete-note.php SQL injection9.8v3.10.6%2023-10-26
CVE-2023-5791SourceCodester Sticky Notes App add-note.php cross-site scripting6.1v3.10.5%2023-10-26
CVE-2023-5790SourceCodester File Manager App add-file.php unrestricted upload9.8v3.10.8%2023-10-26
CVE-2023-5789Dragon Path 707GR1 Ping Diagnostics cross-site scripting4.8v3.10.5%2023-10-26
CVE-2023-5787Shaanxi Chanming Education Technology Score Query System SQL injection8.8v3.10.7%2023-10-26
CVE-2023-5786GeoServer GeoWebCache rest.html direct request8.8v3.10.8%2023-10-26
CVE-2023-5785Netentsec NS-ASG Application Security Gateway addaddress_interpret.php SQL injection7.5v3.10.6%2023-10-26
CVE-2023-5784Netentsec NS-ASG Application Security Gateway uploadfirewall.php SQL injection9.8v3.10.7%2023-10-26
CVE-2023-5783Tongda OA 2017 delete.php SQL injection7.5v3.10.5%2023-10-26
CVE-2023-5782Tongda OA 2017 General News delete_query.php SQL injection9.8v3.10.7%2023-10-26
CVE-2023-5781Tongda OA 2017 delete_webmail.php DELETE_STR SQL injection9.8v3.10.7%2023-10-26
CVE-2023-5780Tongda OA 2017 delete.php SQL injection9.8v3.10.7%2023-10-26
CVE-2023-5754Improper restriction of excessive authentication attempts in Sielco PolyEco10009.8v3.10.5%2023-10-26
CVE-2023-5624Tenable Nessus Network Monitor blind SQL injection7.2CNA v3.10.5%2023-10-26Fix
CVE-2023-5623Tenable Nessus Network Monitor privilege escalation7.0CNA v3.10.2%2023-10-26Fix
CVE-2023-5622Tenable Nessus Network Monitor privilege escalation7.1CNA v3.10.5%2023-10-26Fix
CVE-2023-5139Potential buffer overflow vulnerability in the Zephyr STM32 Crypto driver4.4CNA v3.10.4%2023-10-26
CVE-2023-0897Session fixation in Sielco PolyEco10009.8v3.10.5%2023-10-26
CVE-2023-46660Non-constant time webhook token hash comparison in Jenkins Zanata Plugin5.3v3.10.5%2023-10-25Fix
CVE-2023-46659Jenkins Edgewall Trac Plugin vulnerable to stored XSS5.4v3.10.5%2023-10-25Fix
CVE-2023-46658Jenkins MSTeams Webhook Trigger Plugin uses non-constant time webhook token comparison5.3v3.10.6%2023-10-25Fix
CVE-2023-46657Jenkins Gogs Plugin uses non-constant time webhook token comparison5.3v3.10.6%2023-10-25Fix
CVE-2023-46656Jenkins Multibranch Scan Webhook Trigger Plugin uses non-constant time webhook token comparison5.3v3.10.6%2023-10-25Fix
CVE-2023-46655Jenkins CloudBees CD Plugin vulnerable to arbitrary file read6.5v3.11.2%2023-10-25Fix
CVE-2023-46654Jenkins CloudBees CD Plugin vulnerable to arbitrary file deletion8.1v3.11.4%2023-10-25Fix
CVE-2023-46653Jenkins Lambdatest-automation Plugin may expose Credentials access token6.5v3.10.4%2023-10-25Fix
CVE-2023-46652Jenkins Lambdatest-automation Plugin missing permission check4.3v3.10.4%2023-10-25Fix
CVE-2023-46651Jenkins Warnings Plugin exposures system-scoped credentials6.5v3.10.6%2023-10-25Fix
CVE-2023-46650Stored XSS vulnerability in Jenkins GitHub Plugin5.4v3.10.6%2023-10-25Fix
CVE-2023-46584PHPGurukul Nipah Virus Testing Management System SQL injection9.8v3.10.7%2023-10-25
CVE-2023-46583PHPGurukul Nipah Virus Testing Management System cross-site scripting6.1v3.10.5%2023-10-25
CVE-2023-46574TOTOLINK A3700R command injection9.8v3.165.4%2023-10-25Nuclei
CVE-2023-46564TOTOLINK X2000R stack-based buffer overflow9.8v3.10.8%2023-10-25
CVE-2023-46563TOTOLINK X2000R stack-based buffer overflow9.8v3.10.8%2023-10-25
CVE-2023-46562TOTOLINK X2000R stack-based buffer overflow9.8v3.10.8%2023-10-25
CVE-2023-46560TOTOLINK X2000R stack-based buffer overflow9.8v3.10.8%2023-10-25
CVE-2023-46559TOTOLINK X2000R stack-based buffer overflow9.8v3.10.8%2023-10-25
CVE-2023-46558TOTOLINK X2000R out-of-bounds write9.8v3.10.8%2023-10-25
CVE-2023-46557TOTOLINK X2000R out-of-bounds write9.8v3.10.8%2023-10-25
CVE-2023-46556TOTOLINK X2000R out-of-bounds write9.8v3.10.8%2023-10-25
CVE-2023-46555TOTOLINK X2000R out-of-bounds write9.8v3.10.8%2023-10-25
CVE-2023-46554TOTOLINK X2000R out-of-bounds write9.8v3.10.8%2023-10-25
CVE-2023-46553TOTOLINK X2000R stack-based buffer overflow9.8v3.10.8%2023-10-25
CVE-2023-46552TOTOLINK X2000R stack-based buffer overflow9.8v3.10.8%2023-10-25
CVE-2023-46551TOTOLINK X2000R out-of-bounds write9.8v3.10.8%2023-10-25
CVE-2023-46550TOTOLINK X2000R out-of-bounds write9.8v3.10.8%2023-10-25
CVE-2023-46549TOTOLINK X2000R out-of-bounds write9.8v3.10.8%2023-10-25
CVE-2023-46548TOTOLINK X2000R out-of-bounds write9.8v3.10.8%2023-10-25
CVE-2023-46547TOTOLINK X2000R out-of-bounds write9.8v3.11.0%2023-10-25
CVE-2023-46546TOTOLINK X2000R out-of-bounds write9.8v3.11.0%2023-10-25
CVE-2023-46545TOTOLINK X2000R out-of-bounds write9.8v3.11.0%2023-10-25
CVE-2023-46544TOTOLINK X2000R out-of-bounds write9.8v3.11.0%2023-10-25
CVE-2023-46543TOTOLINK X2000R out-of-bounds write9.8v3.11.0%2023-10-25
CVE-2023-46542TOTOLINK X2000R out-of-bounds write9.8v3.11.0%2023-10-25
CVE-2023-46541TOTOLINK X2000R out-of-bounds write9.8v3.11.0%2023-10-25
CVE-2023-46540TOTOLINK X2000R out-of-bounds write9.8v3.11.0%2023-10-25
CVE-2023-46539TP-Link Tl-wr886n out-of-bounds write9.8v3.11.0%2023-10-25
CVE-2023-46538TP-Link Tl-wr886n out-of-bounds write9.8v3.11.0%2023-10-25
CVE-2023-46537TP-Link Tl-wr886n out-of-bounds write9.8v3.11.0%2023-10-25
CVE-2023-46536TP-Link Tl-wr886n out-of-bounds write9.8v3.11.0%2023-10-25
CVE-2023-46535TP-Link Tl-wr886n out-of-bounds write9.8v3.11.0%2023-10-25
CVE-2023-46534TP-Link Tl-wr886n out-of-bounds write9.8v3.11.0%2023-10-25
CVE-2023-46527TP-Link Tl-wr886n out-of-bounds write9.8v3.11.3%2023-10-25
CVE-2023-46526TP-Link Tl-wr886n out-of-bounds write9.8v3.11.0%2023-10-25
CVE-2023-46525TP-Link Tl-wr886n out-of-bounds write9.8v3.11.0%2023-10-25
CVE-2023-46523TP-Link Tl-wr886n out-of-bounds write9.8v3.11.0%2023-10-25
CVE-2023-46522TP-Link Tl-wr886n out-of-bounds write9.8v3.11.3%2023-10-25
CVE-2023-46521TP-Link Tl-wr886n out-of-bounds write9.8v3.11.0%2023-10-25
CVE-2023-46520TP-Link Tl-wr886n out-of-bounds write9.8v3.11.0%2023-10-25
CVE-2023-46518Mercurycom A15 out-of-bounds write9.8v3.11.8%2023-10-25
CVE-2023-46424TOTOLINK X6000R command injection9.8v3.11.9%2023-10-25
CVE-2023-46423TOTOLINK X6000R command injection9.8v3.11.9%2023-10-25
CVE-2023-46422TOTOLINK X6000R command injection9.8v3.11.9%2023-10-25
CVE-2023-46421TOTOLINK X6000R command injection9.8v3.11.9%2023-10-25
CVE-2023-46420TOTOLINK X6000R command injection9.8v3.11.9%2023-10-25
CVE-2023-46419TOTOLINK X6000R command injection9.8v3.11.9%2023-10-25
CVE-2023-46418TOTOLINK X6000R command injection9.8v3.11.9%2023-10-25
CVE-2023-46417TOTOLINK X6000R command injection9.8v3.11.9%2023-10-25
CVE-2023-46416TOTOLINK X6000R command injection9.8v3.11.9%2023-10-25
CVE-2023-46415TOTOLINK X6000R command injection9.8v3.11.9%2023-10-25
CVE-2023-46414TOTOLINK X6000R command injection9.8v3.11.9%2023-10-25
CVE-2023-46413TOTOLINK X6000R command injection9.8v3.11.4%2023-10-25
CVE-2023-46412TOTOLINK X6000R command injection9.8v3.11.4%2023-10-25
CVE-2023-46411TOTOLINK X6000R command injection9.8v3.11.4%2023-10-25
CVE-2023-46410TOTOLINK X6000R command injection9.8v3.11.4%2023-10-25
CVE-2023-46409TOTOLINK X6000R command injection9.8v3.11.4%2023-10-25
CVE-2023-46408TOTOLINK X6000R command injection9.8v3.11.4%2023-10-25
CVE-2023-46396Web-audimex Audimex cross-site scripting5.4v3.10.4%2023-10-25
CVE-2023-46373TP-Link Tl-wdr7660 out-of-bounds write9.8v3.10.9%2023-10-25
CVE-2023-46371TP-Link Tl-wdr7660 out-of-bounds write9.8v3.11.1%2023-10-25Exploit code
CVE-2023-46370Tenda W18E command injection9.8v3.118.1%2023-10-25
CVE-2023-46369Tenda W18E out-of-bounds write9.8v3.10.9%2023-10-25
CVE-2023-46358Snegurka Referralbyphone SQL injection9.8v3.10.7%2023-10-25
CVE-2023-46347Ndkdesign Ndk Steppingpack SQL injection9.8v3.149.9%2023-10-25Nuclei
CVE-2023-46346Myprestamodules Exportproducts path traversal7.5v3.10.8%2023-10-25
CVE-2023-46316Traceroute wrapper scripts vulnerability5.5v3.10.4%2023-10-25Fix
CVE-2023-46233crypto-js PBKDF2 1,000 times weaker than specified in 1993 and times weaker than current standard9.1CNA v3.10.6%2023-10-25Fix
CVE-2023-46232era-compiler-vyper First Immutable Variable Initialization vulnerability5.3CNA v3.10.6%2023-10-25Fix
CVE-2023-46204Duplicate WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-10-25
CVE-2023-46202Auto Login New User After Registration WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-10-25
CVE-2023-46198Appointment Calendar WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-10-25
CVE-2023-46193Internal Link Building WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-10-25
CVE-2023-46191Open Graph Metabox WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-10-25
CVE-2023-46190Novo-Map: your WP posts on custom google maps WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-10-25
CVE-2023-46189Google Calendar Events WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-10-25Fix
CVE-2023-46158IBM WebSphere Application Server session fixation4.9CNA v3.10.5%2023-10-25Fix
CVE-2023-46152WOLF WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-10-25Fix
CVE-2023-46151Product Category Tree WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-10-25
CVE-2023-46150WP Radio WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-10-25
CVE-2023-46137twisted twisted.web has disordered HTTP pipeline response5.3CNA v3.10.8%2023-10-25Fix
CVE-2023-46136Pallets Werkzeug multipart form data parser denial of service8.0CNA v3.11.1%2023-10-25Exploit codeFix
CVE-2023-46135stellar rs-stellar-strkey panic in SignedPayload::from_payload5.3CNA v3.10.8%2023-10-25Fix
CVE-2023-46134man-group dtale D-Tale vulnerable to remote code execution through the Custom Filter Input6.1CNA v3.10.8%2023-10-25Fix
CVE-2023-46133crypto-es PBKDF2 1,000 times weaker than specified in 1993 and times weaker than current standard9.1CNA v3.10.4%2023-10-25Fix
CVE-2023-46128Exposure of hashed user passwords via REST API in Nautobot6.5CNA v3.10.5%2023-10-25Fix
CVE-2023-46126Fides JavaScript injection vulnerability in Privacy Center URL3.9CNA v3.10.6%2023-10-25Fix
CVE-2023-46125Fides information disclosure vulnerability in Config API endpoint6.5CNA v3.10.7%2023-10-25Fix
CVE-2023-46124ethyca fides server-side request forgery vulnerability in Custom Integration upload8.2CNA v3.10.7%2023-10-25Fix
CVE-2023-46123jumpserver is vulnerable to password brute-force protection bypass via arbitrary IP values5.3CNA v3.10.7%2023-10-25Fix
CVE-2023-46120RabbitMQ Java client's lack of message size limitation leads to remote DoS attack4.9CNA v3.11.1%2023-10-25Fix
CVE-2023-46119parse-community parse-server parse Server may crash when uploading file without extension7.5CNA v3.11.1%2023-10-25Fix
CVE-2023-46118rabbitmq-server denial of service by publishing large messages over the HTTP API4.9CNA v3.11.1%2023-10-25Fix
CVE-2023-46102Bosch Rexroth ctrlX HMI Web Panel hard-coded credentials8.8CNA v3.10.4%2023-10-25Fix
CVE-2023-46071Protección de Datos RGPD WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-10-25
CVE-2023-46070EG-Attachments WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-10-25
CVE-2023-46069Ajax Archive Calendar WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-10-25Fix
CVE-2023-46068Maileon WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-10-25Fix
CVE-2023-46010Seacms code injection9.8v3.11.2%2023-10-25
CVE-2023-45990Wenwenai Cms WenwenaiCMS v.1.0 insecure permissions8.0v3.10.7%2023-10-25
CVE-2023-45851Bosch Rexroth ctrlX HMI Web Panel missing authentication8.8CNA v3.10.4%2023-10-25Fix
CVE-2023-45844Rexroth ctrlX HMI Web Panel improper access control7.3CNA v3.00.3%2023-10-25Fix
CVE-2023-45837Ultimate Taxonomy Manager WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-10-25
CVE-2023-45835Libsyn Publisher Hub WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-10-25
CVE-2023-45833LeadSquared Suite WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-10-25
CVE-2023-45832WP GoToWebinar WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-10-25Fix
CVE-2023-45829Newsletter and Bulk Email Sender WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-10-25
CVE-2023-45772Proofreading WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-10-25Fix
CVE-2023-45770Fast WP Speed WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-10-25
CVE-2023-45769WP Report Post WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.5%2023-10-25
CVE-2023-45768Next Page WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-10-25
CVE-2023-45767Simple Tweet WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-10-25
CVE-2023-45764Scroll post excerpt WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-10-25
CVE-2023-45761Sendle Shipping WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-10-25Fix
CVE-2023-45759Peter’s Custom Anti-Spam WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-10-25Fix
CVE-2023-45758Amministrazione Trasparente WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-10-25Fix
CVE-2023-45756ApplyOnline Application Form Builder and Manager WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-10-25Fix
CVE-2023-45755BuddyPress Global Search WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-10-25
CVE-2023-45754Easy Testimonial Slider and Form WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-10-25Fix
CVE-2023-45750Nexter Extension WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-10-25Fix
CVE-2023-45747WP Lightbox 2 WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-10-25Fix
CVE-2023-45646PDF Block WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-10-25
CVE-2023-45644CPT Shortcode Generator WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-10-25
CVE-2023-45640WP ULike WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-10-25Fix
CVE-2023-45637EventPrime WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-10-25Fix
CVE-2023-45634Copy Or Move Comments WordPress plugin cross-site scripting (XSS)6.1v3.10.4%2023-10-25
CVE-2023-45555ZZZCMS unrestricted file upload7.8v3.10.9%2023-10-25
CVE-2023-45554ZZZCMS unrestricted file upload9.8v3.11.5%2023-10-25
CVE-2023-45321Bosch Rexroth ctrlX HMI Web Panel cleartext transmission of sensitive information8.3CNA v3.10.1%2023-10-25Fix
CVE-2023-45220Rexroth ctrlX HMI Web Panel missing authentication8.8CNA v3.10.4%2023-10-25Fix
CVE-2023-45137XWiki Platform XSS with edit right in the create document form for existing pages9.1CNA v3.10.6%2023-10-25Fix
CVE-2023-45136XWiki Platform document creation form reflected cross-site scripting9.7CNA v3.15.1%2023-10-25NucleiFix
CVE-2023-45135XWiki Platform page creation action improper output encoding9.1CNA v3.11.7%2023-10-25Fix
CVE-2023-45134XWiki Platform XSS vulnerability from account in the create page form via template provider9.1CNA v3.11.8%2023-10-25Fix
CVE-2023-44794dromara Sa-Token SaToken privilege escalation9.8v3.11.0%2023-10-25Fix
CVE-2023-44769Zenario CMS cross-site scripting5.4v3.10.7%2023-10-25Exploit codeFix
CVE-2023-44767Ritecms A file upload4.8v3.10.5%2023-10-25Exploit code
CVE-2023-43961dromara Sa-Token SaToken authentication bypass8.8v3.10.8%2023-10-25Fix
CVE-2023-43795WPS server side request forgery in GeoServer8.6CNA v3.167.7%2023-10-25NucleiFix
CVE-2023-43510Aruba ClearPass Policy Manager web-based management interface command injection4.7CNA v3.10.6%2023-10-25Fix
CVE-2023-43509Aruba ClearPass Policy Manager OnGuard notification endpoint vulnerability5.8CNA v3.10.6%2023-10-25Fix
CVE-2023-43508Aruba ClearPass Policy Manager web-based management interface authorization bypass6.3CNA v3.10.4%2023-10-25Fix
CVE-2023-43507Authenticated SQL injection vulnerability in ClearPass Policy Manager Web-based Management interface7.2CNA v3.10.8%2023-10-25Fix
CVE-2023-43506Local privilege escalation in ClearPass OnGuard Linux agent7.8CNA v3.10.2%2023-10-25Fix
CVE-2023-43488Rexroth ctrlX HMI Web Panel missing authorization7.9CNA v3.10.2%2023-10-25Fix
CVE-2023-43360CMS Made Simple CMSmadesimple v.2.2.18 cross-site scripting5.4NVD v3.10.5%2023-10-25
CVE-2023-43281nothings Stb Image.h double free6.5v3.11.0%2023-10-25Fix
CVE-2023-42861Apple macOS incorrect permission assignment6.5v3.10.6%2023-10-25Fix
CVE-2023-42857Apple macOS sensitive information in log files3.3v3.10.3%2023-10-25Fix
CVE-2023-42856Apple macOS arbitrary code execution7.8v3.10.4%2023-10-25Fix
CVE-2023-42854Apple macOS denial of service5.5v3.10.4%2023-10-25Fix
CVE-2023-42852Apple Safari logic flaw8.8v3.11.7%2023-10-25Fix
CVE-2023-42850Apple macOS information disclosure5.5v3.10.3%2023-10-25Fix
CVE-2023-42849Apple macOS code execution6.5v3.11.4%2023-10-25Fix
CVE-2023-42847Apple macOS logic flaw7.5v3.10.9%2023-10-25Fix
CVE-2023-42846Apple tvOS information disclosure5.3v3.11.2%2023-10-25Fix
CVE-2023-42845Apple macOS missing authentication5.3v3.10.8%2023-10-25Fix
CVE-2023-42844Apple macOS link following7.5v3.11.5%2023-10-25Fix
CVE-2023-42842Apple macOS information disclosure5.5v3.10.3%2023-10-25Fix
CVE-2023-42841Apple macOS arbitrary code execution7.8v3.10.4%2023-10-25Fix
CVE-2023-42494EisBaer Scada exposed dangerous method or function9.8v3.10.7%2023-10-25
CVE-2023-42493EisBaer Scada plaintext storage of a password9.8v3.10.4%2023-10-25
CVE-2023-42492EisBaer Scada use of hard-coded cryptographic key9.8v3.10.4%2023-10-25
CVE-2023-42491EisBaer Scada improper authorization9.8v3.10.6%2023-10-25
CVE-2023-42490EisBaer Scada exposure of sensitive information to an unauthorized actor7.5v3.10.6%2023-10-25
CVE-2023-42489EisBaer Scada incorrect permission assignment for critical resource9.8v3.10.7%2023-10-25
CVE-2023-42488EisBaer Scada improper limitation of a pathname to a restricted directory (path traversal)7.5v3.10.8%2023-10-25
CVE-2023-42438Apple macOS spoofing4.3v3.10.6%2023-10-25Fix
CVE-2023-42031IBM CICS TX denial of service4.9CNA v3.11.0%2023-10-25Fix
CVE-2023-41997Apple macOS information disclosure4.6v3.10.5%2023-10-25Fix
CVE-2023-41989Apple macOS arbitrary code execution6.8v3.10.5%2023-10-25Fix
CVE-2023-41988Apple macOS information disclosure6.8v3.10.5%2023-10-25Fix
CVE-2023-41983Apple Safari denial of service6.5v3.11.3%2023-10-25Fix
CVE-2023-41982Apple macOS information disclosure4.6v3.10.5%2023-10-25Fix
CVE-2023-41977Apple macOS, iOS and iPadOS browser cache vulnerability4.3v3.10.7%2023-10-25Fix
CVE-2023-41976Apple Safari use-after-free8.8v3.11.5%2023-10-25Fix
CVE-2023-41975Apple macOS microphone use indicator vulnerability4.3v3.11.0%2023-10-25Fix
CVE-2023-41960Rexroth ctrlX HMI Web Panel improper export of Android application components7.1CNA v3.10.2%2023-10-25Fix
CVE-2023-41721Ubiquiti UniFi Network Application improper access control5.3NVD v3.10.6%2023-10-25Fix
CVE-2023-41372Rexroth ctrlX HMI Web Panel hard-coded credentials7.8CNA v3.10.2%2023-10-25Fix
CVE-2023-41339OSGeo GeoServer WMS dynamic styling server-side request forgery8.6CNA v3.10.5%2023-10-25Fix
CVE-2023-41255Rexroth ctrlX HMI Web Panel missing authentication8.8CNA v3.10.4%2023-10-25Fix
CVE-2023-41254Apple macOS sensitive information in log files5.5v3.10.4%2023-10-25Fix
CVE-2023-41077Apple macOS incorrect authorization5.5v3.10.3%2023-10-25Fix
CVE-2023-41072Apple macOS information disclosure5.5v3.10.3%2023-10-25Fix
CVE-2023-40449Apple macOS denial of service5.5v3.10.4%2023-10-25Fix
CVE-2023-40447Apple Safari arbitrary code execution8.8v3.11.5%2023-10-25Fix
CVE-2023-40445Apple iOS and iPadOS improperly implemented security check7.5v3.10.7%2023-10-25Fix
CVE-2023-40444Apple macOS insecure permissions5.5v3.10.3%2023-10-25Fix
CVE-2023-40425Apple macOS sensitive information in log files4.4v3.10.3%2023-10-25Fix
CVE-2023-40423Apple macOS arbitrary code execution7.8v3.10.5%2023-10-25Fix
CVE-2023-40421Apple macOS insecure permissions5.5v3.10.4%2023-10-25Fix
CVE-2023-40416Apple macOS memory corruption6.5v3.11.3%2023-10-25Fix
CVE-2023-40413Apple macOS information disclosure5.5v3.10.5%2023-10-25Fix
CVE-2023-40408Apple macOS resource exhaustion5.3v3.11.0%2023-10-25Fix
CVE-2023-40405Apple macOS sensitive information in log files3.3v3.10.3%2023-10-25Fix
CVE-2023-40404Apple macOS use-after-free7.8v3.11.1%2023-10-25Exploit codeFix
CVE-2023-40401Apple macOS missing authentication7.5v3.11.0%2023-10-25Fix
CVE-2023-39930PingFederate PingID Radius PCV authentication bypass7.5CNA v3.10.7%2023-10-25Fix
CVE-2023-39924Simple File List WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-10-25Fix
CVE-2023-39740Linecorp Onigiriya-musubee improper privilege management8.2v3.10.6%2023-10-25
CVE-2023-39739Linecorp Regina Sweets&bakery information disclosure8.2v3.10.6%2023-10-25
CVE-2023-39737Linecorp Matsuya information disclosure8.2v3.10.6%2023-10-25
CVE-2023-39736Linecorp Fukunaga Memberscard information disclosure8.2v3.10.6%2023-10-25
CVE-2023-39735Linecorp Uomasa Saiji New information disclosure8.2v3.10.6%2023-10-25
CVE-2023-39734Linecorp Trackdiner10/10 Mc improper privilege management8.2v3.10.6%2023-10-25Fix
CVE-2023-39733Linecorp Tonton-tei improper privilege management8.2v3.10.6%2023-10-25
CVE-2023-39732Linecorp Tokueimaru Waiting improper privilege management8.2v3.10.6%2023-10-25
CVE-2023-39619Teomantuncer Node Email Check inefficient regular expression complexity in node-email-check7.5v3.11.1%2023-10-25
CVE-2023-39231PingFederate PingOne MFA IK Device Pairing Second Factor authentication bypass7.3CNA v3.10.5%2023-10-25Fix
CVE-2023-39219Ping Identity PingFederate admin console denial of service via Java class enumeration7.5CNA v3.10.6%2023-10-25Fix
CVE-2023-38849Linecorp line information disclosure7.5v3.10.7%2023-10-25
CVE-2023-38848Linecorp line information disclosure7.5v3.10.7%2023-10-25
CVE-2023-38847Linecorp line information disclosure7.5v3.10.7%2023-10-25
CVE-2023-38846Linecorp line information disclosure7.5v3.10.7%2023-10-25
CVE-2023-38845Linecorp line information disclosure7.5v3.10.7%2023-10-25
CVE-2023-38041Ivanti Secure Access Client time-of-check time-of-use race condition7.0v3.10.7%2023-10-25Exploit codeFix
CVE-2023-37913XWiki Platform office converter path traversal10.0CNA v3.11.1%2023-10-25Fix
CVE-2023-37912XWiki Rendering's footnote macro vulnerable to privilege escalation via the footnote macro10.0CNA v3.11.2%2023-10-25Fix
CVE-2023-37911xwiki-platform org.Xwiki.platform:xwiki-platform-oldcore may leak data6.5CNA v3.10.8%2023-10-25Fix
CVE-2023-37910XWiki Platform attachment move missing authorization8.1CNA v3.10.6%2023-10-25Fix
CVE-2023-37909xwiki-platform privilege escalation/remote code execution from account10.0CNA v3.11.6%2023-10-25Fix
CVE-2023-37908XWiki Rendering XHTML attribute sanitization cross-site scripting9.1CNA v3.11.1%2023-10-25Fix
CVE-2023-37283Ping Identity PingFederate authentication bypass via HTML form and Identifier First Adapter8.1CNA v3.10.7%2023-10-25Fix
CVE-2023-36085Sisqualwfm open redirect6.1NVD v3.10.5%2023-10-25
CVE-2023-34447iTop XSS vulnerability on pages/UI.php8.8CNA v3.10.7%2023-10-25Fix
CVE-2023-34446iTop XSS vulnerability on pages/preferences.php8.8CNA v3.10.5%2023-10-25Fix
CVE-2023-34085Ping Identity PingFederate User Attribute Disclosure via DynamoDB Data Stores2.6CNA v3.10.5%2023-10-25Fix
CVE-2023-34056VMware vCenter Server partial information disclosure4.3CNA v3.10.7%2023-10-25Fix
CVE-2023-34048VMware vCenter Server out-of-bounds write9.8CNA v3.199.4%2023-10-25KEVNucleiFix
CVE-2023-32359Apple iOS and iPadOS VoiceOver vulnerability7.5v3.10.9%2023-10-25Fix
CVE-2023-31582JOSE4J uses weak cryptographic algorithm7.5v3.10.6%2023-10-25Fix
CVE-2023-31581Sureness uses hard-coded key9.8v3.10.8%2023-10-25Fix
CVE-2023-31580Light-oauth2 missing public key verification5.9v3.10.6%2023-10-25Fix
CVE-2023-30912HPE OneView A remote code execution7.2CNA v3.11.2%2023-10-25Fix
CVE-2023-29973pfSense resource exhaustion4.9v3.11.6%2023-10-25
CVE-2023-27377Missing authentication in IDAttend’s IDWeb application7.5v3.10.7%2023-10-25
CVE-2023-27376Missing authentication in IDAttend’s IDWeb application7.5v3.10.7%2023-10-25
CVE-2023-27375Missing authentication in IDAttend’s IDWeb application7.5v3.10.7%2023-10-25
CVE-2023-27262Unauthenticated SQL injection in IDAttend’s IDWeb application9.1v3.10.8%2023-10-25
CVE-2023-27261Missing authentication in IDAttend’s IDWeb application6.5v3.10.5%2023-10-25
CVE-2023-27260Unauthenticated SQL injection in IDAttend’s IDWeb application9.1v3.10.6%2023-10-25
CVE-2023-27259Missing authentication in IDAttend’s IDWeb application7.5v3.10.5%2023-10-25
CVE-2023-27258Missing authentication in IDAttend’s IDWeb application7.5v3.10.5%2023-10-25
CVE-2023-27257Missing authentication in IDAttend’s IDWeb application7.5v3.10.7%2023-10-25
CVE-2023-27256Missing authentication in IDAttend’s IDWeb application5.3v3.10.6%2023-10-25
CVE-2023-27255Unauthenticated SQL injection in IDAttend’s IDWeb application9.1v3.10.8%2023-10-25
CVE-2023-27254Unauthenticated SQL injection in IDAttend’s IDWeb application9.1v3.10.8%2023-10-25
CVE-2023-26584Unauthenticated SQL injection in IDAttend’s IDWeb application9.1v3.10.6%2023-10-25
CVE-2023-26583Unauthenticated SQL injection in IDAttend’s IDWeb application9.1v3.10.6%2023-10-25
CVE-2023-26582Unauthenticated SQL injection in IDAttend’s IDWeb application9.1v3.10.6%2023-10-25
CVE-2023-26581Unauthenticated SQL injection in IDAttend’s IDWeb application9.1v3.10.6%2023-10-25
CVE-2023-26580Missing authentication in IDAttend’s IDWeb application7.5v3.10.7%2023-10-25
CVE-2023-26579Missing authentication in IDAttend’s IDWeb application5.3v3.10.5%2023-10-25
CVE-2023-26578Arbitrary file upload to Web Root in IDAttend’s IDWeb application8.8v3.11.5%2023-10-25
CVE-2023-26577Stored cross-site scripting in IDAttend’s IDWeb application5.4NVD v3.10.4%2023-10-25
CVE-2023-26576Missing authentication in IDAttend’s IDWeb application7.5v3.10.7%2023-10-25
CVE-2023-26575Missing authentication in IDAttend’s IDWeb application7.5v3.10.7%2023-10-25
CVE-2023-26574Missing authentication in IDAttend’s IDWeb application7.5v3.10.7%2023-10-25
CVE-2023-26573Missing authentication in IDAttend’s IDWeb application9.1v3.10.7%2023-10-25
CVE-2023-26572Unauthenticated SQL injection in IDAttend’s IDWeb application9.1v3.10.8%2023-10-25
CVE-2023-26571Missing authentication in IDAttend’s IDWeb application7.5v3.10.6%2023-10-25
CVE-2023-26570Missing authentication in IDAttend’s IDWeb application7.5v3.10.7%2023-10-25
CVE-2023-26569Unauthenticated SQL injection in IDAttend’s IDWeb application9.1v3.10.8%2023-10-25
CVE-2023-26568Unauthenticated SQL injection in IDAttend’s IDWeb application9.1v3.10.8%2023-10-25
CVE-2023-26219TIBCO Operational Intelligence Hawk RedTail credential exposure7.4CNA v3.10.4%2023-10-25
CVE-2023-25032Print, PDF, Email by PrintFriendly WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-10-25Fix
CVE-2023-20273Cisco IOS XE Web UI command injection7.2CNA v3.193.0%2023-10-25KEVMetasploitEmerging ThreatsExploit codeKCVFix
CVE-2023-5758Mozilla Firefox cross-site scripting6.1v3.10.4%2023-10-25Fix
CVE-2023-5753Potential buffer overflow vulnerabilities in the Zephyr Bluetooth subsystem6.3CNA v3.10.9%2023-10-25
CVE-2023-5752Mercurial configuration injectable in repo revision when installing via pip5.5CNA v3.10.5%2023-10-25Fix
CVE-2023-5746Synology Camera Firmware format string9.8CNA v3.11.7%2023-10-25Fix
CVE-2023-5745Reusable Text Blocks WordPress plugin stored cross-site scripting5.4v3.10.4%2023-10-25Fix
CVE-2023-5744Very Simple Google Maps WordPress plugin stored cross-site scripting5.4v3.10.6%2023-10-25Fix
CVE-2023-5740Live Chat with Facebook Messenger WordPress plugin stored cross-site scripting5.4v3.10.5%2023-10-25
CVE-2023-5732Mozilla Firefox address bar spoofing via bidirectional characters6.5v3.11.0%2023-10-25Fix
CVE-2023-5731Mozilla Firefox memory safety bugs9.8v3.11.0%2023-10-25Fix
CVE-2023-5730Mozilla Firefox memory safety bugs9.8v3.11.5%2023-10-25Fix
CVE-2023-5729Mozilla Firefox spoofing4.3v3.10.6%2023-10-25Fix
CVE-2023-5728Mozilla Firefox use-after-free7.5v3.11.2%2023-10-25Fix
CVE-2023-5727Mozilla Firefox and Thunderbird executable file download warning vulnerability6.5v3.10.9%2023-10-25Fix
CVE-2023-5726Mozilla Firefox spoofing4.3v3.10.6%2023-10-25Fix
CVE-2023-5725A malicious installed WebExtension could open arbitrary URLs, which under the right circumstance could be leveraged to collect sensitive user data. This vulnerability affects Firefox < 119, Firefox ESR < 115.4, and Thunderbird < 115.4.1.4.3v3.10.9%2023-10-25Fix
CVE-2023-5724Mozilla Firefox crash7.5v3.11.6%2023-10-25Fix
CVE-2023-5723Mozilla Firefox document.cookie handling vulnerability5.3v3.10.7%2023-10-25Fix
CVE-2023-5722Mozilla Firefox observable discrepancy5.3v3.10.6%2023-10-25Fix
CVE-2023-5721Mozilla Firefox clickjacking4.3v3.10.8%2023-10-25Fix
CVE-2023-5717Out-of-bounds write in Linux Kernel's Linux Kernel Performance Events (perf) component7.8NVD v3.10.9%2023-10-25Fix
CVE-2023-5671HP Print and Scan Doctor improper privilege management7.8v3.10.2%2023-10-25Fix
CVE-2023-5574Red Hat Enterprise Linux 9 xorg-x11-server: Use-after-free bug in damagedestroy7.0NVD v3.10.6%2023-10-25Fix
CVE-2023-5568Samba: Heap buffer overflow with freshness tokens in the heimdal kdc6.5NVD v3.11.6%2023-10-25Fix
CVE-2023-5472Google Chrome Profiles use-after-free8.8v3.11.2%2023-10-25Fix
CVE-2023-5380X.Org X server xorg-x11-server: Use-after-free bug in destroywindow4.7NVD v3.10.7%2023-10-25Fix
CVE-2023-5367Red Hat Enterprise Linux 6 Extended Lifecycle Support xorg-x11-server out-of-bounds write7.8NVD v3.10.6%2023-10-25Fix
CVE-2023-5311WP EXtra WordPress plugin missing authorization to .htaccess file modification8.8v3.11.5%2023-10-25Fix
CVE-2023-5127WP Font Awesome WordPress plugin stored cross-site scripting5.4v3.10.6%2023-10-25Fix
CVE-2023-5126Delete Me WordPress plugin authenticated (Contributor+) stored cross-site scripting via shortcode5.4v3.10.4%2023-10-25Fix
CVE-2023-5110BSK PDF Manager WordPress plugin stored cross-site scripting5.4v3.10.4%2023-10-25Fix
CVE-2023-5085Advanced Menu Widget WordPress plugin stored cross-site scripting5.4v3.10.4%2023-10-25Fix
CVE-2023-5044Kubernetes ingress-nginx code injection7.6CNA v3.156.6%2023-10-25Emerging ThreatsExploit codeFix
CVE-2023-5043Kubernetes ingress-nginx ingress nginx annotation injection causes arbitrary command execution7.6CNA v3.12.2%2023-10-25Exploit codeFix
CVE-2023-4693GRUB2: Out-of-bounds read at fs/ntfs.c4.6NVD v3.10.5%2023-10-25Fix
CVE-2023-4692GRUB2: Out-of-bounds write at fs/ntfs.c may lead to unsigned code execution7.8NVD v3.10.5%2023-10-25Fix
CVE-2023-4608Lenovo XClarity Controller (XCC) SQL injection4.1CNA v3.10.4%2023-10-25Fix
CVE-2023-4607Lenovo XClarity Controller (XCC) improper privilege management7.5CNA v3.10.5%2023-10-25Fix
CVE-2023-4606Lenovo XClarity Controller (XCC) missing authorization8.1CNA v3.10.5%2023-10-25Fix
CVE-2023-3112Lenovo Elliptic Labs Virtual Lock Sensor incorrect default permissions7.8CNA v3.10.2%2023-10-25Fix
CVE-2023-3010Grafana worldmap-panel cross-site scripting7.3CNA v3.10.5%2023-10-25Fix
CVE-2023-1356Reflected cross-site scripting in IDAttend’s IDWeb application6.1NVD v3.10.4%2023-10-25
CVE-2023-46059Geeklog cross-site scripting4.8v3.10.6%2023-10-24
CVE-2023-46058Geeklog cross-site scripting4.8v3.10.6%2023-10-24
CVE-2023-5363OpenSSL incorrect cipher key and IV length processing7.5NVD v3.13.3%2023-10-24Fix
CVE-2023-46603Color Demoiccmax out-of-bounds read8.8v3.10.5%2023-10-23
CVE-2023-46602Color Demoiccmax out-of-bounds write8.8v3.10.5%2023-10-23
CVE-2023-46332Webassembly Binary Toolkit out-of-bounds write5.5v3.10.3%2023-10-23
CVE-2023-46331Webassembly Binary Toolkit out-of-bounds read5.5v3.10.2%2023-10-23
CVE-2023-46324free5GC udm vulnerable to Invalid Curve Attack7.5v3.10.4%2023-10-23Fix
CVE-2023-46322iTerm2 log injection9.8v3.10.7%2023-10-23Fix
CVE-2023-46321iTerm2 log injection9.8v3.10.7%2023-10-23Fix
CVE-2023-46319Wallix Bastion authentication bypass7.5v3.10.5%2023-10-23Fix
CVE-2023-46288Apache Airflow: Sensitive parameters exposed in API when non-sensitive-only configuration is set4.3v3.11.4%2023-10-23Fix
CVE-2023-46127Frappe vulnerable to HTML injection by any Desk user5.4CNA v3.141.3%2023-10-23Fix
CVE-2023-46122Arbitrary file write via archive extraction (Zip Slip) vulnerability in sbt3.9CNA v3.10.3%2023-10-23Fix
CVE-2023-45998kodcloud kodbox cross-site scripting5.4v3.10.3%2023-10-23
CVE-2023-45966remark42 server-side request forgery7.5v3.10.6%2023-10-23Exploit code
CVE-2023-45802Apache HTTP Server: HTTP/2 stream memory not reclaimed right away on RST5.9v3.13.0%2023-10-23Exploit codeFix
CVE-2023-44760Concrete CMS cross-site scripting4.8NVD v3.10.6%2023-10-23
CVE-2023-43624OMRON CX-Designer XML external entity injection5.5v3.10.2%2023-10-23Fix
CVE-2023-43622Apache HTTP Server: DoS in HTTP/2 with initial windows size 07.5v3.168.8%2023-10-23Exploit codeFix
CVE-2023-43358CMS Made Simple CMSmadesimple v.2.2.18 cross-site scripting5.4NVD v3.10.5%2023-10-23
CVE-2023-43074Dell Unity external control of a file path5.2CNA v3.10.5%2023-10-23Fix
CVE-2023-43067Dell Unity XML external entity injection4.9CNA v3.10.4%2023-10-23Fix
CVE-2023-43066Dell Unity OS command injection5.1CNA v3.10.2%2023-10-23Fix
CVE-2023-43065Dell Unity cross-site scripting5.5CNA v3.10.3%2023-10-23Fix
CVE-2023-43045IBM Sterling Partner Engagement Manager security bypass5.9CNA v3.10.7%2023-10-23Fix
CVE-2023-42295OpenImageIO integer overflow8.8v3.10.9%2023-10-23Fix
CVE-2023-38722IBM Sterling Partner Engagement Manager cross-site scripting6.4CNA v3.10.3%2023-10-23Fix
CVE-2023-37636Webkul Uvdesk A stored cross-site scripting5.4v3.10.3%2023-10-23
CVE-2023-37635uvdesk community-skeleton missing brute-force protection9.8v3.11.2%2023-10-23Exploit code
CVE-2023-37532A path traversal vulnerability affects HCL Commerce5.8CNA v3.10.5%2023-10-23Fix
CVE-2023-33840IBM Security Verify Governance cross-site scripting4.8CNA v3.10.3%2023-10-23Fix
CVE-2023-33839IBM Security Verify Governance command execution7.2CNA v3.11.1%2023-10-23Fix
CVE-2023-33837IBM Security Verify Governance information disclosure4.1CNA v3.10.3%2023-10-23Fix
CVE-2023-33517carRental files accessible to external parties7.5v3.10.7%2023-10-23Exploit code
CVE-2023-31122Apache HTTP Server: Mod_macro buffer over-read7.5v3.13.0%2023-10-23Fix
CVE-2023-28805Zscaler Client Connector ZCC on Linux privilege escalation6.7CNA v3.10.3%2023-10-23Fix
CVE-2023-28804Zscaler Client Connector linux ZCC allows unsigned updates, allowing elevated code execution8.2CNA v3.10.2%2023-10-23Fix
CVE-2023-28803Zscaler Client Connector local network detection authentication bypass5.9CNA v3.10.3%2023-10-23Fix
CVE-2023-28797Zscaler Client Connector LPE using arbitrary file delete with Symlinks6.3CNA v3.10.2%2023-10-23Fix
CVE-2023-28796Zscaler Client Connector IPC Bypass through PLT Section in ELF7.1CNA v3.10.2%2023-10-23Fix
CVE-2023-28795Zscaler Client Connector client IPC validation bypass7.8CNA v3.10.1%2023-10-23Fix
CVE-2023-28793Zscaler Client Connector heap based buffer overflow in library7.8CNA v3.10.3%2023-10-23Fix
CVE-2023-27152OPNsense missing brute-force protection9.8v3.10.9%2023-10-23
CVE-2023-27149Enhancesoft osTicket stored cross-site scripting4.8v3.10.4%2023-10-23
CVE-2023-27148Enhancesoft osTicket Admin panel stored cross-site scripting4.8v3.10.4%2023-10-23
CVE-2023-5718Vue.js devtools information disclosure4.3v3.10.2%2023-10-23Fix
CVE-2023-5702Viessmann Vitogate 300 cgi-bin interface forced browsing6.5v3.119.4%2023-10-23Emerging ThreatsExploit codeFix
CVE-2023-5701vnotex vnote Markdown file cross-site scripting6.1v3.10.7%2023-10-23
CVE-2023-5700Netentsec NS-ASG Application Security Gateway uploadiscgwrouteconf.php SQL injection9.8v3.10.6%2023-10-23
CVE-2023-5699CodeAstro Internet Banking System pages_view_client.php cross-site scripting6.1v3.10.5%2023-10-23
CVE-2023-5698CodeAstro Internet Banking System pages_deposit_money.php cross-site scripting6.1v3.10.5%2023-10-23
CVE-2023-5697CodeAstro Internet Banking System pages_withdraw_money.php cross-site scripting6.1v3.10.5%2023-10-23
CVE-2023-5633Linux kernel vmwgfx driver use-after-free7.8NVD v3.10.3%2023-10-23Fix
CVE-2023-5246SICK FX0-GMOD00000 authentication bypass by replay8.8CNA v3.10.8%2023-10-23
CVE-2023-46317Knot Resolver TCP reconnection handling vulnerability7.5v3.10.6%2023-10-22Fix
CVE-2023-46315zanllp Stable Diffusion Webui Infinite Image Browsing information disclosure7.5v3.10.6%2023-10-22
CVE-2023-46306Netmodule Router Software OS command injection6.6NVD v3.11.0%2023-10-22Fix
CVE-2023-46303Calibre-ebook calibre server-side request forgery7.5v3.11.4%2023-10-22Fix
CVE-2023-46301iTerm2 code execution9.8v3.11.2%2023-10-22Fix
CVE-2023-46300iTerm2 code execution9.8v3.11.2%2023-10-22Fix
CVE-2023-46298Next.js missing cache-control header may lead to CDN caching empty reply7.5v3.11.3%2023-10-22Fix
CVE-2023-46095Smooth Scroll Links WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-22
CVE-2023-46089Userback WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-22Fix
CVE-2023-46085Wp Ultimate Review WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-22Fix
CVE-2023-38735IBM Cognos Dashboards improper authentication5.7CNA v3.10.5%2023-10-22Fix
CVE-2023-38276IBM Cognos Dashboards information disclosure5.9CNA v3.10.4%2023-10-22Fix
CVE-2023-38275IBM Cognos Dashboards information disclosure5.9CNA v3.10.4%2023-10-22Fix
CVE-2023-5696CodeAstro Internet Banking System pages_transfer_money.php cross-site scripting6.1v3.10.5%2023-10-22
CVE-2023-5695CodeAstro Internet Banking System pages_reset_pwd.php cross-site scripting6.1v3.10.5%2023-10-22
CVE-2023-5694CodeAstro Internet Banking System pages_system_settings.php cross-site scripting6.1v3.10.5%2023-10-22
CVE-2023-5693CodeAstro Internet Banking System pages_reset_pwd.php SQL injection9.8v3.10.6%2023-10-22
CVE-2023-46078Serial Numbers for WooCommerce License Manager WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-21Fix
CVE-2023-46067Rocket Font WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-21
CVE-2023-46055Thingnario Photon code injection8.8v3.11.2%2023-10-21
CVE-2023-46054WBCE_CMS cross-site scripting5.4v3.10.4%2023-10-21
CVE-2023-46003I-doit cross-site scripting5.4v3.10.5%2023-10-21Exploit code
CVE-2023-45682nothings stb wild address read in vorbis_decode_packet_rest in stb_vorbis7.1NVD v3.10.6%2023-10-21Fix
CVE-2023-45681nothings stb out-of-bounds heap buffer write in stb_vorbis7.8NVD v3.10.5%2023-10-21Fix
CVE-2023-45680nothings stb null pointer dereference in vorbis_deinit in stb_vorbis5.5NVD v3.10.5%2023-10-21Fix
CVE-2023-45679nothings stb attempt to free an uninitialized memory pointer in vorbis_deinit in stb_vorbis7.8NVD v3.10.5%2023-10-21Fix
CVE-2023-45678nothings stb off-by-one heap buffer write in start_decoder in stb_vorbis7.8NVD v3.10.7%2023-10-21
CVE-2023-45677nothings stb heap buffer out-of-bounds write in start_decoder in stb_vorbis7.8NVD v3.10.5%2023-10-21Fix
CVE-2023-45676nothings stb multi-byte write heap buffer overflow in start_decoder in stb_vorbis7.8NVD v3.10.5%2023-10-21Fix
CVE-2023-45675nothings stb 0 byte write heap buffer overflow in start_decoder in stb_vorbis7.8NVD v3.10.8%2023-10-21
CVE-2023-45667nothings stb null pointer dereference because of an uninitialized variable in stb_image7.5NVD v3.11.1%2023-10-21
CVE-2023-45666nothings stb possible double free or memory leak in stbi__load_gif_main in stb_image9.8NVD v3.11.0%2023-10-21
CVE-2023-45664nothings stb double free in stbi__load_gif_main_outofmem in stb_image8.8NVD v3.10.9%2023-10-21
CVE-2023-45663nothings stb disclosure of uninitialized memory in stbi__tga_load in stb_image5.5NVD v3.10.7%2023-10-21
CVE-2023-45662nothings stb multi-byte read heap buffer overflow in stbi__vertical_flip in stb_image8.1NVD v3.10.7%2023-10-21
CVE-2023-45661nothings stb wild address read in stbi__gif_load_next in stb_image7.1NVD v3.10.6%2023-10-21
CVE-2023-38194Superwebmailer cross-site scripting6.1v3.11.1%2023-10-21Nuclei
CVE-2023-38193Superwebmailer command injection8.8v3.11.3%2023-10-21
CVE-2023-38192Superwebmailer cross-site scripting6.1v3.11.1%2023-10-21Nuclei
CVE-2023-38190Superwebmailer SQL injection8.8v3.10.7%2023-10-21
CVE-2023-5684Byzoro Smart S85F Management Platform importexport.php os command injection9.8v3.126.6%2023-10-21
CVE-2023-5683Byzoro Smart S85F Management Platform importconf.php os command injection9.8v3.19.1%2023-10-21
CVE-2023-5205The Add Custom Body Class plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'add_custom_body_class' value in versions up to, and including, 1.4.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-l5.4v3.10.3%2023-10-21
CVE-2023-5132Soisy Pagamento Rateale WordPress plugin missing authorization to sensitive information exposure7.5v3.10.6%2023-10-21Fix
CVE-2023-4939SALESmanago WordPress plugin log injection via weak authentication Token5.3v3.10.5%2023-10-21Fix
CVE-2023-4635EventON WordPress plugin reflected cross-site scripting6.1v3.10.6%2023-10-21Fix
CVE-2023-46287Nagvis cross-site scripting6.1v3.10.5%2023-10-20Fix
CVE-2023-46277Edneville Please pleaser privilege escalation7.8v3.10.3%2023-10-20
CVE-2023-46117Inadequate validation of retrieved subdomains may lead to a remote code execution in reconFTW9.6CNA v3.00.8%2023-10-20Fix
CVE-2023-46115tauri Updater Private Keys Possibly Leaked via Vite Environment variables in tauri-cli8.4CNA v3.10.2%2023-10-20Fix
CVE-2023-45805pdm lockfile parsing vulnerability7.8CNA v3.10.5%2023-10-20Fix
CVE-2023-45471Qad Search Server cross-site scripting5.4v3.10.4%2023-10-20
CVE-2023-45394Small CRM stored cross-site scripting5.4v3.10.4%2023-10-20
CVE-2023-44483Apache Santuario: Private key disclosure in debug-log output6.5v3.11.2%2023-10-20Fix
CVE-2023-44256Fortinet FortiAnalyzer path traversal6.4CNA v3.11.2%2023-10-20Fix
CVE-2023-43357CMS Made Simple CMSmadesimple v.2.2.18 cross-site scripting5.4NVD v3.10.5%2023-10-20
CVE-2023-43356CMS Made Simple CMSmadesimple v.2.2.18 cross-site scripting5.4v3.10.5%2023-10-20Exploit code
CVE-2023-43355CMS Made Simple CMSmadesimple v.2.2.18 cross-site scripting5.4v3.10.5%2023-10-20Exploit code
CVE-2023-43354CMS Made Simple CMSmadesimple v.2.2.18 cross-site scripting5.4v3.10.5%2023-10-20Exploit code
CVE-2023-43353CMS Made Simple CMSmadesimple v.2.2.18 cross-site scripting5.4NVD v3.10.5%2023-10-20
CVE-2023-43346OpenSolution QuickCMS cross-site scripting5.4v3.10.5%2023-10-20Exploit code
CVE-2023-41894Local-only webhooks externally accessible via SniTun in Home Assistant Core5.3CNA v3.10.4%2023-10-20Fix
CVE-2023-41893Account takeover via auth_callback login in Home Assistant Core4.3CNA v3.10.4%2023-10-20Fix
CVE-2023-40361Secudos Qiata incorrect permission assignment7.8v3.10.3%2023-10-20Exploit code
CVE-2023-39731LINE Kaibutsunosato improper access control5.3v3.10.4%2023-10-20Fix
CVE-2023-39680Sollace Unicopia deserialization of untrusted data9.8v3.10.6%2023-10-20
CVE-2023-38191Superwebmailer cross-site scripting6.1v3.10.5%2023-10-20
CVE-2023-37824Sitolog Application Connect SQL injection9.8v3.10.5%2023-10-20
CVE-2023-34052VMware Aria Operations for Logs deserialization of untrusted data7.8v3.10.2%2023-10-20Fix
CVE-2023-34051VMware Aria Operations for Logs incorrect authorization9.8v3.148.8%2023-10-20Exploit codeFix
CVE-2023-34046VMware Fusion TOCTOU local privilege escalation6.7CNA v3.10.1%2023-10-20Fix
CVE-2023-34045VMware Fusion installer local privilege escalation6.6CNA v3.10.2%2023-10-20Fix
CVE-2023-34044VMware Workstation information disclosure vulnerability in bluetooth device-sharing functionality7.1CNA v3.10.2%2023-10-20Fix
CVE-2023-32786Langchain server-side request forgery7.5v3.10.7%2023-10-20Fix
CVE-2023-23373QNAP QUSBCam2 OS command injection8.8CNA v3.11.1%2023-10-20Fix
CVE-2023-5690Cross-site request forgery (CSRF) in modoboa/modoboa8.8v3.10.4%2023-10-20Fix
CVE-2023-5689Cross-site scripting (XSS) DOM in modoboa/modoboa5.4NVD v3.10.5%2023-10-20Fix
CVE-2023-5688Cross-site scripting (XSS) DOM in modoboa/modoboa5.4NVD v3.10.6%2023-10-20Fix
CVE-2023-5687Cross-site request forgery (CSRF) in mosparo/mosparo8.8v3.10.3%2023-10-20Fix
CVE-2023-5686Heap-based buffer overflow in radareorg/radare28.8v3.10.8%2023-10-20Fix
CVE-2023-5682Tongda OA delete.php SQL injection9.8v3.10.7%2023-10-20
CVE-2023-5681Netentsec NS-ASG Application Security Gateway list_addr_fwresource_ip.php SQL injection7.2v3.10.6%2023-10-20
CVE-2023-5668WhatsApp Share Button WordPress plugin stored cross-site scripting5.4v3.10.3%2023-10-20Fix
CVE-2023-5618Modern Footnotes WordPress plugin stored cross-site scripting5.4v3.10.4%2023-10-20Fix
CVE-2023-5615Skype Legacy Buttons WordPress plugin stored cross-site scripting5.4v3.10.4%2023-10-20
CVE-2023-5614Theme Switcha WordPress plugin stored cross-site scripting5.4v3.10.4%2023-10-20Fix
CVE-2023-5613Super Testimonials WordPress plugin stored cross-site scripting5.4v3.10.4%2023-10-20Fix
CVE-2023-5602Social Media Share Buttons and Social Sharing Icons WordPress plugin cross-site request forgery8.8v3.10.2%2023-10-20Fix
CVE-2023-5576Migration, Backup, Staging WPvivid WordPress plugin Google Drive client secret exposure9.3v3.10.8%2023-10-20Fix
CVE-2023-5534WPBot WordPress plugin AI ChatBot and cross-site request forgery on AJAX actions5.4v3.10.2%2023-10-20Fix
CVE-2023-5533WPBot WordPress plugin AI ChatBot and missing authorization on AJAX actions9.8v3.10.5%2023-10-20Fix
CVE-2023-5524M-Files Web Companion allows remote code execution for some filetypes8.2CNA v3.10.3%2023-10-20Fix
CVE-2023-5523M-Files Web Companion allows remote code execution8.6CNA v3.10.3%2023-10-20Fix
CVE-2023-5414Icegram Express WordPress plugin directory traversal to arbitrary file read7.2NVD v3.11.0%2023-10-20Fix
CVE-2023-5337Contact form Form For All WordPress plugin stored cross-site scripting5.4v3.10.3%2023-10-20
CVE-2023-5308Podcast Subscribe Buttons WordPress plugin stored cross-site scripting5.4v3.10.4%2023-10-20Fix
CVE-2023-5292Advanced Custom Fields: Extended WordPress plugin stored cross-site scripting5.4v3.10.4%2023-10-20Fix
CVE-2023-5231Magic Action Box WordPress plugin stored cross-site scripting5.4v3.10.3%2023-10-20
CVE-2023-5200flowpaper WordPress plugin authenticated (Contributor+) stored cross-site scripting via shortcode5.4v3.10.5%2023-10-20Fix
CVE-2023-5121Migration, Backup, Staging WPvivid WordPress plugin stored cross-site scripting4.8v3.10.3%2023-10-20Fix
CVE-2023-5120Migration, Backup, Staging WPvivid WordPress plugin authenticated stored cross-site scripting4.8v3.10.3%2023-10-20Fix
CVE-2023-5109WP Mailto Links Protect Email Addresses WordPress plugin stored cross-site scripting5.4v3.10.4%2023-10-20Fix
CVE-2023-5086Copy Anything to Clipboard WordPress plugin stored cross-site scripting5.4v3.10.4%2023-10-20Fix
CVE-2023-5071Sitekit WordPress plugin stored cross-site scripting5.4v3.10.5%2023-10-20Fix
CVE-2023-5070Social Media Share Buttons and Social Sharing Icons WordPress plugin information exposure6.5v3.11.2%2023-10-20Exploit codeFix
CVE-2023-5050Leaflet Map WordPress plugin authenticated (Contributor+) stored cross-site scripting via shortcode5.4v3.10.4%2023-10-20Fix
CVE-2023-4999Horizontal scrolling announcement WordPress plugin SQL injection8.8v3.10.7%2023-10-20
CVE-2023-4975Website Builder by SeedProd WordPress plugin cross-site request forgery to settings update4.3v3.10.3%2023-10-20Fix
CVE-2023-4968WPLegalPages WordPress plugin authenticated (Author+) stored cross-site scripting via shortcode4.8v3.10.4%2023-10-20Fix
CVE-2023-4961Poptin WordPress plugin authenticated (Contributor+) stored cross-site scripting via shortcode5.4v3.10.5%2023-10-20Fix
CVE-2023-4947WooCommerce EAN Payment Gateway WordPress plugin missing authorization authenticated EAN update4.3v3.10.4%2023-10-20Fix
CVE-2023-4943BEAR WordPress plugin missing authorization to Product manipulation4.3v3.10.5%2023-10-20Fix
CVE-2023-4942BEAR WordPress plugin cross-site request forgery to Product manipulation4.3v3.10.3%2023-10-20Fix
CVE-2023-4941BEAR WordPress plugin missing authorization to Product manipulation4.3v3.10.5%2023-10-20Fix
CVE-2023-4940BEAR WordPress plugin cross-site request forgery to Product manipulation4.3v3.10.3%2023-10-20Fix
CVE-2023-4937BEAR WordPress plugin cross-site request forgery to Product manipulation4.3v3.10.3%2023-10-20Fix
CVE-2023-4935BEAR WordPress plugin cross-site request forgery to Profile creation4.3v3.10.3%2023-10-20Fix
CVE-2023-4926BEAR WordPress plugin cross-site request forgery to Product deletion4.3v3.10.3%2023-10-20Fix
CVE-2023-4924BEAR WordPress plugin missing authorization to Product deletion4.3v3.10.3%2023-10-20Fix
CVE-2023-4923BEAR WordPress plugin cross-site request forgery to Product deletion4.3v3.10.3%2023-10-20Fix
CVE-2023-4920BEAR WordPress plugin cross-site request forgery to stored cross-site scripting8.8v3.10.3%2023-10-20Fix
CVE-2023-4919iframe WordPress plugin stored cross-site scripting5.4v3.10.5%2023-10-20Fix
CVE-2023-4796Booster for WooCommerce WordPress plugin information disclosure4.3v3.10.6%2023-10-20Fix
CVE-2023-4668Ad Inserter WordPress plugin unauthenticated sensitive information exposure7.5v3.10.5%2023-10-20Fix
CVE-2023-4648WP Customer Reviews WordPress plugin authenticated (Administrator+) stored cross-site scripting4.8v3.10.3%2023-10-20Fix
CVE-2023-4598Slimstat Analytics WordPress plugin authenticated (Contributor+) blind SQL injection via shortcode6.5NVD v3.11.1%2023-10-20Fix
CVE-2023-4488Dropbox Folder Share WordPress plugin unauthenticated local file inclusion9.8v3.11.0%2023-10-20Fix
CVE-2023-4482Auto Amazon Links WordPress plugin stored cross-site scripting5.4v3.10.3%2023-10-20Fix
CVE-2023-4402Essential Blocks WordPress plugin unauthenticated PHP object injection via products9.8v3.11.3%2023-10-20Fix
CVE-2023-4386Essential Blocks WordPress plugin unauthenticated PHP object injection via queries8.1v3.10.8%2023-10-20Fix
CVE-2023-4274Migration WordPress plugin path traversal6.5NVD v3.11.5%2023-10-20Fix
CVE-2023-4271Photospace Responsive WordPress plugin authenticated (Administrator+) stored cross-site scripting4.8v3.10.4%2023-10-20Fix
CVE-2023-4021Modern Events Calendar lite WordPress plugin authenticated (Admin+) stored cross-site scripting4.8v3.10.3%2023-10-20Fix
CVE-2023-3998wpDiscuz WordPress plugin insecure direct object reference to post Rating Increase/Decrease5.3v3.10.4%2023-10-20Fix
CVE-2023-3996ARMember Lite - Membership WordPress plugin stored cross-site scripting4.8v3.10.5%2023-10-20Fix
CVE-2023-3965nsc WordPress theme prototype pollution to reflected cross-site scripting6.1v3.10.4%2023-10-20
CVE-2023-3962Winters WordPress theme prototype pollution to reflected cross-site scripting6.1v3.10.4%2023-10-20
CVE-2023-3933Your Journey WordPress theme prototype pollution to reflected cross-site scripting6.1v3.10.4%2023-10-20
CVE-2023-3869wpDiscuz WordPress plugin insecure direct object reference to comment Rating Increase/Decrease5.3v3.10.4%2023-10-20Fix
CVE-2023-3487Integer overflow in Silicon Labs Gecko Bootloader leads to unbounded memory access7.7CNA v3.10.2%2023-10-20Fix
CVE-2023-2325Stored XSS vulnerability in M-Files Classic Web7.3CNA v3.10.4%2023-10-20Fix
CVE-2023-46229LangChain server side request forgery8.8v3.147.6%2023-10-19Exploit codeFix
CVE-2023-46228Zchunk integer overflow7.8v3.10.3%2023-10-19Fix
CVE-2023-46227Apache InLong has an arbitrary file read7.5v3.11.0%2023-10-19Fix
CVE-2023-46042GetSimpleCMS code injection9.8v3.125.3%2023-10-19
CVE-2023-46033D-Link DSL-2730U improper access control6.8v3.10.3%2023-10-19
CVE-2023-45992CommScope Ruckus Cloudpath Enrollment System cross-site request forgery9.6v3.10.6%2023-10-19Exploit codeFix
CVE-2023-45883Enghouse Qumu improper privilege management7.8v3.10.2%2023-10-19
CVE-2023-45826Authenticated SQL injection in Leantime6.5CNA v3.11.9%2023-10-19NucleiFix
CVE-2023-45825Token in custom credentials object can leak through logs in ydb-go-sdk5.5CNA v3.10.2%2023-10-19Fix
CVE-2023-45823Arbitrary file read in Artifact Hub7.5CNA v3.10.6%2023-10-19Fix
CVE-2023-45822Unsafe rego built-in allowed in Artifact Hub3.7CNA v3.10.5%2023-10-19Fix
CVE-2023-45821Incorrect Docker Hub registry check in Artifact Hub5.4CNA v3.10.2%2023-10-19Fix
CVE-2023-45820Directus crashes on invalid WebSocket message5.9CNA v3.10.7%2023-10-19Fix
CVE-2023-45819Cross-site scripting vulnerability in TinyMCE notificationManager.open API6.1CNA v3.10.6%2023-10-19Fix
CVE-2023-45818TinyMCE mXSS vulnerability in undo/redo, getContent API, resetContent API, and Autosave plugin6.1CNA v3.10.6%2023-10-19Fix
CVE-2023-45815ArchiveBox wget extractor output vulnerability6.4CNA v3.10.7%2023-10-19Fix
CVE-2023-45809Disclosure of user names via admin bulk action views in wagtail2.7CNA v3.10.5%2023-10-19Fix
CVE-2023-45384Knowband Supercheckout unrestricted file upload9.8v3.10.6%2023-10-19
CVE-2023-45381Webshopworks Creativepopup SQL injection9.8v3.10.5%2023-10-19