CVE-2023 list

CVE-2023 records published in October 2023

Page two of three: records 1,001 to 2,000 of the 2,534 published in October 2023, newest first. The first page carries the figures for October 2023.

CVE-2023 records published in October 2023, newest first: records 1,001 to 2,000 of 2,534
CVE Summary CVSS EPSS Published Signals
CVE-2023-45379Posthemes Posrotatorimg SQL injection9.8v3.10.5%2023-10-19
CVE-2023-45376Hipresta Carousels Pack SQL injection9.8v3.10.7%2023-10-19
CVE-2023-45281Spaceapplications yamcs cross-site scripting6.1v3.10.4%2023-10-19Fix
CVE-2023-45280Yamcs cross-site scripting5.4v3.10.5%2023-10-19Fix
CVE-2023-45279Yamcs cross-site scripting5.4v3.10.4%2023-10-19Fix
CVE-2023-45278Yamcs API directory traversal9.1v3.11.6%2023-10-19Exploit codeFix
CVE-2023-45277Yamcs path traversal7.5v3.11.0%2023-10-19Exploit codeFix
CVE-2023-44690Mycli has inadequate encryption strength7.5v3.10.2%2023-10-19
CVE-2023-44385Client-Side Request Forgery in Home Assistant iOS/macOS native Apps8.6CNA v3.10.3%2023-10-19Fix
CVE-2023-43986Dmconcept Configurator SQL injection9.8v3.10.5%2023-10-19
CVE-2023-43875Subrion CMS vulnerable to cross-site scripting6.1v3.10.8%2023-10-19Exploit code
CVE-2023-43492Weintek cMT3000 HMI Web CGI stack-based buffer overflow9.8v3.10.9%2023-10-19Fix
CVE-2023-43359CMS Made Simple CMSmadesimple v.2.2.18 cross-site scripting5.4v3.10.5%2023-10-19Exploit code
CVE-2023-43345OpenSolution QuickCMS cross-site scripting8.6v3.10.4%2023-10-19Exploit code
CVE-2023-43344OpenSolution QuickCMS cross-site scripting5.4NVD v3.10.7%2023-10-19
CVE-2023-43342OpenSolution QuickCMS cross-site scripting5.4v3.10.5%2023-10-19Exploit code
CVE-2023-43341Evolution CMS cross-site scripting6.1v3.10.6%2023-10-19Exploit code
CVE-2023-43340Evolution CMS cross-site scripting5.2NVD v3.10.5%2023-10-19
CVE-2023-43252XnView Nconvert out-of-bounds write7.8v3.10.5%2023-10-19
CVE-2023-43251XnView Nconvert improper exception handling7.8v3.10.5%2023-10-19
CVE-2023-42666Exposure of sensitive information to an unauthorized actor in DEXMA DEXGate5.3v3.10.4%2023-10-19
CVE-2023-42435Cross-site request forgery in DEXMA DEXGate8.8v3.10.2%2023-10-19
CVE-2023-41899Partial server-side request forgery in Home Assistant Core6.6CNA v3.10.5%2023-10-19Fix
CVE-2023-41898Arbitrary URL load in Android WebView in `MyActivity.kt` in Home Assistant Companion for Android8.6CNA v3.10.2%2023-10-19Fix
CVE-2023-41897Lack of XFO header allows clickjacking in Home Assistant Core8.8CNA v3.11.0%2023-10-19Fix
CVE-2023-41896Fake websocket server installation permits full takeover in Home Assistant Core7.1CNA v3.10.3%2023-10-19Fix
CVE-2023-41895Cross-site scripting via auth_callback login in Home Assistant Core8.8CNA v3.10.7%2023-10-19Fix
CVE-2023-41089Improper authentication in DEXMA DEXGate8.8v3.10.5%2023-10-19
CVE-2023-41088Cleartext transmission of sensitive information in DEXMA DEXGate6.5v3.10.2%2023-10-19
CVE-2023-40153Cross-site scripting in DEXMA DEXGate6.1v3.10.3%2023-10-19
CVE-2023-40145Weintek cMT3000 HMI Web CGI OS command injection8.8v3.11.2%2023-10-19Fix
CVE-2023-39431Santesoft Sante DICOM Viewer Pro out-of-bounds write7.8v3.10.2%2023-10-19Fix
CVE-2023-38584Weintek cMT3000 HMI Web CGI stack-based buffer overflow9.8v3.11.1%2023-10-19Fix
CVE-2023-38128Ichitaro 2023 "HyperLinkFrame" stream parser of Ichitaro out-of-bounds write7.8v3.10.7%2023-10-19Fix
CVE-2023-38127Ichitaro 2023 "HyperLinkFrame" stream parser of Ichitaro integer overflow7.8v3.10.6%2023-10-19Fix
CVE-2023-37504An insufficient session expiration vulnerability affects HCL Compass7.1CNA v3.10.3%2023-10-19Fix
CVE-2023-37503A weak password requirements vulnerability affects HCL Compass8.1CNA v3.10.5%2023-10-19Fix
CVE-2023-36857Baker Hughes Bently Nevada 3500 System authentication bypass by capture-replay6.5v3.10.3%2023-10-19
CVE-2023-35986Santesoft Sante DICOM Viewer Pro stack-based buffer overflow7.8v3.10.2%2023-10-19Fix
CVE-2023-35187SolarWinds Access Rights Manager directory traversal remote code execution8.8CNA v3.13.0%2023-10-19Fix
CVE-2023-35186SolarWinds Access Rights Manager deserialization of untrusted data remote code execution8.0CNA v3.12.2%2023-10-19Fix
CVE-2023-35185SolarWinds Access Rights Manager OpenFile directory traversal remote code execution6.8CNA v3.11.1%2023-10-19Fix
CVE-2023-35184SolarWinds Access Rights Manager deserialization of untrusted data remote code execution8.8CNA v3.11.4%2023-10-19Fix
CVE-2023-35183SolarWinds Access Rights Manager incorrect default permissions local privilege escalation7.8CNA v3.10.2%2023-10-19Fix
CVE-2023-35182SolarWinds Access Rights Manager deserialization of untrusted data remote code execution8.8CNA v3.12.4%2023-10-19Fix
CVE-2023-35181SolarWinds Access Rights Manager incorrect default permissions local privilege escalation7.8CNA v3.10.2%2023-10-19Fix
CVE-2023-35180SolarWinds Access Rights Manager deserialization of untrusted data remote code execution8.0CNA v3.130.1%2023-10-19Fix
CVE-2023-35126Ichitaro 2023 improper array index validation7.8v3.10.5%2023-10-19Fix
CVE-2023-34441Baker Hughes Bently Nevada 3500 System cleartext transmission of sensitive information8.2v3.10.2%2023-10-19
CVE-2023-34437Baker Hughes Bently Nevada 3500 System incorrect permission assignment for critical resource7.5v3.10.5%2023-10-19
CVE-2023-34366Ichitaro 2023 use-after-free7.8v3.10.6%2023-10-19Fix
CVE-2023-34050Spring AMQP deserialization5.0CNA v3.11.5%2023-10-19Exploit codeFix
CVE-2023-31046PaperCut NG path traversal6.5v3.11.5%2023-10-19Fix
CVE-2023-30633InsydeH2O TrEEConfigDriver PCR reporting vulnerability5.3v3.10.2%2023-10-19Fix
CVE-2023-30132Ixpdata Easyinstall inadequate encryption strength7.8v3.10.2%2023-10-19
CVE-2023-30131Ixpdata Easyinstall code injection9.8v3.10.8%2023-10-19
CVE-2023-27795Ixpdata Easyinstall improper privilege management7.8v3.10.2%2023-10-19
CVE-2023-27793Ixpdata Easyinstall improper privilege management7.8v3.10.2%2023-10-19
CVE-2023-27792Ixpdata Easyinstall missing authorization7.8v3.10.2%2023-10-19
CVE-2023-27791Ixpdata Easyinstall weak random number generator8.1v3.10.7%2023-10-19
CVE-2023-25753Server-side request forgery in Apache ShenYu6.5v3.10.8%2023-10-19Fix
CVE-2023-5654React Developer Tools Extension improper authorization6.5v3.10.5%2023-10-19Fix
CVE-2023-5639Team Showcase WordPress plugin stored cross-site scripting5.4v3.10.4%2023-10-19Fix
CVE-2023-5638Booster for WooCommerce WordPress plugin stored cross-site scripting5.4v3.10.5%2023-10-19Fix
CVE-2023-5336iPanorama 360 WordPress Virtual Tour Builder plugin SQL injection6.5NVD v3.10.6%2023-10-19Fix
CVE-2023-5254ChatBot WordPress plugin information disclosure5.3v3.10.8%2023-10-19Fix
CVE-2023-5241WPBot WordPress plugin AI ChatBot and Authenticated directory traversal to arbitrary file write8.1NVD v3.12.1%2023-10-19Fix
CVE-2023-5212WPBot WordPress plugin AI ChatBot and- Authenticated arbitrary file deletion8.1NVD v3.11.6%2023-10-19Fix
CVE-2023-5204ChatBot WordPress plugin SQL injection7.5NVD v3.16.8%2023-10-19NucleiExploit codeFix
CVE-2023-5059Santesoft Sante FFT Imaging out-of-bounds read7.8v3.10.2%2023-10-19Fix
CVE-2023-4645Ad Inserter WordPress plugin unauthenticated sensitive information exposure via ai_ajax5.3v3.10.6%2023-10-19Fix
CVE-2023-46009Lcdf Gifsicle incorrect comparison7.8v3.10.3%2023-10-18Fix
CVE-2023-46007Mayuri K Best Courier Management System SQL injection9.8v3.10.7%2023-10-18
CVE-2023-46006Mayuri K Best Courier Management System SQL injection9.8v3.10.7%2023-10-18
CVE-2023-46005Mayuri K Best Courier Management System SQL injection9.8v3.10.7%2023-10-18
CVE-2023-46004Mayuri K Best Courier Management System unrestricted file upload7.2v3.10.7%2023-10-18
CVE-2023-45958thirty bees cross-site scripting6.1v3.10.3%2023-10-18
CVE-2023-45912Wipotec Comscale information disclosure7.5v3.10.6%2023-10-18
CVE-2023-45911Wipotec Comscale resource exposure9.8v3.10.8%2023-10-18
CVE-2023-45909Zzzcms Zzzphp open redirect6.1v3.10.3%2023-10-18
CVE-2023-45814Tokens cached in the AuthenticationService are susceptible to reuse in Bunkum5.3CNA v3.10.4%2023-10-18Fix
CVE-2023-45813Inefficient regular expression complexity in TorBot4.6CNA v3.10.8%2023-10-18Fix
CVE-2023-45812apollographql router improper check or handling of exceptional conditions in apollo-router7.5CNA v3.10.7%2023-10-18Fix
CVE-2023-45727North Grid Proself Improper Restriction of XML external entity (XXE) Reference7.5v3.13.5%2023-10-18KEVFix
CVE-2023-45632WebDorado SpiderVPlayer reflected cross-site scripting6.1NVD v3.10.3%2023-10-18
CVE-2023-45630Responsive Image Gallery, Gallery Album WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.3%2023-10-18
CVE-2023-45628QR Twitter Widget WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2023-10-18
CVE-2023-45608Smart Cookie Kit WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2023-10-18Fix
CVE-2023-45607WordPress Popular Posts plugin cross-site scripting (XSS)5.4v3.10.3%2023-10-18Fix
CVE-2023-45604Get Custom Field Values WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2023-10-18Fix
CVE-2023-45602Ebook Store WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.3%2023-10-18Fix
CVE-2023-45383Common-services Sonice Etiquetage path traversal7.5v3.10.6%2023-10-18Fix
CVE-2023-45146Remote code execution in XXL-RPC10.0NVD v3.11.0%2023-10-18
CVE-2023-45145Redis Unix-domain socket may have be exposed with the wrong permissions for a short time window3.6CNA v3.10.4%2023-10-18Fix
CVE-2023-45073Mendeley WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2023-10-18
CVE-2023-45072Order auto complete for WooCommerce WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2023-10-18Fix
CVE-2023-45071Form Maker by 10Web WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.3%2023-10-18Fix
CVE-2023-45070Form Maker by 10Web WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-10-18Fix
CVE-2023-45067WP Simple HTML Sitemap WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2023-10-18Fix
CVE-2023-45065Bulk NoIndex and NoFollow Toolkit WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.3%2023-10-18Fix
CVE-2023-45064OPcache Dashboard WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.3%2023-10-18
CVE-2023-45062Download canvasio3D Light WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.3%2023-10-18
CVE-2023-45059Gumroad WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2023-10-18
CVE-2023-45057Hitsteps Web Analytics WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2023-10-18Fix
CVE-2023-45056Open User Map Everybody can add locations WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2023-10-18Fix
CVE-2023-45054Product Category Tree WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.3%2023-10-18
CVE-2023-45051Image vertical reel scroll slideshow WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2023-10-18
CVE-2023-45049YouTube Playlist Player WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2023-10-18Fix
CVE-2023-45008Comment Reply Email WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2023-10-18Fix
CVE-2023-43803Path traversal in Arduino Create Agent6.1CNA v3.10.3%2023-10-18Fix
CVE-2023-43802Path traversal in Arduino Create Agent7.1CNA v3.10.4%2023-10-18Fix
CVE-2023-43801Path traversal in Arduino Create Agent6.1CNA v3.10.3%2023-10-18Fix
CVE-2023-43800Insufficient verification of data authenticity in Arduino Create Agent7.3CNA v3.10.2%2023-10-18Fix
CVE-2023-43250XnView Nconvert buffer overflow7.8v3.10.6%2023-10-18
CVE-2023-42319go-ethereum vulnerable to denial of service via crafted GraphQL query7.5v3.10.9%2023-10-18Fix
CVE-2023-39332Node.js Node path traversal9.8v3.11.8%2023-10-18Fix
CVE-2023-39331Node.js Node path traversal7.5v3.11.3%2023-10-18Fix
CVE-2023-38552Node.js Node insufficient verification of data authenticity7.5v3.11.1%2023-10-18Fix
CVE-2023-38546libcurl curl_easy_duphandle vulnerability3.7NVD v3.16.0%2023-10-18Fix
CVE-2023-38545curl out-of-bounds write9.8NVD v3.178.7%2023-10-18Exploit codeFix
CVE-2023-37502An unrestricted file upload vulnerability affects HCL Compass9.0CNA v3.10.5%2023-10-18Fix
CVE-2023-35663Google Android protocolnetadapter.cpp out-of-bounds read7.5v3.10.3%2023-10-18Fix
CVE-2023-35656Google Android protocolembmsadapter.cpp out-of-bounds read7.5v3.10.3%2023-10-18Fix
CVE-2023-35084Ivanti Endpoint Manager deserialization of untrusted data9.8v3.12.8%2023-10-18Fix
CVE-2023-35083Ivanti Endpoint Manager arbitrary file read6.5v3.11.1%2023-10-18Fix
CVE-2023-32089Pegasystems Pega Platform cross-site scripting4.6CNA v3.10.3%2023-10-18Fix
CVE-2023-32088Pegasystems Pega Platform cross-site scripting4.6CNA v3.10.3%2023-10-18Fix
CVE-2023-32087Pegasystems Pega Platform cross-site scripting4.6CNA v3.10.3%2023-10-18Fix
CVE-2023-31217User Location and IP WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2023-10-18Fix
CVE-2023-30911HPE Integrated Lights-Out denial of service6.8CNA v3.10.5%2023-10-18Fix
CVE-2023-30781Tweeple WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.3%2023-10-18
CVE-2023-26300HP PC products privilege escalation7.8v3.10.2%2023-10-18Fix
CVE-2023-25476AmpedSense AdSense Split Tester WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.3%2023-10-18
CVE-2023-20261Cisco SD-WAN vManage improper input validation6.5CNA v3.10.5%2023-10-18Fix
CVE-2023-5642Advantech R-SeeNet Unauthenticated Read/Write9.8NVD v3.119.4%2023-10-18Emerging ThreatsFix
CVE-2023-5632eclipse Mosquitto unconditionally adding an event to the epoll causes excessive CPU consumption7.5CNA v3.10.7%2023-10-18Fix
CVE-2023-5631Roundcube Webmail persistent cross-site scripting (XSS)5.4NVD v3.176.9%2023-10-18KEVEmerging ThreatsFix
CVE-2023-5626Cross-site request forgery (CSRF) in pkp/ojs8.8v3.10.3%2023-10-18Fix
CVE-2023-5621Thumbnail Slider With Lightbox WordPress plugin stored cross-site scripting4.8v3.10.4%2023-10-18Fix
CVE-2023-5552Sophos Firewall Secure PDF eXchange information disclosure7.1CNA v3.10.5%2023-10-18Fix
CVE-2023-5538MpOperationLogs WordPress plugin unauthenticated stored cross-site scripting6.1NVD v3.11.0%2023-10-18Exploit code
CVE-2023-4938BEAR WordPress plugin missing authorization to Product manipulation4.3v3.10.4%2023-10-18Fix
CVE-2023-4601Stack-based buffer overflow in NI System Configuration software8.1CNA v3.10.6%2023-10-18Fix
CVE-2023-3254Widgets for Google Reviews WordPress plugin cross-site request forgery to plugin settings reset4.3v3.10.2%2023-10-18Fix
CVE-2023-45952LyLme_spage component ajax_link.php arbitrary file upload9.8v3.10.8%2023-10-17
CVE-2023-45951LyLme_spage SQL injection9.8v3.10.7%2023-10-17
CVE-2023-45907iteachyou Dreamer CMS cross-site request forgery8.8v3.10.3%2023-10-17
CVE-2023-45906iteachyou Dreamer CMS cross-site request forgery8.8v3.10.3%2023-10-17
CVE-2023-45905iteachyou Dreamer CMS cross-site request forgery8.8v3.10.3%2023-10-17
CVE-2023-45904iteachyou Dreamer CMS cross-site request forgery8.8v3.10.3%2023-10-17
CVE-2023-45903iteachyou Dreamer CMS cross-site request forgery8.8v3.10.3%2023-10-17
CVE-2023-45902iteachyou Dreamer CMS cross-site request forgery8.8v3.10.3%2023-10-17
CVE-2023-45901iteachyou Dreamer CMS cross-site request forgery8.8v3.10.3%2023-10-17
CVE-2023-45811Prototype pollution vulnerability leading to arbitrary code execution in synchrony deobfuscator8.2CNA v3.10.4%2023-10-17Fix
CVE-2023-45810OpenFGA denial of service5.3CNA v3.10.5%2023-10-17Fix
CVE-2023-45803Request body not stripped after redirect in urllib34.2CNA v3.10.5%2023-10-17Fix
CVE-2023-45659Session is not expiring after password reset in Engelsystem3.6CNA v3.10.2%2023-10-17
CVE-2023-45386MyPresta Product Extra Tabs Pro SQL injection9.8v3.10.6%2023-10-17
CVE-2023-4537501generator Pireospay SQL injection8.8v3.141.0%2023-10-17Nuclei
CVE-2023-45358Archerirm Archer cross-site scripting5.4NVD v3.10.4%2023-10-17Fix
CVE-2023-45357Archerirm Archer information disclosure6.5v3.10.5%2023-10-17Fix
CVE-2023-45152Blind server side request forgery (SSRF) in remote schedule import feature in Engelsystem2.0CNA v3.10.3%2023-10-17
CVE-2023-45010Complete Open Graph WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2023-10-17
CVE-2023-45007Fotomoto WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.3%2023-10-17
CVE-2023-45006WooODT Lite WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.3%2023-10-17Fix
CVE-2023-45005Seriously Simple Stats WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.3%2023-10-17Fix
CVE-2023-45004Woo Custom Emails WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.3%2023-10-17
CVE-2023-45003Social Feed WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.3%2023-10-17
CVE-2023-44990WOLF WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2023-10-17Fix
CVE-2023-44824oretnom23 Expense Management System unrestricted file upload7.8v3.10.3%2023-10-17
CVE-2023-44694D-Link DAR-7000 SQL injection9.8v3.10.7%2023-10-17
CVE-2023-44693D-Link DAR-7000 SQL injection9.8v3.114.4%2023-10-17
CVE-2023-44311Liferay Portal and Liferay DXP vulnerable to XSS via the OAuth2ProviderApplicationRedirect class9.6CNA v3.10.5%2023-10-17Fix
CVE-2023-44310Liferay Portal and Liferay DXP vulnerable to XSS via the Page Tree menu9.0CNA v3.10.5%2023-10-17Fix
CVE-2023-44309Liferay Portal and Liferay DXP vulnerable to XSS in the Fragment components9.0CNA v3.10.5%2023-10-17Fix
CVE-2023-43959Yealink Sip-t19p-e2 OS command injection8.8v3.11.6%2023-10-17
CVE-2023-43794SQL injection in nocodb6.5CNA v3.10.8%2023-10-17Fix
CVE-2023-43777Insecure storage of password in easySoft5.9CNA v3.10.3%2023-10-17Fix
CVE-2023-43776Eaton easyE4 weak password encoding6.8CNA v3.10.1%2023-10-17Fix
CVE-2023-42629Liferay Portal and Liferay DXP vulnerable to stored XSS in the Manage Vocabulary page9.0CNA v3.12.2%2023-10-17Fix
CVE-2023-42628Liferay Portal and Liferay DXP vulnerable to XSS in the Wiki widget9.0CNA v3.12.2%2023-10-17Fix
CVE-2023-42627Liferay Portal and Liferay DXP vulnerable to XSS in the Commerce module9.6CNA v3.12.3%2023-10-17Fix
CVE-2023-42507JTEKT ELECTRONICS OnSinView2 stack-based buffer overflow7.8v3.10.2%2023-10-17Fix
CVE-2023-42506JTEKT ELECTRONICS OnSinView2 memory corruption7.8v3.10.2%2023-10-17Fix
CVE-2023-42497Liferay Portal and Liferay DXP vulnerable to reflected XSS via the Export for Translation page9.6CNA v3.10.5%2023-10-17Fix
CVE-2023-41752Apache Traffic Server: S3_auth plugin problem with hash calculation7.5v3.11.2%2023-10-17Fix
CVE-2023-41715SonicWall SonicOS improper privilege management8.8v3.10.7%2023-10-17Fix
CVE-2023-41713SonicWall SonicOS 'dynHandleBuyToolbar' demo function hard-coded password7.5v3.10.6%2023-10-17Fix
CVE-2023-41712SonicWall SonicOS stack-based buffer overflow6.5v3.10.8%2023-10-17Fix
CVE-2023-41711SonicWall SonicOS stack-based buffer overflow6.5v3.10.8%2023-10-17Fix
CVE-2023-41631Esst Monitoring unrestricted file upload8.8v3.11.1%2023-10-17
CVE-2023-41630Esst Monitoring code injection9.8v3.11.2%2023-10-17
CVE-2023-41629Esst Monitoring path traversal7.5v3.10.7%2023-10-17
CVE-2023-40373IBM Db2 denial of service5.3CNA v3.10.8%2023-10-17Fix
CVE-2023-40372IBM Db2 denial of service5.3CNA v3.10.8%2023-10-17Fix
CVE-2023-39902NXP Uboot Secondary Program Loader improper preservation of permissions7.8v3.10.2%2023-10-17Fix
CVE-2023-39456Apache Traffic Server: Malformed HTTP/2 frames can cause an abort7.5v3.158.3%2023-10-17Fix
CVE-2023-39280SonicWall SonicOS stack-based buffer overflow6.5v3.10.8%2023-10-17Fix
CVE-2023-39279SonicWall SonicOS stack-based buffer overflow6.5v3.10.8%2023-10-17Fix
CVE-2023-39278SonicWall SonicOS stack-based buffer overflow6.5v3.10.8%2023-10-17Fix
CVE-2023-39277SonicWall SonicOS stack-based buffer overflow6.5v3.10.8%2023-10-17Fix
CVE-2023-39276SonicWall SonicOS stack-based buffer overflow6.5v3.10.8%2023-10-17Fix
CVE-2023-38719IBM Db2 denial of service5.1CNA v3.10.2%2023-10-17Fix
CVE-2023-37537HCL AppScan Presence deployed as Windows service might be vulnerable to an unquoted service path7.8CNA v3.10.2%2023-10-17Fix
CVE-2023-36321COVESA dlt-daemon buffer overflow7.5v3.10.9%2023-10-17Fix
CVE-2023-34210SQL injection in EasyUse MailHunter Ultimate8.8v3.10.6%2023-10-17
CVE-2023-34209EasyUse MailHunter Ultimate create template function information disclosure4.3v3.10.4%2023-10-17
CVE-2023-34208Path traversal in EasyUse MailHunter Ultimate6.5v3.10.6%2023-10-17
CVE-2023-34207Unrestricted upload of file with dangerous type in EasyUse MailHunter Ultimate8.8NVD v3.10.6%2023-10-17
CVE-2023-27133Tsplus Remote Work incorrect default permissions9.8v3.10.8%2023-10-17
CVE-2023-27132Tsplus Remote Work insufficiently protected credentials9.8v3.10.9%2023-10-17
CVE-2023-24385Media Library Assistant WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2023-10-17Fix
CVE-2023-22130Oracle Sun ZFS Storage Appliance Core component denial of service5.9CNA v3.10.5%2023-10-17Fix
CVE-2023-22129Oracle Solaris Kernel component denial of service5.5CNA v3.10.2%2023-10-17Fix
CVE-2023-22128Oracle Solaris Filesystem component information disclosure3.1CNA v3.10.3%2023-10-17Fix
CVE-2023-22127Oracle Outside In Technology unauthorized data modification6.3CNA v3.10.4%2023-10-17Fix
CVE-2023-22126Oracle WebCenter Content Server component information disclosure5.3CNA v3.10.4%2023-10-17Fix
CVE-2023-22125Oracle Financial Services Applications Banking Trade Finance unauthorized data modification5.4CNA v3.10.3%2023-10-17Fix
CVE-2023-22124Oracle Financial Services Applications Banking Trade Finance unauthorized data modification5.4CNA v3.10.3%2023-10-17Fix
CVE-2023-22123Oracle Financial Services Applications Banking Trade Finance unauthorized data modification5.4CNA v3.10.3%2023-10-17Fix
CVE-2023-22122Oracle Financial Services Applications Banking Trade Finance unauthorized data access5.9CNA v3.10.4%2023-10-17Fix
CVE-2023-22121Oracle Financial Services Applications Banking Trade Finance unauthorized data modification5.4CNA v3.10.3%2023-10-17Fix
CVE-2023-22119Oracle Financial Services Applications FLEXCUBE Universal Banking unauthorized data access5.9CNA v3.10.3%2023-10-17Fix
CVE-2023-22118Oracle Financial Services Applications FLEXCUBE Universal Banking unauthorized data modification6.5CNA v3.10.3%2023-10-17Fix
CVE-2023-22117Oracle Financial Services Applications FLEXCUBE Universal Banking unauthorized data modification5.4CNA v3.10.3%2023-10-17Fix
CVE-2023-22115Oracle MySQL Server DML component denial of service4.9CNA v3.10.9%2023-10-17Fix
CVE-2023-22114Oracle MySQL Server InnoDB component denial of service4.9CNA v3.11.0%2023-10-17Fix
CVE-2023-22113Oracle MySQL Server Security Encryption component information disclosure2.7CNA v3.10.8%2023-10-17Fix
CVE-2023-22112Oracle MySQL Server Optimizer component denial of service4.9CNA v3.10.9%2023-10-17Fix
CVE-2023-22111Oracle MySQL Server UDF component denial of service4.9CNA v3.10.9%2023-10-17Fix
CVE-2023-22110Oracle MySQL Server Optimizer component denial of service4.9CNA v3.10.9%2023-10-17Fix
CVE-2023-22109Oracle Business Intelligence Enterprise Edition unauthorized data modification4.6CNA v3.10.3%2023-10-17Fix
CVE-2023-22108Oracle WebLogic Server Core component unauthorized data access7.5CNA v3.10.6%2023-10-17Fix
CVE-2023-22107Oracle Enterprise Command Center Framework UI components component unauthorized data modification6.1CNA v3.10.3%2023-10-17Fix
CVE-2023-22106Oracle Enterprise Command Center Framework API component unauthorized data access6.5CNA v3.10.5%2023-10-17Fix
CVE-2023-22105Oracle BI Publisher Web Server component unauthorized data modification5.4CNA v3.10.3%2023-10-17Fix
CVE-2023-22104Oracle MySQL Server InnoDB component denial of service4.9CNA v3.10.9%2023-10-17Fix
CVE-2023-22103Oracle MySQL Server Optimizer component denial of service4.9CNA v3.11.0%2023-10-17Fix
CVE-2023-22102Oracle MySQL Connectors takeover8.3CNA v3.10.9%2023-10-17Fix
CVE-2023-22101Oracle WebLogic Server Core component takeover8.1CNA v3.10.5%2023-10-17Fix
CVE-2023-22100Oracle VM VirtualBox Core component unauthorized data access7.9CNA v3.10.4%2023-10-17Fix
CVE-2023-22099Oracle VM VirtualBox Core component takeover8.2CNA v3.10.3%2023-10-17Fix
CVE-2023-22098Oracle VM VirtualBox Core component takeover8.2CNA v3.10.5%2023-10-17Exploit codeFix
CVE-2023-22097Oracle MySQL Server InnoDB component denial of service4.9CNA v3.10.9%2023-10-17Fix
CVE-2023-22096Oracle Database Java VM vulnerability4.3CNA v3.10.4%2023-10-17Fix
CVE-2023-22095Oracle MySQL Server Optimizer component denial of service6.5CNA v3.11.0%2023-10-17Fix
CVE-2023-22094Oracle MySQL Installer General component unauthorized data modification7.9CNA v3.10.3%2023-10-17Fix
CVE-2023-22093Oracle E-Business Suite iRecruitment unauthorized data modification6.5CNA v3.10.4%2023-10-17Fix
CVE-2023-22092Oracle MySQL Server Optimizer component denial of service4.9CNA v3.10.9%2023-10-17Fix
CVE-2023-22091Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition unauthorized data modification4.8CNA v3.10.4%2023-10-17Fix
CVE-2023-22090Oracle PeopleSoft Enterprise CC Common Application Objects unauthorized data access6.5CNA v3.10.5%2023-10-17Fix
CVE-2023-22089Oracle WebLogic Server Core component takeover9.8CNA v3.10.7%2023-10-17Fix
CVE-2023-22088Oracle Communications Order and Service Management User Management component information disclosure4.3CNA v3.10.4%2023-10-17Fix
CVE-2023-22087Oracle Hospitality OPERA 5 Property Services takeover8.8CNA v3.10.6%2023-10-17Fix
CVE-2023-22086Oracle WebLogic Server Core component unauthorized data access7.5CNA v3.10.6%2023-10-17Fix
CVE-2023-22085Oracle Hospitality OPERA 5 Property Services takeover8.8CNA v3.10.7%2023-10-17Fix
CVE-2023-22084Oracle MySQL Server InnoDB component denial of service4.9CNA v3.11.8%2023-10-17Fix
CVE-2023-22083Oracle Enterprise Session Border Controller Web UI component information disclosure4.3CNA v3.10.4%2023-10-17Fix
CVE-2023-22082Oracle Business Intelligence Enterprise Edition Pod Admin component unauthorized data modification5.4CNA v3.10.3%2023-10-17Fix
CVE-2023-22081Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition denial of service5.3CNA v3.11.4%2023-10-17Fix
CVE-2023-22080Oracle PeopleSoft Enterprise PeopleTools unauthorized data modification6.1CNA v3.10.4%2023-10-17Fix
CVE-2023-22079Oracle MySQL Server Optimizer component denial of service6.5CNA v3.10.9%2023-10-17Fix
CVE-2023-22078Oracle MySQL Server Optimizer component denial of service4.9CNA v3.10.9%2023-10-17Fix
CVE-2023-22077Oracle Database Recovery Manager denial of service4.9CNA v3.10.6%2023-10-17Fix
CVE-2023-22076Oracle E-Business Suite Applications Framework unauthorized data modification6.1CNA v3.10.3%2023-10-17Fix
CVE-2023-22075Oracle Database Database Sharding denial of service2.4CNA v3.10.4%2023-10-17Fix
CVE-2023-22074Oracle Database Database Sharding denial of service2.4CNA v3.10.9%2023-10-17Exploit codeFix
CVE-2023-22073Oracle Database Notification Server information disclosure4.3CNA v3.10.3%2023-10-17Fix
CVE-2023-22072Oracle WebLogic Server Core component takeover9.8CNA v3.10.6%2023-10-17Fix
CVE-2023-22071Oracle Database PL/SQL vulnerability5.9CNA v3.10.3%2023-10-17Fix
CVE-2023-22070Oracle MySQL Server Optimizer component denial of service4.9CNA v3.10.9%2023-10-17Fix
CVE-2023-22069Oracle WebLogic Server Core component takeover9.8CNA v3.10.8%2023-10-17Fix
CVE-2023-22068Oracle MySQL Server InnoDB component denial of service4.9CNA v3.10.9%2023-10-17Fix
CVE-2023-22067Oracle Java SE, Oracle GraalVM Enterprise Edition CORBA component unauthorized data modification5.3CNA v3.10.9%2023-10-17Fix
CVE-2023-22066Oracle MySQL Server InnoDB component denial of service4.9CNA v3.10.9%2023-10-17Fix
CVE-2023-22065Oracle MySQL Server Optimizer component denial of service4.9CNA v3.10.9%2023-10-17Fix
CVE-2023-22064Oracle MySQL Server Optimizer component denial of service4.9CNA v3.10.9%2023-10-17Fix
CVE-2023-22059Oracle MySQL Server Optimizer component denial of service6.5CNA v3.11.0%2023-10-17Fix
CVE-2023-22032Oracle MySQL Server Optimizer component denial of service4.9CNA v3.10.9%2023-10-17Fix
CVE-2023-22029Oracle Commerce Guided Search Workbench component unauthorized data modification6.1CNA v3.10.3%2023-10-17Fix
CVE-2023-22028Oracle MySQL Server Optimizer component denial of service4.9CNA v3.10.9%2023-10-17Fix
CVE-2023-22026Oracle MySQL Server Optimizer component denial of service4.9CNA v3.10.9%2023-10-17Fix
CVE-2023-22025Oracle Java SE Hotspot vulnerability3.7CNA v3.10.9%2023-10-17Fix
CVE-2023-22019Oracle HTTP Server Web Listener component unauthorized data access7.5CNA v3.10.5%2023-10-17Fix
CVE-2023-22015Oracle MySQL Server Optimizer component denial of service4.9CNA v3.10.9%2023-10-17Fix
CVE-2023-20598AMD Radeon™ RX 5000 Series Graphics Cards An improper privilege management7.8v3.10.5%2023-10-17Exploit codeFix
CVE-2023-5522Mattermost mobile app freezes when receiving a post with hundreds of emojis4.3CNA v3.10.4%2023-10-17Fix
CVE-2023-5339Mattermost Desktop logs all keystrokes during initial run after fresh installation4.7CNA v3.10.1%2023-10-17
CVE-2023-4896Authenticated Disclosure of Sensitive Information in AirWave Management Platform6.8CNA v3.10.4%2023-10-17Fix
CVE-2023-4399Grafana Enterprise permissive allowlist6.6CNA v3.11.1%2023-10-17Fix
CVE-2023-4215Advantech WebAccess Debug Messages Revealing Unnecessary Information7.5v3.10.5%2023-10-17Fix
CVE-2023-4089WAGO: Multiple products vulnerable to local file inclusion2.7CNA v3.10.5%2023-10-17Fix
CVE-2023-3042dotCMS core CNA SHORTNAME: DotCMSORG UUID: 5b9d93f2-25c7-46b4-ab60-d201718c9dd85.3CNA v3.10.4%2023-10-17Fix
CVE-2023-46087Who Hit The Page Hit Counter WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-16
CVE-2023-46066Mediabay WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2023-10-16
CVE-2023-45985TOTOLINK A7000R out-of-bounds write7.5v3.10.7%2023-10-16
CVE-2023-45984TOTOLINK A7000R stack-based buffer overflow9.8v3.10.7%2023-10-16
CVE-2023-45898Linux kernel use-after-free7.8NVD v3.10.3%2023-10-16Fix
CVE-2023-45836Ultimate Taxonomy Manager WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-16
CVE-2023-45831AMP WP WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-16Fix
CVE-2023-45807OpenSearch Issue with tenant read-only permissions5.4CNA v3.10.4%2023-10-16Fix
CVE-2023-45763Taggbox WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-16
CVE-2023-45757Apache bRPC: The builtin service rpcz page has an XSS attack6.1v3.11.0%2023-10-16Fix
CVE-2023-45753which template file WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-16Fix
CVE-2023-45752Post Gallery WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-16
CVE-2023-45749AGP Font Awesome Collection WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-16
CVE-2023-45748MailChimp Forms by MailMunch WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-16Fix
CVE-2023-45690Information leak via default file permissions on Titan MFT and Titan SFTP servers4.9NVD v3.11.5%2023-10-16Fix
CVE-2023-45689Arbitrary file read via path traversal in Titan MFT and Titan SFTP servers6.5NVD v3.10.8%2023-10-16Fix
CVE-2023-45688Information leak via path traversal in Titan MFT and Titan SFTP servers4.3NVD v3.10.6%2023-10-16Fix
CVE-2023-45687Authentication bypass via session fixation in Titan MFT and Titan SFTP servers8.8NVD v3.11.2%2023-10-16Fix
CVE-2023-45686Arbitrary file write via WebDAV path traversal in Titan MFT and Titan SFTP servers7.2NVD v3.11.0%2023-10-16Fix
CVE-2023-45685Arbitrary file write via zip slip in Titan MFT and Titan SFTP servers9.1NVD v3.11.4%2023-10-16Fix
CVE-2023-45683crewjam saml cross-site scripting via missing Binding syntax validation7.1CNA v3.10.4%2023-10-16Fix
CVE-2023-45669Improper signature counter value handling in webauthn4j-spring-security4.8CNA v3.10.5%2023-10-16Fix
CVE-2023-45660Require strict cookies for image proxy requests in Nextcloud Mail4.3CNA v3.10.6%2023-10-16Fix
CVE-2023-45656Lazy Load for Videos WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-16Fix
CVE-2023-45655PixFields WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-16Fix
CVE-2023-45654Comments Ratings WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-16
CVE-2023-45653Video Playlist For YouTube WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-16Fix
CVE-2023-45651WP Attachments WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-16Fix
CVE-2023-45650HTML5 Maps WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-16Fix
CVE-2023-45647Constant Contact Forms by MailMunch WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-16Fix
CVE-2023-45645WP Open Street Map WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-16Fix
CVE-2023-45643CPT Shortcode Generator WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-16
CVE-2023-45642Snap Pixel WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-16Fix
CVE-2023-45641Caret Country Access Limit WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-16Fix
CVE-2023-45639Sort SearchResult By Title WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-16Fix
CVE-2023-45638Eupago Gateway For Woocommerce WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-10-16Fix
CVE-2023-45629Responsive Image Gallery, Gallery Album WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-16
CVE-2023-45606Simple URLs WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-16Fix
CVE-2023-45605Feed Statistics WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-16
CVE-2023-45580D-Link Di-7003g D-Link device buffer overflow9.8v3.11.2%2023-10-16
CVE-2023-45579D-Link Di-7003g D-Link device buffer overflow9.8v3.11.2%2023-10-16
CVE-2023-45578D-Link Di-7003g D-Link device buffer overflow9.8v3.11.2%2023-10-16
CVE-2023-45577D-Link Di-7003g D-Link device stack-based buffer overflow9.8v3.11.2%2023-10-16
CVE-2023-45576D-Link Di-7003g D-Link device buffer overflow9.8v3.11.2%2023-10-16
CVE-2023-45575D-Link Di-7003g D-Link device stack-based buffer overflow9.8v3.11.2%2023-10-16
CVE-2023-45574D-Link Di-7003g D-Link device buffer overflow9.8v3.11.6%2023-10-16
CVE-2023-45573D-Link Di-7003g D-Link device buffer overflow9.8v3.11.4%2023-10-16
CVE-2023-45572D-Link Di-7003g D-Link device buffer overflow9.8v3.11.2%2023-10-16
CVE-2023-45542mooSocial cross-site scripting6.1NVD v3.11.8%2023-10-16Nuclei
CVE-2023-45540Jorani Leave Management System injection6.5v3.10.5%2023-10-16Exploit code
CVE-2023-45274SendPulse Free Web Push WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-16Fix
CVE-2023-45273Stout Google Calendar WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-16
CVE-2023-45158web2py An OS command injection9.8v3.13.7%2023-10-16Exploit codeFix
CVE-2023-45151OAuth2 client_secret stored in plain text in the Nextcloud database6.5CNA v3.10.5%2023-10-16Fix
CVE-2023-45150Inviting excessive long email addresses to a Calendar event makes the Nextcloud server unresponsive4.3CNA v3.10.4%2023-10-16Fix
CVE-2023-45149Password of Talk conversations can be bruteforced in Nextcloud4.3CNA v3.10.5%2023-10-16Fix
CVE-2023-45148Rate limiter not working reliable when Memcached is installed in Nextcloud4.3CNA v3.10.7%2023-10-16Fix
CVE-2023-45147Arbitrary keys can be added to a topic's custom fields by any user in Discourse4.9CNA v3.10.3%2023-10-16Fix
CVE-2023-45144Remote code execution from login screen through unescaped URL parameter in OAuth Identity XWiki App10.0CNA v3.11.1%2023-10-16Fix
CVE-2023-45141CSRF Token Validation vulnerability in fiber8.6CNA v3.10.3%2023-10-16Fix
CVE-2023-45131Unauthenticated access to new private chat messages in Discourse7.5CNA v3.11.8%2023-10-16Exploit codeFix
CVE-2023-45128CSRF Token Reuse vulnerability in fiber10.0CNA v3.10.3%2023-10-16Fix
CVE-2023-44987Timely Booking Button WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2023-10-16
CVE-2023-44986Abandoned Cart Lite for WooCommerce WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2023-10-16Fix
CVE-2023-44985BuddyMeet WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2023-10-16Fix
CVE-2023-44984bbp style pack WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2023-10-16Fix
CVE-2023-44809D-Link DIR-820L improper privilege management9.8v3.10.9%2023-10-16
CVE-2023-44808D-Link DIR-820L out-of-bounds write9.8v3.10.9%2023-10-16
CVE-2023-44394Disclosure of project names to unauthorized users in MantisBT4.3CNA v3.10.6%2023-10-16Fix
CVE-2023-44391Discourse user summary pages information disclosure5.3CNA v3.10.4%2023-10-16Fix
CVE-2023-44388Malicious requests can fill up the log files resulting in a deinal of service in Discourse7.5CNA v3.10.5%2023-10-16Fix
CVE-2023-44229Tiny Carousel Horizontal Slider WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2023-10-16
CVE-2023-43814Exposure of poll options and votes to unauthorized users in Discourse3.7CNA v3.10.3%2023-10-16Fix
CVE-2023-43668Apache InLong: Jdbc Connection Security Bypass in InLong9.8v3.11.0%2023-10-16Fix
CVE-2023-43667Apache InLong: Log injection in Global functions7.5v3.11.2%2023-10-16Fix
CVE-2023-43666Apache InLong: General user unauthorized access User Management6.5v3.10.4%2023-10-16Fix
CVE-2023-43659Cross-site scripting via email preview when CSP disabled in Discourse8.0CNA v3.10.4%2023-10-16Fix
CVE-2023-43658Improper escaping of user input in discourse-calendar8.0CNA v3.10.5%2023-10-16Fix
CVE-2023-43121Extreme Networks Exos path traversal7.5v3.11.0%2023-10-16Fix
CVE-2023-43120Extreme Networks Exos improper privilege management8.8v3.10.7%2023-10-16Fix
CVE-2023-43119Extreme Networks Exos An improper access control9.8v3.10.6%2023-10-16Fix
CVE-2023-43118Extreme Networks Exos Chalet application cross-site request forgery8.8v3.10.3%2023-10-16Fix
CVE-2023-42459Malformed DATA submessage leads to bad-free error in Fast-DDS8.6CNA v3.10.8%2023-10-16Fix
CVE-2023-40852User Registration & Login And User Management System With Admin Panel Phpgurukul SQL injection9.8v3.10.8%2023-10-16
CVE-2023-40851User Registration & Login And User Management System With Admin Panel cross-site scripting5.4v3.10.4%2023-10-16
CVE-2023-40791Linux kernel scatterlist page pinning vulnerability6.3v3.10.4%2023-10-16Fix
CVE-2023-40377IBM i privilege escalation4.9CNA v3.10.1%2023-10-16Fix
CVE-2023-40374IBM Db2 denial of service5.3CNA v3.10.8%2023-10-16Fix
CVE-2023-40180Denial of service vulnerability in silverstripe-graphql via recursive queries7.5CNA v3.10.9%2023-10-16Fix
CVE-2023-38740IBM Db2 denial of service5.3CNA v3.10.8%2023-10-16Fix
CVE-2023-38728IBM Db2 denial of service5.3CNA v3.10.8%2023-10-16Fix
CVE-2023-38720IBM Db2 denial of service5.3CNA v3.10.8%2023-10-16Fix
CVE-2023-38280IBM Power HMC privilege escalation8.4CNA v3.10.2%2023-10-16Fix
CVE-2023-38059OTRS external pictures can be loaded even if not allowed by configuration5.3CNA v3.10.5%2023-10-16Fix
CVE-2023-36955TOTOLINK Cp300+ out-of-bounds write9.8v3.10.7%2023-10-16
CVE-2023-36954TOTOLINK Cp300+ command injection9.8v3.11.6%2023-10-16
CVE-2023-36953TOTOLINK Cp300+ command injection9.8v3.11.5%2023-10-16
CVE-2023-36952TOTOLINK Cp300+ out-of-bounds write9.8v3.10.7%2023-10-16
CVE-2023-36950TOTOLINK A7000R stack-based buffer overflow9.8v3.10.8%2023-10-16
CVE-2023-36947TOTOLINK A7000R stack-based buffer overflow9.8v3.10.8%2023-10-16
CVE-2023-36340TOTOLINK NR1800X out-of-bounds write9.8v3.10.7%2023-10-16
CVE-2023-35018IBM Security Verify Governance file upload3.3CNA v3.10.4%2023-10-16Fix
CVE-2023-35013IBM Security Verify Governance information disclosure2.3CNA v3.10.2%2023-10-16Fix
CVE-2023-33836IBM Security Verify Governance information disclosure5.3CNA v3.10.4%2023-10-16Fix
CVE-2023-30991IBM Db2 denial of service7.5CNA v3.10.8%2023-10-16Fix
CVE-2023-30987IBM Db2 denial of service5.3CNA v3.10.8%2023-10-16Fix
CVE-2023-29484Terminalfour incorrect authorization6.5v3.10.3%2023-10-16Fix
CVE-2023-21415Axis Communications AXIS OS path traversal6.5CNA v3.10.6%2023-10-16Fix
CVE-2023-21414Axis Communications AXIS OS stack-based buffer overflow7.1CNA v3.10.2%2023-10-16Fix
CVE-2023-21413Remote code execution vulnerability during the installation of ACAP applications on the Axis device9.1CNA v3.11.2%2023-10-16Fix
CVE-2023-20198Cisco IOS XE Web UI privilege escalation10.0CNA v3.199.6%2023-10-16KEVNucleiMetasploitEmerging ThreatsExploit codeKCVFix
CVE-2023-5595Denial of service in gpac/gpac5.5v3.10.3%2023-10-16Fix
CVE-2023-5591SQL injection in librenms/librenms6.5NVD v3.123.8%2023-10-16Fix
CVE-2023-5575Devolutions Server permission inheritance improper access control6.5v3.10.6%2023-10-16Fix
CVE-2023-5561WordPress core unauthenticated post Author email disclosure5.3v3.13.9%2023-10-16NucleiExploit codeFix
CVE-2023-5422OTRS SSL Certificates are not checked for E-Mail Handling8.7CNA v3.10.3%2023-10-16Fix
CVE-2023-5421OTRS CustomerID field cross-site scripting3.5CNA v3.10.4%2023-10-16Fix
CVE-2023-5177Vrm 360 3D Model Viewer WordPress plugin full path disclosure5.3NVD v3.10.7%2023-10-16
CVE-2023-5167User Activity Log Pro WordPress plugin unauthenticated stored cross-site scripting via user Agent5.4NVD v3.10.5%2023-10-16Fix
CVE-2023-5133User Activity Log Pro WordPress plugin IP spoofing7.5NVD v3.10.7%2023-10-16Fix
CVE-2023-5089Defender Security WordPress plugin Protection bypass (Hidden login page)5.3NVD v3.12.2%2023-10-16NucleiExploit codeFix
CVE-2023-5087PageLayer WordPress plugin Author+ stored XSS5.4NVD v3.10.4%2023-10-16Fix
CVE-2023-5057ActivityPub for WordPress plugin Contributor+ stored XSS5.4NVD v3.10.5%2023-10-16Fix
CVE-2023-5003Active Directory Integration WordPress plugin unauthenticated Log disclosure7.5NVD v3.125.9%2023-10-16NucleiFix
CVE-2023-4971Weaver Xtreme Theme Support WordPress plugin Admin+ PHP object injection7.2NVD v3.11.2%2023-10-16Fix
CVE-2023-4950Funnelforms Free Unauthenticated stored cross-site scripting6.1NVD v3.10.5%2023-10-16Fix
CVE-2023-4933WP Job Openings WordPress plugin sensitive data exposure via directory listing5.3NVD v3.10.7%2023-10-16Fix
CVE-2023-4862File Manager Pro WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.4%2023-10-16Fix
CVE-2023-4861File Manager Pro WordPress plugin Admin+ remote code execution7.2NVD v3.11.3%2023-10-16Exploit codeFix
CVE-2023-4834Red Lion Europe mbCONNECT24 improper privilege management4.3CNA v3.10.3%2023-10-16Fix
CVE-2023-4827File Manager Pro WordPress plugin remote code execution via CSRF8.8NVD v3.17.9%2023-10-16Fix
CVE-2023-4822Grafana privilege escalation6.7CNA v3.11.1%2023-10-16Fix
CVE-2023-4821Drag and Drop Multiple File Upload WordPress plugin unauthenticated stored cross-site scripting5.4NVD v3.10.4%2023-10-16Fix
CVE-2023-4820PowerPress Podcasting WordPress plugin Contributor+ stored XSS5.4NVD v3.10.4%2023-10-16Fix
CVE-2023-4819Shared Files WordPress plugin unauthenticated stored cross-site scripting6.1NVD v3.10.4%2023-10-16Fix
CVE-2023-4811WordPress File Upload plugin Author+ stored cross-site scripting5.4NVD v3.10.4%2023-10-16Fix
CVE-2023-4805Tutor LMS WordPress plugin Subscriber+ stored cross-site scripting5.4NVD v3.10.4%2023-10-16Fix
CVE-2023-4800DoLogin Security WordPress plugin Subscriber+ IP Address leak6.5NVD v3.11.0%2023-10-16Exploit codeFix
CVE-2023-4798User Avatar - Reloaded WordPress plugin Contributor+ stored XSS5.4NVD v3.10.5%2023-10-16Fix
CVE-2023-4795Testimonial Slider Shortcode WordPress plugin Contributor+ stored XSS5.4NVD v3.10.5%2023-10-16Fix
CVE-2023-4783Magee Shortcodes WordPress plugin Contributor+ stored XSS via shortcode5.4NVD v3.10.4%2023-10-16
CVE-2023-4776WPSchoolPress WordPress plugin Teacher+ SQLi8.8NVD v3.10.7%2023-10-16Fix
CVE-2023-4725Simple Posts Ticker WordPress plugin Admin+ stored XSS4.8NVD v3.10.5%2023-10-16Fix
CVE-2023-4691Bookly WordPress plugin Admin+ SQLi7.2NVD v3.10.7%2023-10-16Fix
CVE-2023-4687PageLayer WordPress plugin unauthenticated stored XSS6.1NVD v3.10.5%2023-10-16Fix
CVE-2023-466610Web Form Maker signature validation unrestricted file upload9.8NVD v3.13.3%2023-10-16NucleiFix
CVE-2023-4646Simple Posts Ticker WordPress plugin Contributor+ stored XSS5.4NVD v3.10.5%2023-10-16Fix
CVE-2023-4643Enable Media Replace WordPress plugin Author+ PHP object injection8.8NVD v3.10.8%2023-10-16Fix
CVE-2023-4620Booking Calendar WordPress plugin unauthenticated stored XSS6.1NVD v3.10.6%2023-10-16Fix
CVE-2023-4457Google Sheets data source plugin for Grafana information disclosure5.5CNA v3.10.4%2023-10-16Fix
CVE-2023-4388EventON WordPress plugin Admin+ stored XSS4.8NVD v3.10.4%2023-10-16Fix
CVE-2023-4290WP Matterport Shortcode WordPress plugin reflected XSS6.1NVD v3.10.4%2023-10-16Fix
CVE-2023-4289WP Matterport Shortcode WordPress plugin Contributor+ stored XSS via shortcode5.4NVD v3.10.5%2023-10-16Fix
CVE-2023-3991OS command injection vulnerability in FreshTomato9.8v3.12.4%2023-10-16
CVE-2023-3746ActivityPub for WordPress plugin Contributor+ stored XSS5.4NVD v3.10.5%2023-10-16Fix
CVE-2023-3707ActivityPub for WordPress plugin Subscriber+ arbitrary post content disclosure4.3NVD v3.10.6%2023-10-16Fix
CVE-2023-3706ActivityPub for WordPress plugin Subscriber+ arbitrary post Title disclosure4.3NVD v3.10.6%2023-10-16Fix
CVE-2023-3392Read More and Accordion WordPress plugin Admin+ PHP object injection7.2NVD v3.11.0%2023-10-16Fix
CVE-2023-3279NextGEN Gallery WordPress plugin Admin+ local file inclusion4.9NVD v3.10.8%2023-10-16Fix
CVE-2023-3155NextGEN Gallery WordPress plugin Admin+ arbitrary file read and delete7.2NVD v3.10.8%2023-10-16Fix
CVE-2023-3154NextGEN Gallery WordPress plugin Admin+ PHAR deserialization7.5NVD v3.10.7%2023-10-16Fix
CVE-2023-45871Linux kernel incorrect buffer size calculation7.5NVD v3.10.6%2023-10-15Fix
CVE-2023-40378IBM i privilege escalation4.9CNA v3.10.1%2023-10-15Fix
CVE-2023-38312Valve Software Counter-strike path traversal7.5v3.10.8%2023-10-15
CVE-2023-5590Null pointer dereference in seleniumhq/Selenium7.5v3.10.9%2023-10-15Fix
CVE-2023-5589SourceCodester Judging Management System login.php SQL injection9.8v3.10.7%2023-10-15
CVE-2023-5588kphrx pleroma pack.ex Pleroma.Emoji.Pack path traversal5.3v3.10.6%2023-10-15Fix
CVE-2023-5587SourceCodester Free Hospital Management System for Small Practices doctors.php SQL injection9.8v3.10.7%2023-10-15
CVE-2023-5586Null pointer dereference in gpac/gpac7.8v3.10.3%2023-10-15Fix
CVE-2023-5585SourceCodester Online Motorcycle Rental System Bike List cross-site scripting6.1v3.10.3%2023-10-15
CVE-2023-45863Linux kernel out-of-bounds write6.4NVD v3.10.3%2023-10-14Fix
CVE-2023-45862Linux kernel resource exhaustion5.5v3.10.3%2023-10-14Fix
CVE-2023-45856qdPM unrestricted file upload9.8v3.11.4%2023-10-14
CVE-2023-45855qdPM uploads directory path traversal7.5v3.13.3%2023-10-14Nuclei
CVE-2023-45853Smihica Pyminizip integer overflow9.8NVD v3.13.4%2023-10-14Fix
CVE-2023-45852Viessmann Vitogate 300 command injection9.8v3.115.2%2023-10-14NucleiFix
CVE-2023-45674SQL injection vulnerability in Farmbot-Web-App7.7CNA v3.10.5%2023-10-14Fix
CVE-2023-45348Apache Airflow: Configuration information leakage4.3v3.11.2%2023-10-14Fix
CVE-2023-45176IBM App Connect Enterprise and IBM Integration Bus denial of service6.2CNA v3.10.2%2023-10-14Fix
CVE-2023-44037Zpesystems Nodegrid OS cleartext storage of sensitive information7.5v3.10.4%2023-10-14Fix
CVE-2023-42792Apache Airflow: Improper access control to DAG resources6.5v3.11.4%2023-10-14Fix
CVE-2023-42780Apache Airflow: Improper access control vulnerability in the List dag warnings feature6.5v3.11.1%2023-10-14Fix
CVE-2023-42663Apache Airflow: Bypass permission verification to view task instances of other dags6.5v3.11.6%2023-10-14Fix
CVE-2023-40367IBM QRadar SIEM cross-site scripting5.4CNA v3.10.3%2023-10-14Fix
CVE-2023-35024IBM Cloud Pak for Business Automation cross-site scripting4.6CNA v3.10.4%2023-10-14Fix
CVE-2023-30994IBM QRadar SIEM information disclosure5.4CNA v3.10.2%2023-10-14Fix
CVE-2023-30154Shoprunners Aftermail SQL injection9.8v3.10.6%2023-10-14Fix
CVE-2023-30148Store-opart Multi HTML Block Opart opartmultihtmlblock stored cross-site scripting5.4v3.10.4%2023-10-14Fix
CVE-2023-26155node-qpdf vulnerable to command injection9.8v3.12.1%2023-10-14
CVE-2023-5582Zzzcms Personal Profile page cross-site scripting5.4v3.10.5%2023-10-14
CVE-2023-5581SourceCodester Medicine Tracker System index.php cross-site scripting6.1v3.10.5%2023-10-14
CVE-2023-5580SourceCodester Library System index.php SQL injection9.8v3.10.6%2023-10-14
CVE-2023-5579yhz66 Sandbox User Data information disclosure6.5v3.10.3%2023-10-14
CVE-2023-5578Portábilis i-Educar HTTP GET request agenda_imprimir.php cross-site scripting5.4v3.10.4%2023-10-14
CVE-2023-1259Hotjar WordPress plugin authenticated (Administrator+) stored cross-site scripting5.5v3.10.5%2023-10-14Fix
CVE-2023-45468Netis Systems N3M buffer overflow7.5v3.10.7%2023-10-13Fix
CVE-2023-45467Netis Systems N3M OS command injection9.8v3.11.9%2023-10-13
CVE-2023-45466Netis Systems N3M command injection9.8v3.11.9%2023-10-13
CVE-2023-45465Netis Systems N3M command injection9.8v3.11.8%2023-10-13
CVE-2023-45464Netis Systems N3M buffer overflow7.5v3.10.6%2023-10-13
CVE-2023-45463Netis Systems N3M buffer overflow7.5v3.10.6%2023-10-13
CVE-2023-45393Grandingteco Utime Master insecure direct object reference6.5v3.10.5%2023-10-13
CVE-2023-45391Grandingteco Utime Master stored cross-site scripting4.8v3.10.4%2023-10-13
CVE-2023-45276Automated Editor WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-13
CVE-2023-45270Pinpoint Booking System WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-13Fix
CVE-2023-45269Simple SEO WordPress plugin cross-site request forgery (CSRF)5.4v3.10.2%2023-10-13Fix
CVE-2023-45268Hitsteps Web Analytics WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-13Fix
CVE-2023-45267IRivYou WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-13
CVE-2023-45162Blind SQL vulnerability in 1E Platform9.8v3.10.6%2023-10-13Fix
CVE-2023-45130Frontier opcode SUICIDE touches too many storage values on large contracts7.5CNA v3.10.9%2023-10-13Fix
CVE-2023-45109WhitePage WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-13
CVE-2023-45108Mailrelay WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-13Fix
CVE-2023-45107GoodBarber WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-13Fix
CVE-2023-44204Junos OS and Junos OS Evolved: The rpd will crash upon receiving a malformed BGP UPDATE message6.5CNA v3.10.3%2023-10-13Fix
CVE-2023-44203Juniper Networks Junos OS Packet Forwarding Engine improper exception handling6.5CNA v3.10.3%2023-10-13Fix
CVE-2023-44201Juniper Networks Junos OS Evolved incorrect permission assignment5.0CNA v3.10.1%2023-10-13Fix
CVE-2023-44199Junos OS: MX Series: In a PTP scenario a prolonged routing protocol churn can trigger an FPC reboot7.5CNA v3.10.5%2023-10-13Fix
CVE-2023-44198Juniper Networks Junos OS SIP ALG improper check for exceptional conditions5.8CNA v3.10.4%2023-10-13Fix
CVE-2023-44197Junos OS and Junos OS Evolved: An rpd crash may occur when BGP is processing newly learned routes7.5CNA v3.10.5%2023-10-13Fix
CVE-2023-44196Junos OS Evolved: PTX10003 Series: Packets which are not destined to the router can reach the RE6.5CNA v3.10.2%2023-10-13Fix
CVE-2023-44195Junos OS Evolved: Packets which are not destined to the router can reach the RE5.4CNA v3.10.4%2023-10-13Fix
CVE-2023-44194Juniper Networks Junos OS An incorrect default permissions8.4CNA v3.10.2%2023-10-13Fix
CVE-2023-44193Juniper Junos OS Packet Forwarding Engine memory leak5.5CNA v3.10.2%2023-10-13Fix
CVE-2023-44192Juniper Networks Junos OS Packet Forwarding Engine improper input validation7.5CNA v3.10.5%2023-10-13Fix
CVE-2023-44191Juniper Networks Junos OS An resource exhaustion7.5CNA v3.10.5%2023-10-13Fix
CVE-2023-44185Juniper Networks Junos OS routing protocol daemon improper input validation7.5CNA v3.10.5%2023-10-13Fix
CVE-2023-44184Junos OS and Junos OS Evolved: High CPU load due to specific NETCONF command6.5CNA v3.10.5%2023-10-13Fix
CVE-2023-44183Juniper Networks Junos OS VxLAN packet forwarding engine improper input validation6.5CNA v3.10.3%2023-10-13Fix
CVE-2023-44182Juniper Networks Junos OS Evolved unchecked return value7.3CNA v3.10.6%2023-10-13Fix
CVE-2023-44181Junos OS: QFX5k: L2 loop in the overlay impacts the stability in a EVPN/VXLAN environment7.5CNA v3.10.5%2023-10-13Fix
CVE-2023-44178Junos OS: Stack overflow vulnerability in CLI command processing5.5CNA v3.10.2%2023-10-13Fix
CVE-2023-44177Junos OS and Junos OS Evolved: Stack overflow vulnerability in CLI command processing5.5CNA v3.10.2%2023-10-13Fix
CVE-2023-44176Junos OS: Stack overflow vulnerability in CLI command processing5.5CNA v3.10.2%2023-10-13Fix
CVE-2023-43079Dell OpenManage Server Administrator improper access control7.3CNA v3.10.2%2023-10-13Fix
CVE-2023-42752Kernel: Integer overflow in igmpv3_newpack leading to exploitable memory access5.5NVD v3.10.3%2023-10-13Fix
CVE-2023-41843Fortinet FortiSandbox cross-site scripting7.3CNA v3.10.5%2023-10-13Fix
CVE-2023-41836Fortinet FortiSandbox cross-site scripting3.4CNA v3.10.4%2023-10-13Fix
CVE-2023-41682Fortinet FortiSandbox path traversal7.9CNA v3.10.8%2023-10-13Fix
CVE-2023-41681Fortinet FortiSandbox cross-site scripting7.3CNA v3.10.4%2023-10-13Fix
CVE-2023-41680Fortinet FortiSandbox cross-site scripting7.3CNA v3.10.5%2023-10-13Fix
CVE-2023-40682IBM App Connect Enterprise information disclosure4.4CNA v3.10.2%2023-10-13Fix
CVE-2023-39999WordPress information disclosure4.3NVD v3.11.0%2023-10-13Fix
CVE-2023-39960Nextcloud Server has improper restriction of excessive authentication attempts on WebDAV endpoint5.0CNA v3.10.6%2023-10-13Fix
CVE-2023-38251Adobe Commerce uncontrolled resource consumption5.3CNA v3.10.7%2023-10-13Fix
CVE-2023-38250Adobe Commerce improper neutralization of special elements used in an SQL command (SQL injection)8.0CNA v3.10.8%2023-10-13Fix
CVE-2023-38249Adobe Commerce improper neutralization of special elements used in an SQL command (SQL injection)8.0CNA v3.10.8%2023-10-13Fix
CVE-2023-38221Adobe Commerce improper neutralization of special elements used in an SQL command (SQL injection)8.0CNA v3.10.8%2023-10-13Fix
CVE-2023-38220Adobe Commerce full page cache enumeration via cookie X-Magento-Vary7.5CNA v3.10.7%2023-10-13Fix
CVE-2023-38219Adobe Commerce Magento Open Source allows cross-site scripting (XSS)8.7CNA v3.10.6%2023-10-13Fix
CVE-2023-38218Adobe Commerce Magento Open Source allows incorrect authorization8.8CNA v3.10.8%2023-10-13Fix
CVE-2023-38000Auth. stored cross-site scripting vulnerability in WordPress core and Gutenberg plugin5.4v3.10.8%2023-10-13Fix
CVE-2023-36559Microsoft Edge (Chromium-based) spoofing4.2CNA v3.10.8%2023-10-13Fix
CVE-2023-34977QNAP Video Station cross-site scripting4.6CNA v3.10.3%2023-10-13Fix
CVE-2023-34976QNAP Video Station SQL injection10.0CNA v3.10.5%2023-10-13Fix
CVE-2023-34975QNAP QTS and QuTS hero OS command injection6.6CNA v3.11.0%2023-10-13Fix
CVE-2023-33303Fortinet FortiEDR insufficient session expiration7.7CNA v3.10.4%2023-10-13Fix
CVE-2023-32976QNAP Container Station command injection6.6CNA v3.11.1%2023-10-13Fix
CVE-2023-32974QNAP QTS, QuTS hero and QuTScloud path traversal7.5CNA v3.10.6%2023-10-13Fix
CVE-2023-32973QNAP QTS, QuTS hero and QuTScloud buffer overflow3.8CNA v3.10.5%2023-10-13Fix
CVE-2023-32970QNAP QTS, QuTS hero and QuTScloud null pointer dereference4.9CNA v3.10.5%2023-10-13Fix
CVE-2023-29464Rockwell Automation FactoryTalk Linx vulnerable to denial of service and information disclosure8.2CNA v3.115.0%2023-10-13Fix
CVE-2023-26367Adobe Commerce error based file extraction via PHP filter chains during product bulk import logic4.9CNA v3.10.7%2023-10-13Fix
CVE-2023-26366Adobe Commerce validate Your Inputs server-side request forgery (SSRF)6.8CNA v3.10.7%2023-10-13Fix
CVE-2023-5573Allocation of resources without limits or throttling in vriteio/Vrite6.5v3.10.5%2023-10-13Fix
CVE-2023-5572Server-side request forgery (SSRF) in vriteio/Vrite9.8v3.10.8%2023-10-13Fix
CVE-2023-5571Improper input validation in vriteio/Vrite7.5v3.10.6%2023-10-13Fix
CVE-2023-5564Cross-site scripting (XSS) Stored in froxlor/froxlor4.8v3.10.4%2023-10-13Fix
CVE-2023-5563zephyrproject-rtos Zephyr improper exception handling7.1CNA v3.10.4%2023-10-13Fix
CVE-2023-5557GNOME Tracker Miners Tracker-miners: Sandbox escape7.7NVD v3.10.9%2023-10-13Fix
CVE-2023-5449HP Displays Theft Deterrence feature vulnerability3.3v3.10.2%2023-10-13Fix
CVE-2023-5409HP T430 and T638 Thin Clients system firmware vulnerability6.8v3.10.3%2023-10-13Fix
CVE-2023-5240Devolutions Server PAM propagation scripts improper access control7.5v3.10.6%2023-10-13Fix
CVE-2023-4995Embed Calendly WordPress plugin stored cross-site scripting5.4v3.10.3%2023-10-13Fix
CVE-2023-4829Cross-site scripting (XSS) Stored in froxlor/froxlor5.4v3.10.4%2023-10-13Fix
CVE-2023-4562Mitsubishi Electric MELSEC-F Series FX3U-16MT/ES improper authentication9.1CNA v3.10.9%2023-10-13
CVE-2023-4517Cross-site scripting (XSS) Stored in hestiacp/hestiacp5.4v3.10.4%2023-10-13Fix
CVE-2023-4499HP ThinUpdate improper certificate validation7.5v3.10.5%2023-10-13Fix
CVE-2023-4263Potential buffer overflow vulnerability in the Zephyr IEEE 802.15.4 nRF driver7.6CNA v3.10.5%2023-10-13
CVE-2023-4257Unchecked user input length in the Zephyr WiFi shell module7.6CNA v3.10.9%2023-10-13
CVE-2023-45511justdan96 tsMuxer memory leak5.5v3.10.3%2023-10-12
CVE-2023-45510tsMuxer version git-2539d07 was discovered to contain an alloc-dealloc-mismatch (operator new [] vs operator delete) error.7.5v3.10.6%2023-10-12
CVE-2023-45143Undici's cookie header not cleared on cross-origin redirect in fetch3.9CNA v3.11.2%2023-10-12Fix
CVE-2023-45142OpenTelemetry-Go Contrib otelhttp handler resource exhaustion7.5CNA v3.11.4%2023-10-12Fix
CVE-2023-45138Change Request application vulnerable to XSS and remote code execution through Change Request title10.0CNA v3.171.2%2023-10-12Fix
CVE-2023-45133Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code9.4CNA v3.10.5%2023-10-12Fix
CVE-2023-45106Urvanov Syntax Highlighter WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-12Fix
CVE-2023-45103Permalinks Customizer WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-12
CVE-2023-45102Blog Manager Light WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-12
CVE-2023-45068Contact Form by Supsystic WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-12Fix
CVE-2023-45063AI Content Writing Assistant All in One WordPress plugin cross-site request forgery8.8v3.10.2%2023-10-12Fix
CVE-2023-45060Interactive World Map WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-12Fix
CVE-2023-45058Short URL WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-12
CVE-2023-45052WP Bing Map Pro WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-12Fix
CVE-2023-45048Social proof testimonials and reviews by Repuso WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-12Fix
CVE-2023-45047LeadSquared Suite WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-12
CVE-2023-45011WP Power Stats WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-12
CVE-2023-44998Category Meta WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-12
CVE-2023-44175Junos OS and Junos OS Evolved: Receipt of a specific genuine PIM packet causes RPD crash6.5CNA v3.10.5%2023-10-12Fix
CVE-2023-43789libXpm: Out-of-bounds read on xpm with corrupted colormap5.5NVD v3.10.4%2023-10-12Fix
CVE-2023-43149Spa-cart cross-site request forgery8.8v3.10.5%2023-10-12Exploit code
CVE-2023-43148Spa-cart cross-site request forgery8.1v3.10.5%2023-10-12Exploit code
CVE-2023-43147PHP Jabbers Limo Booking Software cross-site request forgery8.8v3.10.5%2023-10-12Exploit code
CVE-2023-42298gpac integer overflow5.5v3.10.2%2023-10-12
CVE-2023-41263Plixer Scrutinizer sensitive information in log files3.7v3.10.4%2023-10-12
CVE-2023-41262Plixer Scrutinizer SQL injection9.8v3.10.7%2023-10-12
CVE-2023-41261Plixer Scrutinizer improper authentication5.3v3.10.5%2023-10-12
CVE-2023-41131Sp*tify Play Button for WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-12Fix
CVE-2023-40833Thecosy IceCMS privilege escalation9.8v3.10.7%2023-10-12
CVE-2023-40829Tencent Enterprise Wechat Privatization background unauthorized access7.5v3.10.5%2023-10-12
CVE-2023-36843Junos OS: SRX Series: The PFE will crash on receiving malformed SSL traffic when Sky ATP is enabled7.5CNA v3.10.5%2023-10-12Fix
CVE-2023-36841Junos OS: MX Series: Receipt of malformed TCP traffic will cause a denial of service7.5CNA v3.10.5%2023-10-12Fix
CVE-2023-36839Junos OS and Junos OS Evolved: An l2cpd crash will occur when specific LLDP packets are received6.5CNA v3.10.3%2023-10-12Fix
CVE-2023-32724JavaScript engine memory pointers are directly available for Zabbix users for modification9.1CNA v3.10.6%2023-10-12Fix
CVE-2023-32723Zabbix inefficient permission check in class CControllerAuthenticationUpdate8.5CNA v3.10.6%2023-10-12Fix
CVE-2023-32722Zabbix stack-buffer overflow in library module zbxjson9.6CNA v3.10.7%2023-10-12Fix
CVE-2023-32721Zabbix stored XSS in Maps element7.6CNA v3.10.6%2023-10-12Fix
CVE-2023-32634SoftEther VPN CiRpcServerThread functionality authentication bypass7.4v3.10.4%2023-10-12Fix
CVE-2023-32275SoftEther VPN CtEnumCa functionality information disclosure4.4v3.10.4%2023-10-12Fix
CVE-2023-32124Publish Confirm Message WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-12Fix
CVE-2023-31192SoftEther VPN ClientConnect functionality information disclosure5.3v3.11.0%2023-10-12Fix
CVE-2023-29453Zabbix agent 2 package are built with Go version affected by9.8CNA v3.10.8%2023-10-12Fix
CVE-2023-27516SoftEther VPN CiRpcAccepted functionality authentication bypass7.8v3.10.5%2023-10-12Fix
CVE-2023-27395SoftEther VPN vpnserver WpcParsePacket functionality heap-based buffer overflow8.1NVD v3.11.5%2023-10-12Fix
CVE-2023-27316Privilege escalation vulnerability in SnapCenter8.8CNA v3.10.2%2023-10-12Fix
CVE-2023-27315Information disclosure vulnerability in SnapGathers6.5CNA v3.10.2%2023-10-12Fix
CVE-2023-27314Denial of service vulnerability in ONTAP 97.5CNA v3.10.6%2023-10-12Fix
CVE-2023-27313Privilege escalation vulnerability in SnapCenter8.3CNA v3.10.6%2023-10-12Fix
CVE-2023-27312Privilege escalation vulnerability in SnapCenter Plugin for VMware vSphere5.4CNA v3.10.4%2023-10-12Fix
CVE-2023-25774SoftEther VPN vpnserver ConnectionAccept functionality denial of service7.5v3.10.7%2023-10-12
CVE-2023-23737MainWP Broken Links Checker Extension WordPress plugin SQL injection9.8v3.10.6%2023-10-12
CVE-2023-23651MainWP Google Analytics Extension WordPress plugin SQL injection8.8v3.10.6%2023-10-12Fix
CVE-2023-23632BeyondTrust Privileged Remote Access improper authentication7.8v3.10.2%2023-10-12
CVE-2023-23581SoftEther VPN denial of service7.5v3.10.8%2023-10-12
CVE-2023-22392Juniper Networks Junos OS Packet Forwarding Engine memory leak6.5CNA v3.10.3%2023-10-12Fix
CVE-2023-22325SoftEther VPN denial of service5.9v3.11.0%2023-10-12Fix
CVE-2023-22308SoftEther VPN vpnserver OvsProcessData functionality integer underflow7.5v3.10.7%2023-10-12
CVE-2023-5562Unsafe default allows for cross-site scripting attacks in KNIME Server and KNIME Business Hub6.1CNA v3.10.3%2023-10-12Fix
CVE-2023-5556Cross-site scripting (XSS) Reflected in structurizr/onpremises6.1v3.11.2%2023-10-12NucleiFix
CVE-2023-5555Cross-site scripting (XSS) Generic in frappe/lms6.1NVD v3.10.4%2023-10-12
CVE-2023-5554LINE client improper certificate validation9.8v3.10.2%2023-10-12Fix
CVE-2023-5531Thumbnail Slider With Lightbox WordPress plugin cross-site request forgery4.3CNA v3.10.3%2023-10-12Fix
CVE-2023-5470Etsy Shop WordPress plugin authenticated (Contributor+) stored cross-site scripting via shortcode5.4v3.10.5%2023-10-12Fix
CVE-2023-5072DoS vulnerability in JSON-Java7.5NVD v3.11.4%2023-10-12Fix
CVE-2023-5046SQLi in Biltay's Procost9.8v3.10.7%2023-10-12Fix
CVE-2023-5045SQLi in Biltay's Kayisi9.8v3.10.7%2023-10-12Fix
CVE-2023-1943Privilege escalation in kOps using GCE/GCP Provider in Gossip Mode8.0CNA v3.10.6%2023-10-12Fix
CVE-2023-45396Elenos ETG150 insecure direct object reference6.5v3.10.4%2023-10-11
CVE-2023-45194Mrl Mr-gm2 Firmware default credentials4.3v3.10.2%2023-10-11Fix
CVE-2023-45132wargio naxsi IgnoreIP/IgnoreCIDR should not trust X-Forwarded-For9.1CNA v3.10.8%2023-10-11Fix
CVE-2023-44997WP Forms Puzzle Captcha WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-11
CVE-2023-44981Apache ZooKeeper: Authorization bypass in SASL Quorum Peer Authentication9.1v3.11.7%2023-10-11Fix
CVE-2023-44962Koha Library Software file upload5.3v3.11.0%2023-10-11Exploit code
CVE-2023-44961Koha Library Software SQL injection7.5v3.11.1%2023-10-11
CVE-2023-44689Digital Agency e-Gov Client Application missing authorization4.3v3.10.4%2023-10-11Fix
CVE-2023-44190Juniper Junos OS Evolved MAC address validation vulnerability6.1CNA v3.10.2%2023-10-11Fix
CVE-2023-44189Junos OS Evolved: PTX10003 Series: MAC address validation bypass vulnerability6.1CNA v3.10.2%2023-10-11Fix
CVE-2023-44188Junos OS: Jkdsd crash due to multiple telemetry requests5.3CNA v3.10.3%2023-10-11Fix
CVE-2023-44187Junos OS Evolved: File copy CLI command can disclose password to shell users5.9CNA v3.10.2%2023-10-11Fix
CVE-2023-44186Juniper Networks Junos OS Evolved improper exception handling7.5CNA v3.10.5%2023-10-11Fix
CVE-2023-44119Huawei HarmonyOS vulnerability of mutual exclusion management in the kernel module7.5v3.10.3%2023-10-11Fix
CVE-2023-44118Huawei HarmonyOS vulnerability of undefined permissions in the MeeTime module9.1v3.10.4%2023-10-11Fix
CVE-2023-44116Huawei HarmonyOS missing authentication9.8v3.10.4%2023-10-11Fix
CVE-2023-44114Huawei HarmonyOS out-of-bounds array vulnerability in the dataipa module7.5v3.10.4%2023-10-11Fix
CVE-2023-44111Huawei HarmonyOS vulnerability of brute-force attacks on the device authentication module7.5v3.10.4%2023-10-11Fix
CVE-2023-44110Huawei HarmonyOS out-of-bounds access vulnerability in the audio module4.3v3.10.2%2023-10-11Fix
CVE-2023-44109Huawei HarmonyOS clone vulnerability in the huks ta module7.5v3.10.3%2023-10-11Fix
CVE-2023-44108Huawei HarmonyOS type confusion vulnerability in the distributed file module7.5v3.10.4%2023-10-11Fix
CVE-2023-44107Huawei HarmonyOS screen projection module vulnerability9.1v3.10.4%2023-10-11Fix
CVE-2023-44106Huawei HarmonyOS API permission management vulnerability in the Fwk-Display module9.8v3.10.4%2023-10-11Fix
CVE-2023-44105Huawei HarmonyOS improper privilege management9.8v3.10.4%2023-10-11Fix
CVE-2023-44104Huawei HarmonyOS broadcast permission control vulnerability in the Bluetooth module7.5v3.10.4%2023-10-11Fix
CVE-2023-44103Huawei HarmonyOS out-of-bounds read vulnerability in the Bluetooth module7.5v3.10.4%2023-10-11Fix
CVE-2023-44102Huawei HarmonyOS broadcast permission control vulnerability in the Bluetooth module5.3v3.10.4%2023-10-11Fix
CVE-2023-44101Huawei HarmonyOS information disclosure7.5v3.10.3%2023-10-11
CVE-2023-44100Huawei HarmonyOS broadcast permission control vulnerability in the Bluetooth module7.5v3.10.4%2023-10-11Fix
CVE-2023-44097Huawei HarmonyOS vulnerability of the permission to access device SNs being improperly managed7.5v3.10.4%2023-10-11Fix
CVE-2023-44096Huawei HarmonyOS vulnerability of brute-force attacks on the device authentication module7.5v3.10.4%2023-10-11Fix
CVE-2023-44095Huawei HarmonyOS use-after-free (UAF) vulnerability in the surfaceflinger module7.5v3.10.4%2023-10-11Fix
CVE-2023-44094Huawei HarmonyOS type confusion vulnerability in the distributed file module5.3v3.10.3%2023-10-11Fix
CVE-2023-44093Huawei HarmonyOS information disclosure7.5v3.10.3%2023-10-11Fix
CVE-2023-43960D-Link Dph-400se improper privilege management8.8v3.11.1%2023-10-11
CVE-2023-43661Cachet vulnerable to authenticated remote code execution9.1CNA v3.051.5%2023-10-11Fix
CVE-2023-42138KEYENCE KV STUDIO out-of-bounds read7.8v3.10.2%2023-10-11Fix
CVE-2023-41882vantage6 improper access control5.4CNA v3.10.4%2023-10-11Fix
CVE-2023-41881vantage6 deleting a collaboration should also delete linked resources3.7CNA v3.10.3%2023-10-11Fix
CVE-2023-41304Huawei HarmonyOS parameter verification vulnerability in the window module5.3v3.10.3%2023-10-11Fix
CVE-2023-40142Google Android TBD privilege escalation7.8v3.10.1%2023-10-11Fix
CVE-2023-40141Google Android thermal_metrics.c out-of-bounds write7.8v3.10.1%2023-10-11Fix
CVE-2023-39325HTTP/2 rapid reset can cause excessive work in net/http7.5NVD v3.13.8%2023-10-11Fix
CVE-2023-38817Echo Anti Cheat Tool improper privilege management7.8v3.10.5%2023-10-11Exploit code
CVE-2023-38217Adobe Bridge Font Parsing out-of-bounds read information disclosure5.5CNA v3.10.4%2023-10-11Fix
CVE-2023-38216Adobe Bridge Font Parsing use-after-free information disclosure5.5CNA v3.10.4%2023-10-11Fix
CVE-2023-37538HCL Digital Experience is susceptible to cross-site scripting (XSS)9.3CNA v3.10.4%2023-10-11Fix
CVE-2023-37536HCL BigFix Platform is vulnerable to an integer overflow in Xerces-c++8.2CNA v3.11.4%2023-10-11Fix
CVE-2023-35968Yifan YF325 gwcfg_cgi_set_manage_post_data functionality heap-based buffer overflow9.8v3.10.8%2023-10-11
CVE-2023-35967Yifan YF325 gwcfg_cgi_set_manage_post_data functionality heap-based buffer overflow9.8v3.10.8%2023-10-11
CVE-2023-35966Yifan YF325 httpd manage_post functionality heap-based buffer overflow9.8v3.10.8%2023-10-11
CVE-2023-35965Yifan YF325 httpd manage_post functionality heap-based buffer overflow9.8v3.10.8%2023-10-11
CVE-2023-35662Google Android out-of-bounds write9.8v3.10.4%2023-10-11Fix
CVE-2023-35661Google Android RohcPacketCommon.cpp out-of-bounds read7.5v3.10.4%2023-10-11Fix
CVE-2023-35660Google Android lwis_transaction.c privilege escalation6.7v3.10.1%2023-10-11Fix
CVE-2023-35655Google Android darwinn_mlir_converter_aidl.cc out-of-bounds read6.7v3.10.1%2023-10-11Fix
CVE-2023-35654Google Android stmvl53l1_module.c out-of-bounds read6.7v3.10.1%2023-10-11Fix
CVE-2023-35653Google Android TBD information disclosure4.4v3.10.1%2023-10-11Fix
CVE-2023-35652Google Android protocolcalladapter.cpp out-of-bounds read7.5v3.10.3%2023-10-11Fix
CVE-2023-35649Google Android Exynos modem files out-of-bounds write7.2v3.10.4%2023-10-11Fix
CVE-2023-35648Google Android protocolmiscadapter.cpp out-of-bounds read9.8v3.10.3%2023-10-11Fix
CVE-2023-35647Google Android protocolembmsadapter.cpp out-of-bounds read9.8v3.10.3%2023-10-11Fix
CVE-2023-35646Google Android TBD stack-based buffer overflow9.8v3.10.4%2023-10-11Fix
CVE-2023-35645Google Android tbd memory corruption6.4v3.10.1%2023-10-11Fix
CVE-2023-35194Peplink Surf SOHO HW1 api.cgi cmd.mvpn.x509.write functionality OS command injection8.8v3.15.6%2023-10-11
CVE-2023-35193Peplink Surf SOHO HW1 api.cgi cmd.mvpn.x509.write functionality OS command injection8.8v3.15.6%2023-10-11
CVE-2023-35056Yifan YF325 httpd next_page functionality buffer overflow9.8v3.11.0%2023-10-11
CVE-2023-35055Yifan YF325 httpd next_page functionality buffer overflow9.8v3.11.0%2023-10-11
CVE-2023-34426Yifan YF325 httpd manage_request functionality stack-based buffer overflow9.8v3.10.8%2023-10-11
CVE-2023-34365Yifan YF325 libutils.so nvram_restore functionality stack-based buffer overflow9.8v3.10.8%2023-10-11
CVE-2023-34356Peplink Surf SOHO HW1 data.cgi xfer_dns functionality OS command injection8.8v3.15.5%2023-10-11
CVE-2023-34354Peplink Surf SOHO HW1 upload_brand.cgi functionality stored cross-site scripting5.4v3.10.8%2023-10-11
CVE-2023-34346Yifan YF325 httpd gwcfg.cgi get functionality stack-based buffer overflow9.8v3.11.3%2023-10-11
CVE-2023-32645Yifan YF325 active debug code9.8v3.155.5%2023-10-11
CVE-2023-32632Yifan YF325 validate.so diag_ping_start functionality command execution9.8v3.11.2%2023-10-11
CVE-2023-31272Yifan YF325 httpd do_wds functionality stack-based buffer overflow9.8v3.10.6%2023-10-11
CVE-2023-28635Defining resource name as integer in vantage6 may give unintended access5.4CNA v3.10.4%2023-10-11Fix
CVE-2023-28381Peplink Surf SOHO HW1 admin.cgi MVPN_trial_init functionality OS command injection8.8v3.15.9%2023-10-11
CVE-2023-27380Peplink Surf SOHO HW1 admin.cgi USSD_send functionality OS command injection8.8v3.15.7%2023-10-11
CVE-2023-26370Adobe Photoshop PSD File Parsing uninitialized variable remote code execution7.8CNA v3.10.3%2023-10-11Fix
CVE-2023-26320Xiaomi Router external request interface vulnerability leads to stack overflow7.5CNA v3.11.1%2023-10-11Fix
CVE-2023-26319Xiaomi Router administration interface vulnerability leads command injection and stack overflow6.7CNA v3.11.0%2023-10-11Fix
CVE-2023-26318Xiaomi Router web interface post-authorization stack overflow6.7CNA v3.10.6%2023-10-11Fix
CVE-2023-24479Yifan YF325 httpd nvram.cgi functionality authentication bypass9.8v3.11.7%2023-10-11
CVE-2023-23930Vantage6's Pickle serialization is insecure5.5CNA v3.10.9%2023-10-11Fix
CVE-2023-5535vim/vim GitHub repository use-after-free7.8v3.10.5%2023-10-11Fix
CVE-2023-5521Incorrect authorization in tiann/Kernelsu9.8v3.10.6%2023-10-11Exploit codeFix
CVE-2023-5520Out-of-bounds read in gpac/gpac7.7v3.10.3%2023-10-11Fix
CVE-2023-5511Cross-site request forgery (CSRF) in snipe/Snipe-IT8.8v3.10.3%2023-10-11Fix
CVE-2023-5487Google Chrome Fullscreen inappropriate implementation6.5v3.10.6%2023-10-11Fix
CVE-2023-5486Google Chrome Input inappropriate implementation4.3v3.10.7%2023-10-11Fix
CVE-2023-5485Google Chrome Autofill inappropriate implementation4.3v3.10.7%2023-10-11Fix
CVE-2023-5484Google Chrome Navigation inappropriate implementation6.5v3.11.1%2023-10-11Fix
CVE-2023-5483Google Chrome Intents inappropriate implementation6.5v3.10.8%2023-10-11Fix
CVE-2023-5481Google Chrome Downloads inappropriate implementation6.5v3.10.8%2023-10-11Fix
CVE-2023-5479Google Chrome Extensions API inappropriate implementation6.5v3.10.6%2023-10-11Fix
CVE-2023-5478Google Chrome Autofill inappropriate implementation4.3v3.10.8%2023-10-11Fix
CVE-2023-5477Google Chrome Installer inappropriate implementation4.3v3.10.5%2023-10-11Fix
CVE-2023-5476Google Chrome Blink History use-after-free8.8v3.10.9%2023-10-11Fix
CVE-2023-5475Google Chrome DevTools inappropriate implementation6.5v3.10.6%2023-10-11Fix
CVE-2023-5474Google Chrome PDF heap-based buffer overflow8.8v3.10.9%2023-10-11Fix
CVE-2023-5473Google Chrome Cast use-after-free6.3v3.10.7%2023-10-11Fix
CVE-2023-5218Google Chrome Site Isolation use-after-free8.8v3.11.3%2023-10-11Fix
CVE-2023-4990MCL Technologies MCL-Net path traversal8.3CNA v3.10.6%2023-10-11Fix
CVE-2023-4957Authentication bypass on Zebra ZTC4.3v3.10.3%2023-10-11
CVE-2023-4936Synaptics DisplayLink USB Graphics Software Synaptics-DisplayLink-privilege escalation vulnerability5.5CNA v3.10.2%2023-10-11Fix
CVE-2023-3781Google Android improper locking7.8v3.10.1%2023-10-11Fix
CVE-2023-45648Apache Tomcat: Trailer header parsing too lenient5.3v3.15.8%2023-10-10NucleiFix
CVE-2023-45601Siemens Parasolid stack-based buffer overflow7.8CNA v3.10.2%2023-10-10Fix
CVE-2023-45312MTProto proxy remote code execution8.8v3.11.5%2023-10-10
CVE-2023-45226F5 BIG-IP Next SPK debug SSH server hard-coded credentials7.4CNA v3.10.4%2023-10-10Fix
CVE-2023-45219F5 BIG-IP undisclosed information disclosure4.4CNA v3.10.2%2023-10-10Fix
CVE-2023-45208D-Link DAP-1860 command injection8.8v3.11.5%2023-10-10Fix
CVE-2023-45205Siemens SICAM PAS/PQS incorrect permission assignment7.8CNA v3.10.2%2023-10-10Fix
CVE-2023-45204Siemens Tecnomatix Plant Simulation V2201 incorrect type conversion7.8CNA v3.10.2%2023-10-10Fix
CVE-2023-45129matrix-org synapse matrix-synapse vulnerable to denial of service due to malicious server ACL events4.9CNA v3.11.2%2023-10-10Fix
CVE-2023-44996Post View Count WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-10Fix
CVE-2023-44995WooCommerce Login Redirect WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-10
CVE-2023-44994ShortCodes UI WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-10
CVE-2023-44959D-Link DSL-3782 command injection8.8v3.122.8%2023-10-10
CVE-2023-44848Seacms arbitrary code execution8.1v3.10.6%2023-10-10
CVE-2023-44847Seacms code injection7.2v3.10.9%2023-10-10
CVE-2023-44846Seacms code injection8.8v3.11.0%2023-10-10
CVE-2023-44827EasyCorp ZenTao Biz command injection8.8v3.10.9%2023-10-10
CVE-2023-44826EasyCorp ZenTao cross-site scripting5.4v3.10.4%2023-10-10
CVE-2023-44763Concrete CMS ConcreteCMS vulnerable to stored cross-site scripting5.4v3.10.6%2023-10-10Exploit code
CVE-2023-44487HTTP/2 Rapid Reset Attack vulnerability7.5NVD v3.1100.0%2023-10-10KEVEmerging ThreatsExploit codeKCVFix
CVE-2023-44476CopyRightPro WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-10
CVE-2023-44475Michael Simpson Add Shortcodes Actions And Filters cross-site request forgery8.8v3.10.2%2023-10-10Fix
CVE-2023-44471Backend Localization WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-10
CVE-2023-44470Kv TinyMCE Editor Add Fonts WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-10
CVE-2023-44399ZITADEL's password reset does not respect the Ignoring unknown usernames setting5.3CNA v3.10.5%2023-10-10Fix
CVE-2023-44315Siemens SINEC NMS cross-site scripting4.7CNA v3.10.3%2023-10-10Fix
CVE-2023-44261Block Plugin Update WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-10Fix
CVE-2023-44259Mediavine Control Panel WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-10Fix
CVE-2023-44257Mang Board WP WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-10Fix
CVE-2023-44249Fortinet FortiManager insecure direct object reference4.1CNA v3.10.9%2023-10-10Fix
CVE-2023-44241Keap Landing Pages WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-10
CVE-2023-44087Siemens Tecnomatix Plant Simulation V2201 out-of-bounds read7.8CNA v3.10.2%2023-10-10Fix
CVE-2023-44086Siemens Tecnomatix Plant Simulation V2201 out-of-bounds read7.8CNA v3.10.2%2023-10-10Fix
CVE-2023-44085Siemens Tecnomatix Plant Simulation V2201 out-of-bounds read7.8CNA v3.10.2%2023-10-10Fix
CVE-2023-44084Siemens Tecnomatix Plant Simulation V2201 out-of-bounds read7.8CNA v3.10.2%2023-10-10Fix
CVE-2023-44083Siemens Tecnomatix Plant Simulation V2201 out-of-bounds write7.8CNA v3.10.2%2023-10-10Fix
CVE-2023-44082Siemens Tecnomatix Plant Simulation V2201 out-of-bounds write7.8CNA v3.10.2%2023-10-10Fix
CVE-2023-44081Siemens Tecnomatix Plant Simulation V2201 out-of-bounds write7.8CNA v3.10.2%2023-10-10Fix
CVE-2023-43896Macrium Reflect buffer overflow7.8v3.10.3%2023-10-10
CVE-2023-43788libXpm: Out-of-bounds read in xpmcreatexpmimagefrombuffer5.5NVD v3.10.4%2023-10-10Fix
CVE-2023-43787libX11: Integer overflow in xcreateimage leading to a heap overflow7.8NVD v3.10.5%2023-10-10Fix
CVE-2023-43786libX11: Stack exhaustion from infinite recursion in putsubimage5.5NVD v3.10.5%2023-10-10Exploit codeFix
CVE-2023-43785libX11: Out-of-bounds memory access in _xkbreadkeysyms5.5NVD v3.10.7%2023-10-10Fix
CVE-2023-43746BIG-IP Appliance mode external monitor vulnerability8.7CNA v3.10.4%2023-10-10Fix
CVE-2023-43625Siemens Simcenter Amesim code injection9.8CNA v3.11.2%2023-10-10Fix
CVE-2023-43623Siemens Mendix Forgot Password (Mendix 10 compatible) observable discrepancy5.3CNA v3.10.5%2023-10-10Fix
CVE-2023-43611F5 BIG-IP Edge Client macOS installer privilege escalation7.8CNA v3.10.1%2023-10-10Fix
CVE-2023-43485BIGIP and BIG-IQ TACACS+ audit log vulnerability5.5CNA v3.10.2%2023-10-10Fix
CVE-2023-42796Siemens CP-8031 MASTER MODULE path traversal7.5CNA v3.10.7%2023-10-10Fix
CVE-2023-42795Apache Tomcat incomplete cleanup5.3v3.12.2%2023-10-10Fix
CVE-2023-42794Apache Tomcat: FileUpload: DoS due to accumulation of temporary files on Windows5.9NVD v3.12.3%2023-10-10Fix
CVE-2023-42788Fortinet FortiAnalyzer OS command injection7.6CNA v3.11.3%2023-10-10Fix
CVE-2023-42787Fortinet FortiAnalyzer client-side enforcement of server-side security6.2CNA v3.11.4%2023-10-10Fix
CVE-2023-42782Fortinet FortiAnalyzer insufficient verification of data authenticity5.0CNA v3.10.3%2023-10-10Fix
CVE-2023-42768F5 BIG-IP iControl REST insufficient session expiration7.2CNA v3.10.5%2023-10-10Fix
CVE-2023-42477Server-side request forgery in SAP NetWeaver AS Java (GRMG Heartbeat application)6.5CNA v3.10.4%2023-10-10Fix
CVE-2023-42475SAP S/4HANA Core information disclosure vulnerability in Statutory Reporting4.3CNA v3.10.4%2023-10-10Fix
CVE-2023-42474Cross-site scripting (XSS) vulnerability in SAP BusinessObjects Web Intelligence6.8CNA v3.10.3%2023-10-10Fix
CVE-2023-42473Missing authorization Check in S/4hana (Manage Withholding Tax Items)5.4CNA v3.10.3%2023-10-10Fix
CVE-2023-42189Nanoleaf Light Strip insecure permissions7.5v3.10.8%2023-10-10
CVE-2023-41964F5 BIG-IP and BIG-IQ database variables cleartext storage of sensitive information4.3CNA v3.10.2%2023-10-10Fix
CVE-2023-41876WP Gallery Metabox WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-10
CVE-2023-41858Order Delivery Date for WP e-Commerce WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-10
CVE-2023-41854wpCentral WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-10
CVE-2023-41853WP iCal Availability WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-10
CVE-2023-41852MailMunch Grow your Email List WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-10Fix
CVE-2023-41851WP Custom Post Template WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-10
CVE-2023-41850Outbound Link Manager WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-10
CVE-2023-41841Fortinet FortiOS An improper authorization7.4CNA v3.10.8%2023-10-10Fix
CVE-2023-41838Fortinet FortiManager OS command injection6.9CNA v3.10.5%2023-10-10Fix
CVE-2023-41774Microsoft Windows layer 2 Tunneling protocol remote code execution8.1CNA v3.11.3%2023-10-10Fix
CVE-2023-41773Microsoft Windows layer 2 Tunneling protocol remote code execution8.1CNA v3.11.3%2023-10-10Fix
CVE-2023-41772Microsoft Windows win32k elevation of privilege7.8CNA v3.113.3%2023-10-10Exploit codeFix
CVE-2023-41771Microsoft Windows layer 2 Tunneling protocol remote code execution8.1CNA v3.11.3%2023-10-10Fix
CVE-2023-41770Microsoft Windows layer 2 Tunneling protocol remote code execution8.1CNA v3.11.3%2023-10-10Fix
CVE-2023-41769Microsoft Windows layer 2 Tunneling protocol remote code execution8.1CNA v3.11.3%2023-10-10Fix
CVE-2023-41768Microsoft Windows layer 2 Tunneling protocol remote code execution8.1CNA v3.11.3%2023-10-10Fix
CVE-2023-41767Microsoft Windows layer 2 Tunneling protocol remote code execution8.1CNA v3.11.3%2023-10-10Fix
CVE-2023-41766Microsoft Windows Client Server Run-time Subsystem (CSRSS) elevation of privilege7.8CNA v3.11.3%2023-10-10Fix
CVE-2023-41765Microsoft Windows layer 2 Tunneling protocol remote code execution8.1CNA v3.11.3%2023-10-10Fix
CVE-2023-41763Microsoft Skype for Business privilege escalation5.3CNA v3.190.4%2023-10-10KEVNucleiEmerging ThreatsFix
CVE-2023-41730SendPress Newsletters WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-10
CVE-2023-41697Easy WP Cleaner WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-10Fix
CVE-2023-41694Realbig WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-10Fix
CVE-2023-41684SIS Handball WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-10-10
CVE-2023-41679Fortinet FortiManager improper access control7.7CNA v3.10.5%2023-10-10Fix
CVE-2023-41675Fortinet FortiOS use-after-free4.8CNA v3.11.0%2023-10-10Fix
CVE-2023-41373F5 BIG-IP A path traversal8.8CNA v3.12.4%2023-10-10Fix
CVE-2023-41365Information disclosure vulnerability in SAP Business One (B1i)4.3CNA v3.10.3%2023-10-10Fix
CVE-2023-41253BIG-IP DNS TSIG Key vulnerability5.5CNA v3.10.2%2023-10-10Fix
CVE-2023-41085F5 BIG-IP IPsec vulnerability7.5CNA v3.10.5%2023-10-10Fix
CVE-2023-40718Fortinet IPS Engine interpretation conflict6.7CNA v3.10.4%2023-10-10Fix
CVE-2023-40542F5 BIG-IP TCP profile resource exhaustion7.5CNA v3.10.5%2023-10-10Fix
CVE-2023-40537F5 BIG-IP multi-blade VIPRION Configuration utility session cookie vulnerability8.1CNA v3.10.5%2023-10-10Fix
CVE-2023-40534F5 BIG-IP HTTP/2 profile memory leak7.5CNA v3.10.5%2023-10-10Fix
CVE-2023-40310Missing XML Validation vulnerability in SAP PowerDesigner Client BPMN2 import6.5CNA v3.10.8%2023-10-10Fix
CVE-2023-39447F5 BIG-IP Access Policy Manager Guided Configuration sensitive information in log files4.4CNA v3.10.2%2023-10-10Fix
CVE-2023-38640Siemens SICAM PAS/PQS incorrect permission assignment6.6CNA v3.10.1%2023-10-10Fix
CVE-2023-38171Microsoft QUIC denial of service7.5CNA v3.171.0%2023-10-10Fix
CVE-2023-38166Microsoft Windows layer 2 Tunneling protocol remote code execution8.1CNA v3.11.3%2023-10-10Fix
CVE-2023-38159Microsoft Windows Graphics component elevation of privilege7.0CNA v3.14.4%2023-10-10Fix
CVE-2023-37939Fortinet FortiClientMac information disclosure3.0CNA v3.10.2%2023-10-10Fix
CVE-2023-37935Fortinet FortiOS sensitive query strings6.5CNA v3.10.9%2023-10-10Fix
CVE-2023-37195Siemens SIMATIC CP 1604 denial of service4.4CNA v3.10.2%2023-10-10
CVE-2023-37194Siemens SIMATIC CP 1604 arbitrary code execution6.7CNA v3.10.2%2023-10-10
CVE-2023-36902Microsoft Windows Runtime remote code execution7.0CNA v3.10.6%2023-10-10Fix
CVE-2023-36790Microsoft Windows RDP Encoder Mirror driver elevation of privilege7.8CNA v3.10.5%2023-10-10Fix
CVE-2023-36789Microsoft Skype for Business remote code execution7.2CNA v3.12.4%2023-10-10Fix
CVE-2023-36786Microsoft Skype for Business remote code execution7.2CNA v3.12.5%2023-10-10Fix
CVE-2023-36785Microsoft ODBC Driver for SQL server remote code execution7.8CNA v3.11.1%2023-10-10Fix
CVE-2023-36780Microsoft Skype for Business remote code execution7.2CNA v3.12.6%2023-10-10Fix
CVE-2023-36778Microsoft Exchange Server remote code execution8.0CNA v3.13.7%2023-10-10Fix
CVE-2023-36776Microsoft Windows win32k elevation of privilege7.0CNA v3.12.4%2023-10-10Fix
CVE-2023-36743Microsoft Windows win32k elevation of privilege7.8CNA v3.14.0%2023-10-10Fix
CVE-2023-36737Microsoft Azure Network Watcher VM agent elevation of privilege7.8CNA v3.10.6%2023-10-10Fix
CVE-2023-36732Microsoft Windows win32k elevation of privilege7.8CNA v3.10.8%2023-10-10Fix
CVE-2023-36731Microsoft Windows win32k elevation of privilege7.8CNA v3.16.6%2023-10-10Fix
CVE-2023-36730Microsoft ODBC Driver for SQL server remote code execution7.8CNA v3.11.0%2023-10-10Fix
CVE-2023-36729Microsoft Windows Named Pipe File System elevation of privilege7.8CNA v3.10.6%2023-10-10Fix
CVE-2023-36728Microsoft SQL server denial of service5.5CNA v3.10.9%2023-10-10Fix
CVE-2023-36726Microsoft Windows Internet Key Exchange (IKE) extension elevation of privilege7.8CNA v3.10.8%2023-10-10Fix
CVE-2023-36725Microsoft Windows Kernel elevation of privilege7.8CNA v3.10.5%2023-10-10Fix
CVE-2023-36724Microsoft Windows Power Management service information disclosure5.5CNA v3.10.5%2023-10-10Fix
CVE-2023-36723Microsoft Windows Container Manager service elevation of privilege7.8CNA v3.12.2%2023-10-10Exploit codeFix
CVE-2023-36722Microsoft Windows active Directory Domain services information disclosure4.4CNA v3.11.2%2023-10-10Fix
CVE-2023-36721Microsoft Windows Error Reporting service elevation of privilege7.0CNA v3.10.4%2023-10-10Fix
CVE-2023-36720Microsoft Windows Mixed Reality Developer tools denial of service7.5CNA v3.12.4%2023-10-10Fix
CVE-2023-36718Microsoft Virtual Trusted Platform module remote code execution7.8CNA v3.11.6%2023-10-10Fix
CVE-2023-36717Microsoft Windows Virtual Trusted Platform module denial of service6.5CNA v3.10.7%2023-10-10Fix
CVE-2023-36713Microsoft Windows Common Log File System driver information disclosure5.5CNA v3.18.2%2023-10-10Fix
CVE-2023-36712Microsoft Windows Kernel elevation of privilege7.8CNA v3.10.9%2023-10-10Fix
CVE-2023-36711Microsoft Windows Runtime C++ template library elevation of privilege7.8CNA v3.10.7%2023-10-10Fix
CVE-2023-36710Microsoft Windows Media Foundation Core remote code execution7.8CNA v3.11.1%2023-10-10Fix
CVE-2023-36709Microsoft AllJoyn API denial of service7.5CNA v3.12.6%2023-10-10Fix
CVE-2023-36707Microsoft Windows Deployment services denial of service6.5CNA v3.12.6%2023-10-10Fix
CVE-2023-36706Microsoft Windows Deployment services information disclosure6.5CNA v3.11.8%2023-10-10Fix
CVE-2023-36704Microsoft Windows Setup Files Cleanup remote code execution7.8CNA v3.10.8%2023-10-10Fix
CVE-2023-36703Microsoft Windows DHCP server service denial of service7.5CNA v3.12.4%2023-10-10Fix
CVE-2023-36702Microsoft DirectMusic remote code execution7.8CNA v3.11.0%2023-10-10Fix
CVE-2023-36701Microsoft Resilient File System (ReFS) elevation of privilege7.8CNA v3.10.7%2023-10-10Fix
CVE-2023-36698Microsoft Windows Kernel security feature bypass4.4CNA v3.10.5%2023-10-10Fix
CVE-2023-36697Microsoft Message Queuing (MSMQ) remote code execution6.8CNA v3.12.1%2023-10-10Fix
CVE-2023-36637Fortinet FortiMail cross-site scripting3.4CNA v3.10.4%2023-10-10Fix
CVE-2023-36606Microsoft Message Queuing (MSMQ) denial of service7.5CNA v3.169.4%2023-10-10Fix
CVE-2023-36605Microsoft Windows Named Pipe Filesystem elevation of privilege7.4CNA v3.10.5%2023-10-10Fix
CVE-2023-36603Microsoft Windows TCP/IP denial of service7.5CNA v3.12.3%2023-10-10Fix
CVE-2023-36602Microsoft Windows TCP/IP denial of service7.5CNA v3.12.3%2023-10-10Fix
CVE-2023-36598Microsoft WDAC ODBC driver remote code execution7.8CNA v3.11.0%2023-10-10Fix
CVE-2023-36596Microsoft Windows Remote Procedure Call information disclosure7.5CNA v3.12.0%2023-10-10Fix
CVE-2023-36594Microsoft Windows Graphics component elevation of privilege7.8CNA v3.19.2%2023-10-10Fix
CVE-2023-36593Microsoft Message Queuing (MSMQ) remote code execution7.8CNA v3.11.0%2023-10-10Fix
CVE-2023-36592Microsoft Message Queuing (MSMQ) remote code execution7.3CNA v3.11.0%2023-10-10Fix
CVE-2023-36591Microsoft Message Queuing (MSMQ) remote code execution7.3CNA v3.10.9%2023-10-10Fix
CVE-2023-36590Microsoft Message Queuing (MSMQ) remote code execution7.3CNA v3.11.0%2023-10-10Fix
CVE-2023-36589Microsoft Message Queuing (MSMQ) remote code execution7.3CNA v3.11.0%2023-10-10Fix
CVE-2023-36585Microsoft Windows upnphost.dll denial of service7.5CNA v3.12.5%2023-10-10Fix
CVE-2023-36584Microsoft Windows Mark of the Web (MOTW) security feature bypass5.4CNA v3.13.1%2023-10-10KEVKCVFix
CVE-2023-36583Microsoft Message Queuing (MSMQ) remote code execution7.3CNA v3.11.0%2023-10-10Fix
CVE-2023-36582Microsoft Message Queuing (MSMQ) remote code execution7.3CNA v3.11.0%2023-10-10Fix
CVE-2023-36581Microsoft Message Queuing (MSMQ) denial of service7.5CNA v3.12.4%2023-10-10Fix
CVE-2023-36579Microsoft Message Queuing (MSMQ) denial of service7.5CNA v3.12.4%2023-10-10Fix
CVE-2023-36578Microsoft Message Queuing (MSMQ) remote code execution7.3CNA v3.11.0%2023-10-10Fix
CVE-2023-36577Microsoft WDAC OLE DB provider for SQL server remote code execution8.8CNA v3.11.7%2023-10-10Fix
CVE-2023-36576Microsoft Windows Kernel information disclosure5.5CNA v3.11.0%2023-10-10Fix
CVE-2023-36575Microsoft Message Queuing (MSMQ) remote code execution7.3CNA v3.11.0%2023-10-10Fix
CVE-2023-36574Microsoft Message Queuing (MSMQ) remote code execution7.3CNA v3.11.0%2023-10-10Fix
CVE-2023-36573Microsoft Message Queuing (MSMQ) remote code execution7.3CNA v3.11.0%2023-10-10Fix
CVE-2023-36572Microsoft Message Queuing (MSMQ) remote code execution7.3CNA v3.11.0%2023-10-10Fix
CVE-2023-36571Microsoft Message Queuing (MSMQ) remote code execution7.3CNA v3.11.0%2023-10-10Fix
CVE-2023-36570Microsoft Message Queuing (MSMQ) remote code execution7.3CNA v3.11.0%2023-10-10Fix
CVE-2023-36569Microsoft Office elevation of privilege8.4CNA v3.10.6%2023-10-10Fix
CVE-2023-36568Microsoft Office Click-To-Run elevation of privilege7.0CNA v3.10.4%2023-10-10Fix
CVE-2023-36567Microsoft Windows Deployment services information disclosure7.5CNA v3.12.0%2023-10-10Fix
CVE-2023-36566Microsoft Common Data Model SDK denial of service6.5CNA v3.12.8%2023-10-10Fix
CVE-2023-36565Microsoft Office Graphics elevation of privilege7.0CNA v3.10.4%2023-10-10Fix
CVE-2023-36564Microsoft Windows Search security feature bypass6.5CNA v3.11.3%2023-10-10Fix
CVE-2023-36563Microsoft WordPad information disclosure6.5CNA v3.120.7%2023-10-10KEVFix
CVE-2023-36561Microsoft Azure DevOps Server elevation of privilege7.3CNA v3.10.9%2023-10-10Fix
CVE-2023-36557Microsoft Windows PrintHTML API remote code execution7.8CNA v3.11.0%2023-10-10Fix
CVE-2023-36556Fortinet FortiMail incorrect authorization8.6CNA v3.10.8%2023-10-10Fix
CVE-2023-36555Fortinet FortiOS cross-site scripting3.9CNA v3.10.3%2023-10-10Fix
CVE-2023-36550Fortinet FortiWLM OS command injection9.6CNA v3.12.1%2023-10-10Fix
CVE-2023-36549Fortinet FortiWLM OS command injection8.6CNA v3.12.1%2023-10-10Fix
CVE-2023-36548Fortinet FortiWLM OS command injection9.6CNA v3.12.1%2023-10-10Fix
CVE-2023-36547Fortinet FortiWLM OS command injection9.6CNA v3.12.1%2023-10-10Fix
CVE-2023-36478eclipse jetty.project HTTP/2 HPACK integer overflow and buffer allocation7.5CNA v3.13.8%2023-10-10Fix
CVE-2023-36438Microsoft Windows TCP/IP information disclosure7.5CNA v3.11.8%2023-10-10Fix
CVE-2023-36436Microsoft Windows MSHTML Platform remote code execution7.8CNA v3.11.0%2023-10-10Fix
CVE-2023-36435Microsoft QUIC denial of service7.5CNA v3.15.5%2023-10-10Fix
CVE-2023-36434Microsoft Windows IIS server elevation of privilege9.8CNA v3.12.4%2023-10-10Fix
CVE-2023-36433Microsoft Dynamics 365 (on-premises) information disclosure6.5CNA v3.11.9%2023-10-10Fix
CVE-2023-36431Microsoft Message Queuing (MSMQ) denial of service7.5CNA v3.12.4%2023-10-10Fix
CVE-2023-36429Microsoft Dynamics 365 (on-premises) information disclosure6.5CNA v3.12.0%2023-10-10Fix
CVE-2023-36420Microsoft ODBC Driver for SQL server remote code execution7.8CNA v3.11.0%2023-10-10Fix
CVE-2023-36419Microsoft Azure HDInsight Apache Oozie Workflow Scheduler XXE elevation of privilege8.8CNA v3.11.7%2023-10-10Fix
CVE-2023-36418Microsoft Azure RTOS GUIX Studio remote code execution7.8CNA v3.10.8%2023-10-10Fix
CVE-2023-36417Microsoft SQL OLE DB remote code execution7.8CNA v3.11.0%2023-10-10Fix
CVE-2023-36416Microsoft Dynamics 365 (on-premises) cross-site scripting6.1CNA v3.10.8%2023-10-10Fix
CVE-2023-36415Microsoft Azure Identity SDK remote code execution8.8CNA v3.11.6%2023-10-10Fix
CVE-2023-36414Microsoft Azure Identity SDK remote code execution8.8CNA v3.12.2%2023-10-10Fix
CVE-2023-36380Siemens CP-8031 MASTER MODULE hard-coded credentials9.8CNA v3.10.4%2023-10-10Fix
CVE-2023-36127PHP Jabbers Appointment Scheduler observable discrepancy7.5v3.10.6%2023-10-10
CVE-2023-36126PHP Jabbers Appointment Scheduler cross-site scripting6.1v3.10.4%2023-10-10
CVE-2023-35796Siemens SINEMA Server V14 cross-site scripting8.3CNA v3.10.6%2023-10-10
CVE-2023-35349Microsoft Message Queuing (MSMQ) remote code execution9.8CNA v3.12.8%2023-10-10Fix
CVE-2023-34993Fortinet FortiWLM OS command injection9.6CNA v3.121.3%2023-10-10NucleiEmerging ThreatsFix
CVE-2023-34992Fortinet FortiSIEM OS command injection9.7CNA v3.181.7%2023-10-10NucleiEmerging ThreatsExploit codeFix
CVE-2023-34989Fortinet FortiWLM OS command injection8.6CNA v3.12.1%2023-10-10Fix
CVE-2023-34988Fortinet FortiWLM OS command injection8.6CNA v3.12.1%2023-10-10Fix
CVE-2023-34987Fortinet FortiWLM OS command injection8.6CNA v3.12.1%2023-10-10Fix
CVE-2023-34986Fortinet FortiWLM OS command injection8.6CNA v3.12.1%2023-10-10Fix
CVE-2023-34985Fortinet FortiWLM OS command injection8.6CNA v3.12.1%2023-10-10Fix
CVE-2023-33301Fortinet FortiOS An improper access control6.5CNA v3.10.4%2023-10-10Fix
CVE-2023-31096Broadcom Lsi Pci-sv92ex out-of-bounds write7.8v3.10.4%2023-10-10Fix
CVE-2023-30900Siemens Xpedition Layout Browser stack-based buffer overflow7.8CNA v3.10.2%2023-10-10Fix
CVE-2023-30806Sangfor Next-gen Application Firewall PHPSESSID command injection9.8v3.165.8%2023-10-10
CVE-2023-30805Sangfor Next-gen Application Firewall Login Un Param command injection9.8v3.165.8%2023-10-10
CVE-2023-30804Sangfor Next-gen Application Firewall Authenticated File Disclosure6.5NVD v3.138.9%2023-10-10KCV
CVE-2023-30803Sangfor Next-gen Application Firewall authentication bypass9.8v3.120.9%2023-10-10KCV
CVE-2023-30802Sangfor Next-gen Application Firewall Source Code Disclosure5.3v3.10.6%2023-10-10
CVE-2023-30801qBittorrent Web UI default credentials lead to RCE9.8v3.10.9%2023-10-10Fix
CVE-2023-29348Microsoft Windows Remote Desktop Gateway (RD Gateway) information disclosure7.5CNA v3.12.0%2023-10-10Fix
CVE-2023-26220TIBCO Spotfire stored cross-site scripting (XSS)5.4CNA v3.10.3%2023-10-10
CVE-2023-25607Fortinet FortiAnalyzer OS command injection7.4CNA v3.11.5%2023-10-10Fix
CVE-2023-25604Fortinet FortiGuest sensitive information in log files5.5CNA v3.10.2%2023-10-10Fix
CVE-2023-5499Shenzhen Reachfar v28 information exposure7.5v3.10.6%2023-10-10Fix
CVE-2023-5498Cross-site request forgery (CSRF) in Chiefonboarding/Chiefonboarding4.3v3.10.2%2023-10-10Fix
CVE-2023-5497Tongda OA 2017 delete.php SQL injection8.8v3.10.7%2023-10-10
CVE-2023-5496Translator PoqDev Add-On Select Text cross-site scripting5.4v3.10.6%2023-10-10
CVE-2023-5495QDocs Smart School HTTP POST request SQL injection9.8v3.11.1%2023-10-10
CVE-2023-5494Byzoro Smart S45F download.php OS command injection8.8v3.17.7%2023-10-10
CVE-2023-5493Byzoro Smart S45F web.php unrestricted upload8.8v3.11.7%2023-10-10
CVE-2023-5492Byzoro Smart S45F licence.php unrestricted upload8.8v3.11.8%2023-10-10
CVE-2023-5491Byzoro Smart S45F updatelib.php unrestricted upload8.8v3.11.7%2023-10-10
CVE-2023-5490Byzoro Smart S45F userattestation.php unrestricted upload8.8v3.11.7%2023-10-10
CVE-2023-5489Byzoro Smart S45F uploadfile.php unrestricted upload8.8v3.11.7%2023-10-10
CVE-2023-5488Byzoro Smart S45F updatelib.php unrestricted upload8.8v3.11.8%2023-10-10
CVE-2023-5471codeprojects Farmacia index.php SQL injection7.5v3.10.6%2023-10-10
CVE-2023-5468Slick Contact Forms WordPress plugin stored cross-site scripting5.4v3.10.3%2023-10-10
CVE-2023-5467GEO my WordPress plugin authenticated (Contributor+) stored cross-site scripting via shortcode5.4v3.10.4%2023-10-10Fix
CVE-2023-5450F5 BIG-IP Edge Client macOS installer privilege escalation7.3CNA v3.10.1%2023-10-10Fix
CVE-2023-4966Citrix NetScaler ADC and NetScaler Gateway buffer overflow9.4CNA v3.1100.0%2023-10-10KEVNucleiEmerging ThreatsExploit codeFix
CVE-2023-4837Cross-site request forgery (CSRF) in SmodBIP8.8v3.10.3%2023-10-10
CVE-2023-4309Election Services Co. (ESC) Internet Election Service SQL injection9.8v3.11.1%2023-10-10Fix
CVE-2023-45613JetBrains Ktor improper certificate validation6.8CNA v3.10.3%2023-10-09Fix
CVE-2023-45612JetBrains Ktor XML external entity injection8.6CNA v3.10.6%2023-10-09Exploit codeFix
CVE-2023-45374mediawiki cross-site request forgery5.3v3.10.2%2023-10-09Fix
CVE-2023-45373mediawiki cross-site scripting6.1v3.10.3%2023-10-09Fix
CVE-2023-45372mediawiki protection mechanism failure5.3v3.10.3%2023-10-09Fix
CVE-2023-45371mediawiki resource exhaustion7.5v3.10.5%2023-10-09Fix
CVE-2023-45370mediawiki missing authorization5.3v3.10.3%2023-10-09Fix
CVE-2023-45369mediawiki incorrect permission assignment4.3v3.10.3%2023-10-09Fix
CVE-2023-45367mediawiki denial of service6.5v3.10.5%2023-10-09Fix
CVE-2023-45364mediawiki incorrect permission assignment5.3v3.10.4%2023-10-09Fix