CVEs published September 30, 2023
56 CVEs were published on September 30, 2023: 3 critical, 3 high.
- Published
- 56
- Critical
- 3
- High
- 3
- Medium
- 45
- Low
- 4
- Unrated
- 1
- Now in CISA KEV
- 0
- Fix available
- 9
Most affected products
- Os Commerce
- 36
- thorsten/phpmyfaq
- 5
- Online Banquet Booking System
- 3
- brazenlygeek OpenHook
- 1
- Caphyon Advanced Installer
- 1
- DedeCMS
- 1
- GitLab
- 1
- hamza417/inure
- 1
- microweber/microweber
- 1
- phpkobo Ajax Poll Script
- 1
Critical 3
High 3
Medium, low and unrated 50
- CVE-2023-5112Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)Os Commerce
- CVE-2023-5111Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)Os Commerce
- CVE-2023-43735Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)Os Commerce
- CVE-2023-43734Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)Os Commerce
- CVE-2023-43733Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)Os Commerce
- CVE-2023-43732Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)Os Commerce
- CVE-2023-43731Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)Os Commerce
- CVE-2023-43730Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)Os Commerce
- CVE-2023-43729Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)Os Commerce
- CVE-2023-43728Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)Os Commerce
- CVE-2023-43727Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)Os Commerce
- CVE-2023-43726Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)Os Commerce
- CVE-2023-43725Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)Os Commerce
- CVE-2023-43724Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)Os Commerce
- CVE-2023-43723Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)Os Commerce
- CVE-2023-43722Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)Os Commerce
- CVE-2023-43721Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)Os Commerce
- CVE-2023-43720Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)Os Commerce
- CVE-2023-43719Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)Os Commerce
- CVE-2023-43718Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)Os Commerce
- CVE-2023-43717Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)Os Commerce
- CVE-2023-43716Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)Os Commerce
- CVE-2023-43715Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)Os Commerce
- CVE-2023-43714Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)Os Commerce
- CVE-2023-43713Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)Os Commerce
- CVE-2023-43712Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)Os Commerce
- CVE-2023-5313phpkobo Ajax Poll Script ajax-poll.php improper enforcement of a single, unique actionphpkobo Ajax Poll Script
- CVE-2023-5305Online Banquet Booking System Contact Us Page mail.php cross site scriptingOnline Banquet Booking System
- CVE-2023-5304Online Banquet Booking System Service Booking book-services.php cross site scriptingOnline Banquet Booking System
- CVE-2023-5321Missing Authorization in hamza417/inurehamza417/inure
- CVE-2023-5303Online Banquet Booking System Account Detail view-booking-detail.php cross site scriptingOnline Banquet Booking System
- CVE-2023-5302SourceCodester Best Courier Management System Manage Account Page cross site scriptingSourceCodester Best Courier Management System
- CVE-2023-5301DedeCMS album_add.php AddMyAddon os command injectionDedeCMS
- CVE-2023-5300TTSPlanning sql injectionTTSPlanning
- CVE-2023-5298Tongda OA 2017 delete.php sql injectionTongda OA
- CVE-2023-5295Comments by Startbit <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodevivacityinfotechjaipur Comments by Startbit
- CVE-2023-43711Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)Os Commerce
- CVE-2023-43710Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)Os Commerce
- CVE-2023-43709Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)Os Commerce
- CVE-2023-43708Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)Os Commerce
- CVE-2023-43707Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)Os Commerce
- CVE-2023-43706Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)Os Commerce
- CVE-2023-43705Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)Os Commerce
- CVE-2023-43704Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)Os Commerce
- CVE-2023-43703Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)Os Commerce
- CVE-2023-43702Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)Os Commerce
- CVE-2023-5317Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaqthorsten/phpmyfaq
- CVE-2023-5318Use of Hard-coded Credentials in microweber/microwebermicroweber/microweber
- CVE-2023-5227Unrestricted Upload of File with Dangerous Type in thorsten/phpmyfaqthorsten/phpmyfaq
- CVE-2023-44488VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.