CVEs published October 10, 2023
254 CVEs were published on October 10, 2023: 15 critical, 125 high. 5 are now in CISA KEV.
- Published
- 254
- Critical
- 15
- High
- 125
- Medium
- 89
- Low
- 5
- Unrated
- 20
- Now in CISA KEV
- 5
- Fix available
- 133
Most affected products
- Microsoft Windows
- 73
- F5 BIG-IP
- 10
- Fortinet FortiWLM
- 10
- Siemens Tecnomatix Plant Simulation
- 8
- Byzoro Smart S45F Multi-Service Secure Gateway Intelligent…
- 7
- Fortinet FortiOS
- 4
- Microsoft Windows Server
- 4
- Sangfor Net-Gen Application Firewall
- 4
- Microsoft Dynamics 365 (on-premises)
- 3
- Microsoft SQL Server · Microsoft ODBC Driver 17 for SQL… +5
- 3
Critical 15
- CVE-2023-4309Election Services Co.Election Services Co. (ESC) Internet Election Service
- CVE-2023-36434Windows IIS Server Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-35349Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-36548A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.Fortinet FortiWLM
- CVE-2023-36547A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.Fortinet FortiWLM
- CVE-2023-34993A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.Fortinet FortiWLM
- CVE-2023-36550A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.Fortinet FortiWLM
- CVE-2023-34992A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet allows attacker to eFortinet FortiSIEM
- CVE-2023-30806Sangfor Next-Gen Application Firewall PHPSESSID Command InjectionSangfor Net-Gen Application Firewall
- CVE-2023-30805Sangfor Next-Gen Application Firewall Login Un Param Command InjectionSangfor Net-Gen Application Firewall
- CVE-2023-30803Sangfor Next-Gen Application Firewall Authentication BypassSangfor Net-Gen Application Firewall
- CVE-2023-30801qBittorrent Web UI Default Credentials Lead to RCEqBittorrent client
- CVE-2023-4966Unauthenticated sensitive information disclosureCitrix NetScaler ADC · Citrix NetScaler Gateway
- CVE-2023-43625A vulnerability has been identified in Simcenter Amesim (All versions < V2021.1).Siemens Simcenter Amesim
- CVE-2023-36380A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05.11 (only with activated debug support)), CP-8050 MASSiemens CP-8031 MASTER MODULE · Siemens CP-8050 MASTER MODU…
High 125
- CVE-2023-36414Azure Identity SDK Remote Code Execution VulnerabilityMicrosoft Azure Identity SDK for .NET · Azure.Identity
- CVE-2023-36415Azure Identity SDK Remote Code Execution VulnerabilityMicrosoft Azure Identity SDK for Java · Microsoft Azure… +2
- CVE-2023-36418Azure RTOS GUIX Studio Remote Code Execution VulnerabilityMicrosoft Azure RTOS GUIX Studio
- CVE-2023-36436Windows MSHTML Platform Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-36565Microsoft Office Graphics Elevation of Privilege VulnerabilityMicrosoft Office 2019 for Mac · Microsoft Office LTSC fo… +2
- CVE-2023-36743Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-36776Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-36778Microsoft Exchange Server Remote Code Execution VulnerabilityMicrosoft Exchange Server 2019 Cumulative Update · Microsof…
- CVE-2023-36780Skype for Business Remote Code Execution VulnerabilityMicrosoft Skype for Business Server 2019 CU7 · Microsoft Sk…
- CVE-2023-36785Microsoft ODBC Driver for SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server · Microsoft ODBC Driver 17 for SQL… +5
- CVE-2023-36786Skype for Business Remote Code Execution VulnerabilityMicrosoft Skype for Business Server 2015 CU13 · Microsoft S…
- CVE-2023-36789Skype for Business Remote Code Execution VulnerabilityMicrosoft Skype for Business Server 2019 CU7 · Microsoft Sk…
- CVE-2023-36790Windows RDP Encoder Mirror Driver Elevation of Privilege VulnerabilityMicrosoft Windows Server 2008 Service Pack · Microsoft W… +1
- CVE-2023-38159Windows Graphics Component Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-38166Layer 2 Tunneling Protocol Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-29348Windows Remote Desktop Gateway (RD Gateway) Information Disclosure VulnerabilityMicrosoft Windows Server
- CVE-2023-36417Microsoft SQL OLE DB Remote Code Execution VulnerabilityMicrosoft SQL Server · Microsoft OLE DB Driver 19 for SQ… +1
- CVE-2023-36419Azure HDInsight Apache Oozie Workflow Scheduler XXE Elevation of Privilege VulnerabilityMicrosoft Azure HDInsight
- CVE-2023-36420Microsoft ODBC Driver for SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server · Microsoft ODBC Driver 17 for SQL… +5
- CVE-2023-36431Microsoft Message Queuing (MSMQ) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-36435Microsoft QUIC Denial of Service VulnerabilityMicrosoft PowerShell · Microsoft Windows Server +4
- CVE-2023-36438Windows TCP/IP Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2023-36557PrintHTML API Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-36561Azure DevOps Server Elevation of Privilege VulnerabilityMicrosoft Azure DevOps Server
- CVE-2023-36567Windows Deployment Services Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2023-36568Microsoft Office Click-To-Run Elevation of Privilege VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise
- CVE-2023-36569Microsoft Office Elevation of Privilege VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise
- CVE-2023-36570Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-36571Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-36572Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-36573Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-36574Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-36575Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-36577Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-36578Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-36579Microsoft Message Queuing (MSMQ) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-36581Microsoft Message Queuing (MSMQ) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-36582Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-36583Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-36585Windows upnphost.dll Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-36589Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-36590Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-36591Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-36592Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-36593Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-36594Windows Graphics Component Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-36596Remote Procedure Call Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2023-36598Microsoft WDAC ODBC Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-36602Windows TCP/IP Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-36603Windows TCP/IP Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-36605Windows Named Pipe Filesystem Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-36606Microsoft Message Queuing (MSMQ) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-36701Microsoft Resilient File System (ReFS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-36702Microsoft DirectMusic Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-36703DHCP Server Service Denial of Service VulnerabilityMicrosoft Windows Server
- CVE-2023-36704Windows Setup Files Cleanup Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-36709Microsoft AllJoyn API Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-36710Windows Media Foundation Core Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-36711Windows Runtime C++ Template Library Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-36712Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-36718Microsoft Virtual Trusted Platform Module Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-36720Windows Mixed Reality Developer Tools Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-36721Windows Error Reporting Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-36723Windows Container Manager Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-36725Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-36726Windows Internet Key Exchange (IKE) Extension Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-36729Named Pipe File System Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-36730Microsoft ODBC Driver for SQL Server Remote Code Execution VulnerabilityMicrosoft SQL Server · Microsoft ODBC Driver 17 for SQL… +5
- CVE-2023-36731Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-36732Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-41774Layer 2 Tunneling Protocol Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-41773Layer 2 Tunneling Protocol Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-41772Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-41771Layer 2 Tunneling Protocol Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-41770Layer 2 Tunneling Protocol Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-41769Layer 2 Tunneling Protocol Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-41768Layer 2 Tunneling Protocol Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-41767Layer 2 Tunneling Protocol Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-41766Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-41765Layer 2 Tunneling Protocol Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-36737Azure Network Watcher VM Agent Elevation of Privilege VulnerabilityMicrosoft Azure Network Watcher VM Extension
- CVE-2023-38171Microsoft QUIC Denial of Service VulnerabilityMicrosoft Visual Studio · Microsoft Windows Server +5
- CVE-2023-36902Windows Runtime Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-36478HTTP/2 HPACK integer overflow and buffer allocationeclipse jetty.project · org.eclipse.jetty.http2:http2-hp… +1
- CVE-2023-41679An improper access control vulnerability [CWE-284] in FortiManager management interface 7.2.0 through 7.2.2, 7.0.0 through 7.0.7, 6.4.0 throFortinet FortiManager
- CVE-2023-25607An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78 ] in FortiManager 7.2.0 Fortinet FortiAnalyzer · Fortinet FortiManager +1
- CVE-2023-36549A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.Fortinet FortiWLM
- CVE-2023-34989A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.Fortinet FortiWLM
- CVE-2023-34987A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.Fortinet FortiWLM
- CVE-2023-34986A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.Fortinet FortiWLM
- CVE-2023-34985A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.Fortinet FortiWLM
- CVE-2023-34988A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.Fortinet FortiWLM
- CVE-2023-36556An incorrect authorization vulnerability [CWE-863] in FortiMail webmail version 7.2.0 through 7.2.2, version 7.0.0 through 7.0.5 and below 6Fortinet FortiMail
- CVE-2023-41841An improper authorization vulnerability in Fortinet FortiOS 7.0.0 - 7.0.11 and 7.2.0 - 7.2.4 allows an attacker belonging to the prof-admin Fortinet FortiOS
- CVE-2023-42788An improper neutralization of special elements used in an os command ('OS Command Injection') vulnerability [CWE-78] in FortiManager & FortiFortinet FortiAnalyzer · Fortinet FortiManager
- CVE-2023-5499Shenzhen Reachfar v28 information exposureSHENZHEN REACHFAR TECHNOLOGY COMPANY LIMITED Shenzhen Reach…
- CVE-2023-45226BIG-IP Next SPK SSH vulnerabilityF5 BIG-IP Next SPK
- CVE-2023-43746BIG-IP Appliance mode external monitor vulnerabilityF5 BIG-IP
- CVE-2023-43611BIG-IP Edge Client for macOS vulnerabilityF5 BIG-IP Edge Client
- CVE-2023-42768BIG-IP iControl REST vulnerabilityF5 BIG-IP
- CVE-2023-41373BIG-IP Configuration Utility vulnerabilityF5 BIG-IP
- CVE-2023-41085BIG-IP IPSEC vulnerabilityF5 BIG-IP
- CVE-2023-40542BIG-IP TCP Profile vulnerabilityF5 BIG-IP
- CVE-2023-40537Multi-blade VIPRION Configuration utility session cookie vulnerabilityF5 BIG-IP
- CVE-2023-40534BIG-IP HTTP/2 vulnerabilityF5 BIG-IP
- CVE-2023-5450BIG-IP Edge Client for macOS vulnerabilityF5 BIG-IP Edge Client
- CVE-2023-43787Libx11: integer overflow in xcreateimage() leading to a heap overflowlibX11 · Red Hat Enterprise Linux
- CVE-2023-45601A vulnerability has been identified in Parasolid V35.0 (All versions < V35.0.262), Parasolid V35.1 (All versions < V35.1.250), Parasolid V36Siemens Parasolid · Siemens Tecnomatix Plant Simulation
- CVE-2023-45205A vulnerability has been identified in SICAM PAS/PQS (All versions >= V8.00 < V8.20).Siemens SICAM PAS/PQS
- CVE-2023-45204A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (AllSiemens Tecnomatix Plant Simulation
- CVE-2023-44087A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (AllSiemens Tecnomatix Plant Simulation
- CVE-2023-44086A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (AllSiemens Tecnomatix Plant Simulation
- CVE-2023-44085A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (AllSiemens Tecnomatix Plant Simulation
- CVE-2023-44084A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (AllSiemens Tecnomatix Plant Simulation
- CVE-2023-44083A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (AllSiemens Tecnomatix Plant Simulation
- CVE-2023-44082A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (AllSiemens Tecnomatix Plant Simulation
- CVE-2023-44081A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (AllSiemens Tecnomatix Plant Simulation
- CVE-2023-42796A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05.11), CP-8050 MASTER MODULE (All versions < CPCI85 V0Siemens CP-8031 MASTER MODULE · Siemens CP-8050 MASTER MODU…
- CVE-2023-35796A vulnerability has been identified in SINEMA Server V14 (All versions).Siemens SINEMA Server
- CVE-2023-30900A vulnerability has been identified in Xpedition Layout Browser (All versions < VX.2.14).Siemens Xpedition Layout Browser
- CVE-2022-30527A vulnerability has been identified in SINEC NMS (All versions < V2.0).Siemens SINEC NMS
- CVE-2023-4837Cross-site request forgery (CSRF) in SmodBIPJan Syski SmodBIP
- CVE-2023-44487The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, asapisix · aspnet-core +20
- CVE-2023-44959An issue found in D-Link DSL-3782 v.1.03 and before allows remote authenticated users to execute arbitrary code as root via the Router IP Ad
- CVE-2023-45312In the mtproto_proxy (aka MTProto proxy) component through 0.7.2 for Erlang, a low-privileged remote attacker can access an improperly secur
Medium, low and unrated 114
- CVE-2023-26220TIBCO Spotfire Stored Cross-site Scripting (XSS) vulnerabilityTIBCO Software Spotfire Analyst · TIBCO Software Spotfire S…
- CVE-2023-45648Apache Tomcat: Trailer header parsing too lenientApache Software Foundation Apache Tomcat · org.apache.to… +2
- CVE-2023-42795Apache Tomcat: Failure during request clean-up leads to sensitive data leaking to subsequent requestsApache Software Foundation Apache Tomcat · org.apache.to… +3
- CVE-2023-5497Tongda OA 2017 delete.php sql injectionTongda OA
- CVE-2023-45129matrix-synapse vulnerable to denial of service due to malicious server ACL eventsmatrix-org synapse · matrix-synapse
- CVE-2023-42794Apache Tomcat: FileUpload: DoS due to accumulation of temporary files on WindowsApache Software Foundation Apache Tomcat · tomcat +1
- CVE-2023-36416Microsoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityMicrosoft Dynamics 365 (on-premises)
- CVE-2023-36566Microsoft Common Data Model SDK Denial of Service VulnerabilityMicrosoft Common Data Model SDK for Java · Microsoft Com… +5
- CVE-2023-36429Microsoft Dynamics 365 (On-Premises) Information Disclosure VulnerabilityMicrosoft Dynamics 365 (on-premises)
- CVE-2023-36433Microsoft Dynamics 365 (On-Premises) Information Disclosure VulnerabilityMicrosoft Dynamics 365 (on-premises)
- CVE-2023-36563Microsoft WordPad Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2023-36564Windows Search Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2023-36576Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2023-36584Windows Mark of the Web Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2023-36697Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-36698Windows Kernel Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2023-36706Windows Deployment Services Information Disclosure VulnerabilityMicrosoft Windows Server
- CVE-2023-36707Windows Deployment Services Denial of Service VulnerabilityMicrosoft Windows Server
- CVE-2023-36713Windows Common Log File System Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2023-36717Windows Virtual Trusted Platform Module Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-36722Active Directory Domain Services Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2023-36724Windows Power Management Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2023-36728Microsoft SQL Server Denial of Service VulnerabilityMicrosoft SQL Server · Microsoft OLE DB Driver 19 for SQ… +7
- CVE-2023-41763Skype for Business Elevation of Privilege VulnerabilityMicrosoft Skype for Business Server 2015 CU13 · Microsoft S…
- CVE-2023-5496Translator PoqDev Add-On Select Text cross site scriptingTranslator PoqDev Add-On
- CVE-2023-44399ZITADEL's password reset does not respect the "Ignoring unknown usernames" settingzitadel · github.com/zitadel/zitadel
- CVE-2023-37935A use of GET request method with sensitive query strings vulnerability in Fortinet FortiOS 7.0.0 - 7.0.12, 7.2.0 - 7.2.5 and 7.4.0 allows anFortinet FortiOS
- CVE-2023-42782A insufficient verification of data authenticity vulnerability [CWE-345] in FortiAnalyzer version 7.4.0 and below 7.2.3 allows a remote unauFortinet FortiAnalyzer
- CVE-2023-36637An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiMail version 7.2.0 through 7.2.2 and before 7.Fortinet FortiMail
- CVE-2023-37939An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiClient for Windows 7.2.0, 7.0 all versions, 6.Fortinet FortiClientMac · Fortinet FortiClientWindows +1
- CVE-2023-41675A use after free vulnerability [CWE-416] in FortiOS version 7.2.0 through 7.2.4 and version 7.0.0 through 7.0.10 and FortiProxy version 7.2.Fortinet FortiOS · Fortinet FortiProxy
- CVE-2022-22298A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiIsolator version 1.0.0, FortiIFortinet FortiIsolator
- CVE-2023-25604An insertion of sensitive information into log file vulnerability in Fortinet FortiGuest 1.0.0 allows a local attacker to access plaintext pFortinet FortiGuest
- CVE-2023-41838An improper neutralization of special elements used in an os command ('os command injection') in FortiManager 7.4.0 and 7.2.0 through 7.2.3 Fortinet FortiAnalyzer · Fortinet FortiManager
- CVE-2023-40718A interpretation conflict in Fortinet IPS Engine versions 7.321, 7.166 and 6.158 allows attacker to evade IPS features via crafted TCP packeFortinet IPS Engine
- CVE-2023-42787A client-side enforcement of server-side security [CWE-602] vulnerability in Fortinet FortiManager version 7.4.0 and before 7.2.3 and FortiAFortinet FortiAnalyzer · Fortinet FortiManager +1
- CVE-2023-44249An authorization bypass through user-controlled key [CWE-639] vulnerability in Fortinet FortiManager version 7.4.0 and before 7.2.3 and FortFortinet FortiManager · Fortinet FortiAnalyzer
- CVE-2023-36555An improper neutralization of script-related html tags in a web page (basic xss) in Fortinet FortiOS 7.2.0 - 7.2.4 allows an attacker to exeFortinet FortiOS
- CVE-2023-33301An improper access control vulnerability in Fortinet FortiOS 7.2.0 - 7.2.4 and 7.4.0 allows an attacker to access a restricted resource fromFortinet FortiOS
- CVE-2023-5495QDocs Smart School HTTP POST Request sql injectionQDocs Smart School
- CVE-2023-5494Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform download.php os command injectionByzoro Smart S45F Multi-Service Secure Gateway Intelligent…
- CVE-2023-5493Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform web.php unrestricted uploadByzoro Smart S45F Multi-Service Secure Gateway Intelligent…
- CVE-2023-44996WordPress Post View Count Plugin <= 1.8.2 is vulnerable to Cross Site Request Forgery (CSRF)Naresh Parmar Post View Count
- CVE-2023-44995WordPress WooCommerce Login Redirect Plugin <= 2.2.4 is vulnerable to Cross Site Request Forgery (CSRF)WP Doctor WooCommerce Login Redirect
- CVE-2023-5492Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform licence.php unrestricted uploadByzoro Smart S45F Multi-Service Secure Gateway Intelligent…
- CVE-2023-5491Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform updatelib.php unrestricted uploadByzoro Smart S45F Multi-Service Secure Gateway Intelligent…
- CVE-2023-5490Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform userattestation.php unrestricted uploadByzoro Smart S45F Multi-Service Secure Gateway Intelligent…
- CVE-2023-44994WordPress ShortCodes UI Plugin <= 1.9.8 is vulnerable to Cross Site Request Forgery (CSRF)Bainternet ShortCodes UI
- CVE-2023-5489Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform uploadfile.php unrestricted uploadByzoro Smart S45F Multi-Service Secure Gateway Intelligent…
- CVE-2023-44476WordPress CopyRightPro Plugin <= 2.1 is vulnerable to Cross Site Request Forgery (CSRF)Andres Felipe Perea V. CopyRightPro
- CVE-2023-44475WordPress Add Shortcodes Actions And Filters Plugin <= 2.0.9 is vulnerable to Cross Site Request Forgery (CSRF)Michael Simpson Add Shortcodes Actions And Filters
- CVE-2023-44471WordPress Backend Localization Plugin <= 2.1.10 is vulnerable to Cross Site Request Forgery (CSRF)Bernhard Kau Backend Localization
- CVE-2023-30804Sangfor Next-Gen Application Firewall Authenticated File DisclosureSangfor Next-Gen Application Firewall
- CVE-2023-30802Sangfor Next-Gen Application Firewall Source Code DisclosureSangfor Net-Gen Application Firewall
- CVE-2023-5488Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform updatelib.php unrestricted uploadByzoro Smart S45F Multi-Service Secure Gateway Intelligent…
- CVE-2023-44470WordPress Kv TinyMCE Editor Add Fonts Plugin <= 1.1 is vulnerable to Cross Site Request Forgery (CSRF)Kvvaradha Kv TinyMCE Editor Add Fonts
- CVE-2023-44241WordPress Keap Landing Pages Plugin <= 1.4.2 is vulnerable to Cross Site Request Forgery (CSRF)Keap Landing Pages
- CVE-2023-45219BIG-IP tmsh vulnerabilityF5 BIG-IP
- CVE-2023-43485BIGIP and BIG-IQ TACACS+ audit log VulnerabilityF5 BIG-IP · F5 BIG-IQ
- CVE-2023-41964BIG-IP and BIG-IQ Database Variable vulnerabilityF5 BIG-IP · F5 BIG-IQ
- CVE-2023-41253BIG-IP DNS TSIG Key vulnerabilityF5 BIG-IP
- CVE-2023-39447BIG-IP APM Guided Configuration vulnerabilityF5 BIG-IP
- CVE-2023-43788Libxpm: out of bounds read in xpmcreatexpmimagefrombuffer()libXpm · Red Hat Enterprise Linux
- CVE-2023-43786Libx11: stack exhaustion from infinite recursion in putsubimage()libXpm · Red Hat Enterprise Linux
- CVE-2023-43785Libx11: out-of-bounds memory access in _xkbreadkeysyms()libX11 · Red Hat Enterprise Linux
- CVE-2023-44315A vulnerability has been identified in SINEC NMS (All versions < V2.0).Siemens SINEC NMS
- CVE-2023-43623A vulnerability has been identified in Mendix Forgot Password (Mendix 10 compatible) (All versions < V5.4.0), Mendix Forgot Password (MendixSiemens Mendix Forgot Password
- CVE-2023-38640A vulnerability has been identified in SICAM PAS/PQS (All versions >= V8.00 < V8.22).Siemens SICAM PAS/PQS
- CVE-2023-37195A vulnerability has been identified in SIMATIC CP 1604 (All versions), SIMATIC CP 1616 (All versions), SIMATIC CP 1623 (All versions), SIMATSiemens SIMATIC CP
- CVE-2023-37194A vulnerability has been identified in SIMATIC CP 1604 (All versions), SIMATIC CP 1616 (All versions), SIMATIC CP 1623 (All versions), SIMATSiemens SIMATIC CP
- CVE-2023-5498Cross-Site Request Forgery (CSRF) in chiefonboarding/chiefonboardingchiefonboarding/chiefonboarding
- CVE-2023-44261WordPress Block Plugin Update Plugin <= 3.3 is vulnerable to Cross Site Request Forgery (CSRF)Dinesh Karki Block Plugin Update
- CVE-2023-44259WordPress Mediavine Control Panel Plugin <= 2.10.2 is vulnerable to Cross Site Request Forgery (CSRF)Mediavine Control Panel
- CVE-2023-44257WordPress Mang Board WP Plugin <= 1.7.6 is vulnerable to Cross Site Request Forgery (CSRF)Hometory Mang Board WP
- CVE-2023-41876WordPress WP Gallery Metabox Plugin <= 1.0.0 is vulnerable to Cross Site Request Forgery (CSRF)Hardik Kalathiya WP Gallery Metabox
- CVE-2023-41858WordPress Order Delivery Date for WP e-Commerce Plugin <= 1.2 is vulnerable to Cross Site Request Forgery (CSRF)Ashok Rane Order Delivery Date for WP e-Commerce
- CVE-2023-41854WordPress wpCentral Plugin <= 1.5.7 is vulnerable to Cross Site Request Forgery (CSRF)Softaculous wpCentral
- CVE-2023-41853WordPress WP iCal Availability Plugin <= 1.0.3 is vulnerable to Cross Site Request Forgery (CSRF)WP iCal Availability
- CVE-2023-41852WordPress MailMunch – Grow your Email List Plugin <= 3.1.2 is vulnerable to Cross Site Request Forgery (CSRF)MailMunch – Grow your Email List
- CVE-2023-41851WordPress WP Custom Post Template Plugin <= 1.0 is vulnerable to Cross Site Request Forgery (CSRF)Dotsquares WP Custom Post Template
- CVE-2023-41850WordPress Outbound Link Manager Plugin <= 1.2 is vulnerable to Cross Site Request Forgery (CSRF)Morris Bryant, Ruben Sargsyan Outbound Link Manager
- CVE-2023-41730WordPress SendPress Newsletters Plugin <= 1.22.3.31 is vulnerable to Cross Site Request Forgery (CSRF)SendPress Newsletters
- CVE-2023-41697WordPress Easy WP Cleaner Plugin <= 1.9 is vulnerable to Cross Site Request Forgery (CSRF)Nikunj Soni Easy WP Cleaner
- CVE-2023-41694WordPress Realbig Plugin <= 1.0.3 is vulnerable to Cross Site Request Forgery (CSRF)Realbig Team Realbig For WordPress
- CVE-2023-41684WordPress SIS Handball Plugin <= 1.0.45 is vulnerable to Cross Site Request Forgery (CSRF)Felix Welberg SIS Handball
- CVE-2023-5467GEO my WordPress <= 4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodeninjew GEO my WP
- CVE-2023-5468Slick Contact Forms <= 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcoderemix4 Slick Contact Forms
- CVE-2023-42477Server-Side Request Forgery in SAP NetWeaver AS Java (GRMG Heartbeat application)SAP_SE SAP NetWeaver AS Java
- CVE-2023-42475Information Disclosure Vulnerability in Statutory ReportingSAP_SE SAP S/4HANA Core
- CVE-2023-42474Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Web IntelligenceSAP_SE SAP BusinessObjects Web Intelligence
- CVE-2023-42473Missing Authorization Check In S/4HANA (Manage Withholding Tax Items)SAP_SE S/4HANA
- CVE-2023-41365Information Disclosure vulnerability in SAP Business One (B1i)SAP_SE SAP Business One
- CVE-2023-40310Missing XML Validation vulnerability in SAP PowerDesigner Client BPMN2 importSAP_SE SAP PowerDesigner Client
- CVE-2023-5471codeprojects Farmacia index.php sql injectioncodeprojects Farmacia
- CVE-2020-18336Cross Site Scripting (XSS) vulnerability found in Typora v.0.9.65 allows a remote attacker to obtain sensitive information via the PDF file
- CVE-2020-27213An issue was discovered in Ethernut Nut/OS 5.1.
- CVE-2020-27630In Silicon Labs uC/TCP-IP 3.6.0, TCP ISNs are improperly random.
- CVE-2020-27631In Oryx CycloneTCP 1.9.6, TCP ISNs are improperly random.
- CVE-2020-27633In FNET 4.6.3, TCP ISNs are improperly random.
- CVE-2020-27634In Contiki 4.5, TCP ISNs are improperly random.
- CVE-2020-27635In PicoTCP 1.7.0, TCP ISNs are improperly random.
- CVE-2020-27636In Microchip MPLAB Net 3.6.1, TCP ISNs are improperly random.
- CVE-2023-31096An issue was discovered in Broadcom) LSI PCI-SV92EX Soft Modem Kernel Driver through 2.2.100.1 (aka AGRSM64.sys).
- CVE-2023-36126There is a Cross Site Scripting (XSS) vulnerability in the "theme" parameter of preview.php in PHPJabbers Appointment Scheduler v3.0
- CVE-2023-36127User enumeration is found in in PHPJabbers Appointment Scheduler 3.0.
- CVE-2023-42189Insecure Permissions vulnerability in Connectivity Standards Alliance Matter Official SDK v.1.1.0.0 , Nanoleaf Light strip v.3.5.10, Govee L
- CVE-2023-43896A buffer overflow in Macrium Reflect 8.1.7544 and below allows attackers to escalate privileges or execute arbitrary code.
- CVE-2023-44763Concrete CMS v9.2.1 is affected by an Arbitrary File Upload vulnerability via a Thumbnail file upload, which allows Cross-Site Scripting (XSconcrete5/concrete5
- CVE-2023-44826Cross Site Scripting vulnerability in ZenTaoPMS v.18.6 allows a local attacker to obtain sensitive information via a crafted script.
- CVE-2023-44827An issue in ZenTao Community Edition v.18.6 and before, ZenTao Biz v.8.6 and before, ZenTao Max v.4.7 and before allows an attacker to execu
- CVE-2023-44846An issue in SeaCMS v.12.8 allows an attacker to execute arbitrary code via the admin_ notify.php component.
- CVE-2023-44847An issue in SeaCMS v.12.8 allows an attacker to execute arbitrary code via the admin_ Weixin.php component.
- CVE-2023-44848An issue in SeaCMS v.12.8 allows an attacker to execute arbitrary code via the admin_template.php component.
- CVE-2023-45208A command injection in the parsing_xml_stasurvey function inside libcgifunc.so of the D-Link DAP-X1860 repeater 1.00 through 1.01b05-01 allo