CVEs published September 27, 2023
143 CVEs were published on September 27, 2023: 11 critical, 48 high. 2 are now in CISA KEV.
- Published
- 143
- Critical
- 11
- High
- 48
- Medium
- 51
- Low
- 9
- Unrated
- 24
- Now in CISA KEV
- 2
- Fix available
- 42
Most affected products
- Acronis Cyber Protect
- 13
- LG Electronics LG V60 Thin Q
- 9
- Progress Software WS_FTP Server
- 7
- Cisco IOS XE Software
- 6
- Cisco SD-WAN vManage
- 5
- Mozilla Firefox · Mozilla Thunderbird
- 5
- Mozilla Firefox
- 4
- Cisco IOS
- 2
- David F. Carr RSVPMaker
- 2
- F5 BIG-IP Edge Client · F5 Access
- 2
Critical 11
- CVE-2023-4523Real Time Automation 460 Series Cross-site ScriptingReal Time Automation 460 Series
- CVE-2023-20252A vulnerability in the Security Assertion Markup Language (SAML) APIs of Cisco Catalyst SD-WAN Manager Software could allow an unauthenticatCisco SD-WAN vManage
- CVE-2023-42657WS_FTP Server Directory TraversalProgress Software WS_FTP Server
- CVE-2023-40044WS_FTP Server Ad Hoc Transfer Module .NET Deserialization VulnerabilityProgress Software WS_FTP Server
- CVE-2023-5175During process shutdown, it was possible that an `ImageBitmap` was created that would later be used after being freed from a different codepMozilla Firefox
- CVE-2023-5172A hashtable in the Ion Engine could have been mutated while there was a live interior reference, leading to a potential use-after-free and Mozilla Firefox
- CVE-2023-5176Memory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2.Mozilla Firefox · Mozilla Thunderbird
- CVE-2023-5174If Windows failed to duplicate a handle during process creation, the sandbox code may have inadvertently freed a pointer twice, resulting inMozilla Firefox · Mozilla Thunderbird
- CVE-2023-5168A compromised content process could have provided malicious data to `FilterNodeD2D1` resulting in an out-of-bounds write, leading to a potenMozilla Firefox · Mozilla Thunderbird
- CVE-2023-35071SQLi in MRV Tech's Logging Administration PanelMRV Tech Logging Administration Panel
- CVE-2023-4737SQLi in Hedef Trackings Admin PanelHedef Tracking Admin Panel
High 48
- CVE-2023-43651Remote code execution on the host system via MongoDB shell in jumpserverjumpserver · github.com/jumpserver/koko
- CVE-2023-43650Non-MFA account takeover via brute-force attack on weak password reset code in jumpserverjumpserver
- CVE-2023-43652Non-MFA account takeover via using only SSH public key to login in jumpserverjumpserver
- CVE-2023-33972Privilege escalation from having CREATE access on a keyspace in Scylladbscylladb
- CVE-2023-5184Potential signed to unsigned conversion errors and buffer overflow vulnerabilities in the Zephyr IPM driverzephyrproject-rtos Zephyr
- CVE-2023-20186A vulnerability in the Authentication, Authorization, and Accounting (AAA) feature of Cisco IOS Software and Cisco IOS XE Software could allCisco IOS
- CVE-2023-20227A vulnerability in the Layer 2 Tunneling Protocol (L2TP) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker toCisco IOS XE Software
- CVE-2023-20226A vulnerability in Application Quality of Experience (AppQoE) and Unified Threat Defense (UTD) on Cisco IOS XE Software could allow an unautCisco IOS XE Software
- CVE-2023-20223A vulnerability in Cisco DNA Center could allow an unauthenticated, remote attacker to read and modify data in a repository that belongs to Cisco Digital Network Architecture Center
- CVE-2023-20033A vulnerability in Cisco IOS XE Software for Cisco Catalyst 3650 and Catalyst 3850 Series Switches could allow an unauthenticated, remote atCisco IOS XE Software
- CVE-2023-20187A vulnerability in the Multicast Leaf Recycle Elimination (mLRE) feature of Cisco IOS XE Software for Cisco ASR 1000 Series Aggregation ServCisco IOS XE Software
- CVE-2023-20231A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to perform an injection attack against Cisco IOS XE Software
- CVE-2023-20034Vulnerability in the Elasticsearch database used in the of Cisco SD-WAN vManage software could allow an unauthenticated, remote attacker to Cisco SD-WAN vManage
- CVE-2023-20253A vulnerability in the command line interface (cli) management interface of Cisco SD-WAN vManage could allow an authenticated, local attackeCisco SD-WAN vManage
- CVE-2023-20254A vulnerability in the session management system of the Cisco Catalyst SD-WAN Manager multi-tenant feature could allow an authenticated, remCisco SD-WAN vManage
- CVE-2023-32458 Dell AppSync, versions 4.4.0.0 to 4.6.0.0 including Service Pack releases, contains an improper access control vulnerability in Embedded SeDell EMC AppSync
- CVE-2023-40047WS_FTP Server Stored Cross-Site Scripting VulnerabilityProgress Software WS_FTP Server
- CVE-2023-40046WS_FTP Server SQL Injection via Administrative InterfaceProgress Software WS_FTP Server
- CVE-2023-40045WS_FTP Server Ad Hoc Transfer Module Reflected Cross-Site Scripting VulnerabilityProgress Software WS_FTP Server
- CVE-2023-3223Undertow: outofmemoryerror due to @multipartconfig handlingRed Hat Fuse · Red Hat JBoss Enterprise Application Pla… +13
- CVE-2023-0456Apicast proxies the api call with incorrect jwt token to the api backend without proper authorization checkapicast · Red Hat 3scale API Management Platform
- CVE-2023-41653WordPress Sermon'e – Sermons Online Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)Beplus Sermon'e – Sermons Online
- CVE-2023-42487Soundminer – CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Soundminer
- CVE-2023-4003 One Identity Password Manager version 5.9.7.1 - Unauthenticated physical access privilege escalationOne
- CVE-2023-44206Sensitive information disclosure and manipulation due to improper authorization.Acronis Cyber Protect
- CVE-2023-41238WordPress Social Media & Share Icons Plugin <= 2.8.3 is vulnerable to Cross Site Scripting (XSS)UltimatelySocial Social Media Share Buttons & Social Sharin…
- CVE-2023-41237WordPress Arya Multipurpose Pro Theme <= 1.0.8 is vulnerable to Cross Site Scripting (XSS)Everest Themes Arya Multipurpose Pro
- CVE-2023-41236WordPress Happy Elementor Addons Pro Plugin <= 2.8.0 is vulnerable to Cross Site Scripting (XSS)Happy addons Happy Elementor Addons Pro
- CVE-2023-41235WordPress Everest News Pro Theme <= 1.1.7 is vulnerable to Cross Site Scripting (XSS)Everest Themes Everest News Pro
- CVE-2023-40333WordPress Bridge Core Plugin <= 3.0.9 is vulnerable to Cross Site Scripting (XSS)Qode Interactive Bridge Core
- CVE-2023-30493WordPress Ultimate Addons for Contact Form 7 Plugin <= 3.2.0 is vulnerable to Cross Site Scripting (XSS)Themefic Ultimate Addons for Contact Form
- CVE-2023-30472WordPress URL Shortener by MyThemeShop Plugin <= 1.0.17 is vulnerable to Cross Site Scripting (XSS)URL Shortener by MyThemeShop
- CVE-2023-30471WordPress WP Search Analytics Plugin <= 1.4.7 is vulnerable to Cross Site Scripting (XSS)Cornel Raiu WP Search Analytics
- CVE-2023-4934IDOR in Usta AYBSUsta AYBS
- CVE-2023-40667WordPress Simple URLs Plugin <= 117 is vulnerable to Cross Site Scripting (XSS)Lasso Simple URLs
- CVE-2023-40664WordPress Donations Made Easy – Smart Donations Plugin <= 4.0.12 is vulnerable to Cross Site Scripting (XSS)RedNao Donations Made Easy – Smart Donations
- CVE-2023-40663WordPress WP VR Plugin <= 8.3.4 is vulnerable to Cross Site Scripting (XSS)Rextheme WP VR
- CVE-2023-40330WordPress GD Security Headers Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS)Milan Petrovic GD Security Headers
- CVE-2023-27616WordPress RSVPMarker Plugin <= 10.6.6 is vulnerable to Cross Site Scripting (XSS)David F. Carr RSVPMaker
- CVE-2023-28490WordPress Mortgage Calculator Estatik Plugin <= 2.0.7 is vulnerable to Cross Site Scripting (XSS)Estatik Mortgage Calculator
- CVE-2023-43314** UNSUPPORTED WHEN ASSIGNED **The buffer overflow vulnerability in the Zyxel PMG2005-T20B firmware version V1.00(ABNK.2)b11_C0 could allow Zyxel PMG2005-T20B
- CVE-2023-44013Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the list parameter in the fromSetIp
- CVE-2023-44014Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain multiple stack overflows in the formSetMacFilterCfg func
- CVE-2023-44015Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the schedEndTime parameter in the s
- CVE-2023-44016Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the deviceId parameter in the addWi
- CVE-2023-44017Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the timeZone parameter in the fromS
- CVE-2023-44018Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the domain parameter in the add_whi
- CVE-2023-44019Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the mac parameter in the GetParentC
Medium, low and unrated 84
- CVE-2023-43660SSH key password bypassed in warpgatewarp-tech warpgate
- CVE-2023-4066Operator: passwords defined in secrets shown in statefulset yamlRed Hat RHEL-8 based Middleware Containers · Red Hat AMQ Br…
- CVE-2023-40026Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-serverargoproj argo-cd · github.com/argoproj/argo-cd +1
- CVE-2023-43656Sandbox escape for instances that have enabled transformation functions in matrix-hookshotmatrix-org matrix-hookshot
- CVE-2023-42818SSH public key login without private key challenge if mfa is enabled in jumpserverjumpserver · github.com/jumpserver/koko +1
- CVE-2023-42822Unchecked access to font glyph info in xrdpneutrinolabs xrdp
- CVE-2023-20251A vulnerability in the memory buffer of Cisco Wireless LAN Controller (WLC) AireOS Software could allow an unauthenticated, adjacent attackeCisco Wireless LAN Controller · Cisco Mobility Express
- CVE-2023-20176A vulnerability in the networking component of Cisco access point (AP) software could allow an unauthenticated, remote attacker to cause a tCisco Aironet Access Point Software
- CVE-2023-20179A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenCisco SD-WAN vManage
- CVE-2023-20202A vulnerability in the Wireless Network Control daemon (wncd) of Cisco IOS XE Software for Wireless LAN Controllers could allow an unauthentCisco IOS XE Software
- CVE-2023-20109A vulnerability in the Cisco Group Encrypted Transport VPN (GET VPN) feature of Cisco IOS Software and Cisco IOS XE Software could allow an Cisco IOS
- CVE-2023-20268Cisco Access Point Software Uncontrolled Resource Consumption VulnerabilityCisco Aironet Access Point Software · Cisco Business Wirele…
- CVE-2023-20262A vulnerability in the SSH service of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to cause a process crashCisco SD-WAN Solution · Cisco SD-WAN vManage +1
- CVE-2023-4129 Dell Data Protection Central, version 19.9, contains an Inadequate Encryption Strength Vulnerability.Dell Data Protection Central
- CVE-2023-43125BIG-IP APM Clients TunnelCrack vulnerabilityF5 BIG-IP Edge Client · F5 Access
- CVE-2023-43124BIG-IP APM Clients TunnelCrack vulnerabilityF5 BIG-IP Edge Client · F5 Access
- CVE-2023-40049WS_FTP Server Information Disclosure via Directory ListingProgress Software WS_FTP Server
- CVE-2023-40048WS_FTP Server Cross-Site Request Forgery (CSRF) VulnerabilityProgress Software WS_FTP Server
- CVE-2023-5173In a non-standard configuration of Firefox, an integer overflow could have occurred based on network traffic (possibly under influence of a Mozilla Firefox
- CVE-2023-5170In canvas rendering, a compromised content process could have caused a surface to change unexpectedly, leading to a memory leak of a privileMozilla Firefox
- CVE-2023-5171During Ion compilation, a Garbage Collection could have resulted in a use-after-free condition, allowing an attacker to write two NUL bytes,Mozilla Firefox · Mozilla Thunderbird
- CVE-2023-5169A compromised content process could have provided malicious data in a `PathRecording` resulting in an out-of-bounds write, leading to a poteMozilla Firefox · Mozilla Thunderbird
- CVE-2023-44129Messaging - Gaining access to arbitrary content providers via QClipIntentReceiverActivityLG Electronics LG V60 Thin Q
- CVE-2023-44128LGInstallService - Deletion of arbitrary files with system privilegeLG Electronics LG V60 Thin Q
- CVE-2023-44127Call management - Implicit activity intents disclose contact details and phone numbersLG Electronics LG V60 Thin Q
- CVE-2023-44126Call management - Implicit intents disclose telephony data such as phone numbers, call states, contactsLG Electronics LG V60 Thin Q
- CVE-2023-5223HimitZH HOJ Topic sandboxHimitZH HOJ
- CVE-2023-44125Personalized service - Theft and (over-)write of arbitrary files with system privilege via PendingIntent hijackingLG Electronics LG V60 Thin Q
- CVE-2023-44124Screen recording - Theft of arbitrary files with system privilegeLG Electronics LG V60 Thin Q
- CVE-2023-44123Bluetooth - Theft and (over-)write of arbitrary files with system privilege via PendingIntent hijackingLG Electronics LG V60 Thin Q
- CVE-2023-44122LockScreenSettings - Theft arbitrary files with system privilegeLG Electronics LG V60 Thin Q
- CVE-2023-0833Red hat a-mq streams: component version with information disclosure flawokhttp · Red Hat AMQ Streams
- CVE-2023-5222Viessmann Vitogate 300 Web Management Interface vitogate.cgi isValidUser hard-coded passwordViessmann Vitogate
- CVE-2023-5221ForU CMS index.php code injectionForU CMS
- CVE-2023-41242WordPress Snap Pixel Plugin <= 1.5.7 is vulnerable to Cross Site Scripting (XSS)Hassan Ali Snap Pixel
- CVE-2023-41241WordPress SureCart Plugin <= 2.5.0 is vulnerable to Cross Site Scripting (XSS)SureCart WordPress Ecommerce For Creating Fast Online Stores
- CVE-2023-42486Fortect - CWE-428: Unquoted Search Path or ElementFortect
- CVE-2023-44207Stored cross-site scripting (XSS) vulnerability in protection plan name.Acronis Cyber Protect
- CVE-2023-44159Sensitive information disclosure due to cleartext storage of sensitive information.Acronis Cyber Protect
- CVE-2023-44156Sensitive information disclosure due to spell-jacking.Acronis Cyber Protect
- CVE-2023-44205Sensitive information disclosure due to improper authorization.Acronis Cyber Protect
- CVE-2023-44161Sensitive information manipulation due to cross-site request forgery.Acronis Cyber Protect
- CVE-2023-44160Sensitive information manipulation due to cross-site request forgery.Acronis Cyber Protect
- CVE-2023-44158Sensitive information disclosure due to insufficient token field masking.Acronis Cyber Protect
- CVE-2023-44157Local privilege escalation due to insecure folder permissions.Acronis Cyber Protect
- CVE-2023-44155Sensitive information leak through log files.Acronis Cyber Protect
- CVE-2023-44154Sensitive information disclosure and manipulation due to improper authorization.Acronis Cyber Protect
- CVE-2023-44153Sensitive information disclosure due to cleartext storage of sensitive information in memory.Acronis Cyber Protect
- CVE-2023-44152Sensitive information disclosure and manipulation due to improper authentication.Acronis Cyber Protect
- CVE-2023-44121LG ThinQ Service - Intent redirection with system privilege/LaunchAnyWhereLG Electronics LG V60 Thin Q
- CVE-2023-27622WordPress GuruWalk Affiliates Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)Abel Ruiz GuruWalk Affiliates
- CVE-2023-27628WordPress Sitekit Plugin <= 1.3 is vulnerable to Cross Site Scripting (XSS)Webvitaly Sitekit
- CVE-2023-25483WordPress Easy Coming Soon Plugin <= 2.3 is vulnerable to Cross Site Scripting (XSS)Ankit Agarwal, Priyanshu Mittal Easy Coming Soon
- CVE-2023-40677WordPress Vertical Marquee Plugin Plugin <= 7.1 is vulnerable to Cross Site Scripting (XSS)Gopi Ramasamy Vertical marquee plugin
- CVE-2023-40675WordPress Landing Page Builder Plugin <= 1.5.1.2 is vulnerable to Cross Site Scripting (XSS)PluginOps Landing Page Builder
- CVE-2023-43825Relative path traversal vulnerability in Shihonkanri Plus Ver9.0.3 and earlier allows a local attacker to execute an arbitrary code by havinEKAKIN Shihonkanri Plus
- CVE-2023-40669WordPress Collapse-O-Matic Plugin <= 1.8.5.5 is vulnerable to Cross Site Scripting (XSS)twinpictures, baden03 Collapse-O-Matic
- CVE-2023-40676WordPress Slimstat Analytics Plugin <= 5.0.8 is vulnerable to Cross Site Scripting (XSS)Jason Crouse, VeronaLabs Slimstat Analytics
- CVE-2023-40668WordPress Save as PDF plugin by Pdfcrowd Plugin <= 2.16.0 is vulnerable to Cross Site Scripting (XSS)Save as PDF plugin by Pdfcrowd
- CVE-2023-40665WordPress Save as Image plugin by Pdfcrowd Plugin <= 2.16.0 is vulnerable to Cross Site Scripting (XSS)Save as Image plugin by Pdfcrowd
- CVE-2023-40605WordPress Typing Effect Plugin <= 1.3.6 is vulnerable to Cross Site Scripting (XSS)93digital Typing Effect
- CVE-2023-27617WordPress RSVPMarker Plugin <= 10.6.6 is vulnerable to Cross Site Scripting (XSS)David F. Carr RSVPMaker
- CVE-2023-40604WordPress Cookies by JM Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)Jes Madsen Cookies by JM
- CVE-2023-28790WordPress Simple Staff List Plugin <= 2.2.3 is vulnerable to Cross Site Scripting (XSS)Brett Shumaker Simple Staff List
- CVE-2023-4423WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce <= 3.1.37.1 - Authenticated (Admin+) Stored Cross-Site Scriptingwpeventmanager WP Event Manager – Events Calendar, Registra…
- CVE-2023-41445Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload
- CVE-2023-41448Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload
- CVE-2023-41449An issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the reque parameter.
- CVE-2023-41451Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload
- CVE-2023-41452Cross Site Request Forgery vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted p
- CVE-2023-41453Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload
- CVE-2023-43191SpringbootCMS 1.0 foreground message can be embedded malicious code saved in the database.
- CVE-2023-43192SQL injection can exist in a newly created part of the SpringbootCMS 1.0 background, and the parameters submitted by users are not filtered.
- CVE-2023-43233A stored cross-site scripting (XSS) vulnerability in the cms/content/edit component of YZNCMS v1.3.0 allows attackers to execute arbitrary w
- CVE-2023-43320An issue in Proxmox Server Solutions GmbH Proxmox VE v.5.4 thru v.8.0, Proxmox Backup Server v.1.1 thru v.3.0, and Proxmox Mail Gateway v.7.
- CVE-2023-43828A Cross-site scripting (XSS) vulnerability in /panel/languages/ of Subrion v4.2.1 allow attackers to execute arbitrary web scripts or HTML vintelliants/subrion
- CVE-2023-43830A Cross-site scripting (XSS) vulnerability in /panel/configuration/financial/ of Subrion v4.2.1 allows attackers to execute arbitrary web scintelliants/subrion
- CVE-2023-44020Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the security parameter in the formW
- CVE-2023-44021Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the formSetClientState function.
- CVE-2023-44022Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the speed_dir parameter in the form
- CVE-2023-44023Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the ssid parameter in the form_fast
- CVE-2023-44047Sourcecodester Toll Tax Management System v1 is vulnerable to SQL Injection.
- CVE-2023-44048Sourcecodester Expense Tracker App v1 is vulnerable to Cross Site Scripting (XSS) via add category.
- CVE-2023-44080An issue in PGYER codefever v.2023.8.14-2ce4006 allows a remote attacker to execute arbitrary code via a crafted request to the branchList c