# CVEs published 2023-09-27

143 CVEs were published on September 27, 2023: 11 critical, 48 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2023-43660](https://cve.now/CVE-2023-43660.md): SSH key password bypassed in warpgate (CVSS 4.8, warp-tech warpgate)
- [CVE-2023-4066](https://cve.now/CVE-2023-4066.md): Operator: passwords defined in secrets shown in statefulset yaml (CVSS 5.5, Red Hat RHEL-8 based Middleware Containers · Red Hat AMQ Br…)
- [CVE-2023-40026](https://cve.now/CVE-2023-40026.md): Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server (CVSS 5.0, argoproj argo-cd · github.com/argoproj/argo-cd +1)
- [CVE-2023-43656](https://cve.now/CVE-2023-43656.md): Sandbox escape for instances that have enabled transformation functions in matrix-hookshot (CVSS 5.6, matrix-org matrix-hookshot)
- [CVE-2023-42818](https://cve.now/CVE-2023-42818.md): SSH public key login without private key challenge if mfa is enabled in jumpserver (CVSS 5.4, jumpserver · github.com/jumpserver/koko +1)
- [CVE-2023-43651](https://cve.now/CVE-2023-43651.md): Remote code execution on the host system via MongoDB shell in jumpserver (CVSS 8.6, jumpserver · github.com/jumpserver/koko)
- [CVE-2023-43650](https://cve.now/CVE-2023-43650.md): Non-MFA account takeover via brute-force attack on weak password reset code in jumpserver (CVSS 8.2, jumpserver)
- [CVE-2023-43652](https://cve.now/CVE-2023-43652.md): Non-MFA account takeover via using only SSH public key to login in jumpserver (CVSS 8.2, jumpserver)
- [CVE-2023-33972](https://cve.now/CVE-2023-33972.md): Privilege escalation from having CREATE access on a keyspace in Scylladb (CVSS 7.2, scylladb)
- [CVE-2023-4523](https://cve.now/CVE-2023-4523.md): Real Time Automation 460 Series Cross-site Scripting (CVSS 9.4, Real Time Automation 460 Series)
- [CVE-2023-42822](https://cve.now/CVE-2023-42822.md): Unchecked access to font glyph info in xrdp (CVSS 4.6, neutrinolabs xrdp)
- [CVE-2023-5184](https://cve.now/CVE-2023-5184.md): Potential signed to unsigned conversion errors and buffer overflow vulnerabilities in the Zephyr IPM driver (CVSS 7.0, zephyrproject-rtos Zephyr)
- [CVE-2023-20251](https://cve.now/CVE-2023-20251.md): A vulnerability in the memory buffer of Cisco Wireless LAN Controller (WLC) AireOS Software could allow an unauthenticated, adjacent attacke (CVSS 6.1, Cisco Wireless LAN Controller · Cisco Mobility Express)
- [CVE-2023-20176](https://cve.now/CVE-2023-20176.md): A vulnerability in the networking component of Cisco access point (AP) software could allow an unauthenticated, remote attacker to cause a t (CVSS 5.8, Cisco Aironet Access Point Software)
- [CVE-2023-20179](https://cve.now/CVE-2023-20179.md): A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authen (CVSS 4.3, Cisco SD-WAN vManage)
- [CVE-2023-20202](https://cve.now/CVE-2023-20202.md): A vulnerability in the Wireless Network Control daemon (wncd) of Cisco IOS XE Software for Wireless LAN Controllers could allow an unauthent (CVSS 6.1, Cisco IOS XE Software)
- [CVE-2023-20109](https://cve.now/CVE-2023-20109.md): A vulnerability in the Cisco Group Encrypted Transport VPN (GET VPN) feature of Cisco IOS Software and Cisco IOS XE Software could allow an (CVSS 6.6, KEV, Cisco IOS)
- [CVE-2023-20268](https://cve.now/CVE-2023-20268.md): Cisco Access Point Software Uncontrolled Resource Consumption Vulnerability (CVSS 4.7, Cisco Aironet Access Point Software · Cisco Business Wirele…)
- [CVE-2023-20186](https://cve.now/CVE-2023-20186.md): A vulnerability in the Authentication, Authorization, and Accounting (AAA) feature of Cisco IOS Software and Cisco IOS XE Software could all (CVSS 8.0, Cisco IOS)
- [CVE-2023-20227](https://cve.now/CVE-2023-20227.md): A vulnerability in the Layer 2 Tunneling Protocol (L2TP) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to (CVSS 8.6, Cisco IOS XE Software)
- [CVE-2023-20226](https://cve.now/CVE-2023-20226.md): A vulnerability in Application Quality of Experience (AppQoE) and Unified Threat Defense (UTD) on Cisco IOS XE Software could allow an unaut (CVSS 8.6, Cisco IOS XE Software)
- [CVE-2023-20223](https://cve.now/CVE-2023-20223.md): A vulnerability in Cisco DNA Center could allow an unauthenticated, remote attacker to read and modify data in a repository that belongs to (CVSS 8.6, Cisco Digital Network Architecture Center)
- [CVE-2023-20033](https://cve.now/CVE-2023-20033.md): A vulnerability in Cisco IOS XE Software for Cisco Catalyst 3650 and Catalyst 3850 Series Switches could allow an unauthenticated, remote at (CVSS 8.6, Cisco IOS XE Software)
- [CVE-2023-20187](https://cve.now/CVE-2023-20187.md): A vulnerability in the Multicast Leaf Recycle Elimination (mLRE) feature of Cisco IOS XE Software for Cisco ASR 1000 Series Aggregation Serv (CVSS 8.6, Cisco IOS XE Software)
- [CVE-2023-20231](https://cve.now/CVE-2023-20231.md): A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to perform an injection attack against (CVSS 8.8, Cisco IOS XE Software)
- [CVE-2023-20252](https://cve.now/CVE-2023-20252.md): A vulnerability in the Security Assertion Markup Language (SAML) APIs of Cisco Catalyst SD-WAN Manager Software could allow an unauthenticat (CVSS 9.8, Cisco SD-WAN vManage)
- [CVE-2023-20262](https://cve.now/CVE-2023-20262.md): A vulnerability in the SSH service of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to cause a process crash (CVSS 5.3, Cisco SD-WAN Solution · Cisco SD-WAN vManage +1)
- [CVE-2023-20034](https://cve.now/CVE-2023-20034.md): Vulnerability in the Elasticsearch database used in the of Cisco SD-WAN vManage software could allow an unauthenticated, remote attacker to (CVSS 7.5, Cisco SD-WAN vManage)
- [CVE-2023-20253](https://cve.now/CVE-2023-20253.md): A vulnerability in the command line interface (cli) management interface of Cisco SD-WAN vManage could allow an authenticated, local attacke (CVSS 7.1, Cisco SD-WAN vManage)
- [CVE-2023-20254](https://cve.now/CVE-2023-20254.md): A vulnerability in the session management system of the Cisco Catalyst SD-WAN Manager multi-tenant feature could allow an authenticated, rem (CVSS 7.2, Cisco SD-WAN vManage)
- [CVE-2023-32458](https://cve.now/CVE-2023-32458.md): Dell AppSync, versions 4.4.0.0 to 4.6.0.0 including Service Pack releases, contains an improper access control vulnerability in Embedded Se (CVSS 7.3, Dell EMC AppSync)
- [CVE-2023-4129](https://cve.now/CVE-2023-4129.md): Dell Data Protection Central, version 19.9, contains an Inadequate Encryption Strength Vulnerability. (CVSS 5.9, Dell Data Protection Central)
- [CVE-2023-43125](https://cve.now/CVE-2023-43125.md): BIG-IP APM Clients TunnelCrack vulnerability (CVSS 6.8, F5 BIG-IP Edge Client · F5 Access)
- [CVE-2023-43124](https://cve.now/CVE-2023-43124.md): BIG-IP APM Clients TunnelCrack vulnerability (CVSS 5.3, F5 BIG-IP Edge Client · F5 Access)
- [CVE-2023-40049](https://cve.now/CVE-2023-40049.md): WS\_FTP Server Information Disclosure via Directory Listing (CVSS 5.3, Progress Software WS\_FTP Server)
- [CVE-2023-40048](https://cve.now/CVE-2023-40048.md): WS\_FTP Server Cross-Site Request Forgery (CSRF) Vulnerability (CVSS 6.8, Progress Software WS\_FTP Server)
- [CVE-2023-40047](https://cve.now/CVE-2023-40047.md): WS\_FTP Server Stored Cross-Site Scripting Vulnerability (CVSS 8.3, Progress Software WS\_FTP Server)
- [CVE-2023-40046](https://cve.now/CVE-2023-40046.md): WS\_FTP Server SQL Injection via Administrative Interface (CVSS 8.2, Progress Software WS\_FTP Server)
- [CVE-2023-40045](https://cve.now/CVE-2023-40045.md): WS\_FTP Server Ad Hoc Transfer Module Reflected Cross-Site Scripting Vulnerability (CVSS 8.3, Progress Software WS\_FTP Server)
- [CVE-2023-42657](https://cve.now/CVE-2023-42657.md): WS\_FTP Server Directory Traversal (CVSS 9.9, Progress Software WS\_FTP Server)
- [CVE-2023-40044](https://cve.now/CVE-2023-40044.md): WS\_FTP Server Ad Hoc Transfer Module .NET Deserialization Vulnerability (CVSS 10.0, KEV, Progress Software WS\_FTP Server)
- [CVE-2023-5175](https://cve.now/CVE-2023-5175.md): During process shutdown, it was possible that an \`ImageBitmap\` was created that would later be used after being freed from a different codep (CVSS 9.8, Mozilla Firefox)
- [CVE-2023-5173](https://cve.now/CVE-2023-5173.md): In a non-standard configuration of Firefox, an integer overflow could have occurred based on network traffic (possibly under influence of a (no CVSS, Mozilla Firefox)
- [CVE-2023-5172](https://cve.now/CVE-2023-5172.md): A hashtable in the Ion Engine could have been mutated while there was a live interior reference, leading to a potential use-after-free and (CVSS 9.8, Mozilla Firefox)
- [CVE-2023-5170](https://cve.now/CVE-2023-5170.md): In canvas rendering, a compromised content process could have caused a surface to change unexpectedly, leading to a memory leak of a privile (no CVSS, Mozilla Firefox)
- [CVE-2023-5176](https://cve.now/CVE-2023-5176.md): Memory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2. (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2023-5174](https://cve.now/CVE-2023-5174.md): If Windows failed to duplicate a handle during process creation, the sandbox code may have inadvertently freed a pointer twice, resulting in (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2023-5171](https://cve.now/CVE-2023-5171.md): During Ion compilation, a Garbage Collection could have resulted in a use-after-free condition, allowing an attacker to write two NUL bytes, (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2023-5169](https://cve.now/CVE-2023-5169.md): A compromised content process could have provided malicious data in a \`PathRecording\` resulting in an out-of-bounds write, leading to a pote (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2023-5168](https://cve.now/CVE-2023-5168.md): A compromised content process could have provided malicious data to \`FilterNodeD2D1\` resulting in an out-of-bounds write, leading to a poten (CVSS 9.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2023-44129](https://cve.now/CVE-2023-44129.md): Messaging - Gaining access to arbitrary content providers via QClipIntentReceiverActivity (CVSS 3.6, LG Electronics LG V60 Thin Q)
- [CVE-2023-44128](https://cve.now/CVE-2023-44128.md): LGInstallService - Deletion of arbitrary files with system privilege (CVSS 5.0, LG Electronics LG V60 Thin Q)
- [CVE-2023-44127](https://cve.now/CVE-2023-44127.md): Call management - Implicit activity intents disclose contact details and phone numbers (CVSS 3.6, LG Electronics LG V60 Thin Q)
- [CVE-2023-44126](https://cve.now/CVE-2023-44126.md): Call management - Implicit intents disclose telephony data such as phone numbers, call states, contacts (CVSS 3.6, LG Electronics LG V60 Thin Q)
- [CVE-2023-5223](https://cve.now/CVE-2023-5223.md): HimitZH HOJ Topic sandbox (CVSS 6.3, HimitZH HOJ)
- [CVE-2023-44125](https://cve.now/CVE-2023-44125.md): Personalized service - Theft and (over-)write of arbitrary files with system privilege via PendingIntent hijacking (CVSS 6.1, LG Electronics LG V60 Thin Q)
- [CVE-2023-44124](https://cve.now/CVE-2023-44124.md): Screen recording - Theft of arbitrary files with system privilege (CVSS 6.1, LG Electronics LG V60 Thin Q)
- [CVE-2023-3223](https://cve.now/CVE-2023-3223.md): Undertow: outofmemoryerror due to @multipartconfig handling (CVSS 7.5, Red Hat Fuse · Red Hat JBoss Enterprise Application Pla… +13)
- [CVE-2023-44123](https://cve.now/CVE-2023-44123.md): Bluetooth - Theft and (over-)write of arbitrary files with system privilege via PendingIntent hijacking (CVSS 6.1, LG Electronics LG V60 Thin Q)
- [CVE-2023-44122](https://cve.now/CVE-2023-44122.md): LockScreenSettings - Theft arbitrary files with system privilege (CVSS 6.1, LG Electronics LG V60 Thin Q)
- [CVE-2023-0833](https://cve.now/CVE-2023-0833.md): Red hat a-mq streams: component version with information disclosure flaw (CVSS 4.7, okhttp · Red Hat AMQ Streams)
- [CVE-2023-0456](https://cve.now/CVE-2023-0456.md): Apicast proxies the api call with incorrect jwt token to the api backend without proper authorization check (CVSS 7.4, apicast · Red Hat 3scale API Management Platform)
- [CVE-2023-5222](https://cve.now/CVE-2023-5222.md): Viessmann Vitogate 300 Web Management Interface vitogate.cgi isValidUser hard-coded password (CVSS 6.3, Viessmann Vitogate)
- [CVE-2023-5221](https://cve.now/CVE-2023-5221.md): ForU CMS index.php code injection (CVSS 4.7, ForU CMS)
- [CVE-2023-41653](https://cve.now/CVE-2023-41653.md): WordPress Sermon'e – Sermons Online Plugin \<= 1.0.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Beplus Sermon'e – Sermons Online)
- [CVE-2023-41242](https://cve.now/CVE-2023-41242.md): WordPress Snap Pixel Plugin \<= 1.5.7 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Hassan Ali Snap Pixel)
- [CVE-2023-41241](https://cve.now/CVE-2023-41241.md): WordPress SureCart Plugin \<= 2.5.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, SureCart WordPress Ecommerce For Creating Fast Online Stores)
- [CVE-2023-42487](https://cve.now/CVE-2023-42487.md): Soundminer – CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CVSS 7.5, Soundminer)
- [CVE-2023-42486](https://cve.now/CVE-2023-42486.md): Fortect - CWE-428: Unquoted Search Path or Element (CVSS 6.3, Fortect)
- [CVE-2023-4003](https://cve.now/CVE-2023-4003.md): One Identity Password Manager version 5.9.7.1 - Unauthenticated physical access privilege escalation (CVSS 7.6, One)
- [CVE-2023-44207](https://cve.now/CVE-2023-44207.md): Stored cross-site scripting (XSS) vulnerability in protection plan name. (CVSS 6.7, Acronis Cyber Protect)
- [CVE-2023-44206](https://cve.now/CVE-2023-44206.md): Sensitive information disclosure and manipulation due to improper authorization. (CVSS 7.1, Acronis Cyber Protect)
- [CVE-2023-44159](https://cve.now/CVE-2023-44159.md): Sensitive information disclosure due to cleartext storage of sensitive information. (CVSS 5.5, Acronis Cyber Protect)
- [CVE-2023-44156](https://cve.now/CVE-2023-44156.md): Sensitive information disclosure due to spell-jacking. (CVSS 5.7, Acronis Cyber Protect)
- [CVE-2023-44205](https://cve.now/CVE-2023-44205.md): Sensitive information disclosure due to improper authorization. (CVSS 3.5, Acronis Cyber Protect)
- [CVE-2023-44161](https://cve.now/CVE-2023-44161.md): Sensitive information manipulation due to cross-site request forgery. (CVSS 3.1, Acronis Cyber Protect)
- [CVE-2023-44160](https://cve.now/CVE-2023-44160.md): Sensitive information manipulation due to cross-site request forgery. (CVSS 3.1, Acronis Cyber Protect)
- [CVE-2023-44158](https://cve.now/CVE-2023-44158.md): Sensitive information disclosure due to insufficient token field masking. (CVSS 3.5, Acronis Cyber Protect)
- [CVE-2023-44157](https://cve.now/CVE-2023-44157.md): Local privilege escalation due to insecure folder permissions. (CVSS 3.3, Acronis Cyber Protect)
- [CVE-2023-44155](https://cve.now/CVE-2023-44155.md): Sensitive information leak through log files. (CVSS 4.4, Acronis Cyber Protect)
- [CVE-2023-44154](https://cve.now/CVE-2023-44154.md): Sensitive information disclosure and manipulation due to improper authorization. (CVSS 4.6, Acronis Cyber Protect)
- [CVE-2023-44153](https://cve.now/CVE-2023-44153.md): Sensitive information disclosure due to cleartext storage of sensitive information in memory. (CVSS 2.2, Acronis Cyber Protect)
- [CVE-2023-44152](https://cve.now/CVE-2023-44152.md): Sensitive information disclosure and manipulation due to improper authentication. (CVSS 6.1, Acronis Cyber Protect)
- [CVE-2023-41238](https://cve.now/CVE-2023-41238.md): WordPress Social Media & Share Icons Plugin \<= 2.8.3 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, UltimatelySocial Social Media Share Buttons & Social Sharin…)
- [CVE-2023-41237](https://cve.now/CVE-2023-41237.md): WordPress Arya Multipurpose Pro Theme \<= 1.0.8 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Everest Themes Arya Multipurpose Pro)
- [CVE-2023-41236](https://cve.now/CVE-2023-41236.md): WordPress Happy Elementor Addons Pro Plugin \<= 2.8.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Happy addons Happy Elementor Addons Pro)
- [CVE-2023-41235](https://cve.now/CVE-2023-41235.md): WordPress Everest News Pro Theme \<= 1.1.7 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Everest Themes Everest News Pro)
- [CVE-2023-40333](https://cve.now/CVE-2023-40333.md): WordPress Bridge Core Plugin \<= 3.0.9 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Qode Interactive Bridge Core)
- [CVE-2023-30493](https://cve.now/CVE-2023-30493.md): WordPress Ultimate Addons for Contact Form 7 Plugin \<= 3.2.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Themefic Ultimate Addons for Contact Form)
- [CVE-2023-30472](https://cve.now/CVE-2023-30472.md): WordPress URL Shortener by MyThemeShop Plugin \<= 1.0.17 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, URL Shortener by MyThemeShop)
- [CVE-2023-44121](https://cve.now/CVE-2023-44121.md): LG ThinQ Service - Intent redirection with system privilege/LaunchAnyWhere (CVSS 5.0, LG Electronics LG V60 Thin Q)
- [CVE-2023-35071](https://cve.now/CVE-2023-35071.md): SQLi in MRV Tech's Logging Administration Panel (CVSS 9.8, MRV Tech Logging Administration Panel)
- [CVE-2023-30471](https://cve.now/CVE-2023-30471.md): WordPress WP Search Analytics Plugin \<= 1.4.7 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Cornel Raiu WP Search Analytics)
- [CVE-2023-4737](https://cve.now/CVE-2023-4737.md): SQLi in Hedef Trackings Admin Panel (CVSS 9.8, Hedef Tracking Admin Panel)
- [CVE-2023-27622](https://cve.now/CVE-2023-27622.md): WordPress GuruWalk Affiliates Plugin \<= 1.0.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Abel Ruiz GuruWalk Affiliates)
- [CVE-2023-27628](https://cve.now/CVE-2023-27628.md): WordPress Sitekit Plugin \<= 1.3 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Webvitaly Sitekit)
- [CVE-2023-25483](https://cve.now/CVE-2023-25483.md): WordPress Easy Coming Soon Plugin \<= 2.3 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Ankit Agarwal, Priyanshu Mittal Easy Coming Soon)
- [CVE-2023-4934](https://cve.now/CVE-2023-4934.md): IDOR in Usta AYBS (CVSS 8.8, Usta AYBS)
- [CVE-2023-40677](https://cve.now/CVE-2023-40677.md): WordPress Vertical Marquee Plugin Plugin \<= 7.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Gopi Ramasamy Vertical marquee plugin)
- [CVE-2023-40675](https://cve.now/CVE-2023-40675.md): WordPress Landing Page Builder Plugin \<= 1.5.1.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, PluginOps Landing Page Builder)
- [CVE-2023-43825](https://cve.now/CVE-2023-43825.md): Relative path traversal vulnerability in Shihonkanri Plus Ver9.0.3 and earlier allows a local attacker to execute an arbitrary code by havin (no CVSS, EKAKIN Shihonkanri Plus)
- [CVE-2023-40669](https://cve.now/CVE-2023-40669.md): WordPress Collapse-O-Matic Plugin \<= 1.8.5.5 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, twinpictures, baden03 Collapse-O-Matic)
- [CVE-2023-40676](https://cve.now/CVE-2023-40676.md): WordPress Slimstat Analytics Plugin \<= 5.0.8 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Jason Crouse, VeronaLabs Slimstat Analytics)
- [CVE-2023-40667](https://cve.now/CVE-2023-40667.md): WordPress Simple URLs Plugin \<= 117 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Lasso Simple URLs)
- [CVE-2023-40668](https://cve.now/CVE-2023-40668.md): WordPress Save as PDF plugin by Pdfcrowd Plugin \<= 2.16.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Save as PDF plugin by Pdfcrowd)
- [CVE-2023-40665](https://cve.now/CVE-2023-40665.md): WordPress Save as Image plugin by Pdfcrowd Plugin \<= 2.16.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Save as Image plugin by Pdfcrowd)
- [CVE-2023-40664](https://cve.now/CVE-2023-40664.md): WordPress Donations Made Easy – Smart Donations Plugin \<= 4.0.12 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, RedNao Donations Made Easy – Smart Donations)
- [CVE-2023-40663](https://cve.now/CVE-2023-40663.md): WordPress WP VR Plugin \<= 8.3.4 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Rextheme WP VR)
- [CVE-2023-40330](https://cve.now/CVE-2023-40330.md): WordPress GD Security Headers Plugin \<= 1.6.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Milan Petrovic GD Security Headers)
- [CVE-2023-40605](https://cve.now/CVE-2023-40605.md): WordPress Typing Effect Plugin \<= 1.3.6 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, 93digital Typing Effect)
- [CVE-2023-27616](https://cve.now/CVE-2023-27616.md): WordPress RSVPMarker Plugin \<= 10.6.6 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, David F. Carr RSVPMaker)
- [CVE-2023-27617](https://cve.now/CVE-2023-27617.md): WordPress RSVPMarker Plugin \<= 10.6.6 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, David F. Carr RSVPMaker)
- [CVE-2023-40604](https://cve.now/CVE-2023-40604.md): WordPress Cookies by JM Plugin \<= 1.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Jes Madsen Cookies by JM)
- [CVE-2023-28790](https://cve.now/CVE-2023-28790.md): WordPress Simple Staff List Plugin \<= 2.2.3 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Brett Shumaker Simple Staff List)
- [CVE-2023-28490](https://cve.now/CVE-2023-28490.md): WordPress Mortgage Calculator Estatik Plugin \<= 2.0.7 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Estatik Mortgage Calculator)
- [CVE-2023-4423](https://cve.now/CVE-2023-4423.md): WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce \<= 3.1.37.1 - Authenticated (Admin+) Stored Cross-Site Scripting (CVSS 4.4, wpeventmanager WP Event Manager – Events Calendar, Registra…)
- [CVE-2023-41445](https://cve.now/CVE-2023-41445.md): Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload (no CVSS)
- [CVE-2023-41448](https://cve.now/CVE-2023-41448.md): Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload (no CVSS)
- [CVE-2023-41449](https://cve.now/CVE-2023-41449.md): An issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the reque parameter. (no CVSS)
- [CVE-2023-41451](https://cve.now/CVE-2023-41451.md): Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload (no CVSS)
- [CVE-2023-41452](https://cve.now/CVE-2023-41452.md): Cross Site Request Forgery vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted p (no CVSS)
- [CVE-2023-41453](https://cve.now/CVE-2023-41453.md): Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload (no CVSS)
- [CVE-2023-43191](https://cve.now/CVE-2023-43191.md): SpringbootCMS 1.0 foreground message can be embedded malicious code saved in the database. (no CVSS)
- [CVE-2023-43192](https://cve.now/CVE-2023-43192.md): SQL injection can exist in a newly created part of the SpringbootCMS 1.0 background, and the parameters submitted by users are not filtered. (no CVSS)
- [CVE-2023-43233](https://cve.now/CVE-2023-43233.md): A stored cross-site scripting (XSS) vulnerability in the cms/content/edit component of YZNCMS v1.3.0 allows attackers to execute arbitrary w (no CVSS)
- [CVE-2023-43314](https://cve.now/CVE-2023-43314.md): \*\* UNSUPPORTED WHEN ASSIGNED \*\*The buffer overflow vulnerability in the Zyxel PMG2005-T20B firmware version V1.00(ABNK.2)b11\_C0 could allow (CVSS 7.5, Zyxel PMG2005-T20B)
- [CVE-2023-43320](https://cve.now/CVE-2023-43320.md): An issue in Proxmox Server Solutions GmbH Proxmox VE v.5.4 thru v.8.0, Proxmox Backup Server v.1.1 thru v.3.0, and Proxmox Mail Gateway v.7. (no CVSS)
- [CVE-2023-43828](https://cve.now/CVE-2023-43828.md): A Cross-site scripting (XSS) vulnerability in /panel/languages/ of Subrion v4.2.1 allow attackers to execute arbitrary web scripts or HTML v (no CVSS, intelliants/subrion)
- [CVE-2023-43830](https://cve.now/CVE-2023-43830.md): A Cross-site scripting (XSS) vulnerability in /panel/configuration/financial/ of Subrion v4.2.1 allows attackers to execute arbitrary web sc (no CVSS, intelliants/subrion)
- [CVE-2023-44013](https://cve.now/CVE-2023-44013.md): Tenda AC10U v1.0 US\_AC10UV1.0RTL\_V15.03.06.49\_multi\_TDE01 was discovered to contain a stack overflow via the list parameter in the fromSetIp (CVSS 8.8)
- [CVE-2023-44014](https://cve.now/CVE-2023-44014.md): Tenda AC10U v1.0 US\_AC10UV1.0RTL\_V15.03.06.49\_multi\_TDE01 was discovered to contain multiple stack overflows in the formSetMacFilterCfg func (CVSS 8.8)
- [CVE-2023-44015](https://cve.now/CVE-2023-44015.md): Tenda AC10U v1.0 US\_AC10UV1.0RTL\_V15.03.06.49\_multi\_TDE01 was discovered to contain a stack overflow via the schedEndTime parameter in the s (CVSS 8.8)
- [CVE-2023-44016](https://cve.now/CVE-2023-44016.md): Tenda AC10U v1.0 US\_AC10UV1.0RTL\_V15.03.06.49\_multi\_TDE01 was discovered to contain a stack overflow via the deviceId parameter in the addWi (CVSS 8.8)
- [CVE-2023-44017](https://cve.now/CVE-2023-44017.md): Tenda AC10U v1.0 US\_AC10UV1.0RTL\_V15.03.06.49\_multi\_TDE01 was discovered to contain a stack overflow via the timeZone parameter in the fromS (CVSS 8.8)
- [CVE-2023-44018](https://cve.now/CVE-2023-44018.md): Tenda AC10U v1.0 US\_AC10UV1.0RTL\_V15.03.06.49\_multi\_TDE01 was discovered to contain a stack overflow via the domain parameter in the add\_whi (CVSS 8.8)
- [CVE-2023-44019](https://cve.now/CVE-2023-44019.md): Tenda AC10U v1.0 US\_AC10UV1.0RTL\_V15.03.06.49\_multi\_TDE01 was discovered to contain a stack overflow via the mac parameter in the GetParentC (CVSS 8.8)
- [CVE-2023-44020](https://cve.now/CVE-2023-44020.md): Tenda AC10U v1.0 US\_AC10UV1.0RTL\_V15.03.06.49\_multi\_TDE01 was discovered to contain a stack overflow via the security parameter in the formW (no CVSS)
- [CVE-2023-44021](https://cve.now/CVE-2023-44021.md): Tenda AC10U v1.0 US\_AC10UV1.0RTL\_V15.03.06.49\_multi\_TDE01 was discovered to contain a stack overflow via the formSetClientState function. (no CVSS)
- [CVE-2023-44022](https://cve.now/CVE-2023-44022.md): Tenda AC10U v1.0 US\_AC10UV1.0RTL\_V15.03.06.49\_multi\_TDE01 was discovered to contain a stack overflow via the speed\_dir parameter in the form (no CVSS)
- [CVE-2023-44023](https://cve.now/CVE-2023-44023.md): Tenda AC10U v1.0 US\_AC10UV1.0RTL\_V15.03.06.49\_multi\_TDE01 was discovered to contain a stack overflow via the ssid parameter in the form\_fast (no CVSS)
- [CVE-2023-44047](https://cve.now/CVE-2023-44047.md): Sourcecodester Toll Tax Management System v1 is vulnerable to SQL Injection. (no CVSS)
- [CVE-2023-44048](https://cve.now/CVE-2023-44048.md): Sourcecodester Expense Tracker App v1 is vulnerable to Cross Site Scripting (XSS) via add category. (no CVSS)
- [CVE-2023-44080](https://cve.now/CVE-2023-44080.md): An issue in PGYER codefever v.2023.8.14-2ce4006 allows a remote attacker to execute arbitrary code via a crafted request to the branchList c (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-09-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.