# CVEs published 2023-09-28

73 CVEs were published on September 28, 2023: 9 critical, 14 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2023-5077](https://cve.now/CVE-2023-5077.md): Vault's Google Cloud Secrets Engine Removed Existing IAM Conditions When Creating / Updating Rolesets (CVSS 7.6, HashiCorp Vault · github.com/hashicorp/vault)
- [CVE-2023-3775](https://cve.now/CVE-2023-3775.md): Vault Enterprise's Sentinel RGP Policies Allowed For Cross-Namespace Denial of Service (CVSS 4.2, HashiCorp Vault Enterprise)
- [CVE-2023-43654](https://cve.now/CVE-2023-43654.md): TorchServe Server-Side Request Forgery (CVSS 10.0, pytorch serve · torchserve)
- [CVE-2023-43662](https://cve.now/CVE-2023-43662.md): Arbitrary file read vulnerability in Shoko Server (CVSS 8.6, ShokoAnime ShokoServer)
- [CVE-2023-44166](https://cve.now/CVE-2023-44166.md): Online Movie Ticket Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi) (CVSS 9.8, Online Movie Ticket Booking System)
- [CVE-2023-44164](https://cve.now/CVE-2023-44164.md): Online Movie Ticket Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi) (CVSS 9.8, Online Movie Ticket Booking System)
- [CVE-2023-44163](https://cve.now/CVE-2023-44163.md): Online Movie Ticket Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi) (CVSS 9.8, Online Movie Ticket Booking System)
- [CVE-2023-43739](https://cve.now/CVE-2023-43739.md): Online Book Store Project v1.0 - Unauthenticated SQL Injection (SQLi) (CVSS 9.8, Online Book Store Project)
- [CVE-2023-44174](https://cve.now/CVE-2023-44174.md): Online Movie Ticket Booking System v1.0 - Stored Cross-Site Scripting (XSS) (CVSS 6.4, Online Movie Ticket Booking System)
- [CVE-2023-43014](https://cve.now/CVE-2023-43014.md): Asset Management System v1.0 - Authenticated SQL Injection (SQLi) (CVSS 8.8, Asset Management System)
- [CVE-2023-43013](https://cve.now/CVE-2023-43013.md): Asset Management System v1.0 - Unauthenticated SQL Injection (SQLi) (CVSS 9.8, Asset Management System)
- [CVE-2023-44173](https://cve.now/CVE-2023-44173.md): Online Movie Ticket Booking System v1.0 - Reflected Cross-Site Scripting (XSS) (CVSS 5.4, Online Movie Ticket Booking System)
- [CVE-2023-5185](https://cve.now/CVE-2023-5185.md): Gym Management System Project v1.0 - Insecure File Upload (CVSS 9.1, Gym Management System Project)
- [CVE-2023-43740](https://cve.now/CVE-2023-43740.md): Online Book Store Project v1.0 - Insecure File Upload (CVSS 8.8, Online Book Store Project)
- [CVE-2023-5053](https://cve.now/CVE-2023-5053.md): SQL Injection in hospital-management-system-in-php 378c157 in index.php (CVSS 9.8, hospital-management-system)
- [CVE-2023-5004](https://cve.now/CVE-2023-5004.md): Hospital-management-system-in-php 378c157 - Blind SQL Injection (CVSS 9.8, Hospital-management-system)
- [CVE-2023-4316](https://cve.now/CVE-2023-4316.md): Zod 3.22.2 - Regular expression Denial of Service (CVSS 7.5, Zod)
- [CVE-2023-5256](https://cve.now/CVE-2023-5256.md): Drupal core - Critical - Cache poisoning - SA-CORE-2023-006 (CVSS 7.5, Drupal Core · drupal/core)
- [CVE-2023-43664](https://cve.now/CVE-2023-43664.md): Employee without any access rights can list all installed modules in Prestashop (CVSS 4.3, PrestaShop · prestashop/prestashop)
- [CVE-2023-43663](https://cve.now/CVE-2023-43663.md): Improper Privilege Management in Prestashop (CVSS 6.3, PrestaShop · prestashop/prestashop)
- [CVE-2023-43657](https://cve.now/CVE-2023-43657.md): Improper escaping of encrypted topic titles can lead to Cross-site Scripting under non-default site configuration (CVSS 7.2, discourse-encrypt)
- [CVE-2023-40375](https://cve.now/CVE-2023-40375.md): IBM i privilege escalation (CVSS 7.4, IBM i)
- [CVE-2023-43044](https://cve.now/CVE-2023-43044.md): IBM License Metric Tool directory traversal (CVSS 5.3, IBM License Metric Tool)
- [CVE-2023-5187](https://cve.now/CVE-2023-5187.md): Use after free in Extensions in Google Chrome prior to 117.0.5938.132 allowed an attacker who convinced a user to install a malicious extens (no CVSS, Google Chrome)
- [CVE-2023-5186](https://cve.now/CVE-2023-5186.md): Use after free in Passwords in Google Chrome prior to 117.0.5938.132 allowed a remote attacker who convinced a user to engage in specific UI (no CVSS, Google Chrome)
- [CVE-2023-5217](https://cve.now/CVE-2023-5217.md): Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to poten (CVSS 8.8, KEV, Google Chrome · Google libvpx +1)
- [CVE-2023-40307](https://cve.now/CVE-2023-40307.md): Privileges Memory Corruption (Out-of-bound write) (CVSS 6.3, SAP SE SAP Privileges)
- [CVE-2023-42756](https://cve.now/CVE-2023-42756.md): Kernel: netfilter: race condition between ipset\_cmd\_add and ipset\_cmd\_swap (CVSS 4.4, Red Hat Enterprise Linux)
- [CVE-2023-5215](https://cve.now/CVE-2023-5215.md): Libnbd: crash or misbehaviour when nbd server returns an unexpected block size (CVSS 5.3, Red Hat Enterprise Linux)
- [CVE-2022-47187](https://cve.now/CVE-2022-47187.md): File upload XSS vulnerability in Generex CS141 (CVSS 5.3, Generex UPS CS141)
- [CVE-2022-47186](https://cve.now/CVE-2022-47186.md): Unrestricted Upload of File vulnerability in Generex CS141 (CVSS 7.5, Generex UPS CS141)
- [CVE-2023-26149](https://cve.now/CVE-2023-26149.md): Versions of the package quill-mention before 4.0.0 are vulnerable to Cross-site Scripting (XSS) due to improper user-input sanitization, via (CVSS 6.1, quill-mention)
- [CVE-2023-26145](https://cve.now/CVE-2023-26145.md): This affects versions of the package pydash before 6.0.0. (CVSS 7.4, pydash)
- [CVE-2023-5233](https://cve.now/CVE-2023-5233.md): Font Awesome Integration \<= 5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, mcostales84 Font Awesome Integration)
- [CVE-2023-5230](https://cve.now/CVE-2023-5230.md): TM WooCommerce Compare & Wishlist \<= 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, templatemonster-2002 TM WooCommerce Compare & Wishlist)
- [CVE-2023-5232](https://cve.now/CVE-2023-5232.md): Font Awesome More Icons \<= 3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, jr00ck Font Awesome More Icons)
- [CVE-2023-5244](https://cve.now/CVE-2023-5244.md): Cross-site Scripting (XSS) - Reflected in microweber/microweber (CVSS 5.0, microweber/microweber)
- [CVE-2023-30415](https://cve.now/CVE-2023-30415.md): Sourcecodester Packers and Movers Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /in (no CVSS)
- [CVE-2023-38870](https://cve.now/CVE-2023-38870.md): A SQL injection vulnerability exists in gugoan Economizzer commit 3730880 (April 2023) and v.0.9-beta1. (no CVSS)
- [CVE-2023-38871](https://cve.now/CVE-2023-38871.md): The commit 3730880 (April 2023) and v.0.9-beta1 of gugoan Economizzer has a user enumeration vulnerability in the login and forgot password (no CVSS, gugoan/economizzer)
- [CVE-2023-38872](https://cve.now/CVE-2023-38872.md): An Insecure Direct Object Reference (IDOR) vulnerability in gugoan Economizzer commit 3730880 (April 2023) and v.0.9-beta1 allows any unauth (no CVSS, gugoan/economizzer)
- [CVE-2023-38873](https://cve.now/CVE-2023-38873.md): The commit 3730880 (April 2023) and v.0.9-beta1 of gugoan Economizzer is vulnerable to Clickjacking. (no CVSS, gugoan/economizzer)
- [CVE-2023-38874](https://cve.now/CVE-2023-38874.md): A remote code execution (RCE) vulnerability via an insecure file upload exists in gugoan's Economizzer v.0.9-beta1 and commit 3730880 (April (no CVSS, gugoan/economizzer)
- [CVE-2023-38877](https://cve.now/CVE-2023-38877.md): A host header injection vulnerability exists in gugoan's Economizzer v.0.9-beta1 and commit 3730880 (April 2023). (no CVSS, gugoan/economizzer)
- [CVE-2023-41444](https://cve.now/CVE-2023-41444.md): An issue in Binalyze IREC.sys v.3.11.0 and before allows a local attacker to execute arbitrary code and escalate privileges via the fun\_1400 (no CVSS)
- [CVE-2023-41446](https://cve.now/CVE-2023-41446.md): Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted script (CVSS 6.1)
- [CVE-2023-41447](https://cve.now/CVE-2023-41447.md): Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload (CVSS 6.1)
- [CVE-2023-41450](https://cve.now/CVE-2023-41450.md): An issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the reque parameter. (CVSS 8.8)
- [CVE-2023-41911](https://cve.now/CVE-2023-41911.md): Samsung Mobile Processor Exynos 2200 allows a GPU Double Free (issue 1 of 2). (CVSS 4.7)
- [CVE-2023-42222](https://cve.now/CVE-2023-42222.md): WebCatalog before 49.0 is vulnerable to Incorrect Access Control. (no CVSS)
- [CVE-2023-43226](https://cve.now/CVE-2023-43226.md): An arbitrary file upload vulnerability in dede/baidunews.php in DedeCMS 5.7.111 and earlier allows attackers to execute arbitrary code via u (CVSS 8.8)
- [CVE-2023-43323](https://cve.now/CVE-2023-43323.md): mooSocial 3.1.8 is vulnerable to external service interaction on post function. (no CVSS)
- [CVE-2023-43860](https://cve.now/CVE-2023-43860.md): D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWanNonLogin function. (no CVSS)
- [CVE-2023-43861](https://cve.now/CVE-2023-43861.md): D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWanPPPoE function. (no CVSS)
- [CVE-2023-43862](https://cve.now/CVE-2023-43862.md): D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formLanguageChange function. (CVSS 7.5)
- [CVE-2023-43863](https://cve.now/CVE-2023-43863.md): D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWanDhcpplus function. (no CVSS)
- [CVE-2023-43864](https://cve.now/CVE-2023-43864.md): D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWAN\_Wizard55 function. (no CVSS)
- [CVE-2023-43865](https://cve.now/CVE-2023-43865.md): D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWanPPTP function. (no CVSS)
- [CVE-2023-43866](https://cve.now/CVE-2023-43866.md): D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWAN\_Wizard7 function. (no CVSS)
- [CVE-2023-43867](https://cve.now/CVE-2023-43867.md): D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWanL2TP function. (no CVSS)
- [CVE-2023-43868](https://cve.now/CVE-2023-43868.md): D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via websGetVar function. (no CVSS)
- [CVE-2023-43869](https://cve.now/CVE-2023-43869.md): D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWAN\_Wizard56 function. (no CVSS)
- [CVE-2023-43871](https://cve.now/CVE-2023-43871.md): A File upload vulnerability in WBCE v.1.6.1 allows a local attacker to upload a pdf file with hidden Cross Site Scripting (XSS). (no CVSS)
- [CVE-2023-43872](https://cve.now/CVE-2023-43872.md): A File upload vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to upload a pdf file with hidden Cross Site Scripting (XSS). (no CVSS)
- [CVE-2023-43873](https://cve.now/CVE-2023-43873.md): A Cross Site Scripting (XSS) vulnerability in e017 CMS v.2.3.2 allows a local attacker to execute arbitrary code via a crafted script to the (no CVSS)
- [CVE-2023-43874](https://cve.now/CVE-2023-43874.md): Multiple Cross Site Scripting (XSS) vulnerability in e017 CMS v.2.3.2 allows a local attacker to execute arbitrary code via a crafted script (CVSS 5.4)
- [CVE-2023-43876](https://cve.now/CVE-2023-43876.md): A Cross-Site Scripting (XSS) vulnerability in installation of October v.3.4.16 allows an attacker to execute arbitrary web scripts via a cra (no CVSS)
- [CVE-2023-43878](https://cve.now/CVE-2023-43878.md): Rite CMS 3.0 has Multiple Cross-Site scripting (XSS) vulnerabilities that allow attackers to execute arbitrary code via a crafted payload in (no CVSS)
- [CVE-2023-43879](https://cve.now/CVE-2023-43879.md): Rite CMS 3.0 has a Cross-Site scripting (XSS) vulnerability that allows attackers to execute arbitrary code via a crafted payload into the G (CVSS 4.8)
- [CVE-2023-43884](https://cve.now/CVE-2023-43884.md): A Cross-site scripting (XSS) vulnerability in Reference ID from the panel Transactions, of Subrion v4.2.1 allows attackers to execute arbitr (no CVSS, intelliants/subrion)
- [CVE-2023-44273](https://cve.now/CVE-2023-44273.md): Consensys gnark-crypto through 0.11.2 allows Signature Malleability. (no CVSS, github.com/consensys/gnark-crypto)
- [CVE-2023-44275](https://cve.now/CVE-2023-44275.md): OPNsense before 23.7.5 allows XSS via the index.php column\_count parameter to the Lobby Dashboard. (no CVSS)
- [CVE-2023-44276](https://cve.now/CVE-2023-44276.md): OPNsense before 23.7.5 allows XSS via the index.php sequence parameter to the Lobby Dashboard. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-09-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.