# CVEs published 2023-09-29

78 CVEs were published on September 29, 2023: 1 critical, 9 high. Days are UTC.

- [CVE-2023-5297](https://cve.now/CVE-2023-5297.md): Xinhu RockOA start backup (CVSS 3.7, Xinhu RockOA)
- [CVE-2023-5296](https://cve.now/CVE-2023-5296.md): Xinhu RockOA Password password recovery (CVSS 4.3, Xinhu RockOA)
- [CVE-2023-5294](https://cve.now/CVE-2023-5294.md): ECshop order.php sql injection (CVSS 4.7, ECshop)
- [CVE-2023-5293](https://cve.now/CVE-2023-5293.md): ECshop leancloud.php sql injection (CVSS 4.7, ECshop)
- [CVE-2023-5287](https://cve.now/CVE-2023-5287.md): BEECMS cross site scripting (CVSS 2.4, BEECMS)
- [CVE-2023-5286](https://cve.now/CVE-2023-5286.md): SourceCodester Expense Tracker App Category add\_category.php cross site scripting (CVSS 3.5, SourceCodester Expense Tracker App)
- [CVE-2023-43655](https://cve.now/CVE-2023-43655.md): Remote Code Execution via web-accessible composer.phar (CVSS 6.4, composer · composer/composer)
- [CVE-2023-5285](https://cve.now/CVE-2023-5285.md): Tongda OA 2017 delete.php sql injection (CVSS 6.3, Tongda OA)
- [CVE-2023-5284](https://cve.now/CVE-2023-5284.md): SourceCodester Engineers Online Portal upload\_save\_student.php unrestricted upload (CVSS 6.3, SourceCodester Engineers Online Portal)
- [CVE-2023-5283](https://cve.now/CVE-2023-5283.md): SourceCodester Engineers Online Portal teacher\_signup.php sql injection (CVSS 6.3, SourceCodester Engineers Online Portal)
- [CVE-2023-5282](https://cve.now/CVE-2023-5282.md): SourceCodester Engineers Online Portal seed\_message\_student.php sql injection (CVSS 6.3, SourceCodester Engineers Online Portal)
- [CVE-2023-5281](https://cve.now/CVE-2023-5281.md): SourceCodester Engineers Online Portal remove\_inbox\_message.php sql injection (CVSS 6.3, SourceCodester Engineers Online Portal)
- [CVE-2023-5280](https://cve.now/CVE-2023-5280.md): SourceCodester Engineers Online Portal my\_students.php sql injection (CVSS 6.3, SourceCodester Engineers Online Portal)
- [CVE-2023-5279](https://cve.now/CVE-2023-5279.md): SourceCodester Engineers Online Portal my\_classmates.php sql injection (CVSS 6.3, SourceCodester Engineers Online Portal)
- [CVE-2023-5278](https://cve.now/CVE-2023-5278.md): SourceCodester Engineers Online Portal login.php sql injection (CVSS 6.3, SourceCodester Engineers Online Portal)
- [CVE-2023-5277](https://cve.now/CVE-2023-5277.md): SourceCodester Engineers Online Portal student\_avatar.php unrestricted upload (CVSS 6.3, SourceCodester Engineers Online Portal)
- [CVE-2023-26218](https://cve.now/CVE-2023-26218.md): TIBCO Nimbus Reflected Cross-site Scripting (XSS) vulnerabilities (CVSS 8.0, TIBCO Software TIBCO Nimbus)
- [CVE-2023-5276](https://cve.now/CVE-2023-5276.md): SourceCodester Engineers Online Portal downloadable\_student.php sql injection (CVSS 6.3, SourceCodester Engineers Online Portal)
- [CVE-2023-3024](https://cve.now/CVE-2023-3024.md): Bluetooth LE segmented 'prepare write response' packet may lead to out-of-bounds memory access (CVSS 5.9, silabs.com GSDK)
- [CVE-2023-5273](https://cve.now/CVE-2023-5273.md): SourceCodester Best Courier Management System manage\_parcel\_status.php cross site scripting (CVSS 3.5, SourceCodester Best Courier Management System)
- [CVE-2023-5272](https://cve.now/CVE-2023-5272.md): SourceCodester Best Courier Management System GET Parameter edit\_parcel.php sql injection (CVSS 5.5, SourceCodester Best Courier Management System)
- [CVE-2023-39410](https://cve.now/CVE-2023-39410.md): Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK (low (no CVSS), Apache Software Foundation Apache Avro Java SDK · avro +1)
- [CVE-2023-5271](https://cve.now/CVE-2023-5271.md): SourceCodester Best Courier Management System edit\_parcel.php sql injection (CVSS 5.5, SourceCodester Best Courier Management System)
- [CVE-2023-5270](https://cve.now/CVE-2023-5270.md): SourceCodester Best Courier Management System view\_parcel.php sql injection (CVSS 5.5, SourceCodester Best Courier Management System)
- [CVE-2023-5269](https://cve.now/CVE-2023-5269.md): SourceCodester Best Courier Management System GET Parameter parcel\_list.php sql injection (CVSS 5.1, SourceCodester Best Courier Management System)
- [CVE-2023-5268](https://cve.now/CVE-2023-5268.md): DedeBIZ makehtml\_taglist\_action.php sql injection (CVSS 6.3, DedeBIZ)
- [CVE-2023-5267](https://cve.now/CVE-2023-5267.md): Tongda OA 2017 delete.php sql injection (CVSS 5.5, Tongda OA)
- [CVE-2023-5266](https://cve.now/CVE-2023-5266.md): DedeBIZ tags\_main.php sql injection (CVSS 6.3, DedeBIZ)
- [CVE-2023-5265](https://cve.now/CVE-2023-5265.md): Tongda OA 2017 delete.php sql injection (CVSS 5.5, Tongda OA)
- [CVE-2023-5264](https://cve.now/CVE-2023-5264.md): huakecms cms\_content.php sql injection (CVSS 6.3, huakecms)
- [CVE-2023-5263](https://cve.now/CVE-2023-5263.md): ZZZCMS Database Backup File save.php restore permission (CVSS 6.3, ZZZCMS)
- [CVE-2023-39308](https://cve.now/CVE-2023-39308.md): WordPress User Feedback Plugin \<= 1.0.7 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, UserFeedback Team User Feedback)
- [CVE-2023-5289](https://cve.now/CVE-2023-5289.md): Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb (CVSS 7.1, ikus060/rdiffweb · rdiffweb)
- [CVE-2023-41691](https://cve.now/CVE-2023-41691.md): WordPress WooCommerce PensoPay Plugin \<= 6.3.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, WooCommerce PensoPay)
- [CVE-2023-41687](https://cve.now/CVE-2023-41687.md): WordPress Goods Catalog Plugin \<= 2.4.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Irina Sokolovskaya Goods Catalog)
- [CVE-2023-41666](https://cve.now/CVE-2023-41666.md): WordPress Stock Quotes List Plugin \<= 2.9.9 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Stockdio Stock Quotes List)
- [CVE-2023-41663](https://cve.now/CVE-2023-41663.md): WordPress WP Bannerize Pro Plugin \<= 1.6.9 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Giovambattista Fazioli WP Bannerize Pro)
- [CVE-2023-41662](https://cve.now/CVE-2023-41662.md): WordPress WP-dTree Plugin \<= 4.4.5 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Ulf Benjaminsson WP-dTree)
- [CVE-2023-41661](https://cve.now/CVE-2023-41661.md): WordPress Smarty for WordPress Plugin \<= 3.1.35 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, PressPage Entertainment Smarty for WordPress)
- [CVE-2023-41658](https://cve.now/CVE-2023-41658.md): WordPress Photo Gallery Slideshow & Masonry Tiled Gallery Plugin \<= 1.0.13 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, I Thirteen Web Solution Photo Gallery Slideshow & Masonry T…)
- [CVE-2023-5262](https://cve.now/CVE-2023-5262.md): OpenRapid RapidCMS uploadicon.php isImg unrestricted upload (CVSS 6.3, OpenRapid RapidCMS)
- [CVE-2023-41657](https://cve.now/CVE-2023-41657.md): WordPress HollerBox Plugin \<= 2.3.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Groundhogg HollerBox)
- [CVE-2023-41655](https://cve.now/CVE-2023-41655.md): WordPress authLdap Plugin \<= 2.5.9 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Andreas Heigl authLdap)
- [CVE-2023-5261](https://cve.now/CVE-2023-5261.md): Tongda OA 2017 delete.php sql injection (CVSS 5.5, Tongda OA)
- [CVE-2023-5260](https://cve.now/CVE-2023-5260.md): SourceCodester Simple Membership System group\_validator.php sql injection (CVSS 6.3, SourceCodester Simple Membership System)
- [CVE-2023-5288](https://cve.now/CVE-2023-5288.md): A remote unauthorized attacker may connect to the SIM1012, interact with the device and change configuration settings. (CVSS 9.8, SICK AG SIM1012)
- [CVE-2023-5259](https://cve.now/CVE-2023-5259.md): ForU CMS cms\_admin.php denial of service (CVSS 2.7, ForU CMS)
- [CVE-2023-5258](https://cve.now/CVE-2023-5258.md): OpenRapid RapidCMS addgood.php sql injection (CVSS 6.3, OpenRapid RapidCMS)
- [CVE-2023-5257](https://cve.now/CVE-2023-5257.md): WhiteHSBG JNDIExploit HTTPServer.java handleFileRequest path traversal (CVSS 3.5, WhiteHSBG JNDIExploit)
- [CVE-2023-5194](https://cve.now/CVE-2023-5194.md): A system/user manager can demote / deactivate another manager (CVSS 2.7, Mattermost · github.com/mattermost/mattermost/server/v8 +1)
- [CVE-2023-5195](https://cve.now/CVE-2023-5195.md): A team member can soft delete other teams that they are not part of (CVSS 6.5, Mattermost · github.com/mattermost/mattermost/server/v8 +1)
- [CVE-2023-5193](https://cve.now/CVE-2023-5193.md): System Role with manage posts permission can read posts of Direct Messages (CVSS 4.9, Mattermost · github.com/mattermost/mattermost/server/v8 +1)
- [CVE-2023-5196](https://cve.now/CVE-2023-5196.md): DoS via Channel Notification Properties (CVSS 6.5, Mattermost · github.com/mattermost/mattermost/server/v8 +1)
- [CVE-2023-5159](https://cve.now/CVE-2023-5159.md): A User Manager role with user edit permissions could manage/update bots (CVSS 3.8, Mattermost · github.com/mattermost/mattermost/server/v8 +1)
- [CVE-2023-3413](https://cve.now/CVE-2023-3413.md): Insertion of Sensitive Information Into Sent Data in GitLab (CVSS 6.5, GitLab)
- [CVE-2023-3922](https://cve.now/CVE-2023-3922.md): URL Redirection to Untrusted Site ('Open Redirect') in GitLab (CVSS 3.0, GitLab)
- [CVE-2023-32477](https://cve.now/CVE-2023-32477.md): Dell Common Event Enabler 8.9.8.2 for Windows and prior, contain an improper access control vulnerability. (CVSS 7.8, Dell Common Event Enabler)
- [CVE-2023-5198](https://cve.now/CVE-2023-5198.md): Incorrect Authorization in GitLab (CVSS 4.3, GitLab)
- [CVE-2023-0989](https://cve.now/CVE-2023-0989.md): Improper Ownership Management in GitLab (CVSS 4.3, GitLab)
- [CVE-2023-2233](https://cve.now/CVE-2023-2233.md): Missing Authorization in GitLab (CVSS 3.1, GitLab)
- [CVE-2023-3115](https://cve.now/CVE-2023-3115.md): Incorrect User Management in GitLab (CVSS 5.4, GitLab)
- [CVE-2023-3920](https://cve.now/CVE-2023-3920.md): Incorrect Authorization in GitLab (CVSS 4.3, GitLab)
- [CVE-2023-3917](https://cve.now/CVE-2023-3917.md): Improper Validation of Specified Type of Input in GitLab (CVSS 4.3, GitLab)
- [CVE-2023-3914](https://cve.now/CVE-2023-3914.md): Incorrect User Management in GitLab (CVSS 5.4, GitLab)
- [CVE-2023-3906](https://cve.now/CVE-2023-3906.md): Improper Validation of Specified Type of Input in GitLab (CVSS 3.5, GitLab)
- [CVE-2023-3979](https://cve.now/CVE-2023-3979.md): Incorrect Authorization in GitLab (CVSS 3.1, GitLab)
- [CVE-2023-4532](https://cve.now/CVE-2023-4532.md): Incorrect Authorization in GitLab (CVSS 4.3, GitLab)
- [CVE-2023-30591](https://cve.now/CVE-2023-30591.md): NodeBB Pre-Authentication Denial-of-Service (CVSS 7.5, NodeBB)
- [CVE-2023-26147](https://cve.now/CVE-2023-26147.md): All versions of the package ithewei/libhv are vulnerable to HTTP Response Splitting when untrusted user input is used to build headers value (CVSS 5.3, ithewei/libhv)
- [CVE-2023-26148](https://cve.now/CVE-2023-26148.md): All versions of the package ithewei/libhv are vulnerable to CRLF Injection when untrusted user input is used to set request headers. (CVSS 5.4, ithewei/libhv)
- [CVE-2023-26146](https://cve.now/CVE-2023-26146.md): All versions of the package ithewei/libhv are vulnerable to Cross-site Scripting (XSS) such that when a file with a name containing a malici (CVSS 6.1, ithewei/libhv)
- [CVE-2022-35908](https://cve.now/CVE-2022-35908.md): Cambium Enterprise Wi-Fi System Software before 6.4.2 does not sanitize the ping host argument in device-agent. (no CVSS)
- [CVE-2023-43909](https://cve.now/CVE-2023-43909.md): Hospital Management System thru commit 4770d was discovered to contain a SQL injection vulnerability via the app\_contact parameter in appsea (no CVSS)
- [CVE-2023-43944](https://cve.now/CVE-2023-43944.md): A Stored Cross Site Scripting (XSS) vulnerability was found in SourceCodester Task Management System 1.0. (no CVSS)
- [CVE-2023-44270](https://cve.now/CVE-2023-44270.md): An issue was discovered in PostCSS before 8.4.31. (no CVSS, postcss)
- [CVE-2023-44464](https://cve.now/CVE-2023-44464.md): pretix before 2023.7.2 allows Pillow to parse EPS files. (no CVSS, pretix)
- [CVE-2023-44466](https://cve.now/CVE-2023-44466.md): An issue was discovered in net/ceph/messenger\_v2.c in the Linux kernel before 6.4.5. (no CVSS)
- [CVE-2023-44469](https://cve.now/CVE-2023-44469.md): A Server-Side Request Forgery issue in the OpenID Connect Issuer in LemonLDAP::NG before 2.17.1 allows authenticated remote attackers to sen (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-09-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.