# CVEs published 2023-10-01

8 CVEs were published on October 1, 2023: 0 critical, 1 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2023-5328](https://cve.now/CVE-2023-5328.md): SATO CL4NX-J Plus Cookie improper authentication (CVSS 6.3, SATO CL4NX-J Plus)
- [CVE-2023-5327](https://cve.now/CVE-2023-5327.md): SATO CL4NX-J Plus path traversal (CVSS 3.5, SATO CL4NX-J Plus)
- [CVE-2023-5326](https://cve.now/CVE-2023-5326.md): SATO CL4NX-J Plus WebConfig improper authentication (CVSS 6.3, SATO CL4NX-J Plus)
- [CVE-2023-5324](https://cve.now/CVE-2023-5324.md): eeroOS Ethernet Interface denial of service (CVSS 4.3, eeroOS)
- [CVE-2023-4211](https://cve.now/CVE-2023-4211.md): Mali GPU Kernel Driver Allows Improper GPU Memory Processing Operations (CVSS 5.5, KEV, Arm Midgard GPU Kernel Driver · Arm Bifrost GPU Kernel D… +2)
- [CVE-2023-5322](https://cve.now/CVE-2023-5322.md): D-Link DAR-7000 edit\_manageadmin.php sql injection (CVSS 4.7, D-Link DAR-7000)
- [CVE-2023-5323](https://cve.now/CVE-2023-5323.md): Cross-site Scripting (XSS) - Generic in dolibarr/dolibarr (CVSS 5.4, dolibarr/dolibarr)
- [CVE-2023-43907](https://cve.now/CVE-2023-43907.md): OptiPNG v0.7.7 was discovered to contain a global buffer overflow via the 'buffer' variable at gifread.c. (CVSS 7.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-10-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.