# CVEs published 2023-10-03

136 CVEs were published on October 3, 2023: 8 critical, 40 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2022-22447](https://cve.now/CVE-2022-22447.md): IBM Disconnected Log Collector information disclosure (CVSS 4.0, IBM Disconnected Log Collector)
- [CVE-2023-5255](https://cve.now/CVE-2023-5255.md): Denial of Service for Revocation of Auto Renewed Certificates (CVSS 4.4, Puppet Enterprise)
- [CVE-2023-4911](https://cve.now/CVE-2023-4911.md): Glibc: buffer overflow in ld.so leading to privilege escalation (CVSS 7.8, KEV, glibc · Red Hat Enterprise Linux +1)
- [CVE-2023-4732](https://cve.now/CVE-2023-4732.md): Kernel: race between task migrating pages and another task calling exit\_mmap to release those same pages getting invalid opcode bug in include/linux/swapops.h (CVSS 4.7, Red Hat Enterprise Linux · Red Hat Virtualization 4 for Red…)
- [CVE-2023-34970](https://cve.now/CVE-2023-34970.md): Mali GPU Kernel Driver Allows Improper GPU Memory Processing Operations (CVSS 4.7, Arm Valhall GPU Kernel Driver · Arm 5th Gen GPU Architectur…)
- [CVE-2023-33200](https://cve.now/CVE-2023-33200.md): Mali GPU Kernel Driver Allows Improper GPU Memory Processing Operations (CVSS 4.7, Arm Bifrost GPU Kernel Driver · Arm Valhall GPU Kernel D… +1)
- [CVE-2023-4564](https://cve.now/CVE-2023-4564.md): Multiple vulnerabilities in Canopsis of Capensis (CVSS 4.7, Capensis Canopsis)
- [CVE-2023-3196](https://cve.now/CVE-2023-3196.md): Multiple vulnerabilities in Canopsis of Capensis (CVSS 4.7, Capensis Canopsis)
- [CVE-2023-4817](https://cve.now/CVE-2023-4817.md): Unrestricted file upload vulnerability in ICP DAS ET-7060 (CVSS 7.2, ICP DAS ET-7060)
- [CVE-2023-4885](https://cve.now/CVE-2023-4885.md): Multiple vulnerabilities in Open5GS (CVSS 6.5, Open5GS)
- [CVE-2023-4884](https://cve.now/CVE-2023-4884.md): Multiple vulnerabilities in Open5GS (CVSS 6.5, Open5GS)
- [CVE-2023-4883](https://cve.now/CVE-2023-4883.md): Multiple vulnerabilities in Open5GS (CVSS 7.5, Open5GS)
- [CVE-2023-4882](https://cve.now/CVE-2023-4882.md): Multiple vulnerabilities in Open5GS (CVSS 7.5, Open5GS)
- [CVE-2023-4886](https://cve.now/CVE-2023-4886.md): Foreman: world readable file containing secrets (CVSS 6.7, Red Hat Satellite 6.13 for RHEL · Red Hat Satellite 6.14 fo…)
- [CVE-2023-4929](https://cve.now/CVE-2023-4929.md): NPort 5000 Series Firmware Improper Validation of Integrity Check Vulnerability (CVSS 6.5, Moxa NPort 5000AI-M12 Series · Moxa NPort 5100 Series +11)
- [CVE-2023-40558](https://cve.now/CVE-2023-40558.md): WordPress Video Gallery & Management Plugin \<= 3.3.5 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, eMarket Design YouTube Video Gallery by YouTube Showcase)
- [CVE-2023-3350](https://cve.now/CVE-2023-3350.md): Cryptographic Issues on IBERMATICA RPS (CVSS 8.2, IBERMATICA RPS)
- [CVE-2023-3349](https://cve.now/CVE-2023-3349.md): Information exposure on IBERMATICA RPS (CVSS 8.2, IBERMATICA RPS)
- [CVE-2023-39158](https://cve.now/CVE-2023-39158.md): WordPress Woocommerce Category Banner Management Plugin \<= 2.4.2 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, theDotstore Banner Management For WooCommerce)
- [CVE-2023-41244](https://cve.now/CVE-2023-41244.md): WordPress Localize Remote Images Plugin \<= 1.0.9 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Buildfail Localize Remote Images)
- [CVE-2023-0506](https://cve.now/CVE-2023-0506.md): ByDemes Group Airspace CCTV Web Service Improper Access Control (CVSS 8.8, ByDemes Group Airspace CCTV Web Service)
- [CVE-2023-41693](https://cve.now/CVE-2023-41693.md): WordPress MyCryptoCheckout Plugin \<= 2.125 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, edward\_plainview MyCryptoCheckout)
- [CVE-2023-27435](https://cve.now/CVE-2023-27435.md): WordPress HTTP Auth Plugin \<= 0.3.2 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 6.3, Sami Ahmed Siddiqui HTTP Auth)
- [CVE-2023-32091](https://cve.now/CVE-2023-32091.md): WordPress POEditor Plugin \<= 0.9.4 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, POEditor)
- [CVE-2023-2544](https://cve.now/CVE-2023-2544.md): Authorization Bypass on UPV PEIX (CVSS 5.3, Universitat Politècnica de València (UPV) UPV PEIX)
- [CVE-2023-32792](https://cve.now/CVE-2023-32792.md): Cross-Site Request Forgery on NXLog Manager (CVSS 6.5, NXLog Manager)
- [CVE-2023-40009](https://cve.now/CVE-2023-40009.md): WordPress WP Pipes Plugin \<= 1.4.0 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, ThimPress WP Pipes)
- [CVE-2023-32791](https://cve.now/CVE-2023-32791.md): Cross-Site Request Forgery on NXLog Manager (CVSS 6.5, NXLog Manager)
- [CVE-2023-32790](https://cve.now/CVE-2023-32790.md): XSS on NXLog Manager (CVSS 4.6, NXLog Manager)
- [CVE-2023-39159](https://cve.now/CVE-2023-39159.md): WordPress Fraud Prevention For Woocommerce Plugin \<= 2.1.5 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, theDotstore Fraud Prevention For Woocommerce)
- [CVE-2023-40212](https://cve.now/CVE-2023-40212.md): WordPress WooCommerce Product Attachment Plugin \<= 2.1.8 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, theDotstore Product Attachment for WooCommerce)
- [CVE-2023-40199](https://cve.now/CVE-2023-40199.md): WordPress WP Like Button Plugin \<= 1.7.0 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, CRUDLab WP Like Button)
- [CVE-2023-40198](https://cve.now/CVE-2023-40198.md): WordPress Easy Cookie Law Plugin \<= 3.1 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, Antsanchez Easy Cookie Law)
- [CVE-2023-42508](https://cve.now/CVE-2023-42508.md): JFrog Artifactory Improper header input validation leads to email manipulation sent from the platform (CVSS 6.5, JFrog Artifactory)
- [CVE-2023-32671](https://cve.now/CVE-2023-32671.md): BuddyBoss XSS vulnerability (CVSS 6.3, BuddyBoss)
- [CVE-2023-32670](https://cve.now/CVE-2023-32670.md): BuddyBoss XSS vulnerability (CVSS 9.0, BuddyBoss)
- [CVE-2023-32669](https://cve.now/CVE-2023-32669.md): Authorization Bypass on BuddyBoss (CVSS 5.4, BuddyBoss)
- [CVE-2023-40201](https://cve.now/CVE-2023-40201.md): WordPress Futurio Extra Plugin \<= 1.8.4 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 6.5, FuturioWP Futurio Extra)
- [CVE-2023-2681](https://cve.now/CVE-2023-2681.md): SQL Injection on Jorani (CVSS 8.8, Jorani)
- [CVE-2023-5353](https://cve.now/CVE-2023-5353.md): Improper Access Control in salesagility/suitecrm (CVSS 8.1, salesagility/suitecrm)
- [CVE-2023-40202](https://cve.now/CVE-2023-40202.md): WordPress WP HTML Mail Plugin \<= 3.4.1 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, Hannes Etzelstorfer // codemiq WP HTML Mail)
- [CVE-2023-5351](https://cve.now/CVE-2023-5351.md): Cross-site Scripting (XSS) - Stored in salesagility/suitecrm (CVSS 8.9, salesagility/suitecrm)
- [CVE-2023-5350](https://cve.now/CVE-2023-5350.md): SQL Injection in salesagility/suitecrm (CVSS 6.4, salesagility/suitecrm)
- [CVE-2023-4103](https://cve.now/CVE-2023-4103.md): Multiple vulnerabilities in IDM Sistemas QSige (CVSS 8.8, IDM Sistemas QSige QSige)
- [CVE-2023-4102](https://cve.now/CVE-2023-4102.md): Multiple vulnerabilities in IDM Sistemas QSige (CVSS 8.8, IDM Sistemas QSige QSige)
- [CVE-2022-47893](https://cve.now/CVE-2022-47893.md): NetMan 204 Remote Code Execution (CVSS 10.0, Riello UPS Netman-204)
- [CVE-2023-40210](https://cve.now/CVE-2023-40210.md): WordPress SB Child List Plugin \<= 4.5 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, Sean Barton (Tortoise IT) SB Child List)
- [CVE-2022-47892](https://cve.now/CVE-2022-47892.md): Information disclosure in NetMan 204 (CVSS 5.3, Riello UPS Netman-204)
- [CVE-2023-4101](https://cve.now/CVE-2023-4101.md): Multiple vulnerabilities in IDM Sistemas QSige (CVSS 8.8, IDM Sistemas QSige QSige)
- [CVE-2022-47891](https://cve.now/CVE-2022-47891.md): Admin password reset in NetMan 204 (CVSS 8.1, Riello UPS Netman-204)
- [CVE-2023-2830](https://cve.now/CVE-2023-2830.md): WordPress WP Testimonials Plugin \<= 1.4.2 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, Trustindex.io WP Testimonials)
- [CVE-2023-4100](https://cve.now/CVE-2023-4100.md): Multiple vulnerabilities in IDM Sistemas QSige (CVSS 6.5, IDM Sistemas QSige QSige)
- [CVE-2023-39989](https://cve.now/CVE-2023-39989.md): WordPress Header Footer Code Manager Plugin \<= 1.1.34 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, 99robots Header Footer Code Manager)
- [CVE-2023-39917](https://cve.now/CVE-2023-39917.md): WordPress Photo Gallery by Ays Plugin \<= 5.2.6 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Photo Gallery Team Photo Gallery by Ays – Responsive Image…)
- [CVE-2023-39165](https://cve.now/CVE-2023-39165.md): WordPress Sign-up Sheets Plugin \<= 2.2.8 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, Fetch Designs Sign-up Sheets)
- [CVE-2023-4099](https://cve.now/CVE-2023-4099.md): Multiple vulnerabilities in IDM Sistemas QSige (CVSS 7.6, QSige de IDM Sistemas QSige)
- [CVE-2023-39923](https://cve.now/CVE-2023-39923.md): WordPress The Post Grid Plugin \<= 7.2.7 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, RadiusTheme The Post Grid)
- [CVE-2023-4098](https://cve.now/CVE-2023-4098.md): Multiple vulnerabilities in IDM Sistemas QSige (CVSS 8.8, QSige de IDM Sistemas QSige)
- [CVE-2023-25989](https://cve.now/CVE-2023-25989.md): Cross-Site Request Forgery (CSRF) vulnerability in multiple WordPress plugins by Meks (CVSS 4.3, Meks Video Importer · Meks Time Ago +8)
- [CVE-2023-4097](https://cve.now/CVE-2023-4097.md): Multiple vulnerabilities in IDM Sistemas QSige (CVSS 8.8, IDM Sistemas QSige QSige)
- [CVE-2023-0828](https://cve.now/CVE-2023-0828.md): Stored Cross Site Scripting in syslog section (CVSS 6.7, Artica PFMS Pandora FMS)
- [CVE-2023-24518](https://cve.now/CVE-2023-24518.md): Disabling the administrator's account through cross-site request forgery (CVSS 6.7, Artica PFMS Pandora FMS)
- [CVE-2023-25463](https://cve.now/CVE-2023-25463.md): WordPress wp tell a friend popup form Plugin \<= 7.1 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, Gopi Ramasamy WP tell a friend popup form)
- [CVE-2023-38390](https://cve.now/CVE-2023-38390.md): WordPress Mobile Address Bar Changer Plugin \<= 3.0 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Anshul Labs Mobile Address Bar Changer)
- [CVE-2023-38396](https://cve.now/CVE-2023-38396.md): WordPress Google Map Shortcode Plugin \<= 3.1.2 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, Alain Gonzalez google-map-shortcode)
- [CVE-2023-37990](https://cve.now/CVE-2023-37990.md): WordPress Perelink Pro Plugin \<= 2.1.4 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Mike Perelink Pro)
- [CVE-2023-38398](https://cve.now/CVE-2023-38398.md): WordPress Taboola Plugin \<= 2.0.1 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Taboola)
- [CVE-2022-46841](https://cve.now/CVE-2022-46841.md): WordPress Oxygen Builder Plugin \< 4.4 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, Soflyy Oxygen Builder)
- [CVE-2023-38381](https://cve.now/CVE-2023-38381.md): WordPress WP-FlyBox Plugin \<= 6.46 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, Cyle Conoly WP-FlyBox)
- [CVE-2023-37998](https://cve.now/CVE-2023-37998.md): WordPress Disabler Plugin \<= 3.0.3 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Saas Disabler)
- [CVE-2023-37996](https://cve.now/CVE-2023-37996.md): WordPress GTmetrix for WordPress Plugin \<= 0.4.7 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, GTmetrix for WordPress)
- [CVE-2023-37992](https://cve.now/CVE-2023-37992.md): WordPress Smarty for WordPress Plugin \<= 3.1.35 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, PressPage Entertainment Smarty for WordPress)
- [CVE-2023-37991](https://cve.now/CVE-2023-37991.md): WordPress WP Emoji One Plugin \<= 0.6.0 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Monchito.net WP Emoji One)
- [CVE-2023-37891](https://cve.now/CVE-2023-37891.md): WordPress Exit Popups & Onsite Retargeting by OptiMonk Plugin \<= 2.0.4 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, OptiMonk: Popups, Personalization & A/B Testing)
- [CVE-2023-3654](https://cve.now/CVE-2023-3654.md): Origin Check Bypass (CVSS 9.4, PoS/ Dienstleistung, Entwicklung & Vertrieb cashIT! - servi…)
- [CVE-2023-44218](https://cve.now/CVE-2023-44218.md): A flaw within the SonicWall NetExtender Pre-Logon feature enables an unauthorized user to gain access to the host Windows operating system (CVSS 8.8, SonicWall NetExtender)
- [CVE-2023-44217](https://cve.now/CVE-2023-44217.md): A local privilege escalation vulnerability in SonicWall Net Extender MSI client for Windows 10.2.336 and earlier versions allows a local lo (CVSS 7.8, SonicWall NetExtender)
- [CVE-2023-3655](https://cve.now/CVE-2023-3655.md): Unauthenticated Remote Database Exfiltration (CVSS 7.5, PoS/ Dienstleistung, Entwicklung & Vertrieb cashIT! - servi…)
- [CVE-2023-3656](https://cve.now/CVE-2023-3656.md): Unauthenticated Remote Code Execution (CVSS 9.8, PoS/ Dienstleistung, Entwicklung & Vertrieb cashIT! - servi…)
- [CVE-2023-33039](https://cve.now/CVE-2023-33039.md): Use After Free in Automotive Display (CVSS 8.4, Qualcomm Snapdragon)
- [CVE-2023-33035](https://cve.now/CVE-2023-33035.md): Buffer Copy Without Checking Size of Input in Audio (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2023-33034](https://cve.now/CVE-2023-33034.md): Signed-to-unsigned conversion error in Audio (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2023-33029](https://cve.now/CVE-2023-33029.md): Use After Free in DSP Service (CVSS 8.4, Qualcomm Snapdragon)
- [CVE-2023-33028](https://cve.now/CVE-2023-33028.md): Buffer Copy without Checking Size of Input in WLAN Firmware (CVSS 9.8, Qualcomm Snapdragon)
- [CVE-2023-33027](https://cve.now/CVE-2023-33027.md): Buffer Over-read in WLAN Firmware (CVSS 7.5, Qualcomm Snapdragon)
- [CVE-2023-33026](https://cve.now/CVE-2023-33026.md): Buffer over-read in WLAN Firmware (CVSS 7.5, Qualcomm Snapdragon)
- [CVE-2023-28571](https://cve.now/CVE-2023-28571.md): Buffer Over-read in WLAN HOST (CVSS 6.1, Qualcomm Snapdragon)
- [CVE-2023-28540](https://cve.now/CVE-2023-28540.md): Improper Authentication in Data Modem (CVSS 9.1, Qualcomm Snapdragon)
- [CVE-2023-28539](https://cve.now/CVE-2023-28539.md): Buffer Copy Without Checking Size of Input in WLAN Host (CVSS 6.6, Qualcomm Snapdragon)
- [CVE-2023-24855](https://cve.now/CVE-2023-24855.md): Use of Out-of-range Pointer Offset in Modem (CVSS 9.8, Qualcomm Snapdragon)
- [CVE-2023-24853](https://cve.now/CVE-2023-24853.md): Improper Input Validation in HLOS (CVSS 8.4, Qualcomm Snapdragon)
- [CVE-2023-24850](https://cve.now/CVE-2023-24850.md): Improper Validation of Array Index in HLOS (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2023-24849](https://cve.now/CVE-2023-24849.md): Buffer Over-read in Data Modem (CVSS 8.2, Qualcomm Snapdragon)
- [CVE-2023-24848](https://cve.now/CVE-2023-24848.md): Buffer Over-read in Data Modem (CVSS 8.2, Qualcomm Snapdragon)
- [CVE-2023-24847](https://cve.now/CVE-2023-24847.md): NULL pointer Dereference in Modem (CVSS 7.5, Qualcomm Snapdragon)
- [CVE-2023-24844](https://cve.now/CVE-2023-24844.md): Improper Access Control in Core (CVSS 8.4, Qualcomm Snapdragon)
- [CVE-2023-24843](https://cve.now/CVE-2023-24843.md): Reachable Assertion in Modem (CVSS 7.5, Qualcomm Snapdragon)
- [CVE-2023-22385](https://cve.now/CVE-2023-22385.md): Buffer Over-read in Data Modem (CVSS 8.2, Qualcomm Snapdragon)
- [CVE-2023-22384](https://cve.now/CVE-2023-22384.md): Buffer Copy Without Checking Size of Input in VR Service (CVSS 6.7, Qualcomm Snapdragon)
- [CVE-2023-22382](https://cve.now/CVE-2023-22382.md): Improper Input Validation in Automotive (CVSS 7.4, Qualcomm Snapdragon)
- [CVE-2023-21673](https://cve.now/CVE-2023-21673.md): Improper Access Control in Kernel (CVSS 8.7, Qualcomm Snapdragon)
- [CVE-2023-26152](https://cve.now/CVE-2023-26152.md): All versions of the package static-server are vulnerable to Directory Traversal due to improper input sanitization passed via the validPath (CVSS 7.5, static-server)
- [CVE-2023-26150](https://cve.now/CVE-2023-26150.md): Versions of the package asyncua before 0.9.96 are vulnerable to Improper Authentication such that it is possible to access Address Space wit (CVSS 6.5, asyncua)
- [CVE-2023-26151](https://cve.now/CVE-2023-26151.md): Versions of the package asyncua before 0.9.96 are vulnerable to Denial of Service (DoS) such that an attacker can send a malformed packet an (CVSS 5.3, asyncua)
- [CVE-2023-5345](https://cve.now/CVE-2023-5345.md): Use-after-free in Linux kernel's fs/smb/client component (CVSS 7.8, Linux Kernel)
- [CVE-2023-5334](https://cve.now/CVE-2023-5334.md): WP Responsive header image slider \<= 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, wponlinesupport WP Responsive header image slider)
- [CVE-2023-3440](https://cve.now/CVE-2023-3440.md): File and Directory Permission Vulnerability in JP1/Performance Management (CVSS 8.4, Hitachi JP1/Performance Management - Manager · Hitachi… +22)
- [CVE-2023-3967](https://cve.now/CVE-2023-3967.md): DoS Vulnerability in Hitachi Ops Center Common Services (CVSS 5.3, Hitachi Ops Center Common Services)
- [CVE-2023-3335](https://cve.now/CVE-2023-3335.md): Information Exposure Vulnerability in Hitachi Ops Center Administrator (CVSS 6.5, Hitachi Ops Center Administrator)
- [CVE-2023-43627](https://cve.now/CVE-2023-43627.md): Path traversal vulnerability in ACERA 1320 firmware ver.01.26 and earlier, and ACERA 1310 firmware ver.01.26 and earlier allows a network-ad (no CVSS, FURUNO SYSTEMS Co. ACERA)
- [CVE-2023-42771](https://cve.now/CVE-2023-42771.md): Authentication bypass vulnerability in ACERA 1320 firmware ver.01.26 and earlier, and ACERA 1310 firmware ver.01.26 and earlier allows a net (CVSS 8.3, FURUNO SYSTEMS Co. ACERA)
- [CVE-2023-41086](https://cve.now/CVE-2023-41086.md): Cross-site request forgery (CSRF) vulnerability exists in FURUNO SYSTEMS wireless LAN access point devices. (no CVSS, FURUNO SYSTEMS Co. ACERA)
- [CVE-2023-39429](https://cve.now/CVE-2023-39429.md): Cross-site scripting vulnerability in FURUNO SYSTEMS wireless LAN access point devices allows an authenticated user to inject an arbitrary s (no CVSS, FURUNO SYSTEMS Co. ACERA)
- [CVE-2023-39222](https://cve.now/CVE-2023-39222.md): OS command injection vulnerability in FURUNO SYSTEMS wireless LAN access point devices allows an authenticated user to execute an arbitrary (no CVSS, FURUNO SYSTEMS Co. ACERA)
- [CVE-2023-33268](https://cve.now/CVE-2023-33268.md): An issue was discovered in DTS Monitoring 3.57.0. (no CVSS)
- [CVE-2023-33269](https://cve.now/CVE-2023-33269.md): An issue was discovered in DTS Monitoring 3.57.0. (no CVSS)
- [CVE-2023-33270](https://cve.now/CVE-2023-33270.md): An issue was discovered in DTS Monitoring 3.57.0. (no CVSS)
- [CVE-2023-33271](https://cve.now/CVE-2023-33271.md): An issue was discovered in DTS Monitoring 3.57.0. (no CVSS)
- [CVE-2023-33272](https://cve.now/CVE-2023-33272.md): An issue was discovered in DTS Monitoring 3.57.0. (no CVSS)
- [CVE-2023-33273](https://cve.now/CVE-2023-33273.md): An issue was discovered in DTS Monitoring 3.57.0. (no CVSS)
- [CVE-2023-39645](https://cve.now/CVE-2023-39645.md): Improper neutralization of SQL parameter in Theme Volty CMS Payment Icon module for PrestaShop. (no CVSS)
- [CVE-2023-39646](https://cve.now/CVE-2023-39646.md): Improper neutralization of SQL parameter in Theme Volty CMS Category Chain Slider module for PrestaShop. (no CVSS)
- [CVE-2023-39647](https://cve.now/CVE-2023-39647.md): Improper neutralization of SQL parameter in Theme Volty CMS Category Product module for PrestaShop. (no CVSS)
- [CVE-2023-39648](https://cve.now/CVE-2023-39648.md): Improper neutralization of SQL parameter in Theme Volty CMS Testimonial module for PrestaShop. (no CVSS)
- [CVE-2023-39649](https://cve.now/CVE-2023-39649.md): Improper neutralization of SQL parameter in Theme Volty CMS Category Slider module for PrestaShop. (no CVSS)
- [CVE-2023-39651](https://cve.now/CVE-2023-39651.md): Improper neutralization of SQL parameter in Theme Volty CMS BrandList module for PrestaShop In the module “Theme Volty CMS BrandList” (tvcms (no CVSS)
- [CVE-2023-40519](https://cve.now/CVE-2023-40519.md): A cross-site scripting (XSS) vulnerability in the bpk-common/auth/login/index.html login portal in Broadpeak Centralized Accounts Management (no CVSS)
- [CVE-2023-40830](https://cve.now/CVE-2023-40830.md): Tenda AC6 v15.03.05.19 is vulnerable to Buffer Overflow as the Index parameter does not verify the length. (CVSS 9.8)
- [CVE-2023-43176](https://cve.now/CVE-2023-43176.md): A deserialization vulnerability in Afterlogic Aurora Files v9.7.3 allows attackers to execute arbitrary code via supplying a crafted .sabred (no CVSS)
- [CVE-2023-43898](https://cve.now/CVE-2023-43898.md): Nothings stb 2.28 was discovered to contain a Null Pointer Dereference via the function stbi\_\_convert\_format. (CVSS 5.5)
- [CVE-2023-43951](https://cve.now/CVE-2023-43951.md): SSCMS 7.2.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the Column Management component. (no CVSS)
- [CVE-2023-43952](https://cve.now/CVE-2023-43952.md): SSCMS 7.2.2 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Material Management component. (no CVSS)
- [CVE-2023-43953](https://cve.now/CVE-2023-43953.md): SSCMS 7.2.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the Content Management component. (no CVSS)
- [CVE-2023-43976](https://cve.now/CVE-2023-43976.md): An issue in CatoNetworks CatoClient before v.5.4.0 allows attackers to escalate privileges and winning the race condition (TOCTOU) via the P (no CVSS)
- [CVE-2023-44973](https://cve.now/CVE-2023-44973.md): An arbitrary file upload vulnerability in the component /content/templates/ of Emlog Pro v2.2.0 allows attackers to execute arbitrary code v (no CVSS)
- [CVE-2023-44974](https://cve.now/CVE-2023-44974.md): An arbitrary file upload vulnerability in the component /admin/plugin.php of Emlog Pro v2.2.0 allows attackers to execute arbitrary code via (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-10-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.