# CVEs published 2023-10-04

105 CVEs were published on October 4, 2023: 14 critical, 25 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2023-43809](https://cve.now/CVE-2023-43809.md): Soft Serve Public Key Authentication Bypass Vulnerability when Keyboard-Interactive SSH Authentication is Enabled (CVSS 7.5, charmbracelet soft-serve · github.com/charmbracelet/soft-se…)
- [CVE-2023-43799](https://cve.now/CVE-2023-43799.md): The Altair Desktop Client Does Not Sanitize External URLs before passing them to the underlying system (CVSS 5.0, altair-graphql altair)
- [CVE-2023-43805](https://cve.now/CVE-2023-43805.md): Nexkey allows users to bypass authentication of Bull dashboard (CVSS 7.5, nexryai nexkey)
- [CVE-2023-43793](https://cve.now/CVE-2023-43793.md): Misskey allows users to bypass authentication of Bull dashboard (CVSS 7.5, misskey-dev misskey)
- [CVE-2023-44389](https://cve.now/CVE-2023-44389.md): Zope management interface vulnerable to stored cross site scripting via the title property (CVSS 3.1, zopefoundation Zope · zope)
- [CVE-2023-41094](https://cve.now/CVE-2023-41094.md): Touchlink authentication bypass due to packets processed after timeout or out of range in Ember ZNet (CVSS 10.0, Silicon Labs Ember ZNet)
- [CVE-2023-44210](https://cve.now/CVE-2023-44210.md): Sensitive information disclosure and manipulation due to missing authorization. (CVSS 7.3, Acronis Cyber Protect Cloud Agent · Acronis Cyber Protect)
- [CVE-2023-44209](https://cve.now/CVE-2023-44209.md): Local privilege escalation due to improper soft link handling. (CVSS 5.6, Acronis Cyber Protect Cloud Agent · Acronis Cyber Protect)
- [CVE-2023-42809](https://cve.now/CVE-2023-42809.md): Redisson unsafe deserialization vulnerability (CVSS 9.7, redisson · org.redisson:redisson)
- [CVE-2023-42808](https://cve.now/CVE-2023-42808.md): Common Voice Cross-site Scripting vulnerability (CVSS 6.1, Mozilla common-voice)
- [CVE-2023-38538](https://cve.now/CVE-2023-38538.md): A race condition in an event subsystem led to a heap use-after-free issue in established audio/video calls that could have resulted in app t (CVSS 5.0, Facebook WhatsApp Desktop for Mac · Facebook WhatsApp De… +4)
- [CVE-2023-38537](https://cve.now/CVE-2023-38537.md): A race condition in a network transport subsystem led to a heap use-after-free issue in established or unsilenced incoming audio/video calls (CVSS 5.6, Facebook WhatsApp Desktop for Mac · Facebook WhatsApp De… +4)
- [CVE-2023-42449](https://cve.now/CVE-2023-42449.md): Malicious head initialiser can extract PTs from control of Hydra scripts, leading to locked participant commits or spoofed commits (CVSS 8.1, input-output-hk hydra)
- [CVE-2023-42448](https://cve.now/CVE-2023-42448.md): Hydra's contestation period in head datum can be modified during Close transaction, allowing malicious participant to freely modify the contestation deadline (CVSS 8.1, input-output-hk hydra)
- [CVE-2023-38701](https://cve.now/CVE-2023-38701.md): Hydra's committed UTxOs at Commit validator and UTxOs at Initial validator can be spent arbitrarily by anyone (CVSS 9.1, input-output-hk hydra)
- [CVE-2023-5391](https://cve.now/CVE-2023-5391.md): A CWE-502: Deserialization of untrusted data vulnerability exists that could allow an attacker to execute arbitrary code on the targeted (CVSS 9.8, Schneider Electric EcoStruxure Power Monitoring Expert ·… +1)
- [CVE-2023-5399](https://cve.now/CVE-2023-5399.md): A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause tamperin (CVSS 9.8, Schneider Electric C-Bus Toolkit)
- [CVE-2023-39191](https://cve.now/CVE-2023-39191.md): Kernel: ebpf: insufficient stack type checks in dynptr (CVSS 8.2, Red Hat Enterprise Linux)
- [CVE-2023-3576](https://cve.now/CVE-2023-3576.md): Libtiff: memory leak in tiffcrop.c (CVSS 5.5, Red Hat Enterprise Linux)
- [CVE-2023-3428](https://cve.now/CVE-2023-3428.md): Imagemagick: heap-buffer-overflow in coders/tiff.c (CVSS 6.2, Red Hat Enterprise Linux)
- [CVE-2023-42824](https://cve.now/CVE-2023-42824.md): The issue was addressed with improved checks. (CVSS 7.8, KEV, Apple iOS and iPadOS)
- [CVE-2023-5402](https://cve.now/CVE-2023-5402.md): A CWE-269: Improper Privilege Management vulnerability exists that could cause a remote code execution when the transfer command is used (CVSS 9.8, Schneider Electric C-Bus Toolkit)
- [CVE-2023-20235](https://cve.now/CVE-2023-20235.md): A vulnerability in the on-device application development workflow feature for the Cisco IOx application hosting infrastructure in Cisco IOS (CVSS 6.5, Cisco IOS XE Software)
- [CVE-2023-20259](https://cve.now/CVE-2023-20259.md): A vulnerability in an API endpoint of multiple Cisco Unified Communications Products could allow an unauthenticated, remote attacker to caus (CVSS 8.6, Cisco Emergency Responder · Cisco Unity Connection +2)
- [CVE-2023-20101](https://cve.now/CVE-2023-20101.md): A vulnerability in Cisco Emergency Responder could allow an unauthenticated, remote attacker to log in to an affected device using the root (CVSS 9.8, Cisco Emergency Responder)
- [CVE-2023-43804](https://cve.now/CVE-2023-43804.md): \`Cookie\` HTTP header isn't stripped on cross-origin redirects (CVSS 5.9, urllib3)
- [CVE-2023-5371](https://cve.now/CVE-2023-5371.md): Memory Allocation with Excessive Size Value in Wireshark (CVSS 5.3, Wireshark Foundation Wireshark)
- [CVE-2022-36277](https://cve.now/CVE-2022-36277.md): SQL injection vulnerability in TCMAN GIM (CVSS 6.5, TCMAN GIM)
- [CVE-2022-36276](https://cve.now/CVE-2022-36276.md): SQL injection vulnerability in TCMAN GIM (CVSS 9.9, TCMAN GIM)
- [CVE-2021-3784](https://cve.now/CVE-2021-3784.md): Garuda Linux Improper Authorization (CVSS 5.3, Garuda Linux)
- [CVE-2023-3665](https://cve.now/CVE-2023-3665.md): A code injection vulnerability in Trellix ENS 10.7.0 April 2023 release and earlier, allowed a local user to disable the ENS AMSI component (CVSS 5.5, Trellix Endpoint Security)
- [CVE-2023-3971](https://cve.now/CVE-2023-3971.md): Controller: html injection in custom login info (CVSS 7.3, Red Hat Ansible Automation Platform 2.3 for RHEL · Red Hat…)
- [CVE-2023-4380](https://cve.now/CVE-2023-4380.md): Platform: token exposed at importing project (CVSS 6.3, Red Hat Ansible Automation Platform 2.4 for RHEL)
- [CVE-2023-4237](https://cve.now/CVE-2023-4237.md): Platform: ec2\_key module prints out the private key directly to the standard output (CVSS 7.3, Red Hat Ansible Automation Platform 2.4 for RHEL · ansible-…)
- [CVE-2023-5113](https://cve.now/CVE-2023-5113.md): Certain HP Enterprise LaserJet, LaserJet Managed printers - Potential denial of service, potential Cross Site Scripting (XSS) (no CVSS, Certain HP Enterprise LaserJet, LaserJet Managed printers)
- [CVE-2023-40559](https://cve.now/CVE-2023-40559.md): WordPress WooCommerce Dynamic Pricing and Discount Rules Plugin \<= 2.4.0 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, theDotstore Dynamic Pricing and Discount Rules for WooComme…)
- [CVE-2023-22515](https://cve.now/CVE-2023-22515.md): Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited a previously unknow (CVSS 10.0, KEV, Atlassian Confluence Data Center · Atlassian Confluence Ser…)
- [CVE-2023-40561](https://cve.now/CVE-2023-40561.md): Enhanced Ecommerce Google Analytics for WooCommerce (CVSS 5.4, theDotstore Enhanced Ecommerce Google Analytics for WooComm…)
- [CVE-2023-27433](https://cve.now/CVE-2023-27433.md): WordPress Make Paths Relative Plugin \<= 1.3.0 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, YAS Global Team Make Paths Relative)
- [CVE-2022-43906](https://cve.now/CVE-2022-43906.md): IBM Security Guardium information disclosure (CVSS 3.1, IBM Security Guardium)
- [CVE-2023-40376](https://cve.now/CVE-2023-40376.md): IBM UrbanCode Deploy (UCD) improper authentication controls (CVSS 5.3, IBM UrbanCode Deploy)
- [CVE-2023-40684](https://cve.now/CVE-2023-40684.md): IBM Content Navigator cross-site scripting (CVSS 4.6, IBM Content Navigator)
- [CVE-2023-5374](https://cve.now/CVE-2023-5374.md): SourceCodester Online Computer and Laptop Store products.php sql injection (CVSS 6.3, SourceCodester Online Computer and Laptop Store)
- [CVE-2023-25025](https://cve.now/CVE-2023-25025.md): WordPress WP-CopyProtect \[Protect your blog posts\] Plugin \<= 3.1.0 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Chetan Gole WP-CopyProtect \[Protect your blog posts\])
- [CVE-2023-1832](https://cve.now/CVE-2023-1832.md): Improper authorization check in the server component (CVSS 6.8, candlepin-4.3.7 · candlepin-4.3.8 +1)
- [CVE-2023-4497](https://cve.now/CVE-2023-4497.md): Easy Chat Server XSS vulnerability (CVSS 6.1, EFS Software Easy Chat Server)
- [CVE-2023-4496](https://cve.now/CVE-2023-4496.md): Easy Chat Server XSS vulnerability (CVSS 6.1, EFS Software Easy Chat Server)
- [CVE-2023-5373](https://cve.now/CVE-2023-5373.md): SourceCodester Online Computer and Laptop Store Master.php register sql injection (CVSS 7.3, SourceCodester Online Computer and Laptop Store)
- [CVE-2023-4495](https://cve.now/CVE-2023-4495.md): Easy Chat Server XSS vulnerability (CVSS 6.1, EFS Software Easy Chat Server)
- [CVE-2023-4494](https://cve.now/CVE-2023-4494.md): Easy Chat Server Stack-based buffer overflow vulnerability (CVSS 9.8, EFS Software Easy Chat Server)
- [CVE-2023-4493](https://cve.now/CVE-2023-4493.md): Easy Address Book Web Server Stored XSS vulnerability (CVSS 6.1, EFS Software Easy Address Book Web Server)
- [CVE-2023-4492](https://cve.now/CVE-2023-4492.md): Easy Address Book Web Server XSS vulnerability (CVSS 6.1, EFS Software Easy Address Book Web Server)
- [CVE-2023-4491](https://cve.now/CVE-2023-4491.md): Easy Address Book Web Server Buffer overflow vulnerability (CVSS 9.8, EFS Software Easy Address Book Web Server)
- [CVE-2023-44208](https://cve.now/CVE-2023-44208.md): Sensitive information disclosure and manipulation due to missing authorization. (CVSS 7.8, Acronis Cyber Protect Home Office · Acronis True Image OEM)
- [CVE-2023-3361](https://cve.now/CVE-2023-3361.md): S3 credentials included when exporting elyra notebook (CVSS 7.7, odh-dashboard · Red Hat OpenShift Data Science)
- [CVE-2022-4132](https://cve.now/CVE-2022-4132.md): Memory leak on tls connections (CVSS 5.9, jss · Red Hat Enterprise Linux +3)
- [CVE-2023-3153](https://cve.now/CVE-2023-3153.md): Service monitor mac flow is not rate limited (CVSS 5.3, ovn · Red Hat Fast Datapath for RHEL +3)
- [CVE-2023-3038](https://cve.now/CVE-2023-3038.md): HelpDezk Community improper authorization (CVSS 9.8, HelpDezk Community)
- [CVE-2023-3037](https://cve.now/CVE-2023-3037.md): HelpDezk Community improper authorization (CVSS 8.6, HelpDezk Community)
- [CVE-2023-4037](https://cve.now/CVE-2023-4037.md): SQL injection in Setelsa Security ConacWin (CVSS 9.9, Setelsa Security ConacWin)
- [CVE-2023-4090](https://cve.now/CVE-2023-4090.md): Cross-Site Scripting (XSS) vulnerability on WideStand CMS of Acilia (CVSS 5.4, Acilia Widestand CMS)
- [CVE-2023-2422](https://cve.now/CVE-2023-2422.md): Keycloak: oauth client impersonation (CVSS 5.5, Red Hat Single Sign-On · Red Hat RHEL-8 based Middleware… +1)
- [CVE-2023-3701](https://cve.now/CVE-2023-3701.md): Relative path traversal in Aqua eSolutions (CVSS 9.9, Aqua eSolutions Aqua Drive)
- [CVE-2023-4997](https://cve.now/CVE-2023-4997.md): Improper authorisation in Uptime DC (CVSS 8.8, ProIntegra S.A. UptimeDC)
- [CVE-2023-3512](https://cve.now/CVE-2023-3512.md): Relative path traversal in Setelsa Security ConacWin CB (CVSS 7.5, Setelsa Security ConacWin CB)
- [CVE-2023-2809](https://cve.now/CVE-2023-2809.md): Use of Cleartext credentials in Sage 200 Spain (CVSS 7.8, Sage 200 Spain)
- [CVE-2023-1584](https://cve.now/CVE-2023-1584.md): Quarkus-oidc: id and access tokens leak via the authorization code flow (CVSS 7.5, quarkus-oidc · Red Hat build of Quarkus 2.13.8.Final +2)
- [CVE-2023-4586](https://cve.now/CVE-2023-4586.md): Hotrod-client: hot rod client does not enable hostname validation when using tls that lead to a mitm attack (CVSS 7.4, Red Hat Data Grid)
- [CVE-2023-25489](https://cve.now/CVE-2023-25489.md): WordPress Update Theme and Plugins from Zip File Plugin \<= 2.0.0 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Jeff Sherk Update Theme and Plugins from Zip File)
- [CVE-2023-25788](https://cve.now/CVE-2023-25788.md): WordPress Saphali Woocommerce Lite Plugin \<= 1.8.13 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 6.3, Saphali Woocommerce Lite)
- [CVE-2023-25980](https://cve.now/CVE-2023-25980.md): WordPress Optimize Database after Deleting Revisions Plugin \<= 5.1 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, CAGE Web Design | Rolf van Gelder Optimize Database after D…)
- [CVE-2023-37995](https://cve.now/CVE-2023-37995.md): WordPress WP-CopyProtect \[Protect your blog posts\] Plugin \<= 3.1.0 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Chetan Gole WP-CopyProtect \[Protect your blog posts\])
- [CVE-2023-5377](https://cve.now/CVE-2023-5377.md): Out-of-bounds Read in gpac/gpac (CVSS 5.5, gpac/gpac)
- [CVE-2023-5375](https://cve.now/CVE-2023-5375.md): Open Redirect in mosparo/mosparo (CVSS 4.3, mosparo/mosparo)
- [CVE-2023-44272](https://cve.now/CVE-2023-44272.md): A cross-site scripting vulnerability exists in Citadel versions prior to 994. (no CVSS, Citadel)
- [CVE-2023-5370](https://cve.now/CVE-2023-5370.md): arm64 boot CPUs may lack speculative execution protections (no CVSS, FreeBSD)
- [CVE-2023-5369](https://cve.now/CVE-2023-5369.md): copy\_file\_range insufficient capability rights check (no CVSS, FreeBSD)
- [CVE-2023-5368](https://cve.now/CVE-2023-5368.md): msdosfs data disclosure (no CVSS, FreeBSD)
- [CVE-2023-30738](https://cve.now/CVE-2023-30738.md): An improper input validation in UEFI Firmware prior to Firmware update Oct-2023 Release in Galaxy Book, Galaxy Book Pro, Galaxy Book Pro 360 (CVSS 5.5, Samsung Mobile Galaxy Book, Galaxy Book Pro, Galaxy Book Pr…)
- [CVE-2023-30737](https://cve.now/CVE-2023-30737.md): Improper access control vulnerability in Samsung Health prior to version 6.24.3.007 allows attackers to access sensitive information via imp (CVSS 4.0, Samsung Mobile Samsung Health)
- [CVE-2023-30736](https://cve.now/CVE-2023-30736.md): Improper authorization in PushMsgReceiver of Samsung Assistant prior to version 8.7.00.1 allows attacker to execute javascript interface. (CVSS 4.4, Samsung Mobile Samsung Assistant)
- [CVE-2023-30735](https://cve.now/CVE-2023-30735.md): Improper Preservation of Permissions vulnerability in SAssistant prior to version 8.7 allows local attackers to access backup data in SAssis (CVSS 5.1, Samsung Mobile SAssistant)
- [CVE-2023-30734](https://cve.now/CVE-2023-30734.md): Improper access control vulnerability in Samsung Health prior to version 6.24.3.007 allows attackers to access sensitive information via imp (CVSS 4.0, Samsung Mobile Samsung Health)
- [CVE-2023-30733](https://cve.now/CVE-2023-30733.md): Stack-based Buffer Overflow in vulnerability HDCP trustlet prior to SMR Oct-2023 Release 1 allows local privileged attackers to perform code (CVSS 7.8, Samsung Mobile Devices)
- [CVE-2023-30732](https://cve.now/CVE-2023-30732.md): Improper access control in system property prior to SMR Oct-2023 Release 1 allows local attacker to get CPU serial number. (CVSS 5.5, Samsung Mobile Devices)
- [CVE-2023-30731](https://cve.now/CVE-2023-30731.md): Logic error in package installation via debugger command prior to SMR Oct-2023 Release 1 allows physical attacker to install an application (CVSS 5.7, Samsung Mobile Devices)
- [CVE-2023-30727](https://cve.now/CVE-2023-30727.md): Improper access control vulnerability in SecSettings prior to SMR Oct-2023 Release 1 allows attackers to enable Wi-Fi and connect arbitrary (CVSS 6.7, Samsung Mobile Devices)
- [CVE-2023-30692](https://cve.now/CVE-2023-30692.md): Improper input validation vulnerability in Evaluator prior to SMR Oct-2023 Release 1 allows local attackers to launch privileged activities. (CVSS 8.5, Samsung Mobile Devices)
- [CVE-2023-30690](https://cve.now/CVE-2023-30690.md): Improper input validation vulnerability in Duo prior to SMR Oct-2023 Release 1 allows local attackers to launch privileged activities. (CVSS 8.5, Samsung Mobile Devices)
- [CVE-2023-5291](https://cve.now/CVE-2023-5291.md): Blog Filter \<= 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, awordpresslife Blog Filter Post Filtering)
- [CVE-2023-3213](https://cve.now/CVE-2023-3213.md): WP Mail SMTP Pro \<= 3.8.0 - Missing Authorization to Information Dislcosure via is\_print\_page (CVSS 5.3, WPForms (Awesome Motive) WP Mail SMTP Pro)
- [CVE-2023-5357](https://cve.now/CVE-2023-5357.md): Instagram for WordPress \<= 2.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, esemono Instagram for WordPress)
- [CVE-2023-37404](https://cve.now/CVE-2023-37404.md): IBM Observability with Instana code execution (CVSS 6.4, IBM Observability with Instana)
- [CVE-2023-35905](https://cve.now/CVE-2023-35905.md): IBM FileNet Content Manager cross-site scripting (CVSS 4.6, IBM FileNet Content Manager)
- [CVE-2023-22618](https://cve.now/CVE-2023-22618.md): If Security Hardening guide rules are not followed, then Nokia WaveLite products allow a local user to create new users with administrative (CVSS 8.1)
- [CVE-2023-27121](https://cve.now/CVE-2023-27121.md): A cross-site scripting (XSS) vulnerability in the component /framework/cron/action/humanize of Pleasant Solutions Pleasant Password Server v (no CVSS)
- [CVE-2023-35803](https://cve.now/CVE-2023-35803.md): IQ Engine before 10.6r2 on Extreme Network AP devices has a Buffer Overflow. (no CVSS)
- [CVE-2023-36618](https://cve.now/CVE-2023-36618.md): Atos Unify OpenScape Session Border Controller through V10 R3.01.03 allows execution of OS commands as root user by low-privileged authentic (no CVSS)
- [CVE-2023-36619](https://cve.now/CVE-2023-36619.md): Atos Unify OpenScape Session Border Controller through V10 R3.01.03 allows execution of administrative scripts by unauthenticated users. (no CVSS)
- [CVE-2023-40299](https://cve.now/CVE-2023-40299.md): Kong Insomnia 2023.4.0 on macOS allows attackers to execute code and access restricted files, or make requests for TCC permissions, by using (no CVSS)
- [CVE-2023-43261](https://cve.now/CVE-2023-43261.md): An information disclosure in Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 allows attackers to access sensitive router components (CVSS 7.5)
- [CVE-2023-43321](https://cve.now/CVE-2023-43321.md): File Upload vulnerability in Digital China Networks DCFW-1800-SDC v.3.0 allows an authenticated attacker to execute arbitrary code via the w (no CVSS)
- [CVE-2023-43838](https://cve.now/CVE-2023-43838.md): An arbitrary file upload vulnerability in Personal Management System v1.4.64 allows attackers to execute arbitrary code via uploading a craf (no CVSS)
- [CVE-2023-43877](https://cve.now/CVE-2023-43877.md): Rite CMS 3.0 has Multiple Cross-Site scripting (XSS) vulnerabilities that allow attackers to execute arbitrary code via a payload crafted in (no CVSS)
- [CVE-2023-44075](https://cve.now/CVE-2023-44075.md): Cross Site Scripting vulnerability in Small CRM in PHP v.3.0 allows a remote attacker to execute arbitrary code via a crafted payload to the (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-10-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.