CVEs published October 5, 2023
59 CVEs were published on October 5, 2023: 6 critical, 21 high.
- Published
- 59
- Critical
- 6
- High
- 21
- Medium
- 22
- Low
- 2
- Unrated
- 8
- Now in CISA KEV
- 0
- Fix available
- 18
Most affected products
- Dell SmartFabric Storage Software
- 8
- Acronis Cyber Protect Cloud Agent · Acronis Cyber Protect
- 5
- Acronis Agent
- 3
- 1E Client
- 2
- libtiff · Red Hat Enterprise Linux
- 2
- Red Hat Enterprise Linux
- 2
- Go toolchain cmd/go · toolchain
- 1
- Google Chrome
- 1
- gradle
- 1
- kubernetes · Red Hat Advanced Cluster Management for Kub… +3
- 1
Critical 6
- CVE-2023-32485 Dell SmartFabric Storage Software version 1.3 and lower contain an improper input validation vulnerability.Dell SmartFabric Storage Software
- CVE-2023-2306Qognify NiceVision Use of Hard-coded CredentialsQognify NiceVision
- CVE-2023-40920Prixan prixanconnect up to v1.62 was discovered to contain a SQL injection vulnerability via the component CartsGuruCatalogModuleFrontContro
- CVE-2023-43269pigcms up to 7.0 was discovered to contain an arbitrary file upload vulnerability.
- CVE-2023-43981Presto Changeo testsitecreator up to 1.1.1 was discovered to contain a deserialization vulnerability via the component delete_excluded_folde
- CVE-2023-43983Presto Changeo attributegrid up to 2.0.3 was discovered to contain a SQL injection vulnerability via the component disable_json.php.
High 21
- CVE-2023-44211Sensitive information disclosure and manipulation due to missing authorization.Acronis Cyber Protect Cloud Agent · Acronis Cyber Protect
- CVE-2023-44212Sensitive information disclosure and manipulation due to missing authorization.Acronis Agent
- CVE-2023-39323Arbitrary code execution during build via line directives in cmd/goGo toolchain cmd/go · toolchain
- CVE-2023-43069 Dell SmartFabric Storage Software v1.4 (and earlier) contain(s) an OS Command Injection Vulnerability in the CLI.Dell SmartFabric Storage Software
- CVE-2023-43068 Dell SmartFabric Storage Software v1.4 (and earlier) contains an OS Command Injection Vulnerability in the restricted shell in SSH.Dell SmartFabric Storage Software
- CVE-2023-5346Type confusion in V8 in Google Chrome prior to 117.0.5938.149 allowed a remote attacker to potentially exploit heap corruption via a craftedGoogle Chrome
- CVE-2023-4401 Dell SmartFabric Storage Software v1.4 (and earlier) contains an OS Command Injection Vulnerability in the CLI use of the ‘more’ command.Dell SmartFabric Storage Software
- CVE-2023-4570Improper Restriction in NI MeasurementLink Python ServicesNI MeasurementLink · ni-measurementlink-service
- CVE-2023-45160Elevated Temp Directory Execution in 1E Client1E Client
- CVE-2023-451591E Client installer can perform arbitrary file deletion on protected files1E Client
- CVE-2023-43284D-Link Wireless MU-MIMO Gigabit AC1200 Router DIR-846 100A53DBR-Retail devices allow an authenticated remote attacker to execute arbitrary c
- CVE-2023-44828D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the CurrentPassword parameter in the CheckPasswdSettings functio
- CVE-2023-44829D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the AdminPassword parameter in the SetDeviceSettings function.
- CVE-2023-44830D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the EndTime parameter in the SetParentsControlInfo function.
- CVE-2023-44831D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Type parameter in the SetWLanRadioSettings function.
- CVE-2023-44832D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the MacAddress parameter in the SetWanSettings function.
- CVE-2023-44833D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the GuardInt parameter in the SetWLanRadioSettings function.
- CVE-2023-44834D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the StartTime parameter in the SetParentsControlInfo function.
- CVE-2023-44835D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Mac parameter in the SetParentsControlInfo function.
- CVE-2023-44836D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the SSID parameter in the SetWLanRadioSettings function.
- CVE-2023-44837D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Password parameter in the SetWanSettings function.
Medium, low and unrated 32
- CVE-2015-10125WP Ultimate CSV Importer Plugin cross-site request forgeryWP Ultimate CSV Importer Plugin
- CVE-2023-45243Sensitive information disclosure due to missing authorization.Acronis Cyber Protect Cloud Agent · Acronis Cyber Protect
- CVE-2023-45242Sensitive information disclosure due to missing authorization.Acronis Cyber Protect Cloud Agent · Acronis Cyber Protect
- CVE-2023-45241Sensitive information leak through log files.Acronis Cyber Protect Cloud Agent · Acronis Cyber Protect
- CVE-2023-45240Sensitive information disclosure due to missing authorization.Acronis Agent
- CVE-2023-44214Sensitive information disclosure due to missing authorization.Acronis Agent
- CVE-2023-44213Sensitive information disclosure due to excessive collection of system information.Acronis Cyber Protect Cloud Agent · Acronis Cyber Protect
- CVE-2023-5441NULL Pointer Dereference in vim/vimvim/vim
- CVE-2023-41175Libtiff: potential integer overflow in raw2tiff.clibtiff · Red Hat Enterprise Linux
- CVE-2023-40745Libtiff: integer overflow in tiffcp.clibtiff · Red Hat Enterprise Linux
- CVE-2023-42755Kernel: rsvp: out-of-bounds read in rsvp_classify()Red Hat Enterprise Linux
- CVE-2023-42754Kernel: ipv4: null pointer dereference in ipv4_send_dest_unreach()Red Hat Enterprise Linux
- CVE-2023-43073 Dell SmartFabric Storage Software v1.4 (and earlier) contains an Improper Input Validation vulnerability in RADIUS configuration.Dell SmartFabric Storage Software
- CVE-2023-44387Gradle has incorrect permission assignment for symlinked files used in copy or archiving operationsgradle
- CVE-2023-43072 Dell SmartFabric Storage Software v1.4 (and earlier) contains an improper access control vulnerability in the CLI.Dell SmartFabric Storage Software
- CVE-2023-43071 Dell SmartFabric Storage Software v1.4 (and earlier) contains possible vulnerabilities for HTML injection or CVS formula injection which miDell SmartFabric Storage Software
- CVE-2023-44386Incorrect request error handling triggers server crash in Vaporvapor
- CVE-2023-43070 Dell SmartFabric Storage Software v1.4 (and earlier) contains a Path Traversal Vulnerability in the HTTP interface.Dell SmartFabric Storage Software
- CVE-2023-5423SourceCodester Online Pizza Ordering System sql injectionSourceCodester Online Pizza Ordering System
- CVE-2023-44390HtmlSanitizer vulnerable to Cross-site Scripting in Foreign Contentmganss HtmlSanitizer · HtmlSanitizer
- CVE-2022-3248Openshift api admission checks does not enforce "custom-host" permissionskubernetes · Red Hat Advanced Cluster Management for Kub… +3
- CVE-2022-4145Content spoofingopenshift · Red Hat OpenShift Container Platform
- CVE-2023-26236An issue was discovered in WatchGuard EPDR 8.0.21.0002.
- CVE-2023-26237An issue was discovered in WatchGuard EPDR 8.0.21.0002.
- CVE-2023-26238An issue was discovered in WatchGuard EPDR 8.0.21.0002.
- CVE-2023-26239An issue was discovered in WatchGuard EPDR 8.0.21.0002.
- CVE-2023-43260Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 was discovered to contain a cross-site scripting (XSS) vulnerability via the admin
- CVE-2023-43343Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted scr
- CVE-2023-44024SQL injection vulnerability in KnowBand Module One Page Checkout, Social Login & Mailchimp (supercheckout) v.8.0.3 and before allows a remot
- CVE-2023-44838D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the TXPower parameter in the SetWLanRadioSettings function.
- CVE-2023-44839D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Encryption parameter in the SetWLanRadioSecurity function.
- CVE-2023-45198ftpd before "NetBSD-ftpd 20230930" can leak information about the host filesystem before authentication via an MLSD or MLST command.