# CVEs published 2023-10-06

70 CVEs were published on October 6, 2023: 3 critical, 13 high. Days are UTC.

- [CVE-2023-5182](https://cve.now/CVE-2023-5182.md): Sensitive data could be exposed in logs of subiquity version 23.09.1 and earlier. (CVSS 5.5, Canonical subiquity)
- [CVE-2022-33160](https://cve.now/CVE-2022-33160.md): IBM Security Directory Suite information disclosure (CVSS 3.7, IBM Security Directory Suite)
- [CVE-2022-34355](https://cve.now/CVE-2022-34355.md): IBM Jazz Foundation information disclosure (CVSS 4.0, IBM Engineering Lifecycle Management)
- [CVE-2023-3725](https://cve.now/CVE-2023-3725.md): Potential buffer overflow vulnerability in the Zephyr CANbus subsystem (CVSS 7.6, zephyrproject-rtos Zephyr)
- [CVE-2023-5452](https://cve.now/CVE-2023-5452.md): Cross-site Scripting (XSS) - Stored in snipe/snipe-it (CVSS 5.5, snipe/snipe-it)
- [CVE-2023-21291](https://cve.now/CVE-2023-21291.md): In visitUris of Notification.java, there is a possible way to reveal image contents from another user due to a missing permission check. (no CVSS, Google Android)
- [CVE-2023-21266](https://cve.now/CVE-2023-21266.md): In multiple functions of ActivityManagerService.java, there is a possible way to escape Google Play protection due to a permissions bypass. (CVSS 7.8, Google Android)
- [CVE-2023-21253](https://cve.now/CVE-2023-21253.md): In multiple locations, there is a possible way to crash multiple system services due to resource exhaustion. (no CVSS, Google Android)
- [CVE-2023-21252](https://cve.now/CVE-2023-21252.md): In validatePassword of WifiConfigurationUtil.java, there is a possible way to get the device into a boot loop due to improper input validati (no CVSS, Google Android)
- [CVE-2023-21244](https://cve.now/CVE-2023-21244.md): In visitUris of Notification.java, there is a possible bypass of user profile boundaries due to a missing permission check. (CVSS 6.7, Google Android)
- [CVE-2023-5366](https://cve.now/CVE-2023-5366.md): Openvswitch don't match packets on nd\_target field (CVSS 7.1, openvswitch · Red Hat Fast Datapath for RHEL +5)
- [CVE-2023-5214](https://cve.now/CVE-2023-5214.md): CVE-2023-5214 - Privilege Escalation in Puppet Bolt (CVSS 6.5, Puppet Bolt · bolt)
- [CVE-2023-45239](https://cve.now/CVE-2023-45239.md): A lack of input validation exists in tac\_plus prior to commit 4fdf178 which, when pre or post auth commands are enabled, allows an attacker (no CVSS, Meta tac\_plus)
- [CVE-2023-44384](https://cve.now/CVE-2023-44384.md): Discourse-Jira could make SSRF attack by setting Jira URL to an arbitrary location (CVSS 4.1, discourse-jira)
- [CVE-2023-32972](https://cve.now/CVE-2023-32972.md): QTS, QuTS hero, QuTScloud (CVSS 3.8, QNAP Systems QTS · QNAP Systems QuTS hero +1)
- [CVE-2023-32971](https://cve.now/CVE-2023-32971.md): QTS, QuTS hero, QuTScloud (CVSS 3.8, QNAP Systems QTS · QNAP Systems QuTS hero +1)
- [CVE-2023-23371](https://cve.now/CVE-2023-23371.md): QVPN Device Client (CVSS 5.2, QNAP Systems QVPN Windows)
- [CVE-2023-23370](https://cve.now/CVE-2023-23370.md): QVPN Device Client (CVSS 6.7, QNAP Systems QVPN Windows)
- [CVE-2023-23366](https://cve.now/CVE-2023-23366.md): Music Station (CVSS 7.7, QNAP Systems Music Station)
- [CVE-2023-23365](https://cve.now/CVE-2023-23365.md): Music Station (CVSS 7.7, QNAP Systems Music Station)
- [CVE-2023-39928](https://cve.now/CVE-2023-39928.md): A use-after-free vulnerability exists in the MediaRecorder API of Webkit WebKitGTK 2.40.5. (CVSS 8.8, Webkit)
- [CVE-2023-44233](https://cve.now/CVE-2023-44233.md): WordPress FooGallery Plugin \<= 2.2.44 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, FooPlugins Best WordPress Gallery Plugin – FooGallery)
- [CVE-2023-44243](https://cve.now/CVE-2023-44243.md): WordPress Instant CSS Plugin \<= 1.2.1 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Dylan Blokhuis Instant CSS)
- [CVE-2023-44146](https://cve.now/CVE-2023-44146.md): WordPress Checkfront Online Booking System Plugin \<= 3.6 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Checkfront Online Booking System)
- [CVE-2023-41950](https://cve.now/CVE-2023-41950.md): WordPress Laposta Signup Basic Plugin \<= 1.4.1 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, Laposta - Roel Bousardt Laposta Signup Basic)
- [CVE-2023-40607](https://cve.now/CVE-2023-40607.md): WordPress CLUEVO LMS, E-Learning Platform Plugin \<= 1.10.0 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, CLUEVO LMS, E-Learning Platform)
- [CVE-2023-41801](https://cve.now/CVE-2023-41801.md): WordPress AWP Classifieds Plugin \<= 4.3 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, AWP Classifieds Team Ad Directory & Listings by AWP Classif…)
- [CVE-2023-41732](https://cve.now/CVE-2023-41732.md): WordPress CP Blocks Plugin \<= 1.0.20 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, CodePeople CP Blocks)
- [CVE-2023-41659](https://cve.now/CVE-2023-41659.md): WordPress Responsive Gallery Grid Plugin \<= 2.3.10 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, Jules Colle, BDWM Responsive Gallery Grid)
- [CVE-2023-41654](https://cve.now/CVE-2023-41654.md): WordPress authLdap Plugin \<= 2.5.8 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, Andreas Heigl authLdap)
- [CVE-2023-41650](https://cve.now/CVE-2023-41650.md): WordPress Remove/hide Author, Date, Category Like Entry-Meta Plugin \<= 2.1 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Venugopal Remove/hide Author, Date, Category Like Entry-Meta)
- [CVE-2023-43810](https://cve.now/CVE-2023-43810.md): opentelemetry-instrumentation Denial of Service vulnerability due to unbound cardinality metrics (CVSS 7.5, open-telemetry opentelemetry-python-contrib · opentelemetry…)
- [CVE-2023-42445](https://cve.now/CVE-2023-42445.md): Possible local file exfiltration by XML External entity injection (CVSS 6.8, gradle)
- [CVE-2023-38703](https://cve.now/CVE-2023-38703.md): PJSIP has use-after-free vulnerability in SRTP media transport (CVSS 9.8, pjsip pjproject)
- [CVE-2023-43058](https://cve.now/CVE-2023-43058.md): IBM Robotic Process Automation privilege escalation (CVSS 5.3, IBM Robotic Process Automation)
- [CVE-2023-35897](https://cve.now/CVE-2023-35897.md): IBM Spectrum Protect code execution (CVSS 8.4, IBM Storage Protect Client · IBM Storage Protect for Virtua…)
- [CVE-2023-29235](https://cve.now/CVE-2023-29235.md): WordPress Maintenance Switch Plugin \<= 1.5.2 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, Fugu Maintenance Switch)
- [CVE-2023-28791](https://cve.now/CVE-2023-28791.md): WordPress Simple Org Chart Plugin \<= 2.3.4 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Gangesh Matta Simple Org Chart)
- [CVE-2023-27615](https://cve.now/CVE-2023-27615.md): WordPress WP Super Minify Plugin \<= 1.5.1 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, Dipak C. Gajjar WP Super Minify)
- [CVE-2023-27448](https://cve.now/CVE-2023-27448.md): WordPress MakeStories (for Google Web Stories) Plugin \<= 2.8.0 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, MakeStories Team MakeStories)
- [CVE-2023-25033](https://cve.now/CVE-2023-25033.md): WordPress Social Share Boost Plugin \<= 4.5 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, Sumo Social Share Boost)
- [CVE-2022-47175](https://cve.now/CVE-2022-47175.md): WordPress Royal Elementor Addons Plugin \<= 1.3.75 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, P Royal Royal Elementor Addons and Templates)
- [CVE-2023-25480](https://cve.now/CVE-2023-25480.md): WordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor Plugin \<= 1.24.1 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Post and Page Builder by BoldGrid – Visual Drag and Drop Ed…)
- [CVE-2023-40671](https://cve.now/CVE-2023-40671.md): WordPress DX-auto-save-images Plugin \<= 1.4.0 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, 大侠wp DX-auto-save-images)
- [CVE-2023-40008](https://cve.now/CVE-2023-40008.md): WordPress Simple Org Chart Plugin \<= 2.3.4 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Gangesh Matta Simple Org Chart)
- [CVE-2023-36465](https://cve.now/CVE-2023-36465.md): Decidim has broken access control in templates (CVSS 9.1, decidim · decidim-templates)
- [CVE-2023-45246](https://cve.now/CVE-2023-45246.md): Sensitive information disclosure and manipulation due to missing authorization. (CVSS 7.1, Acronis Cyber Protect Cloud Agent · Acronis Cyber Protect)
- [CVE-2023-45245](https://cve.now/CVE-2023-45245.md): Sensitive information disclosure due to missing authorization. (CVSS 3.3, Acronis Agent)
- [CVE-2023-45244](https://cve.now/CVE-2023-45244.md): Sensitive information disclosure and manipulation due to missing authorization. (CVSS 7.1, Acronis Cyber Protect Cloud Agent · Acronis Cyber Protect)
- [CVE-2023-4469](https://cve.now/CVE-2023-4469.md): Profile Extra Fields by BestWebSoft \<= 1.2.7 - Missing Authorization to Sensitive Information Exposure (CVSS 5.3, Profile Extra Fields by BestWebSoft)
- [CVE-2023-4530](https://cve.now/CVE-2023-4530.md): SQLi in Turna Media's Advertising Administration Panel (CVSS 9.8, Turna Advertising Administration Panel)
- [CVE-2015-10126](https://cve.now/CVE-2015-10126.md): Easy2Map Photos Plugin sql injection (CVSS 6.3, Easy2Map Photos Plugin)
- [CVE-2023-40556](https://cve.now/CVE-2023-40556.md): WordPress Schedule Posts Calendar Plugin \<= 5.2 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Greg Ross Schedule Posts Calendar)
- [CVE-2023-26153](https://cve.now/CVE-2023-26153.md): Versions of the package geokit-rails before 2.5.0 are vulnerable to Command Injection due to unsafe deserialisation of YAML within the 'geo\_ (CVSS 8.3, geokit-rails)
- [CVE-2023-36123](https://cve.now/CVE-2023-36123.md): Directory Traversal vulnerability in Hex-Dragon Plain Craft Launcher 2 version Alpha 1.3.9, allows local attackers to execute arbitrary code (no CVSS)
- [CVE-2023-44061](https://cve.now/CVE-2023-44061.md): File Upload vulnerability in Simple and Nice Shopping Cart Script v.1.0 allows a remote attacker to execute arbitrary code via the upload fu (no CVSS)
- [CVE-2023-44758](https://cve.now/CVE-2023-44758.md): GDidees CMS 3.0 is affected by a Cross-Site Scripting (XSS) vulnerability that allows attackers to execute arbitrary code via a crafted payl (no CVSS)
- [CVE-2023-44761](https://cve.now/CVE-2023-44761.md): Multiple Cross Site Scripting (XSS) vulnerabilities in Concrete CMS versions affected to 8.5.13 and below, and 9.0.0 through 9.2.1 allow a l (no CVSS, concrete5/concrete5)
- [CVE-2023-44762](https://cve.now/CVE-2023-44762.md): A Cross Site Scripting (XSS) vulnerability in Concrete CMS from versions 9.2.0 to 9.2.2 allows an attacker to execute arbitrary code via a c (no CVSS, concrete5/concrete5)
- [CVE-2023-44764](https://cve.now/CVE-2023-44764.md): A Cross Site Scripting (XSS) vulnerability in Concrete CMS before 9.2.3 exists via the Name parameter during installation (aka Site of Insta (no CVSS, concrete5/concrete5)
- [CVE-2023-44765](https://cve.now/CVE-2023-44765.md): A Cross Site Scripting (XSS) vulnerability in Concrete CMS versions 8.5.12 and below, and 9.0 through 9.2.1 allows an attacker to execute ar (no CVSS, concrete5/concrete5)
- [CVE-2023-44766](https://cve.now/CVE-2023-44766.md): A Cross Site Scripting (XSS) vulnerability in Concrete CMS v.9.2.1 allows an attacker to execute arbitrary code via a crafted script to the (no CVSS, concrete5/concrete5)
- [CVE-2023-44770](https://cve.now/CVE-2023-44770.md): A Cross-Site Scripting (XSS) vulnerability in Zenario CMS v.9.4.59197 allows an attacker to execute arbitrary code via a crafted script to t (no CVSS, tribalsystems/zenario)
- [CVE-2023-44771](https://cve.now/CVE-2023-44771.md): A Cross-Site Scripting (XSS) vulnerability in Zenario CMS v.9.4.59197 allows a local attacker to execute arbitrary code via a crafted script (no CVSS, tribalsystems/zenario)
- [CVE-2023-44807](https://cve.now/CVE-2023-44807.md): D-Link DIR-820L 1.05B03 has a stack overflow vulnerability in the cancelPing function. (no CVSS)
- [CVE-2023-44860](https://cve.now/CVE-2023-44860.md): An issue in NETIS SYSTEMS N3Mv2 v.1.0.1.865 allows a remote attacker to cause a denial of service via the authorization component in the HTT (no CVSS)
- [CVE-2023-45282](https://cve.now/CVE-2023-45282.md): In NASA Open MCT (aka openmct) before 3.1.0, prototype pollution can occur via an import action. (CVSS 7.5, openmct)
- [CVE-2023-45303](https://cve.now/CVE-2023-45303.md): ThingsBoard before 3.5 allows Server-Side Template Injection if users are allowed to modify an email template, because Apache FreeMarker sup (CVSS 8.4, org.thingsboard:thingsboard)
- [CVE-2023-45311](https://cve.now/CVE-2023-45311.md): fsevents before 1.2.11 depends on the https://fsevents-binaries.s3-us-west-2.amazonaws.com URL, which might allow an adversary to execute ar (no CVSS, fsevents)
- [CVE-2023-45322](https://cve.now/CVE-2023-45322.md): libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-10-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.