# CVEs published 2023-10-11

111 CVEs were published on October 11, 2023: 13 critical, 21 high. Days are UTC.

- [CVE-2023-1943](https://cve.now/CVE-2023-1943.md): Privilege Escalation in kOps using GCE/GCP Provider in Gossip Mode (CVSS 8.0, Kubernetes kops · k8s.io/kops)
- [CVE-2023-5473](https://cve.now/CVE-2023-5473.md): Use after free in Cast in Google Chrome prior to 118.0.5993.70 allowed a remote attacker who had compromised the renderer process to potenti (no CVSS, Google Chrome)
- [CVE-2023-5486](https://cve.now/CVE-2023-5486.md): Inappropriate implementation in Input in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to spoof security UI via a crafted H (no CVSS, Google Chrome)
- [CVE-2023-5477](https://cve.now/CVE-2023-5477.md): Inappropriate implementation in Installer in Google Chrome prior to 118.0.5993.70 allowed a local attacker to bypass discretionary access co (no CVSS, Google Chrome)
- [CVE-2023-5478](https://cve.now/CVE-2023-5478.md): Inappropriate implementation in Autofill in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to leak cross-origin data via a c (no CVSS, Google Chrome)
- [CVE-2023-5485](https://cve.now/CVE-2023-5485.md): Inappropriate implementation in Autofill in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to bypass autofill restrictions v (CVSS 4.3, Google Chrome)
- [CVE-2023-5479](https://cve.now/CVE-2023-5479.md): Inappropriate implementation in Extensions API in Google Chrome prior to 118.0.5993.70 allowed an attacker who convinced a user to install a (no CVSS, Google Chrome)
- [CVE-2023-5474](https://cve.now/CVE-2023-5474.md): Heap buffer overflow in PDF in Google Chrome prior to 118.0.5993.70 allowed a remote attacker who convinced a user to engage in specific use (CVSS 8.8, Google Chrome)
- [CVE-2023-5476](https://cve.now/CVE-2023-5476.md): Use after free in Blink History in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to potentially exploit heap corruption via (CVSS 8.8, Google Chrome)
- [CVE-2023-5481](https://cve.now/CVE-2023-5481.md): Inappropriate implementation in Downloads in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to spoof security UI via a craft (no CVSS, Google Chrome)
- [CVE-2023-5483](https://cve.now/CVE-2023-5483.md): Inappropriate implementation in Intents in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to bypass content security policy (no CVSS, Google Chrome)
- [CVE-2023-5475](https://cve.now/CVE-2023-5475.md): Inappropriate implementation in DevTools in Google Chrome prior to 118.0.5993.70 allowed an attacker who convinced a user to install a malic (no CVSS, Google Chrome)
- [CVE-2023-5484](https://cve.now/CVE-2023-5484.md): Inappropriate implementation in Navigation in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to spoof security UI via a craf (no CVSS, Google Chrome)
- [CVE-2023-5487](https://cve.now/CVE-2023-5487.md): Inappropriate implementation in Fullscreen in Google Chrome prior to 118.0.5993.70 allowed an attacker who convinced a user to install a mal (no CVSS, Google Chrome)
- [CVE-2023-5218](https://cve.now/CVE-2023-5218.md): Use after free in Site Isolation in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to potentially exploit heap corruption vi (CVSS 8.8, Google Chrome)
- [CVE-2023-39325](https://cve.now/CVE-2023-39325.md): HTTP/2 rapid reset can cause excessive work in net/http (no CVSS, Go standard library net/http · golang.org/x/net/http2 +2)
- [CVE-2023-44190](https://cve.now/CVE-2023-44190.md): Junos OS Evolved: PTX10001, PTX10004, PTX10008, PTX10016: MAC address validation bypass vulnerability (CVSS 6.1, Juniper Networks Junos OS Evolved)
- [CVE-2023-44189](https://cve.now/CVE-2023-44189.md): Junos OS Evolved: PTX10003 Series: MAC address validation bypass vulnerability (CVSS 6.1, Juniper Networks Junos OS Evolved)
- [CVE-2023-44188](https://cve.now/CVE-2023-44188.md): Junos OS: jkdsd crash due to multiple telemetry requests (CVSS 5.3, Juniper Networks Junos OS)
- [CVE-2023-44187](https://cve.now/CVE-2023-44187.md): Junos OS Evolved: 'file copy' CLI command can disclose password to shell users (CVSS 5.9, Juniper Networks Junos OS Evolved)
- [CVE-2023-3781](https://cve.now/CVE-2023-3781.md): there is a possible use-after-free write due to improper locking. (no CVSS, Google Android)
- [CVE-2023-45132](https://cve.now/CVE-2023-45132.md): IgnoreIP/IgnoreCIDR should not trust X-Forwarded-For (CVSS 9.1, wargio naxsi)
- [CVE-2023-44186](https://cve.now/CVE-2023-44186.md): Junos OS and Junos OS Evolved: RPD crash when attempting to send a very long AS PATH to a non-4-byte-AS capable BGP neighbor (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2023-43661](https://cve.now/CVE-2023-43661.md): Cachet vulnerable to Authenticated Remote Code Execution (CVSS 9.1, cachethq cachet · cachethq/cachet)
- [CVE-2023-41882](https://cve.now/CVE-2023-41882.md): vantage6 Improper Access Control vulnerability (CVSS 5.4, vantage6)
- [CVE-2023-41881](https://cve.now/CVE-2023-41881.md): Deleting a collaboration should also delete linked resources (CVSS 3.7, vantage6)
- [CVE-2023-40142](https://cve.now/CVE-2023-40142.md): In TBD of TBD, there is a possible way to bypass carrier restrictions due to a logic error in the code. (no CVSS, Google Android)
- [CVE-2023-40141](https://cve.now/CVE-2023-40141.md): In temp\_residency\_name\_store of thermal\_metrics.c, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2023-35662](https://cve.now/CVE-2023-35662.md): there is a possible out of bounds write due to buffer overflow. (no CVSS, Google Android)
- [CVE-2023-35661](https://cve.now/CVE-2023-35661.md): In ProfSixDecomTcpSACKoption of RohcPacketCommon.cpp, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2023-35660](https://cve.now/CVE-2023-35660.md): In lwis\_transaction\_client\_cleanup of lwis\_transaction.c, there is a possible way to corrupt memory due to a use after free. (no CVSS, Google Android)
- [CVE-2023-35655](https://cve.now/CVE-2023-35655.md): In CanConvertPadV2Op of darwinn\_mlir\_converter\_aidl.cc, there is a possible out of bounds read due to a heap buffer overflow. (no CVSS, Google Android)
- [CVE-2023-35654](https://cve.now/CVE-2023-35654.md): In ctrl\_roi of stmvl53l1\_module.c, there is a possible out of bounds read due to an incorrect bounds check. (no CVSS, Google Android)
- [CVE-2023-28635](https://cve.now/CVE-2023-28635.md): Defining resource name as integer in vantage6 may give unintended access (CVSS 5.4, vantage6 · vantage6-node)
- [CVE-2023-35653](https://cve.now/CVE-2023-35653.md): In TBD of TBD, there is a possible way to access location information due to a permissions bypass. (no CVSS, Google Android)
- [CVE-2023-35652](https://cve.now/CVE-2023-35652.md): In ProtocolEmergencyCallListIndAdapter::Init of protocolcalladapter.cpp, there is a possible out of bounds read due to a missing bounds chec (no CVSS, Google Android)
- [CVE-2023-35649](https://cve.now/CVE-2023-35649.md): In several functions of Exynos modem files, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2023-35648](https://cve.now/CVE-2023-35648.md): In ProtocolMiscLceIndAdapter::GetConfLevel() of protocolmiscadapter.cpp, there is a possible out of bounds read due to a missing bounds chec (no CVSS, Google Android)
- [CVE-2023-35647](https://cve.now/CVE-2023-35647.md): In ProtocolEmbmsGlobalCellIdAdapter::Init() of protocolembmsadapter.cpp, there is a possible out of bounds read due to a missing bounds chec (no CVSS, Google Android)
- [CVE-2023-35646](https://cve.now/CVE-2023-35646.md): In TBD of TBD, there is a possible stack buffer overflow due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2023-5535](https://cve.now/CVE-2023-5535.md): Use After Free in vim/vim (CVSS 7.8, vim/vim)
- [CVE-2023-35645](https://cve.now/CVE-2023-35645.md): In tbd of tbd, there is a possible memory corruption due to a race condition. (no CVSS, Google Android)
- [CVE-2023-23930](https://cve.now/CVE-2023-23930.md): vantage6's Pickle serialization is insecure (CVSS 5.5, vantage6)
- [CVE-2023-4936](https://cve.now/CVE-2023-4936.md): Synaptics-DisplayLink-privilege escalation vulnerability via a dynamic library sideloading (CVSS 5.5, Synaptics DisplayLink USB Graphics Software for Windows)
- [CVE-2023-34356](https://cve.now/CVE-2023-34356.md): An OS command injection vulnerability exists in the data.cgi xfer\_dns functionality of peplink Surf SOHO HW1 v6.3.5 (in QEMU). (CVSS 7.2, Peplink Surf SOHO HW1)
- [CVE-2023-28381](https://cve.now/CVE-2023-28381.md): An OS command injection vulnerability exists in the admin.cgi MVPN\_trial\_init functionality of peplink Surf SOHO HW1 v6.3.5 (in QEMU). (CVSS 7.2, Peplink Surf SOHO HW1)
- [CVE-2023-27380](https://cve.now/CVE-2023-27380.md): An OS command injection vulnerability exists in the admin.cgi USSD\_send functionality of peplink Surf SOHO HW1 v6.3.5 (in QEMU). (CVSS 7.2, Peplink Surf SOHO HW1)
- [CVE-2023-34354](https://cve.now/CVE-2023-34354.md): A stored cross-site scripting (XSS) vulnerability exists in the upload\_brand.cgi functionality of peplink Surf SOHO HW1 v6.3.5 (in QEMU). (CVSS 3.4, Peplink Surf SOHO HW1)
- [CVE-2023-35194](https://cve.now/CVE-2023-35194.md): An OS command injection vulnerability exists in the api.cgi cmd.mvpn.x509.write functionality of peplink Surf SOHO HW1 v6.3.5 (in QEMU). (CVSS 7.2, Peplink Surf SOHO HW1)
- [CVE-2023-35193](https://cve.now/CVE-2023-35193.md): An OS command injection vulnerability exists in the api.cgi cmd.mvpn.x509.write functionality of peplink Surf SOHO HW1 v6.3.5 (in QEMU). (CVSS 7.2, Peplink Surf SOHO HW1)
- [CVE-2023-32645](https://cve.now/CVE-2023-32645.md): A leftover debug code vulnerability exists in the httpd debug credentials functionality of Yifan YF325 v1.0\_20221108. (CVSS 9.8, Yifan YF325)
- [CVE-2023-35056](https://cve.now/CVE-2023-35056.md): A buffer overflow vulnerability exists in the httpd next\_page functionality of Yifan YF325 v1.0\_20221108. (CVSS 8.8, Yifan YF325)
- [CVE-2023-35055](https://cve.now/CVE-2023-35055.md): A buffer overflow vulnerability exists in the httpd next\_page functionality of Yifan YF325 v1.0\_20221108. (CVSS 8.8, Yifan YF325)
- [CVE-2023-24479](https://cve.now/CVE-2023-24479.md): An authentication bypass vulnerability exists in the httpd nvram.cgi functionality of Yifan YF325 v1.0\_20221108. (CVSS 9.8, Yifan YF325)
- [CVE-2023-34365](https://cve.now/CVE-2023-34365.md): A stack-based buffer overflow vulnerability exists in the libutils.so nvram\_restore functionality of Yifan YF325 v1.0\_20221108. (CVSS 9.8, Yifan YF325)
- [CVE-2023-34346](https://cve.now/CVE-2023-34346.md): A stack-based buffer overflow vulnerability exists in the httpd gwcfg.cgi get functionality of Yifan YF325 v1.0\_20221108. (CVSS 9.8, Yifan YF325)
- [CVE-2023-31272](https://cve.now/CVE-2023-31272.md): A stack-based buffer overflow vulnerability exists in the httpd do\_wds functionality of Yifan YF325 v1.0\_20221108. (CVSS 8.8, Yifan YF325)
- [CVE-2023-34426](https://cve.now/CVE-2023-34426.md): A stack-based buffer overflow vulnerability exists in the httpd manage\_request functionality of Yifan YF325 v1.0\_20221108. (CVSS 9.8, Yifan YF325)
- [CVE-2023-32632](https://cve.now/CVE-2023-32632.md): A command execution vulnerability exists in the validate.so diag\_ping\_start functionality of Yifan YF325 v1.0\_20221108. (CVSS 8.8, Yifan YF325)
- [CVE-2023-35966](https://cve.now/CVE-2023-35966.md): Two heap-based buffer overflow vulnerabilities exist in the httpd manage\_post functionality of Yifan YF325 v1.0\_20221108. (CVSS 9.8, Yifan YF325)
- [CVE-2023-35965](https://cve.now/CVE-2023-35965.md): Two heap-based buffer overflow vulnerabilities exist in the httpd manage\_post functionality of Yifan YF325 v1.0\_20221108. (CVSS 9.8, Yifan YF325)
- [CVE-2023-35968](https://cve.now/CVE-2023-35968.md): Two heap-based buffer overflow vulnerabilities exist in the gwcfg\_cgi\_set\_manage\_post\_data functionality of Yifan YF325 v1.0\_20221108. (CVSS 9.8, Yifan YF325)
- [CVE-2023-35967](https://cve.now/CVE-2023-35967.md): Two heap-based buffer overflow vulnerabilities exist in the gwcfg\_cgi\_set\_manage\_post\_data functionality of Yifan YF325 v1.0\_20221108. (CVSS 9.8, Yifan YF325)
- [CVE-2023-4957](https://cve.now/CVE-2023-4957.md): Authentication Bypass on Zebra ZTC (CVSS 5.4, Zebra Technologies ZTC ZT410)
- [CVE-2023-37538](https://cve.now/CVE-2023-37538.md): HCL Digital Experience is susceptible to cross site scripting (XSS) (CVSS 9.3, HCL Software Digital Experience)
- [CVE-2023-44108](https://cve.now/CVE-2023-44108.md): Type confusion vulnerability in the distributed file module.Successful exploitation of this vulnerability may cause the device to restart. (CVSS 7.5, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2023-44107](https://cve.now/CVE-2023-44107.md): Vulnerability of defects introduced in the design process in the screen projection module.Successful exploitation of this vulnerability may (no CVSS, Huawei HarmonyOS)
- [CVE-2023-44105](https://cve.now/CVE-2023-44105.md): Vulnerability of permissions not being strictly verified in the window management module.Successful exploitation of this vulnerability may c (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2023-44119](https://cve.now/CVE-2023-44119.md): Vulnerability of mutual exclusion management in the kernel module.Successful exploitation of this vulnerability will affect availability. (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2023-44118](https://cve.now/CVE-2023-44118.md): Vulnerability of undefined permissions in the MeeTime module.Successful exploitation of this vulnerability will affect availability and conf (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2023-44116](https://cve.now/CVE-2023-44116.md): Vulnerability of access permissions not being strictly verified in the APPWidget module.Successful exploitation of this vulnerability may ca (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2023-44114](https://cve.now/CVE-2023-44114.md): Out-of-bounds array vulnerability in the dataipa module.Successful exploitation of this vulnerability may affect service confidentiality. (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2023-5521](https://cve.now/CVE-2023-5521.md): Incorrect Authorization in tiann/kernelsu (CVSS 7.3, tiann/kernelsu)
- [CVE-2023-44111](https://cve.now/CVE-2023-44111.md): Vulnerability of brute-force attacks on the device authentication module.Successful exploitation of this vulnerability may affect service co (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2023-44110](https://cve.now/CVE-2023-44110.md): Out-of-bounds access vulnerability in the audio module.Successful exploitation of this vulnerability may affect availability. (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2023-41304](https://cve.now/CVE-2023-41304.md): Parameter verification vulnerability in the window module.Successful exploitation of this vulnerability may cause the size of an app window (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2023-5520](https://cve.now/CVE-2023-5520.md): Out-of-bounds Read in gpac/gpac (CVSS 4.0, gpac/gpac)
- [CVE-2023-44981](https://cve.now/CVE-2023-44981.md): Apache ZooKeeper: Authorization bypass in SASL Quorum Peer Authentication (CVSS 9.1, Apache Software Foundation Apache ZooKeeper · org.apache.zo…)
- [CVE-2023-44106](https://cve.now/CVE-2023-44106.md): API permission management vulnerability in the Fwk-Display module.Successful exploitation of this vulnerability may cause features to perfor (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2023-44104](https://cve.now/CVE-2023-44104.md): Broadcast permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may affect service confiden (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2023-44103](https://cve.now/CVE-2023-44103.md): Out-of-bounds read vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may affect service confidentiality. (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2023-44102](https://cve.now/CVE-2023-44102.md): Broadcast permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability can cause the Bluetooth fun (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2023-26370](https://cve.now/CVE-2023-26370.md): ZDI-CAN-21257: Adobe Photoshop PSD File Parsing Uninitialized Variable Remote Code Execution Vulnerability (CVSS 7.8, Adobe Photoshop Desktop)
- [CVE-2023-44101](https://cve.now/CVE-2023-44101.md): The Bluetooth module has a vulnerability in permission control for broadcast notifications.Successful exploitation of this vulnerability may (no CVSS, Huawei HarmonyOS)
- [CVE-2023-44100](https://cve.now/CVE-2023-44100.md): Broadcast permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may affect service confiden (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2023-44097](https://cve.now/CVE-2023-44097.md): Vulnerability of the permission to access device SNs being improperly managed.Successful exploitation of this vulnerability may affect servi (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2023-44095](https://cve.now/CVE-2023-44095.md): Use-After-Free (UAF) vulnerability in the surfaceflinger module.Successful exploitation of this vulnerability can cause system crash. (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2023-38217](https://cve.now/CVE-2023-38217.md): ZDI-CAN-21403: Adobe Bridge Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 5.5, Adobe Bridge)
- [CVE-2023-38216](https://cve.now/CVE-2023-38216.md): ZDI-CAN-21404: Adobe Bridge Font Parsing Use-After-Free Information Disclosure Vulnerability (CVSS 5.5, Adobe Bridge)
- [CVE-2023-44094](https://cve.now/CVE-2023-44094.md): Type confusion vulnerability in the distributed file module.Successful exploitation of this vulnerability may cause the device to restart. (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2023-44109](https://cve.now/CVE-2023-44109.md): Clone vulnerability in the huks ta module.Successful exploitation of this vulnerability may affect service confidentiality. (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2023-44096](https://cve.now/CVE-2023-44096.md): Vulnerability of brute-force attacks on the device authentication module.Successful exploitation of this vulnerability may affect service c (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2023-44093](https://cve.now/CVE-2023-44093.md): Vulnerability of package names' public keys not being verified in the security module.Successful exploitation of this vulnerability may affe (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2023-42138](https://cve.now/CVE-2023-42138.md): Out-of-bounds read vulnerability exists in KV STUDIO Ver. (no CVSS, KEYENCE KV STUDIO · KEYENCE KV REPLAY VIEWER)
- [CVE-2023-44997](https://cve.now/CVE-2023-44997.md): WordPress WP Forms Puzzle Captcha Plugin \<= 4.1 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, Nitin Rathod WP Forms Puzzle Captcha)
- [CVE-2023-4990](https://cve.now/CVE-2023-4990.md): Directory traversal vulnerability in MCL-Net versions prior to 4.6 Update Package (P01) may allow attackers to read arbitrary files. (CVSS 8.3, MCL Technologies MCL-Net)
- [CVE-2023-26320](https://cve.now/CVE-2023-26320.md): Xiaomi Router external request interface vulnerability leads to stack overflow (CVSS 7.5, Xiaomi Router)
- [CVE-2023-37536](https://cve.now/CVE-2023-37536.md): HCL BigFix Platform is vulnerable to an integer overflow in xerces-c++ 3.2.3 (CVSS 8.2, HCL Software BigFix Platform)
- [CVE-2023-26319](https://cve.now/CVE-2023-26319.md): Xiaomi Router administration interface vulnerability leads command injection and stack overflow (CVSS 6.7, Xiaomi Router)
- [CVE-2023-26318](https://cve.now/CVE-2023-26318.md): Xiaomi router web interface post-authorization stack overflow (CVSS 6.7, Xiaomi Router)
- [CVE-2022-44757](https://cve.now/CVE-2022-44757.md): HCL BigFix Insights for Vulnerability Remediation (IVR) is vulnerable to weak cryptography (CVSS 6.5, HCL Software BigFix Insights for Vulnerability Remediation)
- [CVE-2022-44758](https://cve.now/CVE-2022-44758.md): HCL BigFix Insights for Vulnerability Remediation (IVR) is vulnerable to improper credential handling (CVSS 6.5, HCL Software BigFix Insights for Vulnerability Remediation)
- [CVE-2022-42451](https://cve.now/CVE-2022-42451.md): HCL BigFix Patch Management is vulnerable to insecurely stored credentials (CVSS 4.6, HCL Software BigFix Patch Management)
- [CVE-2023-45194](https://cve.now/CVE-2023-45194.md): Use of default credentials vulnerability in MR-GM2 firmware Ver. (no CVSS, Micro Research MR-GM2 · Micro Research MR-GM3)
- [CVE-2023-44689](https://cve.now/CVE-2023-44689.md): e-Gov Client Application (Windows version) versions prior to 2.1.1.0 and e-Gov Client Application (macOS version) versions prior to 1.1.1.0 (no CVSS, Digital Agency e-Gov Client Application)
- [CVE-2023-5511](https://cve.now/CVE-2023-5511.md): Cross-Site Request Forgery (CSRF) in snipe/snipe-it (CVSS 6.3, snipe/snipe-it)
- [CVE-2023-38817](https://cve.now/CVE-2023-38817.md): An issue in Inspect Element Ltd Echo.ac v.5.2.1.0 allows a local attacker to gain privileges via a crafted command to the echo\_driver.sys co (no CVSS)
- [CVE-2023-43960](https://cve.now/CVE-2023-43960.md): An issue in DLINK DPH-400SE FRU 2.2.15.8 allows a remote attacker to escalate privileges via the User Modify function in the Maintenance/Acc (no CVSS)
- [CVE-2023-44961](https://cve.now/CVE-2023-44961.md): SQL Injection vulnerability in Koha Library Software 23.0.5.04 and before allows a remote attacker to obtain sensitive information via the i (no CVSS)
- [CVE-2023-44962](https://cve.now/CVE-2023-44962.md): File Upload vulnerability in Koha Library Software 23.05.04 and before allows a remote attacker to read arbitrary files via the upload-cover (no CVSS)
- [CVE-2023-45396](https://cve.now/CVE-2023-45396.md): An Insecure Direct Object Reference (IDOR) vulnerability leads to events profiles access in Elenos ETG150 FM transmitter running on version (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-10-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.