CVEs published October 14, 2023
30 CVEs were published on October 14, 2023: 0 critical, 3 high.
- Published
- 30
- Critical
- 0
- High
- 3
- Medium
- 12
- Low
- 6
- Unrated
- 9
- Now in CISA KEV
- 0
- Fix available
- 5
Most affected products
- Apache Software Foundation Apache Airflow · apache-airflow
- 4
- IBM Security Directory Server
- 3
- IBM QRadar SIEM
- 2
- IBM Security Verify Access
- 2
- Hotjar
- 1
- IBM App Connect Enterprise · IBM Integration Bus
- 1
- IBM Cloud Pak for Business Automation
- 1
- node-qpdf
- 1
- Portábilis i-Educar
- 1
- pyminizip
- 1
High 3
- CVE-2022-43740IBM Security Verify Access denial of serviceIBM Security Verify Access
- CVE-2023-26155All versions of the package node-qpdf are vulnerable to Command Injection such that the package-exported method encrypt() fails to sanitize node-qpdf
- CVE-2023-45853MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename,pyminizip
Medium, low and unrated 27
- CVE-2023-5585SourceCodester Online Motorcycle Rental System Bike List cross site scriptingSourceCodester Online Motorcycle Rental System
- CVE-2023-30994IBM QRadar SIEM information disclosureIBM QRadar SIEM
- CVE-2023-40367IBM QRadar SIEM cross-site scriptingIBM QRadar SIEM
- CVE-2023-45176IBM App Connect Enterprise and IBM Integration Bus denial of serviceIBM App Connect Enterprise · IBM Integration Bus
- CVE-2022-43868IBM Security Verify Access information disclosureIBM Security Verify Access
- CVE-2023-35024IBM Cloud Pak for Business Automation cross-site scriptingIBM Cloud Pak for Business Automation
- CVE-2022-32755IBM Security Directory Server external entity injectionIBM Security Directory Server
- CVE-2022-33165IBM Security Directory Server information disclosureIBM Security Directory Server
- CVE-2022-33161IBM Security Directory Server information disclosureIBM Security Directory Server
- CVE-2023-5582ZZZCMS Personal Profile Page cross site scriptingZZZCMS
- CVE-2023-5581SourceCodester Medicine Tracker System index.php cross site scriptingSourceCodester Medicine Tracker System
- CVE-2023-5580SourceCodester Library System index.php sql injectionSourceCodester Library System
- CVE-2023-5579yhz66 Sandbox User Data information disclosureyhz66 Sandbox
- CVE-2023-1259Hotjar <= 1.0.15 - Authenticated (Administrator+) Stored Cross-Site ScriptingHotjar
- CVE-2023-5578Portábilis i-Educar HTTP GET Request agenda_imprimir.php cross site scriptingPortábilis i-Educar
- CVE-2023-42663Apache Airflow: Bypass permission verification to view task instances of other dagsApache Software Foundation Apache Airflow · apache-airflow
- CVE-2023-42792Apache Airflow: Improper access control to DAG resourcesApache Software Foundation Apache Airflow · apache-airflow
- CVE-2023-45348Apache Airflow: Configuration information leakage vulnerabilityApache Software Foundation Apache Airflow · apache-airflow
- CVE-2023-42780Apache Airflow: Improper access control vulnerability in the "List dag warnings" featureApache Software Foundation Apache Airflow · apache-airflow
- CVE-2023-30148Multiple Stored Cross Site Scripting (XSS) vulnerabilities in Opart opartmultihtmlblock before version 2.0.12 and Opart multihtmlblock* vers
- CVE-2023-30154Multiple improper neutralization of SQL parameters in module AfterMail (aftermailpresta) for PrestaShop, before version 2.2.1, allows remote
- CVE-2023-44037An issue in ZPE Systems, Inc Nodegrid OS v.5.8.10 thru v.5.8.13 and v.5.10.3 thru v.5.10.5 allows a remote attacker to obtain sensitive info
- CVE-2023-45852In Vitogate 300 2.1.3.0, /cgi-bin/vitogate.cgi allows an unauthenticated attacker to bypass authentication and execute arbitrary commands vi
- CVE-2023-45855qdPM 9.2 allows Directory Traversal to list files and directories by navigating to the /uploads URI.
- CVE-2023-45856qdPM 9.2 allows remote code execution by using the Add Attachments feature of Edit Project to upload a .php file to the /uploads URI.
- CVE-2023-45862An issue was discovered in drivers/usb/storage/ene_ub6250.c for the ENE UB6250 reader driver in the Linux kernel before 6.2.5.
- CVE-2023-45863An issue was discovered in lib/kobject.c in the Linux kernel before 6.2.3.