# CVEs published 2023-10-15

11 CVEs were published on October 15, 2023: 0 critical, 2 high. Days are UTC.

- [CVE-2023-35018](https://cve.now/CVE-2023-35018.md): IBM Security Verify Governance file upload (CVSS 3.3, IBM Security Verify Governance)
- [CVE-2023-35013](https://cve.now/CVE-2023-35013.md): IBM Security Verify Governance information disclosure (CVSS 2.3, IBM Security Verify Governance)
- [CVE-2023-5589](https://cve.now/CVE-2023-5589.md): SourceCodester Judging Management System login.php sql injection (CVSS 7.3, SourceCodester Judging Management System)
- [CVE-2023-5590](https://cve.now/CVE-2023-5590.md): NULL Pointer Dereference in seleniumhq/selenium (CVSS 7.5, seleniumhq/selenium · selenium)
- [CVE-2023-5588](https://cve.now/CVE-2023-5588.md): kphrx pleroma pack.ex Pleroma.Emoji.Pack path traversal (CVSS 2.6, kphrx pleroma)
- [CVE-2023-5587](https://cve.now/CVE-2023-5587.md): SourceCodester Free Hospital Management System for Small Practices Parameter doctors.php sql injection (CVSS 6.3, SourceCodester Free Hospital Management System for Small Pr…)
- [CVE-2023-40378](https://cve.now/CVE-2023-40378.md): IBM i privilege escalation (CVSS 4.9, IBM i)
- [CVE-2023-5586](https://cve.now/CVE-2023-5586.md): NULL Pointer Dereference in gpac/gpac (CVSS 4.4, gpac/gpac)
- [CVE-2018-25091](https://cve.now/CVE-2018-25091.md): urllib3 before 1.24.2 does not remove the authorization HTTP header when following a cross-origin redirect (i.e., a redirect that differs in (no CVSS, urllib3)
- [CVE-2023-38312](https://cve.now/CVE-2023-38312.md): A directory traversal vulnerability in Valve Counter-Strike 8684 allows a client (with remote control access to a game server) to read arbit (no CVSS)
- [CVE-2023-45871](https://cve.now/CVE-2023-45871.md): An issue was discovered in drivers/net/ethernet/intel/igb/igb\_main.c in the IGB driver in the Linux kernel before 6.5.3. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-10-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.