CVEs published October 16, 2023
168 CVEs were published on October 16, 2023: 7 critical, 31 high. 1 is now in CISA KEV.
- Published
- 168
- Critical
- 7
- High
- 31
- Medium
- 86
- Low
- 4
- Unrated
- 40
- Now in CISA KEV
- 1
- Fix available
- 68
Most affected products
- IBM Db2 for Linux, UNIX and Windows
- 9
- discourse
- 6
- South River Technologies Titan MFT · South River Technologi…
- 6
- nextcloud security-advisories
- 5
- ActivityPub
- 4
- Apache Software Foundation Apache InLong · org.apache.inlon…
- 3
- File Manager Pro
- 3
- OTRS AG OTRS · OTRS AG ((OTRS)) Community Edition
- 3
- WordPress Gallery Plugin
- 3
- Axis Communications AB AXIS OS
- 2
Critical 7
- CVE-2023-45128CSRF Token Reuse Vulnerability in fibergofiber fiber · github.com/gofiber/fiber/v2
- CVE-2023-45144Remote code execution from login screen through unescaped URL parameter in OAuth Identity XWiki Appxwikisas identity-oauth · com.xwiki.identity-oauth:identity…
- CVE-2023-4666Form-Maker < 1.15.20 - Unauthenticated Arbitrary File UploadForm Maker by 10Web
- CVE-2023-45685Arbitrary file write via "zip slip" in Titan MFT and Titan SFTP serversSouth River Technologies Titan MFT · South River Technologi…
- CVE-2023-20198Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS XE Software.Cisco IOS XE Software
- CVE-2023-3991OS command injection vulnerability in FreshTomato 2023.3FreshTomato
- CVE-2023-21413Remote code execution vulnerability during the installation of ACAP applications on the Axis deviceAxis Communications AB AXIS OS
High 31
- CVE-2023-30991IBM Db2 denial of serviceIBM Db2 for Linux, UNIX and Windows
- CVE-2023-43658Improper escaping of user input in discourse-calendardiscourse-calendar
- CVE-2023-45131Unauthenticated access to new private chat messages in Discoursediscourse
- CVE-2023-44388Malicious requests can fill up the log files resulting in a deinal of service in Discoursediscourse
- CVE-2023-43659Cross-site Scripting via email preview when CSP disabled in Discoursediscourse
- CVE-2023-42459Malformed DATA submessage leads to bad-free error in Fast-DDSeProsima Fast-DDS
- CVE-2023-45141CSRF Token Validation Vulnerability in fibergofiber fiber · github.com/gofiber/fiber/v2
- CVE-2023-4861File Manager Pro < 1.8.1 - Admin+ Remote Code ExecutionFile Manager Pro
- CVE-2023-5133User Activity Log Pro < 2.3.4 - IP Spoofinguser-activity-log-pro
- CVE-2023-5003Active Directory Integration < 4.1.10 - Unauthenticated Log DisclosureActive Directory Integration / LDAP Integration
- CVE-2023-3155NextGEN Gallery < 3.39 - Admin+ Arbitrary File Read and DeleteWordPress Gallery Plugin
- CVE-2023-3154NextGEN Gallery < 3.39 - Admin+ PHAR DeserializationWordPress Gallery Plugin
- CVE-2023-4691Bookly < 22.4 - Admin+ SQLiWordPress Online Booking and Scheduling Plugin
- CVE-2023-4776WPSchoolPress < 2.2.5 - Teacher+ SQLiSchool Management System
- CVE-2023-4643Enable Media Replace < 4.1.3 - Author+ PHP Object InjectionEnable Media Replace
- CVE-2023-4971Weaver Xtreme Theme Support < 6.3.1 - Admin+ PHP Object InjectionWeaver Xtreme Theme Support
- CVE-2023-45683Cross site scripting via missing binding syntax validation In ACS location in github.com/crewjam/samlcrewjam saml · github.com/crewjam/saml
- CVE-2023-40180Denial of service vulnerability in silverstripe-graphql via recursive queriessilverstripe-graphql · silverstripe/graphql
- CVE-2023-45687Authentication bypass via session fixation in Titan MFT and Titan SFTP serversSouth River Technologies Titan MFT · South River Technologi…
- CVE-2023-45686Arbitrary file write via WebDAV path traversal in Titan MFT and Titan SFTP serversSouth River Technologies Titan MFT · South River Technologi…
- CVE-2023-4827File Manager Pro < 1.8 - Remote Code Execution via CSRFFile Manager Pro
- CVE-2023-5422SSL Certificates are not checked for E-Mail HandlingOTRS AG OTRS · OTRS AG ((OTRS)) Community Edition
- CVE-2023-43667Apache InLong: Log Injection in Global functionsApache Software Foundation Apache InLong · org.apache.inlon…
- CVE-2023-21414NCC Group has found a flaw during the annual internal penetration test ordered by Axis Communications.Axis Communications AB AXIS OS · Axis Communications AB… +1
- CVE-2023-38280IBM Power HMC privilege escalationIBM Power HMC
- CVE-2023-5591SQL Injection in librenms/librenmslibrenms/librenms
- CVE-2023-36947TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the File pa
- CVE-2023-36950TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the http_ho
- CVE-2023-45898The Linux kernel before 6.5.4 has an es1 use-after-free in fs/ext4/extents_status.c, related to ext4_es_insert_extent.
- CVE-2023-45984TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the lang pa
- CVE-2023-45985TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 were discovered to contain a stack overflow in the functio
Medium, low and unrated 130
- CVE-2023-4215Advantech WebAccess Debug Messages Revealing Unnecessary InformationAdvantech WebAccess
- CVE-2023-45152Blind Server Side Request Forgery (SSRF) in remote schedule import feature in Engelsystemengelsystem
- CVE-2023-45659Session is not expiring after password reset in Engelsystemengelsystem
- CVE-2012-10016Halulu simple-download-button-shortcode Plugin Download simple-download-button_dl.php information disclosureHalulu simple-download-button-shortcode Plugin
- CVE-2011-10004reciply Plugin uploadImage.php unrestricted uploadreciply Plugin
- CVE-2023-40373IBM Db2 denial of serviceIBM Db2 for Linux, UNIX and Windows
- CVE-2023-38719IBM Db2 denial of serviceIBM Db2 for Linux, UNIX and Windows
- CVE-2023-40372IBM Db2 denial of serviceIBM Db2 for Linux, UNIX and Windows
- CVE-2023-40374IBM Db2 denial of serviceIBM Db2 for Linux, UNIX and Windows
- CVE-2023-45807OpenSearch Issue with tenant read-only permissionsopensearch-project security · org.opensearch.plugin:opensea…
- CVE-2023-38728IBM Db2 denial of serviceIBM Db2 for Linux, UNIX and Windows
- CVE-2023-38740IBM Db2 denial of serviceIBM Db2 for Linux, UNIX and Windows
- CVE-2023-44391Prevent unauthorized access to summary details in Discoursediscourse
- CVE-2023-43814Exposure of poll options and votes to unauthorized users in Discoursediscourse
- CVE-2023-44394Disclosure of project names to unauthorized users in MantisBTmantisbt · mantisbt/mantisbt
- CVE-2023-38720IBM Db2 denial of serviceIBM Db2 for Linux, UNIX and Windows
- CVE-2023-30987IBM Db2 denial of serviceIBM Db2 for Linux, UNIX and Windows
- CVE-2023-45147Arbitrary keys can be added to a topic's custom fields by any user in Discoursediscourse
- CVE-2023-5089Defender Security < 4.1.0 - Protection Bypass (Hidden Login Page)Defender Security
- CVE-2023-4289WP Matterport Shortcode < 2.1.8 - Contributor+ Stored XSS via shortcodeWP Matterport Shortcode
- CVE-2023-4821Drag and Drop Multiple File Upload < 1.1.1 - Unauthenticated Stored Cross-Site ScriptingDrag and Drop Multiple File Upload for WooCommerce
- CVE-2023-4933WP Job Openings < 3.4.3 - Sensitive Data Exposure via Directory ListingWP Job Openings
- CVE-2023-4820PowerPress Podcasting < 11.0.12 - Contributor+ Stored XSSPowerPress Podcasting plugin by Blubrry
- CVE-2023-4725Simple Posts Ticker < 1.1.6 - Admin+ Stored XSSSimple Posts Ticker
- CVE-2023-4800DoLogin Security < 3.7.1 - Subscriber+ IP Address leakDoLogin Security
- CVE-2023-3279NextGEN Gallery < 3.39 - Admin+ Local File InclusionWordPress Gallery Plugin
- CVE-2023-4811WordPress File Upload < 4.23.3 - Author+ Stored Cross-Site ScriptingWordPress File Upload
- CVE-2023-3706ActivityPub for WordPress < 1.0.0 - Subscriber+ Arbitrary Post Title DisclosureActivityPub
- CVE-2023-3746ActivityPub for WordPress < 1.0.1 - Contributor+ Stored XSSActivityPub
- CVE-2023-4646Simple Posts Ticker < 1.1.6 - Contributor+ Stored XSSSimple Posts Ticker
- CVE-2023-5057ActivityPub for WordPress < 1.0.0 - Contributor+ Stored XSSActivityPub
- CVE-2023-3707ActivityPub for WordPress < 1.0.0 - Subscriber+ Arbitrary Post Content DisclosureActivityPub
- CVE-2023-5561WordPress < 6.3.2 - Unauthenticated Post Author Email DisclosureWordPress
- CVE-2023-4798User Avatar - Reloaded < 1.2.2 - Contributor+ Stored XSSUser Avatar
- CVE-2023-4805Tutor LMS < 2.3.0 - Subscriber+ Stored Cross-Site ScriptingTutor LMS
- CVE-2023-4783Magee Shortcodes <= 2.1.1 - Contributor+ Stored XSS via shortcodeMagee Shortcodes
- CVE-2023-4795Testimonial Slider Shortcode < 1.1.9 - Contributor+ Stored XSSTestimonial Slider Shortcode
- CVE-2023-4687PageLayer < 1.7.7 - Unauthenticated Stored XSSPage Builder: Pagelayer
- CVE-2023-4388EventON < 2.2 - Admin+ Stored XSSEventON
- CVE-2023-5167User Activity Log Pro < 2.3.4 - Unauthenticated Stored Cross-Site Scripting via User Agentuser-activity-log-pro
- CVE-2023-4950Funnelforms Free < 3.4 Unauthenticated Stored Cross-Site ScriptingInteractive Contact Form and Multi Step Form Builder with D…
- CVE-2023-5087PageLayer < 1.7.8 - Author+ Stored XSSPage Builder: Pagelayer
- CVE-2023-4862File Manager Pro < 1.8.1 - Admin+ Stored Cross-Site ScriptingFile Manager Pro
- CVE-2023-4819Shared Files < 1.7.6 - Unauthenticated Stored Cross-Site ScriptingShared Files
- CVE-2023-5177Vrm 360 3D Model Viewer <= 1.2.1 - Full Path DisclosureVrm 360 3D Model Viewer
- CVE-2023-4290WP Matterport Shortcode < 2.1.7 - Reflected XSSWP Matterport Shortcode
- CVE-2023-45150Inviting excessive long email addresses to a calendar event makes the Nextcloud server unresponsivenextcloud security-advisories
- CVE-2023-45149Password of talk conversations can be bruteforced in Nextcloudnextcloud security-advisories
- CVE-2023-45148Rate limiter not working reliable when Memcached is installed in Nextcloudnextcloud security-advisories
- CVE-2023-45151OAuth2 client_secret stored in plain text in the Nextcloud databasenextcloud security-advisories
- CVE-2023-45660Require strict cookies for image proxy requests in Nextcloud Mailnextcloud security-advisories
- CVE-2023-45669Improper signature counter value handling in webauthn4j-spring-security webauthn4j-spring-security · com.webauthn4j:webauthn4j-spri…
- CVE-2023-45690Information leak via default file permissions on Titan MFT and Titan SFTP serversSouth River Technologies Titan MFT · South River Technologi…
- CVE-2023-45689Arbitrary file read via path traversal in Titan MFT and Titan SFTP serversSouth River Technologies Titan MFT · South River Technologi…
- CVE-2023-45688Information leak via path traversal in Titan MFT and Titan SFTP serversSouth River Technologies Titan MFT · South River Technologi…
- CVE-2023-46087WordPress Who Hit The Page – Hit Counter Plugin <= 1.4.14.3 is vulnerable to Cross Site Request Forgery (CSRF)Mahlamusa Who Hit The Page – Hit Counter
- CVE-2023-5575 Improper access control in the permission inheritance in Devolutions Server 2022.3.13.0 and earlier allows an attacker that compromised a Devolutions Server
- CVE-2023-46066WordPress Mediabay Plugin <= 1.6 is vulnerable to Cross Site Scripting (XSS)Codedrafty Mediabay – Media Library Folders
- CVE-2023-44987WordPress Timely Booking Button Plugin <= 2.0.2 is vulnerable to Cross Site Scripting (XSS)Timely - Appointment software Timely Booking Button
- CVE-2023-44986WordPress Abandoned Cart Lite for WooCommerce Plugin <= 5.15.2 is vulnerable to Cross Site Scripting (XSS)Tyche Softwares Abandoned Cart Lite for WooCommerce
- CVE-2023-44985WordPress BuddyMeet Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS)Cytech BuddyMeet
- CVE-2023-44984WordPress bbp style pack Plugin <= 5.6.7 is vulnerable to Cross Site Scripting (XSS)Robin Wilson bbp style pack
- CVE-2023-44229WordPress Tiny Carousel Horizontal Slider Plugin <= 8.1 is vulnerable to Cross Site Scripting (XSS)Gopi Ramasamy Tiny Carousel Horizontal Slider
- CVE-2023-45836WordPress Ultimate Taxonomy Manager Plugin <= 2.0 is vulnerable to Cross Site Request Forgery (CSRF)XYDAC Ultimate Taxonomy Manager
- CVE-2023-45831WordPress AMP WP Plugin <= 1.5.15 is vulnerable to Cross Site Request Forgery (CSRF)Pixelative, Mohsin Rafique AMP WP – Google AMP For WordPress
- CVE-2023-45763WordPress Taggbox Plugin <= 2.9 is vulnerable to Cross Site Request Forgery (CSRF)Taggbox
- CVE-2023-45753WordPress which template file Plugin <= 4.6.0 is vulnerable to Cross Site Request Forgery (CSRF)Gilles Dumas which template file
- CVE-2023-45752WordPress Post Gallery Plugin <= 2.3.12 is vulnerable to Cross Site Request Forgery (CSRF)10 Quality Post Gallery
- CVE-2023-45749WordPress AGP Font Awesome Collection Plugin <= 3.2.4 is vulnerable to Cross Site Request Forgery (CSRF)Alexey Golubnichenko AGP Font Awesome Collection
- CVE-2023-45748WordPress MailChimp Forms by MailMunch Plugin <= 3.1.4 is vulnerable to Cross Site Request Forgery (CSRF)MailChimp Forms by MailMunch
- CVE-2023-45647WordPress Constant Contact Forms by MailMunch Plugin <= 2.0.10 is vulnerable to Cross Site Request Forgery (CSRF)Constant Contact Forms by MailMunch
- CVE-2023-45645WordPress WP Open Street Map Plugin <= 1.25 is vulnerable to Cross Site Request Forgery (CSRF)InfoD74 WP Open Street Map
- CVE-2023-45643WordPress CPT Shortcode Generator Plugin <= 1.0 is vulnerable to Cross Site Request Forgery (CSRF)Anurag Deshmukh CPT Shortcode Generator
- CVE-2023-45642WordPress Snap Pixel Plugin <= 1.5.7 is vulnerable to Cross Site Request Forgery (CSRF)Hassan Ali Snap Pixel
- CVE-2023-4457Grafana is an open-source platform for monitoring and observability.Grafana google-sheets-datasource · github.com/grafana/googl…
- CVE-2023-45641WordPress Caret Country Access Limit Plugin <= 1.0.2 is vulnerable to Cross Site Request Forgery (CSRF)Caret Country Access Limit
- CVE-2023-45639WordPress Sort SearchResult By Title Plugin <= 10.0 is vulnerable to Cross Site Request Forgery (CSRF)Codex-m Sort SearchResult By Title
- CVE-2023-45638WordPress Eupago Gateway For Woocommerce Plugin <= 3.1.9 is vulnerable to Cross Site Request Forgery (CSRF)Eupago Gateway For Woocommerce
- CVE-2023-45656WordPress Lazy Load for Videos Plugin <= 2.18.2 is vulnerable to Cross Site Request Forgery (CSRF)Kevin Weber Lazy Load for Videos
- CVE-2023-45655WordPress PixFields Plugin <= 0.7.0 is vulnerable to Cross Site Request Forgery (CSRF)PixelGrade PixFields
- CVE-2023-45654WordPress Comments Ratings Plugin <= 1.1.7 is vulnerable to Cross Site Request Forgery (CSRF)Pixelgrade Comments Ratings
- CVE-2023-4822Grafana is an open-source platform for monitoring and observability.Grafana Enterprise · github.com/grafana/grafana
- CVE-2023-45653WordPress Video Playlist For YouTube Plugin <= 6.0 is vulnerable to Cross Site Request Forgery (CSRF)Galaxy Weblinks Video Playlist For YouTube
- CVE-2023-45651WordPress WP Attachments Plugin <= 5.0.11 is vulnerable to Cross Site Request Forgery (CSRF)Marco Milesi WP Attachments
- CVE-2023-4834In Red Lion Europe mbCONNECT24 and mymbCONNECT24 and Helmholz myREX24 and myREX24.virtual up to and including 2.14.2 an improperly implementRed Lion Europe mbCONNECT24 · Red Lion Europe mymbCONNEC… +2
- CVE-2023-45650WordPress HTML5 Maps Plugin <= 1.7.1.4 is vulnerable to Cross Site Request Forgery (CSRF)Fla-shop.com HTML5 Maps
- CVE-2023-4620Booking Calendar < 9.7.3.1 - Unauthenticated Stored XSSBooking Calendar
- CVE-2023-3392Read More & Accordion < 3.2.7 - Admin+ PHP Object InjectionRead More & Accordion
- CVE-2023-45629WordPress Responsive Image Gallery, Gallery Album Plugin <= 2.0.3 is vulnerable to Cross Site Request Forgery (CSRF)wpdevart Gallery – Image and Video Gallery with Thumbnails
- CVE-2023-45606WordPress Simple URLs Plugin <= 120 is vulnerable to Cross Site Request Forgery (CSRF)Lasso Simple URLs
- CVE-2023-45605WordPress Feed Statistics Plugin <= 4.1 is vulnerable to Cross Site Request Forgery (CSRF)Christopher Finke Feed Statistics
- CVE-2023-5595Denial of Service in gpac/gpacgpac/gpac
- CVE-2023-45274WordPress SendPulse Free Web Push Plugin <= 1.3.1 is vulnerable to Cross Site Request Forgery (CSRF)SendPulse Free Web Push
- CVE-2023-45273WordPress Stout Google Calendar Plugin <= 1.2.3 is vulnerable to Cross Site Request Forgery (CSRF)Matt McKenny Stout Google Calendar
- CVE-2023-5421 Possible XSS execution in customer information OTRS AG OTRS · OTRS AG ((OTRS)) Community Edition
- CVE-2023-38059External pictures can be loaded even if not allowed by configurationOTRS AG OTRS · OTRS AG ((OTRS)) Community Edition
- CVE-2023-43666Apache InLong: General user Unauthorized access User ManagementApache Software Foundation Apache InLong · org.apache.inlon…
- CVE-2023-43668Apache InLong: Jdbc Connection Security Bypass in InLongApache Software Foundation Apache InLong · org.apache.inlon…
- CVE-2023-45757Apache bRPC: The builtin service rpcz page has an XSS attack vulnerabilityApache Software Foundation Apache bRPC
- CVE-2023-45158An OS command injection vulnerability exists in web2py 2.24.1 and earlier.web2py
- CVE-2023-21415Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API overlay_del.cgi is vulnerable to path traversal attacksAxis Communications AB AXIS OS
- CVE-2023-40377IBM i privilege escalationIBM i
- CVE-2023-33836IBM Security Verify Governance information disclosureIBM Security Verify Governance
- CVE-2022-48612A Universal Cross Site Scripting (UXSS) vulnerability in ClassLink OneClick Extension through 10.7 allows remote attackers to inject JavaScr
- CVE-2023-29484In Terminalfour before 8.3.16, misconfigured LDAP users are able to login with an invalid password.
- CVE-2023-36340TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain a stack overflow via the http_host parameter in the function loginAuth.
- CVE-2023-36952TOTOLINK CP300+ V5.2cu.7594_B20200910 was discovered to contain a stack overflow via the pingIp parameter in the function setDiagnosisCfg.
- CVE-2023-36953TOTOLINK CP300+ V5.2cu.7594_B20200910 and before is vulnerable to command injection.
- CVE-2023-36954TOTOLINK CP300+ V5.2cu.7594_B20200910 and before is vulnerable to command injection.
- CVE-2023-36955TOTOLINK CP300+ <=V5.2cu.7594_B20200910 was discovered to contain a stack overflow via the File parameter in the function UploadCustomModule
- CVE-2023-40791extract_user_to_sg in lib/scatterlist.c in the Linux kernel before 6.4.12 fails to unpin pages in a certain situation, as demonstrated by a
- CVE-2023-40851Cross Site Scripting (XSS) vulnerability in Phpgurukul User Registration & Login and User Management System With admin panel 3.0 allows atta
- CVE-2023-40852SQL Injection vulnerability in Phpgurukul User Registration & Login and User Management System With admin panel 3.0 allows attackers to obta
- CVE-2023-43118Cross Site Request Forgery (CSRF) vulnerability in Chalet application in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, fixed in 31.
- CVE-2023-43119An Access Control issue discovered in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, also fixed in 22.7, 31.7.2 allows attackers to
- CVE-2023-43120An issue discovered in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, before 22.7 and before 31.7.1 allows attackers to gain escalat
- CVE-2023-43121A Directory Traversal vulnerability discovered in Chalet application in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, before 22.7,
- CVE-2023-44808D-Link DIR-820L 1.05B03 has a stack overflow vulnerability in the sub_4507CC function.
- CVE-2023-44809D-Link device DIR-820L 1.05B03 is vulnerable to Insecure Permissions.
- CVE-2023-45540An issue in Jorani Leave Management System 1.0.3 allows a remote attacker to execute arbitrary HTML code via a crafted script to the comment
- CVE-2023-45542Cross Site Scripting vulnerability in mooSocial 3.1.8 allows a remote attacker to obtain sensitive information via a crafted script to the q
- CVE-2023-45572Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1
- CVE-2023-45573Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1
- CVE-2023-45574Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1
- CVE-2023-45575Stack Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v
- CVE-2023-45576Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1
- CVE-2023-45577Stack Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v
- CVE-2023-45578Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1
- CVE-2023-45579Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1
- CVE-2023-45580Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1