# CVEs published 2023-10-16

168 CVEs were published on October 16, 2023: 7 critical, 31 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2023-4215](https://cve.now/CVE-2023-4215.md): Advantech WebAccess Debug Messages Revealing Unnecessary Information (CVSS 6.5, Advantech WebAccess)
- [CVE-2023-45152](https://cve.now/CVE-2023-45152.md): Blind Server Side Request Forgery (SSRF) in remote schedule import feature in Engelsystem (CVSS 2.0, engelsystem)
- [CVE-2023-45659](https://cve.now/CVE-2023-45659.md): Session is not expiring after password reset in Engelsystem (CVSS 3.6, engelsystem)
- [CVE-2012-10016](https://cve.now/CVE-2012-10016.md): Halulu simple-download-button-shortcode Plugin Download simple-download-button\_dl.php information disclosure (CVSS 4.3, Halulu simple-download-button-shortcode Plugin)
- [CVE-2011-10004](https://cve.now/CVE-2011-10004.md): reciply Plugin uploadImage.php unrestricted upload (CVSS 6.3, reciply Plugin)
- [CVE-2023-40373](https://cve.now/CVE-2023-40373.md): IBM Db2 denial of service (CVSS 5.3, IBM Db2 for Linux, UNIX and Windows)
- [CVE-2023-38719](https://cve.now/CVE-2023-38719.md): IBM Db2 denial of service (CVSS 5.1, IBM Db2 for Linux, UNIX and Windows)
- [CVE-2023-40372](https://cve.now/CVE-2023-40372.md): IBM Db2 denial of service (CVSS 5.3, IBM Db2 for Linux, UNIX and Windows)
- [CVE-2023-30991](https://cve.now/CVE-2023-30991.md): IBM Db2 denial of service (CVSS 7.5, IBM Db2 for Linux, UNIX and Windows)
- [CVE-2023-40374](https://cve.now/CVE-2023-40374.md): IBM Db2 denial of service (CVSS 5.3, IBM Db2 for Linux, UNIX and Windows)
- [CVE-2023-45807](https://cve.now/CVE-2023-45807.md): OpenSearch Issue with tenant read-only permissions (CVSS 5.4, opensearch-project security · org.opensearch.plugin:opensea…)
- [CVE-2023-43658](https://cve.now/CVE-2023-43658.md): Improper escaping of user input in discourse-calendar (CVSS 8.0, discourse-calendar)
- [CVE-2023-38728](https://cve.now/CVE-2023-38728.md): IBM Db2 denial of service (CVSS 5.3, IBM Db2 for Linux, UNIX and Windows)
- [CVE-2023-38740](https://cve.now/CVE-2023-38740.md): IBM Db2 denial of service (CVSS 5.3, IBM Db2 for Linux, UNIX and Windows)
- [CVE-2023-45131](https://cve.now/CVE-2023-45131.md): Unauthenticated access to new private chat messages in Discourse (CVSS 7.5, discourse)
- [CVE-2023-44391](https://cve.now/CVE-2023-44391.md): Prevent unauthorized access to summary details in Discourse (CVSS 5.3, discourse)
- [CVE-2023-44388](https://cve.now/CVE-2023-44388.md): Malicious requests can fill up the log files resulting in a deinal of service in Discourse (CVSS 7.5, discourse)
- [CVE-2023-43814](https://cve.now/CVE-2023-43814.md): Exposure of poll options and votes to unauthorized users in Discourse (CVSS 3.7, discourse)
- [CVE-2023-43659](https://cve.now/CVE-2023-43659.md): Cross-site Scripting via email preview when CSP disabled in Discourse (CVSS 8.0, discourse)
- [CVE-2023-44394](https://cve.now/CVE-2023-44394.md): Disclosure of project names to unauthorized users in MantisBT (CVSS 4.3, mantisbt · mantisbt/mantisbt)
- [CVE-2023-42459](https://cve.now/CVE-2023-42459.md): Malformed DATA submessage leads to bad-free error in Fast-DDS (CVSS 8.6, eProsima Fast-DDS)
- [CVE-2023-38720](https://cve.now/CVE-2023-38720.md): IBM Db2 denial of service (CVSS 5.3, IBM Db2 for Linux, UNIX and Windows)
- [CVE-2023-45141](https://cve.now/CVE-2023-45141.md): CSRF Token Validation Vulnerability in fiber (CVSS 8.6, gofiber fiber · github.com/gofiber/fiber/v2)
- [CVE-2023-30987](https://cve.now/CVE-2023-30987.md): IBM Db2 denial of service (CVSS 5.3, IBM Db2 for Linux, UNIX and Windows)
- [CVE-2023-45128](https://cve.now/CVE-2023-45128.md): CSRF Token Reuse Vulnerability in fiber (CVSS 10.0, gofiber fiber · github.com/gofiber/fiber/v2)
- [CVE-2023-45144](https://cve.now/CVE-2023-45144.md): Remote code execution from login screen through unescaped URL parameter in OAuth Identity XWiki App (CVSS 10.0, xwikisas identity-oauth · com.xwiki.identity-oauth:identity…)
- [CVE-2023-45147](https://cve.now/CVE-2023-45147.md): Arbitrary keys can be added to a topic's custom fields by any user in Discourse (CVSS 4.9, discourse)
- [CVE-2023-5089](https://cve.now/CVE-2023-5089.md): Defender Security \< 4.1.0 - Protection Bypass (Hidden Login Page) (CVSS 5.3, Defender Security)
- [CVE-2023-4289](https://cve.now/CVE-2023-4289.md): WP Matterport Shortcode \< 2.1.8 - Contributor+ Stored XSS via shortcode (CVSS 5.4, WP Matterport Shortcode)
- [CVE-2023-4821](https://cve.now/CVE-2023-4821.md): Drag and Drop Multiple File Upload \< 1.1.1 - Unauthenticated Stored Cross-Site Scripting (CVSS 5.4, Drag and Drop Multiple File Upload for WooCommerce)
- [CVE-2023-4933](https://cve.now/CVE-2023-4933.md): WP Job Openings \< 3.4.3 - Sensitive Data Exposure via Directory Listing (no CVSS, WP Job Openings)
- [CVE-2023-4820](https://cve.now/CVE-2023-4820.md): PowerPress Podcasting \< 11.0.12 - Contributor+ Stored XSS (CVSS 5.4, PowerPress Podcasting plugin by Blubrry)
- [CVE-2023-4861](https://cve.now/CVE-2023-4861.md): File Manager Pro \< 1.8.1 - Admin+ Remote Code Execution (CVSS 7.2, File Manager Pro)
- [CVE-2023-4725](https://cve.now/CVE-2023-4725.md): Simple Posts Ticker \< 1.1.6 - Admin+ Stored XSS (CVSS 4.8, Simple Posts Ticker)
- [CVE-2023-4800](https://cve.now/CVE-2023-4800.md): DoLogin Security \< 3.7.1 - Subscriber+ IP Address leak (CVSS 6.5, DoLogin Security)
- [CVE-2023-3279](https://cve.now/CVE-2023-3279.md): NextGEN Gallery \< 3.39 - Admin+ Local File Inclusion (CVSS 4.9, WordPress Gallery Plugin)
- [CVE-2023-5133](https://cve.now/CVE-2023-5133.md): User Activity Log Pro \< 2.3.4 - IP Spoofing (CVSS 7.5, user-activity-log-pro)
- [CVE-2023-4811](https://cve.now/CVE-2023-4811.md): WordPress File Upload \< 4.23.3 - Author+ Stored Cross-Site Scripting (CVSS 5.4, WordPress File Upload)
- [CVE-2023-3706](https://cve.now/CVE-2023-3706.md): ActivityPub for WordPress \< 1.0.0 - Subscriber+ Arbitrary Post Title Disclosure (CVSS 4.3, ActivityPub)
- [CVE-2023-3746](https://cve.now/CVE-2023-3746.md): ActivityPub for WordPress \< 1.0.1 - Contributor+ Stored XSS (CVSS 5.4, ActivityPub)
- [CVE-2023-4646](https://cve.now/CVE-2023-4646.md): Simple Posts Ticker \< 1.1.6 - Contributor+ Stored XSS (CVSS 5.4, Simple Posts Ticker)
- [CVE-2023-5057](https://cve.now/CVE-2023-5057.md): ActivityPub for WordPress \< 1.0.0 - Contributor+ Stored XSS (no CVSS, ActivityPub)
- [CVE-2023-3707](https://cve.now/CVE-2023-3707.md): ActivityPub for WordPress \< 1.0.0 - Subscriber+ Arbitrary Post Content Disclosure (CVSS 4.3, ActivityPub)
- [CVE-2023-4666](https://cve.now/CVE-2023-4666.md): Form-Maker \< 1.15.20 - Unauthenticated Arbitrary File Upload (CVSS 9.8, Form Maker by 10Web)
- [CVE-2023-5561](https://cve.now/CVE-2023-5561.md): WordPress \< 6.3.2 - Unauthenticated Post Author Email Disclosure (CVSS 5.3, WordPress)
- [CVE-2023-4798](https://cve.now/CVE-2023-4798.md): User Avatar - Reloaded \< 1.2.2 - Contributor+ Stored XSS (no CVSS, User Avatar)
- [CVE-2023-5003](https://cve.now/CVE-2023-5003.md): Active Directory Integration \< 4.1.10 - Unauthenticated Log Disclosure (CVSS 7.5, Active Directory Integration / LDAP Integration)
- [CVE-2023-3155](https://cve.now/CVE-2023-3155.md): NextGEN Gallery \< 3.39 - Admin+ Arbitrary File Read and Delete (CVSS 7.2, WordPress Gallery Plugin)
- [CVE-2023-4805](https://cve.now/CVE-2023-4805.md): Tutor LMS \< 2.3.0 - Subscriber+ Stored Cross-Site Scripting (CVSS 5.4, Tutor LMS)
- [CVE-2023-3154](https://cve.now/CVE-2023-3154.md): NextGEN Gallery \< 3.39 - Admin+ PHAR Deserialization (CVSS 7.5, WordPress Gallery Plugin)
- [CVE-2023-4691](https://cve.now/CVE-2023-4691.md): Bookly \< 22.4 - Admin+ SQLi (CVSS 7.2, WordPress Online Booking and Scheduling Plugin)
- [CVE-2023-4783](https://cve.now/CVE-2023-4783.md): Magee Shortcodes \<= 2.1.1 - Contributor+ Stored XSS via shortcode (CVSS 5.4, Magee Shortcodes)
- [CVE-2023-4795](https://cve.now/CVE-2023-4795.md): Testimonial Slider Shortcode \< 1.1.9 - Contributor+ Stored XSS (CVSS 5.4, Testimonial Slider Shortcode)
- [CVE-2023-4687](https://cve.now/CVE-2023-4687.md): PageLayer \< 1.7.7 - Unauthenticated Stored XSS (CVSS 6.1, Page Builder: Pagelayer)
- [CVE-2023-4388](https://cve.now/CVE-2023-4388.md): EventON \< 2.2 - Admin+ Stored XSS (CVSS 4.8, EventON)
- [CVE-2023-5167](https://cve.now/CVE-2023-5167.md): User Activity Log Pro \< 2.3.4 - Unauthenticated Stored Cross-Site Scripting via User Agent (CVSS 5.4, user-activity-log-pro)
- [CVE-2023-4776](https://cve.now/CVE-2023-4776.md): WPSchoolPress \< 2.2.5 - Teacher+ SQLi (CVSS 8.8, School Management System)
- [CVE-2023-4643](https://cve.now/CVE-2023-4643.md): Enable Media Replace \< 4.1.3 - Author+ PHP Object Injection (CVSS 8.8, Enable Media Replace)
- [CVE-2023-4950](https://cve.now/CVE-2023-4950.md): Funnelforms Free \< 3.4 Unauthenticated Stored Cross-Site Scripting (CVSS 6.1, Interactive Contact Form and Multi Step Form Builder with D…)
- [CVE-2023-5087](https://cve.now/CVE-2023-5087.md): PageLayer \< 1.7.8 - Author+ Stored XSS (CVSS 5.4, Page Builder: Pagelayer)
- [CVE-2023-4862](https://cve.now/CVE-2023-4862.md): File Manager Pro \< 1.8.1 - Admin+ Stored Cross-Site Scripting (no CVSS, File Manager Pro)
- [CVE-2023-4819](https://cve.now/CVE-2023-4819.md): Shared Files \< 1.7.6 - Unauthenticated Stored Cross-Site Scripting (CVSS 6.1, Shared Files)
- [CVE-2023-5177](https://cve.now/CVE-2023-5177.md): Vrm 360 3D Model Viewer \<= 1.2.1 - Full Path Disclosure (CVSS 5.3, Vrm 360 3D Model Viewer)
- [CVE-2023-4971](https://cve.now/CVE-2023-4971.md): Weaver Xtreme Theme Support \< 6.3.1 - Admin+ PHP Object Injection (CVSS 7.2, Weaver Xtreme Theme Support)
- [CVE-2023-4290](https://cve.now/CVE-2023-4290.md): WP Matterport Shortcode \< 2.1.7 - Reflected XSS (CVSS 6.1, WP Matterport Shortcode)
- [CVE-2023-45150](https://cve.now/CVE-2023-45150.md): Inviting excessive long email addresses to a calendar event makes the Nextcloud server unresponsive (CVSS 4.3, nextcloud security-advisories)
- [CVE-2023-45149](https://cve.now/CVE-2023-45149.md): Password of talk conversations can be bruteforced in Nextcloud (CVSS 4.3, nextcloud security-advisories)
- [CVE-2023-45148](https://cve.now/CVE-2023-45148.md): Rate limiter not working reliable when Memcached is installed in Nextcloud (CVSS 4.3, nextcloud security-advisories)
- [CVE-2023-45151](https://cve.now/CVE-2023-45151.md): OAuth2 client\_secret stored in plain text in the Nextcloud database (CVSS 6.5, nextcloud security-advisories)
- [CVE-2023-45660](https://cve.now/CVE-2023-45660.md): Require strict cookies for image proxy requests in Nextcloud Mail (CVSS 4.3, nextcloud security-advisories)
- [CVE-2023-45669](https://cve.now/CVE-2023-45669.md): Improper signature counter value handling in webauthn4j-spring-security (CVSS 4.8, webauthn4j-spring-security · com.webauthn4j:webauthn4j-spri…)
- [CVE-2023-45683](https://cve.now/CVE-2023-45683.md): Cross site scripting via missing binding syntax validation In ACS location in github.com/crewjam/saml (CVSS 7.1, crewjam saml · github.com/crewjam/saml)
- [CVE-2023-40180](https://cve.now/CVE-2023-40180.md): Denial of service vulnerability in silverstripe-graphql via recursive queries (CVSS 7.5, silverstripe-graphql · silverstripe/graphql)
- [CVE-2023-45690](https://cve.now/CVE-2023-45690.md): Information leak via default file permissions on Titan MFT and Titan SFTP servers (no CVSS, South River Technologies Titan MFT · South River Technologi…)
- [CVE-2023-45689](https://cve.now/CVE-2023-45689.md): Arbitrary file read via path traversal in Titan MFT and Titan SFTP servers (no CVSS, South River Technologies Titan MFT · South River Technologi…)
- [CVE-2023-45688](https://cve.now/CVE-2023-45688.md): Information leak via path traversal in Titan MFT and Titan SFTP servers (no CVSS, South River Technologies Titan MFT · South River Technologi…)
- [CVE-2023-45687](https://cve.now/CVE-2023-45687.md): Authentication bypass via session fixation in Titan MFT and Titan SFTP servers (CVSS 8.8, South River Technologies Titan MFT · South River Technologi…)
- [CVE-2023-45686](https://cve.now/CVE-2023-45686.md): Arbitrary file write via WebDAV path traversal in Titan MFT and Titan SFTP servers (CVSS 7.2, South River Technologies Titan MFT · South River Technologi…)
- [CVE-2023-45685](https://cve.now/CVE-2023-45685.md): Arbitrary file write via "zip slip" in Titan MFT and Titan SFTP servers (CVSS 9.1, South River Technologies Titan MFT · South River Technologi…)
- [CVE-2023-20198](https://cve.now/CVE-2023-20198.md): Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS XE Software. (CVSS 10.0, KEV, Cisco IOS XE Software)
- [CVE-2023-46087](https://cve.now/CVE-2023-46087.md): WordPress Who Hit The Page – Hit Counter Plugin \<= 1.4.14.3 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Mahlamusa Who Hit The Page – Hit Counter)
- [CVE-2023-5575](https://cve.now/CVE-2023-5575.md): Improper access control in the permission inheritance in Devolutions Server 2022.3.13.0 and earlier allows an attacker that compromised a (no CVSS, Devolutions Server)
- [CVE-2023-46066](https://cve.now/CVE-2023-46066.md): WordPress Mediabay Plugin \<= 1.6 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Codedrafty Mediabay – Media Library Folders)
- [CVE-2023-44987](https://cve.now/CVE-2023-44987.md): WordPress Timely Booking Button Plugin \<= 2.0.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Timely - Appointment software Timely Booking Button)
- [CVE-2023-44986](https://cve.now/CVE-2023-44986.md): WordPress Abandoned Cart Lite for WooCommerce Plugin \<= 5.15.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Tyche Softwares Abandoned Cart Lite for WooCommerce)
- [CVE-2023-44985](https://cve.now/CVE-2023-44985.md): WordPress BuddyMeet Plugin \<= 2.2.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Cytech BuddyMeet)
- [CVE-2023-44984](https://cve.now/CVE-2023-44984.md): WordPress bbp style pack Plugin \<= 5.6.7 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Robin Wilson bbp style pack)
- [CVE-2023-44229](https://cve.now/CVE-2023-44229.md): WordPress Tiny Carousel Horizontal Slider Plugin \<= 8.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Gopi Ramasamy Tiny Carousel Horizontal Slider)
- [CVE-2023-45836](https://cve.now/CVE-2023-45836.md): WordPress Ultimate Taxonomy Manager Plugin \<= 2.0 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, XYDAC Ultimate Taxonomy Manager)
- [CVE-2023-45831](https://cve.now/CVE-2023-45831.md): WordPress AMP WP Plugin \<= 1.5.15 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, Pixelative, Mohsin Rafique AMP WP – Google AMP For WordPress)
- [CVE-2023-45763](https://cve.now/CVE-2023-45763.md): WordPress Taggbox Plugin \<= 2.9 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, Taggbox)
- [CVE-2023-45753](https://cve.now/CVE-2023-45753.md): WordPress which template file Plugin \<= 4.6.0 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Gilles Dumas which template file)
- [CVE-2023-45752](https://cve.now/CVE-2023-45752.md): WordPress Post Gallery Plugin \<= 2.3.12 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, 10 Quality Post Gallery)
- [CVE-2023-45749](https://cve.now/CVE-2023-45749.md): WordPress AGP Font Awesome Collection Plugin \<= 3.2.4 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Alexey Golubnichenko AGP Font Awesome Collection)
- [CVE-2023-45748](https://cve.now/CVE-2023-45748.md): WordPress MailChimp Forms by MailMunch Plugin \<= 3.1.4 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, MailChimp Forms by MailMunch)
- [CVE-2023-45647](https://cve.now/CVE-2023-45647.md): WordPress Constant Contact Forms by MailMunch Plugin \<= 2.0.10 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, Constant Contact Forms by MailMunch)
- [CVE-2023-45645](https://cve.now/CVE-2023-45645.md): WordPress WP Open Street Map Plugin \<= 1.25 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, InfoD74 WP Open Street Map)
- [CVE-2023-45643](https://cve.now/CVE-2023-45643.md): WordPress CPT Shortcode Generator Plugin \<= 1.0 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Anurag Deshmukh CPT Shortcode Generator)
- [CVE-2023-45642](https://cve.now/CVE-2023-45642.md): WordPress Snap Pixel Plugin \<= 1.5.7 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, Hassan Ali Snap Pixel)
- [CVE-2023-4457](https://cve.now/CVE-2023-4457.md): Grafana is an open-source platform for monitoring and observability. (CVSS 5.5, Grafana google-sheets-datasource · github.com/grafana/googl…)
- [CVE-2023-45641](https://cve.now/CVE-2023-45641.md): WordPress Caret Country Access Limit Plugin \<= 1.0.2 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, Caret Country Access Limit)
- [CVE-2023-45639](https://cve.now/CVE-2023-45639.md): WordPress Sort SearchResult By Title Plugin \<= 10.0 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Codex-m Sort SearchResult By Title)
- [CVE-2023-3991](https://cve.now/CVE-2023-3991.md): OS command injection vulnerability in FreshTomato 2023.3 (CVSS 10.0, FreshTomato)
- [CVE-2023-45638](https://cve.now/CVE-2023-45638.md): WordPress Eupago Gateway For Woocommerce Plugin \<= 3.1.9 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 6.5, Eupago Gateway For Woocommerce)
- [CVE-2023-45656](https://cve.now/CVE-2023-45656.md): WordPress Lazy Load for Videos Plugin \<= 2.18.2 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, Kevin Weber Lazy Load for Videos)
- [CVE-2023-45655](https://cve.now/CVE-2023-45655.md): WordPress PixFields Plugin \<= 0.7.0 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, PixelGrade PixFields)
- [CVE-2023-45654](https://cve.now/CVE-2023-45654.md): WordPress Comments Ratings Plugin \<= 1.1.7 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Pixelgrade Comments Ratings)
- [CVE-2023-4822](https://cve.now/CVE-2023-4822.md): Grafana is an open-source platform for monitoring and observability. (CVSS 6.7, Grafana Enterprise · github.com/grafana/grafana)
- [CVE-2023-45653](https://cve.now/CVE-2023-45653.md): WordPress Video Playlist For YouTube Plugin \<= 6.0 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Galaxy Weblinks Video Playlist For YouTube)
- [CVE-2023-45651](https://cve.now/CVE-2023-45651.md): WordPress WP Attachments Plugin \<= 5.0.11 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Marco Milesi WP Attachments)
- [CVE-2023-4834](https://cve.now/CVE-2023-4834.md): In Red Lion Europe mbCONNECT24 and mymbCONNECT24 and Helmholz myREX24 and myREX24.virtual up to and including 2.14.2 an improperly implement (CVSS 4.3, Red Lion Europe mbCONNECT24 · Red Lion Europe mymbCONNEC… +2)
- [CVE-2023-45650](https://cve.now/CVE-2023-45650.md): WordPress HTML5 Maps Plugin \<= 1.7.1.4 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Fla-shop.com HTML5 Maps)
- [CVE-2023-4620](https://cve.now/CVE-2023-4620.md): Booking Calendar \< 9.7.3.1 - Unauthenticated Stored XSS (CVSS 6.1, Booking Calendar)
- [CVE-2023-3392](https://cve.now/CVE-2023-3392.md): Read More & Accordion \< 3.2.7 - Admin+ PHP Object Injection (no CVSS, Read More & Accordion)
- [CVE-2023-4827](https://cve.now/CVE-2023-4827.md): File Manager Pro \< 1.8 - Remote Code Execution via CSRF (CVSS 8.8, File Manager Pro)
- [CVE-2023-45629](https://cve.now/CVE-2023-45629.md): WordPress Responsive Image Gallery, Gallery Album Plugin \<= 2.0.3 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, wpdevart Gallery – Image and Video Gallery with Thumbnails)
- [CVE-2023-45606](https://cve.now/CVE-2023-45606.md): WordPress Simple URLs Plugin \<= 120 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Lasso Simple URLs)
- [CVE-2023-45605](https://cve.now/CVE-2023-45605.md): WordPress Feed Statistics Plugin \<= 4.1 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Christopher Finke Feed Statistics)
- [CVE-2023-5595](https://cve.now/CVE-2023-5595.md): Denial of Service in gpac/gpac (CVSS 5.1, gpac/gpac)
- [CVE-2023-45274](https://cve.now/CVE-2023-45274.md): WordPress SendPulse Free Web Push Plugin \<= 1.3.1 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, SendPulse Free Web Push)
- [CVE-2023-45273](https://cve.now/CVE-2023-45273.md): WordPress Stout Google Calendar Plugin \<= 1.2.3 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Matt McKenny Stout Google Calendar)
- [CVE-2023-5421](https://cve.now/CVE-2023-5421.md): Possible XSS execution in customer information (CVSS 3.5, OTRS AG OTRS · OTRS AG ((OTRS)) Community Edition)
- [CVE-2023-38059](https://cve.now/CVE-2023-38059.md): External pictures can be loaded even if not allowed by configuration (CVSS 5.3, OTRS AG OTRS · OTRS AG ((OTRS)) Community Edition)
- [CVE-2023-5422](https://cve.now/CVE-2023-5422.md): SSL Certificates are not checked for E-Mail Handling (CVSS 8.7, OTRS AG OTRS · OTRS AG ((OTRS)) Community Edition)
- [CVE-2023-43666](https://cve.now/CVE-2023-43666.md): Apache InLong: General user Unauthorized access User Management (no CVSS, Apache Software Foundation Apache InLong · org.apache.inlon…)
- [CVE-2023-43667](https://cve.now/CVE-2023-43667.md): Apache InLong: Log Injection in Global functions (CVSS 7.5, Apache Software Foundation Apache InLong · org.apache.inlon…)
- [CVE-2023-43668](https://cve.now/CVE-2023-43668.md): Apache InLong: Jdbc Connection Security Bypass in InLong (no CVSS, Apache Software Foundation Apache InLong · org.apache.inlon…)
- [CVE-2023-45757](https://cve.now/CVE-2023-45757.md): Apache bRPC: The builtin service rpcz page has an XSS attack vulnerability (no CVSS, Apache Software Foundation Apache bRPC)
- [CVE-2023-45158](https://cve.now/CVE-2023-45158.md): An OS command injection vulnerability exists in web2py 2.24.1 and earlier. (no CVSS, web2py)
- [CVE-2023-21415](https://cve.now/CVE-2023-21415.md): Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API overlay\_del.cgi is vulnerable to path traversal attacks (CVSS 6.5, Axis Communications AB AXIS OS)
- [CVE-2023-21414](https://cve.now/CVE-2023-21414.md): NCC Group has found a flaw during the annual internal penetration test ordered by Axis Communications. (CVSS 7.1, Axis Communications AB AXIS OS · Axis Communications AB… +1)
- [CVE-2023-21413](https://cve.now/CVE-2023-21413.md): Remote code execution vulnerability during the installation of ACAP applications on the Axis device (CVSS 9.1, Axis Communications AB AXIS OS)
- [CVE-2023-38280](https://cve.now/CVE-2023-38280.md): IBM Power HMC privilege escalation (CVSS 8.4, IBM Power HMC)
- [CVE-2023-40377](https://cve.now/CVE-2023-40377.md): IBM i privilege escalation (CVSS 4.9, IBM i)
- [CVE-2023-33836](https://cve.now/CVE-2023-33836.md): IBM Security Verify Governance information disclosure (CVSS 5.3, IBM Security Verify Governance)
- [CVE-2023-5591](https://cve.now/CVE-2023-5591.md): SQL Injection in librenms/librenms (CVSS 7.8, librenms/librenms)
- [CVE-2022-48612](https://cve.now/CVE-2022-48612.md): A Universal Cross Site Scripting (UXSS) vulnerability in ClassLink OneClick Extension through 10.7 allows remote attackers to inject JavaScr (no CVSS)
- [CVE-2023-29484](https://cve.now/CVE-2023-29484.md): In Terminalfour before 8.3.16, misconfigured LDAP users are able to login with an invalid password. (no CVSS)
- [CVE-2023-36340](https://cve.now/CVE-2023-36340.md): TOTOLINK NR1800X V9.1.0u.6279\_B20210910 was discovered to contain a stack overflow via the http\_host parameter in the function loginAuth. (no CVSS)
- [CVE-2023-36947](https://cve.now/CVE-2023-36947.md): TOTOLINK X5000R V9.1.0u.6118\_B20201102 and TOTOLINK A7000R V9.1.0u.6115\_B20201022 was discovered to contain a stack overflow via the File pa (CVSS 8.8)
- [CVE-2023-36950](https://cve.now/CVE-2023-36950.md): TOTOLINK X5000R V9.1.0u.6118\_B20201102 and TOTOLINK A7000R V9.1.0u.6115\_B20201022 was discovered to contain a stack overflow via the http\_ho (CVSS 8.8)
- [CVE-2023-36952](https://cve.now/CVE-2023-36952.md): TOTOLINK CP300+ V5.2cu.7594\_B20200910 was discovered to contain a stack overflow via the pingIp parameter in the function setDiagnosisCfg. (no CVSS)
- [CVE-2023-36953](https://cve.now/CVE-2023-36953.md): TOTOLINK CP300+ V5.2cu.7594\_B20200910 and before is vulnerable to command injection. (no CVSS)
- [CVE-2023-36954](https://cve.now/CVE-2023-36954.md): TOTOLINK CP300+ V5.2cu.7594\_B20200910 and before is vulnerable to command injection. (no CVSS)
- [CVE-2023-36955](https://cve.now/CVE-2023-36955.md): TOTOLINK CP300+ \<=V5.2cu.7594\_B20200910 was discovered to contain a stack overflow via the File parameter in the function UploadCustomModule (no CVSS)
- [CVE-2023-40791](https://cve.now/CVE-2023-40791.md): extract\_user\_to\_sg in lib/scatterlist.c in the Linux kernel before 6.4.12 fails to unpin pages in a certain situation, as demonstrated by a (no CVSS)
- [CVE-2023-40851](https://cve.now/CVE-2023-40851.md): Cross Site Scripting (XSS) vulnerability in Phpgurukul User Registration & Login and User Management System With admin panel 3.0 allows atta (no CVSS)
- [CVE-2023-40852](https://cve.now/CVE-2023-40852.md): SQL Injection vulnerability in Phpgurukul User Registration & Login and User Management System With admin panel 3.0 allows attackers to obta (no CVSS)
- [CVE-2023-43118](https://cve.now/CVE-2023-43118.md): Cross Site Request Forgery (CSRF) vulnerability in Chalet application in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, fixed in 31. (no CVSS)
- [CVE-2023-43119](https://cve.now/CVE-2023-43119.md): An Access Control issue discovered in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, also fixed in 22.7, 31.7.2 allows attackers to (no CVSS)
- [CVE-2023-43120](https://cve.now/CVE-2023-43120.md): An issue discovered in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, before 22.7 and before 31.7.1 allows attackers to gain escalat (no CVSS)
- [CVE-2023-43121](https://cve.now/CVE-2023-43121.md): A Directory Traversal vulnerability discovered in Chalet application in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, before 22.7, (no CVSS)
- [CVE-2023-44808](https://cve.now/CVE-2023-44808.md): D-Link DIR-820L 1.05B03 has a stack overflow vulnerability in the sub\_4507CC function. (no CVSS)
- [CVE-2023-44809](https://cve.now/CVE-2023-44809.md): D-Link device DIR-820L 1.05B03 is vulnerable to Insecure Permissions. (no CVSS)
- [CVE-2023-45540](https://cve.now/CVE-2023-45540.md): An issue in Jorani Leave Management System 1.0.3 allows a remote attacker to execute arbitrary HTML code via a crafted script to the comment (no CVSS)
- [CVE-2023-45542](https://cve.now/CVE-2023-45542.md): Cross Site Scripting vulnerability in mooSocial 3.1.8 allows a remote attacker to obtain sensitive information via a crafted script to the q (no CVSS)
- [CVE-2023-45572](https://cve.now/CVE-2023-45572.md): Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 (no CVSS)
- [CVE-2023-45573](https://cve.now/CVE-2023-45573.md): Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 (no CVSS)
- [CVE-2023-45574](https://cve.now/CVE-2023-45574.md): Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 (no CVSS)
- [CVE-2023-45575](https://cve.now/CVE-2023-45575.md): Stack Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v (no CVSS)
- [CVE-2023-45576](https://cve.now/CVE-2023-45576.md): Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 (no CVSS)
- [CVE-2023-45577](https://cve.now/CVE-2023-45577.md): Stack Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v (no CVSS)
- [CVE-2023-45578](https://cve.now/CVE-2023-45578.md): Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 (no CVSS)
- [CVE-2023-45579](https://cve.now/CVE-2023-45579.md): Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 (no CVSS)
- [CVE-2023-45580](https://cve.now/CVE-2023-45580.md): Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 (no CVSS)
- [CVE-2023-45898](https://cve.now/CVE-2023-45898.md): The Linux kernel before 6.5.4 has an es1 use-after-free in fs/ext4/extents\_status.c, related to ext4\_es\_insert\_extent. (CVSS 7.8)
- [CVE-2023-45984](https://cve.now/CVE-2023-45984.md): TOTOLINK X5000R V9.1.0u.6118\_B20201102 and TOTOLINK A7000R V9.1.0u.6115\_B20201022 was discovered to contain a stack overflow via the lang pa (CVSS 8.8)
- [CVE-2023-45985](https://cve.now/CVE-2023-45985.md): TOTOLINK X5000R V9.1.0u.6118\_B20201102 and TOTOLINK A7000R V9.1.0u.6115\_B20201022 were discovered to contain a stack overflow in the functio (CVSS 7.5)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-10-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.