# CVEs published 2023-10-18

74 CVEs were published on October 18, 2023: 4 critical, 24 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2023-36857](https://cve.now/CVE-2023-36857.md): Baker Hughes Bently Nevada 3500 System Authentication Bypass by Capture-replay (CVSS 5.4, Baker Hughes - Bently Nevada Bently Nevada 3500 System)
- [CVE-2023-34437](https://cve.now/CVE-2023-34437.md): Baker Hughes Bently Nevada 3500 System Incorrect Permission Assignment for Critical Resource (CVSS 7.5, Baker Hughes - Bently Nevada Bently Nevada 3500 System)
- [CVE-2023-34441](https://cve.now/CVE-2023-34441.md): Baker Hughes Bently Nevada 3500 System Cleartext Transmission of Sensitive Information (CVSS 6.8, Baker Hughes - Bently Nevada Bently Nevada 3500 System)
- [CVE-2023-37502](https://cve.now/CVE-2023-37502.md): An unrestricted file upload vulnerability affects HCL Compass (CVSS 9.0, HCL Software HCL Compass)
- [CVE-2023-45146](https://cve.now/CVE-2023-45146.md): Remote code execution in XXL-RPC (CVSS 9.1, xuexueli xxl-rpc · com.xuxueli:xxl-rpc-core)
- [CVE-2023-45812](https://cve.now/CVE-2023-45812.md): Improper Check or Handling of Exceptional Conditions in apollo-router (CVSS 7.5, apollographql router · apollo-router)
- [CVE-2023-45814](https://cve.now/CVE-2023-45814.md): Tokens cached in the AuthenticationService are susceptible to reuse in Bunkum (CVSS 5.3, LittleBigRefresh Bunkum · Bunkum)
- [CVE-2023-43800](https://cve.now/CVE-2023-43800.md): Insufficient Verification of Data Authenticity in Arduino Create Agent (CVSS 7.3, arduino-create-agent · github.com/arduino/arduino-create-ag…)
- [CVE-2023-43801](https://cve.now/CVE-2023-43801.md): Path traversal in Arduino Create Agent (CVSS 6.1, arduino-create-agent · github.com/arduino/arduino-create-ag…)
- [CVE-2023-43802](https://cve.now/CVE-2023-43802.md): Path traversal in Arduino Create Agent (CVSS 7.1, arduino-create-agent · github.com/arduino/arduino-create-ag…)
- [CVE-2023-43803](https://cve.now/CVE-2023-43803.md): Path traversal in Arduino Create Agent (CVSS 6.1, arduino-create-agent · github.com/arduino/arduino-create-ag…)
- [CVE-2023-45813](https://cve.now/CVE-2023-45813.md): Inefficient Regular Expression Complexity in TorBot (CVSS 4.6, DedSecInside TorBot · torbot)
- [CVE-2023-45145](https://cve.now/CVE-2023-45145.md): Redis Unix-domain socket may have be exposed with the wrong permissions for a short time window. (CVSS 3.6, redis)
- [CVE-2023-4601](https://cve.now/CVE-2023-4601.md): Stack-based Buffer Overflow in NI System Configuration Software (CVSS 8.1, NI System Configuration)
- [CVE-2023-35663](https://cve.now/CVE-2023-35663.md): In Init of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2023-35656](https://cve.now/CVE-2023-35656.md): In multiple functions of protocolembmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2023-26300](https://cve.now/CVE-2023-26300.md): A potential security vulnerability has been identified in the system BIOS for certain HP PC products which might allow escalation of privile (no CVSS, HP PC products)
- [CVE-2023-30911](https://cve.now/CVE-2023-30911.md): HPE Integrated Lights-Out 5, and Integrated Lights-Out 6 using iLOrest may cause denial of service. (CVSS 6.8, Hewlett Packard Enterprise (HPE) HPE Integrated Lights-Out)
- [CVE-2023-20261](https://cve.now/CVE-2023-20261.md): A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to retrieve arbitrary files fro (CVSS 6.5, Cisco SD-WAN vManage)
- [CVE-2023-5642](https://cve.now/CVE-2023-5642.md): Advantech R-SeeNet Unauthenticated Read/Write (CVSS 9.8, Advantech R-SeeNet)
- [CVE-2023-5631](https://cve.now/CVE-2023-5631.md): Stored XSS vulnerability in Roundcube (CVSS 6.1, KEV, Roundcubemail)
- [CVE-2023-30781](https://cve.now/CVE-2023-30781.md): WordPress Tweeple Plugin \<= 0.9.5 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Theme Blvd Tweeple)
- [CVE-2023-45632](https://cve.now/CVE-2023-45632.md): WordPress Video Player Plugin \<= 1.5.22 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, WebDorado SpiderVPlayer)
- [CVE-2023-45630](https://cve.now/CVE-2023-45630.md): WordPress Responsive Image Gallery, Gallery Album Plugin \<= 2.0.3 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, wpdevart Gallery – Image and Video Gallery with Thumbnails)
- [CVE-2023-45628](https://cve.now/CVE-2023-45628.md): WordPress QR Twitter Widget Plugin \<= 0.2.3 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, QROkes QR Twitter Widget)
- [CVE-2023-45602](https://cve.now/CVE-2023-45602.md): WordPress Ebook Store Plugin \<= 5.785 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Shopfiles Ebook Store)
- [CVE-2023-45604](https://cve.now/CVE-2023-45604.md): WordPress Get Custom Field Values Plugin \<= 4.0.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Scott Reilly Get Custom Field Values)
- [CVE-2023-45607](https://cve.now/CVE-2023-45607.md): WordPress WordPress Popular Posts Plugin \<= 6.3.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Hector Cabrera WordPress Popular Posts)
- [CVE-2023-45608](https://cve.now/CVE-2023-45608.md): WordPress Smart Cookie Kit Plugin \<= 2.3.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Nicola Modugno Smart Cookie Kit)
- [CVE-2023-45073](https://cve.now/CVE-2023-45073.md): WordPress Mendeley Plugin \<= 1.3.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Michael Koch Mendeley Plugin)
- [CVE-2023-31217](https://cve.now/CVE-2023-31217.md): WordPress User Location and IP Plugin \<= 1.6 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, MyTechTalky User Location and IP)
- [CVE-2023-45072](https://cve.now/CVE-2023-45072.md): WordPress Order auto complete for WooCommerce Plugin \<= 1.2.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Kardi Order auto complete for WooCommerce)
- [CVE-2023-45071](https://cve.now/CVE-2023-45071.md): WordPress Form Maker by 10Web Plugin \<= 1.15.18 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, 10Web Form Builder Team Form Maker by 10Web – Mobile-Friend…)
- [CVE-2023-45070](https://cve.now/CVE-2023-45070.md): WordPress Form Maker by 10Web Plugin \<= 1.15.18 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, 10Web Form Builder Team Form Maker by 10Web – Mobile-Friend…)
- [CVE-2023-45067](https://cve.now/CVE-2023-45067.md): WordPress WP Simple HTML Sitemap Plugin \<= 2.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Ashish Ajani WordPress Simple HTML Sitemap)
- [CVE-2023-45065](https://cve.now/CVE-2023-45065.md): WordPress Bulk NoIndex & NoFollow Toolkit Plugin \<= 1.42 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Mad Fish Digital Bulk NoIndex & NoFollow Toolkit)
- [CVE-2023-32089](https://cve.now/CVE-2023-32089.md): Pega Platform versions 8.1 to 8.8.2 are affected by an XSS issue with Pin description (CVSS 4.6, Pegasystems Pega Platform)
- [CVE-2023-32088](https://cve.now/CVE-2023-32088.md): Pega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with ad-hoc case creation (CVSS 4.6, Pegasystems Pega Platform)
- [CVE-2023-32087](https://cve.now/CVE-2023-32087.md): Pega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with task creation (CVSS 4.6, Pegasystems Pega Platform)
- [CVE-2023-45727](https://cve.now/CVE-2023-45727.md): Proself Enterprise/Standard Edition Ver5.62 and earlier, Proself Gateway Edition Ver1.65 and earlier, and Proself Mail Sanitize Edition Ver1 (CVSS 7.5, KEV, North Grid Proself Enterprise/Standard Edition · North G… +1)
- [CVE-2023-45064](https://cve.now/CVE-2023-45064.md): WordPress OPcache Dashboard Plugin \<= 0.3.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Daisuke Takahashi(Extend Wings) OPcache Dashboard)
- [CVE-2023-45062](https://cve.now/CVE-2023-45062.md): WordPress Download canvasio3D Light Plugin \<= 2.4.6 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Thomas Scholl canvasio3D Light)
- [CVE-2023-5632](https://cve.now/CVE-2023-5632.md): Unconditionally adding an event to the epoll causes excessive CPU consumption (CVSS 7.5, Eclipse Mosquitto)
- [CVE-2023-45059](https://cve.now/CVE-2023-45059.md): WordPress Gumroad Plugin \<= 3.1.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Gumroad)
- [CVE-2023-45057](https://cve.now/CVE-2023-45057.md): WordPress Hitsteps Web Analytics Plugin \<= 5.86 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Hitsteps Web Analytics)
- [CVE-2023-45056](https://cve.now/CVE-2023-45056.md): WordPress Open User Map | Everybody can add locations Plugin \<= 1.3.26 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, 100plugins Open User Map)
- [CVE-2023-45054](https://cve.now/CVE-2023-45054.md): WordPress Product Category Tree Plugin \<= 2.5 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, AWESOME TOGI Product Category Tree)
- [CVE-2023-45051](https://cve.now/CVE-2023-45051.md): WordPress Image vertical reel scroll slideshow Plugin \<= 9.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Gopi Ramasamy Image vertical reel scroll slideshow)
- [CVE-2023-45049](https://cve.now/CVE-2023-45049.md): WordPress YouTube Playlist Player Plugin \<= 4.6.7 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Ciprian Popescu YouTube Playlist Player)
- [CVE-2023-25476](https://cve.now/CVE-2023-25476.md): WordPress AmpedSense – AdSense Split Tester Plugin \<= 4.68 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Ezoic AmpedSense – AdSense Split Tester)
- [CVE-2023-45008](https://cve.now/CVE-2023-45008.md): WordPress Comment Reply Email Plugin \<= 1.0.3 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, WPJohnny Comment Reply Email)
- [CVE-2023-4938](https://cve.now/CVE-2023-4938.md): BEAR \<= 1.1.3.3 - Missing Authorization to Product Manipulation (CVSS 4.3, realmag777 BEAR – Bulk Editor and Products Manager Professi…)
- [CVE-2023-5621](https://cve.now/CVE-2023-5621.md): Thumbnail Slider With Lightbox \<= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via Image Title (CVSS 4.4, nik00726 Thumbnail Slider With Lightbox)
- [CVE-2023-5538](https://cve.now/CVE-2023-5538.md): MpOperationLogs \<= 1.0.1 - Unauthenticated Stored Cross-Site Scripting (CVSS 7.2, burningx mpOperationLogs)
- [CVE-2023-3254](https://cve.now/CVE-2023-3254.md): Widgets for Google Reviews \<= 10.9 - Cross-Site Request Forgery to Plugin Settings Reset (CVSS 4.3, trustindex Widgets for Google Reviews)
- [CVE-2023-39331](https://cve.now/CVE-2023-39331.md): A previously disclosed vulnerability (CVE-2023-30584) was patched insufficiently in commit 205f1e6. (CVSS 7.7, NodeJS Node)
- [CVE-2023-38552](https://cve.now/CVE-2023-38552.md): When the Node.js policy feature checks the integrity of a resource against a trusted manifest, the application can intercept the operation a (no CVSS, NodeJS Node)
- [CVE-2023-39332](https://cve.now/CVE-2023-39332.md): Various \`node:fs\` functions allow specifying paths as either strings or \`Uint8Array\` objects. (no CVSS, NodeJS Node)
- [CVE-2023-35083](https://cve.now/CVE-2023-35083.md): Allows an authenticated attacker with network access to read arbitrary files on Endpoint Manager recently discovered on 2022 SU3 and all pre (no CVSS, Ivanti Endpoint Manager)
- [CVE-2023-35084](https://cve.now/CVE-2023-35084.md): Unsafe Deserialization of User Input could lead to Execution of Unauthorized Operations in Ivanti Endpoint Manager 2022 su3 and all previous (no CVSS, Ivanti Endpoint Manager)
- [CVE-2023-38545](https://cve.now/CVE-2023-38545.md): This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. (CVSS 8.8, curl)
- [CVE-2023-38546](https://cve.now/CVE-2023-38546.md): This flaw allows an attacker to insert cookies at will into a running program using libcurl, if the specific series of conditions are met. (no CVSS, curl)
- [CVE-2023-42319](https://cve.now/CVE-2023-42319.md): Geth (aka go-ethereum) through 1.13.4, when --http --graphql is used, allows remote attackers to cause a denial of service (memory consumpti (CVSS 7.5, github.com/ethereum/go-ethereum)
- [CVE-2023-43250](https://cve.now/CVE-2023-43250.md): XNSoft Nconvert 7.136 is vulnerable to Buffer Overflow. (CVSS 7.8)
- [CVE-2023-45383](https://cve.now/CVE-2023-45383.md): In the module "SoNice etiquetage" (sonice\_etiquetage) up to version 2.5.9 from Common-Services for PrestaShop, a guest can download personal (CVSS 7.5)
- [CVE-2023-45909](https://cve.now/CVE-2023-45909.md): zzzcms v2.2.0 was discovered to contain an open redirect vulnerability. (no CVSS)
- [CVE-2023-45911](https://cve.now/CVE-2023-45911.md): An issue in WIPOTEC GmbH ComScale v4.3.29.21344 and v4.4.12.723 allows unauthenticated attackers to login as any user without a password. (CVSS 9.8)
- [CVE-2023-45912](https://cve.now/CVE-2023-45912.md): WIPOTEC GmbH ComScale v4.3.29.21344 and v4.4.12.723 fails to validate user sessions, allowing unauthenticated attackers to read files from t (no CVSS)
- [CVE-2023-45958](https://cve.now/CVE-2023-45958.md): Thirty Bees Core v1.4.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the backup\_pagination parameter a (no CVSS)
- [CVE-2023-46004](https://cve.now/CVE-2023-46004.md): Sourcecodester Best Courier Management System 1.0 is vulnerable to Arbitrary file upload in the update\_user function. (no CVSS)
- [CVE-2023-46005](https://cve.now/CVE-2023-46005.md): Sourcecodester Best Courier Management System 1.0 is vulnerable to SQL Injection via the parameter id in /edit\_branch.php. (no CVSS)
- [CVE-2023-46006](https://cve.now/CVE-2023-46006.md): Sourcecodester Best Courier Management System 1.0 is vulnerable to SQL Injection via the parameter id in /edit\_user.php. (no CVSS)
- [CVE-2023-46007](https://cve.now/CVE-2023-46007.md): Sourcecodester Best Courier Management System 1.0 is vulnerable to SQL Injection via the parameter id in /edit\_staff.php. (no CVSS)
- [CVE-2023-46009](https://cve.now/CVE-2023-46009.md): gifsicle-1.94 was found to have a floating point exception (FPE) vulnerability via resize\_stream at src/xform.c. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-10-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.