CVEs published October 19, 2023
105 CVEs were published on October 19, 2023: 6 critical, 35 high.
- Published
- 105
- Critical
- 6
- High
- 35
- Medium
- 25
- Low
- 3
- Unrated
- 36
- Now in CISA KEV
- 0
- Fix available
- 27
Most affected products
- SolarWinds Access Rights Manager
- 8
- home-assistant core
- 7
- DEXMA DexGate
- 5
- ETSI TETRA Standard
- 4
- Ichitaro
- 4
- Motorola Mobile Radio
- 4
- org.yamcs:yamcs
- 4
- quantumcloud WPBot – AI ChatBot for Live Support, Lead Gene…
- 4
- artifacthub hub · github.com/artifacthub/hub
- 3
- Texas Instruments OMAP
- 3
Critical 6
- CVE-2023-43492Weintek cMT3000 HMI Web CGI Stack-based Buffer OverflowWeintek cMT-FHD · Weintek cMT-HDM +5
- CVE-2023-38584Weintek cMT3000 HMI Web CGI Stack-based Buffer OverflowWeintek cMT-FHD · Weintek cMT-HDM +5
- CVE-2022-26941Format string vulnerability in AT+CTGL command in Motorola MTM5000Motorola Mobile Radio
- CVE-2023-5212AI ChatBot <= 4.8.9 and 4.9.2- Authenticated (Subscriber+) Arbitrary File Deletion via qcld_openai_delete_training_filequantumcloud WPBot – AI ChatBot for Live Support, Lead Gene…
- CVE-2023-5204AI ChatBot <= 4.8.9 - Unauthenticated SQL Injection via qc_wpbo_search_responsequantumcloud WPBot – AI ChatBot for Live Support, Lead Gene…
- CVE-2023-5241AI ChatBot <= 4.8.9 and 4.9.2 - Authenticated (Subscriber+) Directory Traversal to Arbitrary File Write via qcld_openai_upload_pagetraining_filequantumcloud WPBot – AI ChatBot for Live Support, Lead Gene…
High 35
- CVE-2023-46115Updater Private Keys Possibly Leaked via Vite Environment Variables in tauri-clitauri-apps tauri · tauri-cli +1
- CVE-2023-41895Cross-site Scripting via auth_callback login in Home Assistant Corehome-assistant core
- CVE-2023-41896Fake websocket server installation permits full takeover in Home Assistant Corehome-assistant core
- CVE-2023-41897Lack of XFO header allows clickjacking in Home Assistant Corehome-assistant core
- CVE-2023-41898 Arbitrary URL load in Android WebView in `MyActivity.kt` in Home Assistant Companion for Androidhome-assistant core
- CVE-2023-44385Client-Side Request Forgery in Home Assistant iOS/macOS native Appshome-assistant core
- CVE-2023-45823Arbitrary file read in Artifact Hubartifacthub hub · github.com/artifacthub/hub
- CVE-2023-40145Weintek cMT3000 HMI Web CGI OS Command InjectionWeintek cMT-FHD · Weintek cMT-HDM +5
- CVE-2023-41089Improper Authentication in DEXMA DEXGateDEXMA DexGate
- CVE-2023-35986Santesoft Sante DICOM Viewer Pro Stack-based Buffer OverflowSantesoft Sante DICOM Viewer Pro
- CVE-2023-39431Santesoft Sante DICOM Viewer Pro Out-of-bounds WriteSantesoft Sante DICOM Viewer Pro
- CVE-2023-5059Santesoft Sante FFT Imaging Out-of-bounds ReadSantesoft Sante FFT Imaging
- CVE-2023-34366A use-after-free vulnerability exists in the Figure stream parsing functionality of Ichitaro 2023 1.0.1.59372.Ichitaro
- CVE-2023-38127An integer overflow exists in the "HyperLinkFrame" stream parser of Ichitaro 2023 1.0.1.59372.Ichitaro
- CVE-2023-38128An out-of-bounds write vulnerability exists in the "HyperLinkFrame" stream parser of Ichitaro 2023 1.0.1.59372.Ichitaro
- CVE-2023-35126An out-of-bounds write vulnerability exists within the parsers for both the "DocumentViewStyles" and "DocumentEditStyles" streams of IchitarIchitaro
- CVE-2023-35181SolarWinds Access Rights Manager Incorrect Default Permissions Local Privilege Escalation VulnerabilitySolarWinds Access Rights Manager
- CVE-2023-35187SolarWinds Access Rights Manager Directory Traversal Remote Code Execution VulnerabilitySolarWinds Access Rights Manager
- CVE-2023-35183SolarWinds Access Rights Manager Incorrect Default Permissions Local Privilege Escalation VulnerabilitySolarWinds Access Rights Manager
- CVE-2023-35180SolarWinds Access Rights Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability SolarWinds Access Rights Manager
- CVE-2023-35182SolarWinds Access Rights Manager Deserialization of Untrusted Data Remote Code Execution VulnerabilitySolarWinds Access Rights Manager
- CVE-2023-35184SolarWinds Access Rights Manager Deserialization of Untrusted Data Remote Code Execution VulnerabilitySolarWinds Access Rights Manager
- CVE-2023-35186SolarWinds Access Rights Manager Deserialization of Untrusted Data Remote Code Execution VulnerabilitySolarWinds Access Rights Manager
- CVE-2023-46227Apache inlong has an Arbitrary File Read VulnerabilityApache Software Foundation Apache InLong · org.apache.in… +1
- CVE-2022-25334Stack overflow on SK_LOAD signature length field in Texas Instruments OMAP L138Texas Instruments OMAP
- CVE-2022-26942Multiple missing pointer validation checks in trusted execution module in Motorola MTM5000Motorola Mobile Radio
- CVE-2022-25333Flawed SK_LOAD module authenticity check in Texas Instruments OMAP L138Texas Instruments OMAP
- CVE-2022-27813Unconfigured memory protection modules in Motorola MTM5000Motorola Mobile Radio
- CVE-2022-26943Weak PRNG entropy source used for authentication challenge generation in Motorola MTM5000Motorola Mobile Radio
- CVE-2022-24400DCK pinning attack in TETRAETSI TETRA Standard
- CVE-2022-24401Keystream recovery for arbitrary frames in TETRAETSI TETRA Standard
- CVE-2022-24402Intentionally weakened effective strength in TETRA TEA1ETSI TETRA Standard
- CVE-2023-37503A weak password requirements vulnerability affects HCL CompassHCL Software HCL Compass
- CVE-2023-5336iPanorama 360 – WordPress Virtual Tour Builder <= 1.8.0 - Authenticated (Contributor+) SQL Injection via Shortcodeavirtum iPanorama 360 – Advanced Virtual Tour Builder
- CVE-2023-37504An insufficient session expiration vulnerability affects HCL CompassHCL Software HCL Compass
Medium, low and unrated 64
- CVE-2023-41893Account takeover via auth_callback login in Home Assistant Corehome-assistant core · homeassistant
- CVE-2023-41894Local-only webhooks externally accessible via SniTun in Home Assistant Corehome-assistant core
- CVE-2023-41899Partial Server-Side Request Forgery in Home Assistant Core home-assistant core
- CVE-2023-45818Cross-site Scripting vulnerability in TinyMCE undo/redo, getContent API, resetContent API, and Autosave plugintinymce · tinymce/tinymce
- CVE-2023-45819Cross-site Scripting vulnerability in TinyMCE notificationManager.open APItinymce · tinymce/tinymce
- CVE-2023-45815ArchiveBox: Viewing wget extractor output while logged in as an admin allows archived JS to execute in the admins contextArchiveBox
- CVE-2023-45822Unsafe rego built-in allowed in Artifact Hubartifacthub hub · github.com/artifacthub/hub
- CVE-2023-45821Incorrect Docker Hub registry check in Artifact Hubartifacthub hub · github.com/artifacthub/hub
- CVE-2023-45820Directus crashes on invalid WebSocket messagedirectus
- CVE-2023-45809Disclosure of user names via admin bulk action views in wagtailwagtail
- CVE-2023-45826Authenticated SQL Injection in leantimeleantime
- CVE-2023-45825Token in custom credentials object can leak through logs in ydb-go-sdkydb-platform ydb-go-sdk · github.com/ydb-platform/ydb-go-sd…
- CVE-2023-42666Exposure of Sensitive Information to an Unauthorized Actor in DEXMA DEXGateDEXMA DexGate
- CVE-2023-42435Cross-Site Request Forgery in DEXMA DEXGateDEXMA DexGate
- CVE-2023-41088Cleartext Transmission of Sensitive Information in DEXMA DEXGateDEXMA DexGate
- CVE-2023-40153Cross-site Scripting in DEXMA DEXGateDEXMA DexGate
- CVE-2023-5654The React Developer Tools extension registers a message listener with window.addEventListener('message', <listener>) in a content script thaMeta React Developer Tools Extension · react-devtools-core
- CVE-2023-35185SolarWinds Access Rights Manager OpenFile Directory Traversal Remote Code Execution VulnerabilitySolarWinds Access Rights Manager
- CVE-2022-25332SK_LOAD timing side channel during AES module decryption in Texas Instruments OMAP L138Texas Instruments OMAP
- CVE-2022-24404Ciphertext Malleability in TETRAETSI TETRA Standard
- CVE-2023-25753Server-Side Request Forgery in Apache ShenYuApache Software Foundation Apache ShenYu · org.apache.sh… +1
- CVE-2023-34050Spring AMQP Deserialization VulnerabilitySpring AMQP
- CVE-2023-5254AI ChatBot <= 4.8.9 - Unauthenticated Sensitive Information Exposure via qcld_wb_chatbot_check_userquantumcloud WPBot – AI ChatBot for Live Support, Lead Gene…
- CVE-2023-5638Booster for WooCommerce <= 7.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodepluggabl Booster for WooCommerce – PDF Invoices, Abandoned…
- CVE-2023-5639Team Showcase <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodethemepoints Team Showcase – Responsive Team Members Grid, S…
- CVE-2023-4645Ad Inserter <= 2.7.30 - Unauthenticated Sensitive Information Exposure via ai_ajaxspacetime Ad Inserter – Ad Manager & AdSense Ads
- CVE-2022-37830Interway a.s WebJET CMS 8.6.896 is vulnerable to Cross Site Scripting (XSS).
- CVE-2022-42150TinyLab linux-lab v1.1-rc1 and cloud-labv0.8-rc2, v1.1-rc1 are vulnerable to insecure permissions.
- CVE-2022-47583Terminal character injection in Mintty before 3.6.3 allows code execution via unescaped output to the terminal.
- CVE-2023-27791An issue found in IXP Data Easy Install 6.6.148840 allows a remote attacker to escalate privileges via insecure PRNG.
- CVE-2023-27792An issue found in IXP Data Easy Install v.6.6.14884.0 allows an attacker to escalate privileges via lack of permissions applied to sub direc
- CVE-2023-27793An issue discovered in IXP Data Easy Install v.6.6.14884.0 allows local attackers to gain escalated privileges via weak encoding of sensitiv
- CVE-2023-27795An issue found in IXP Data Easy Install v.6.6.14884.0 allows a local attacker to gain privileges via a static XOR key.
- CVE-2023-30131An issue discovered in IXP EasyInstall 6.6.14884.0 allows attackers to run arbitrary commands, gain escalated privilege, and cause other uns
- CVE-2023-30132An issue discovered in IXP Data EasyInstall 6.6.14907.0 allows attackers to gain escalated privileges via static Cryptographic Key.
- CVE-2023-30633An issue was discovered in TrEEConfigDriver in Insyde InsydeH2O with kernel 5.0 through 5.5.
- CVE-2023-31046A Path Traversal vulnerability exists in PaperCut NG before 22.1.1 and PaperCut MF before 22.1.1.
- CVE-2023-39731The leakage of the client secret in Kaibutsunosato v13.6.1 allows attackers to obtain the channel access token and send crafted broadcast me
- CVE-2023-43251XNSoft Nconvert 7.136 has an Exception Handler Chain Corrupted via a crafted image file.
- CVE-2023-43252XNSoft Nconvert 7.136 is vulnerable to Buffer Overflow via a crafted image file.
- CVE-2023-43340Cross-site scripting (XSS) vulnerability in evolution v.3.2.3 allows a local attacker to execute arbitrary code via a crafted payload injectevolutioncms/evolution
- CVE-2023-43341Cross-site scripting (XSS) vulnerability in evolution evo v.3.2.3 allows a local attacker to execute arbitrary code via a crafted payload inevolutioncms/evolution
- CVE-2023-43342Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted scr
- CVE-2023-43344Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted scr
- CVE-2023-43345Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted scr
- CVE-2023-43359Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the P
- CVE-2023-43875Multiple Cross-Site Scripting (XSS) vulnerabilities in installation of Subrion CMS v.4.2.1 allows a local attacker to execute arbitrary web intelliants/subrion
- CVE-2023-43986DM Concept configurator before v4.9.4 was discovered to contain a SQL injection vulnerability via the component ConfiguratorAttachment::getA
- CVE-2023-44690Inadequate encryption strength in mycli 1.27.0 allows attackers to view sensitive information via /mycli/config.pymycli
- CVE-2023-45277Yamcs 5.8.6 is vulnerable to directory traversal (issue 1 of 2).org.yamcs:yamcs
- CVE-2023-45278Directory Traversal vulnerability in the storage functionality of the API in Yamcs 5.8.6 allows attackers to delete arbitrary files via craforg.yamcs:yamcs
- CVE-2023-45279Yamcs 5.8.6 allows XSS (issue 1 of 2).org.yamcs:yamcs
- CVE-2023-45280Yamcs 5.8.6 allows XSS (issue 2 of 2).org.yamcs:yamcs
- CVE-2023-45281An issue in Yamcs 5.8.6 allows attackers to obtain the session cookie via upload of crafted HTML file.
- CVE-2023-45376In the module "Carousels Pack - Instagram, Products, Brands, Supplier" (hicarouselspack) for PrestaShop up to version 1.5.0 from HiPresta fo
- CVE-2023-45379In the module "Rotator Img" (posrotatorimg) in versions at least up to 1.1 from PosThemes for PrestaShop, a guest can perform SQL injection.
- CVE-2023-45381In the module "Creative Popup" (creativepopup) up to version 1.6.9 from WebshopWorks for PrestaShop, a guest can perform SQL injection via `
- CVE-2023-45384KnowBand supercheckout > 5.0.7 and < 6.0.7 is vulnerable to Unrestricted Upload of File with Dangerous Type.
- CVE-2023-45883A privilege escalation vulnerability exists within the Qumu Multicast Extension v2 before 2.0.63 for Windows.
- CVE-2023-45992A vulnerability in the web-based interface of the RUCKUS Cloudpath product on version 5.12 build 5538 or before to could allow a remote, una
- CVE-2023-46033D-Link (Non-US) DSL-2750U N300 ADSL2+ and (Non-US) DSL-2730U N150 ADSL2+ are vulnerable to Incorrect Access Control.
- CVE-2023-46042An issue in GetSimpleCMS v.3.4.0a allows a remote attacker to execute arbitrary code via a crafted payload to the phpinfo().
- CVE-2023-46228zchunk before 1.3.2 has multiple integer overflows via malformed zchunk files to lib/comp/comp.c, lib/comp/zstd/zstd.c, lib/dl/multipart.c,
- CVE-2023-46229LangChain before 0.0.317 allows SSRF via document_loaders/recursive_url_loader.py because crawling can proceed from an external server to anlangchain