# CVEs published 2023-10-19

105 CVEs were published on October 19, 2023: 6 critical, 35 high. Days are UTC.

- [CVE-2023-46115](https://cve.now/CVE-2023-46115.md): Updater Private Keys Possibly Leaked via Vite Environment Variables in tauri-cli (CVSS 8.4, tauri-apps tauri · tauri-cli +1)
- [CVE-2023-41893](https://cve.now/CVE-2023-41893.md): Account takeover via auth\_callback login in Home Assistant Core (CVSS 4.3, home-assistant core · homeassistant)
- [CVE-2023-41894](https://cve.now/CVE-2023-41894.md): Local-only webhooks externally accessible via SniTun in Home Assistant Core (CVSS 5.3, home-assistant core)
- [CVE-2023-41895](https://cve.now/CVE-2023-41895.md): Cross-site Scripting via auth\_callback login in Home Assistant Core (CVSS 8.8, home-assistant core)
- [CVE-2023-41896](https://cve.now/CVE-2023-41896.md): Fake websocket server installation permits full takeover in Home Assistant Core (CVSS 7.1, home-assistant core)
- [CVE-2023-41897](https://cve.now/CVE-2023-41897.md): Lack of XFO header allows clickjacking in Home Assistant Core (CVSS 8.8, home-assistant core)
- [CVE-2023-41899](https://cve.now/CVE-2023-41899.md): Partial Server-Side Request Forgery in Home Assistant Core (CVSS 6.6, home-assistant core)
- [CVE-2023-41898](https://cve.now/CVE-2023-41898.md): Arbitrary URL load in Android WebView in \`MyActivity.kt\` in Home Assistant Companion for Android (CVSS 8.6, home-assistant core)
- [CVE-2023-44385](https://cve.now/CVE-2023-44385.md): Client-Side Request Forgery in Home Assistant iOS/macOS native Apps (CVSS 8.6, home-assistant core)
- [CVE-2023-45818](https://cve.now/CVE-2023-45818.md): Cross-site Scripting vulnerability in TinyMCE undo/redo, getContent API, resetContent API, and Autosave plugin (CVSS 6.1, tinymce · tinymce/tinymce)
- [CVE-2023-45819](https://cve.now/CVE-2023-45819.md): Cross-site Scripting vulnerability in TinyMCE notificationManager.open API (CVSS 6.1, tinymce · tinymce/tinymce)
- [CVE-2023-45815](https://cve.now/CVE-2023-45815.md): ArchiveBox: Viewing wget extractor output while logged in as an admin allows archived JS to execute in the admins context (CVSS 6.4, ArchiveBox)
- [CVE-2023-45823](https://cve.now/CVE-2023-45823.md): Arbitrary file read in Artifact Hub (CVSS 7.5, artifacthub hub · github.com/artifacthub/hub)
- [CVE-2023-45822](https://cve.now/CVE-2023-45822.md): Unsafe rego built-in allowed in Artifact Hub (CVSS 3.7, artifacthub hub · github.com/artifacthub/hub)
- [CVE-2023-45821](https://cve.now/CVE-2023-45821.md): Incorrect Docker Hub registry check in Artifact Hub (CVSS 5.4, artifacthub hub · github.com/artifacthub/hub)
- [CVE-2023-43492](https://cve.now/CVE-2023-43492.md): Weintek cMT3000 HMI Web CGI Stack-based Buffer Overflow (CVSS 9.8, Weintek cMT-FHD · Weintek cMT-HDM +5)
- [CVE-2023-40145](https://cve.now/CVE-2023-40145.md): Weintek cMT3000 HMI Web CGI OS Command Injection (CVSS 8.8, Weintek cMT-FHD · Weintek cMT-HDM +5)
- [CVE-2023-38584](https://cve.now/CVE-2023-38584.md): Weintek cMT3000 HMI Web CGI Stack-based Buffer Overflow (CVSS 9.8, Weintek cMT-FHD · Weintek cMT-HDM +5)
- [CVE-2023-45820](https://cve.now/CVE-2023-45820.md): Directus crashes on invalid WebSocket message (CVSS 5.9, directus)
- [CVE-2023-45809](https://cve.now/CVE-2023-45809.md): Disclosure of user names via admin bulk action views in wagtail (CVSS 2.7, wagtail)
- [CVE-2023-45826](https://cve.now/CVE-2023-45826.md): Authenticated SQL Injection in leantime (CVSS 6.5, leantime)
- [CVE-2023-45825](https://cve.now/CVE-2023-45825.md): Token in custom credentials object can leak through logs in ydb-go-sdk (CVSS 5.5, ydb-platform ydb-go-sdk · github.com/ydb-platform/ydb-go-sd…)
- [CVE-2023-42666](https://cve.now/CVE-2023-42666.md): Exposure of Sensitive Information to an Unauthorized Actor in DEXMA DEXGate (CVSS 5.3, DEXMA DexGate)
- [CVE-2023-42435](https://cve.now/CVE-2023-42435.md): Cross-Site Request Forgery in DEXMA DEXGate (CVSS 5.5, DEXMA DexGate)
- [CVE-2023-41089](https://cve.now/CVE-2023-41089.md): Improper Authentication in DEXMA DEXGate (CVSS 8.0, DEXMA DexGate)
- [CVE-2023-41088](https://cve.now/CVE-2023-41088.md): Cleartext Transmission of Sensitive Information in DEXMA DEXGate (CVSS 6.3, DEXMA DexGate)
- [CVE-2023-40153](https://cve.now/CVE-2023-40153.md): Cross-site Scripting in DEXMA DEXGate (CVSS 5.4, DEXMA DexGate)
- [CVE-2023-35986](https://cve.now/CVE-2023-35986.md): Santesoft Sante DICOM Viewer Pro Stack-based Buffer Overflow (CVSS 7.8, Santesoft Sante DICOM Viewer Pro)
- [CVE-2023-39431](https://cve.now/CVE-2023-39431.md): Santesoft Sante DICOM Viewer Pro Out-of-bounds Write (CVSS 7.8, Santesoft Sante DICOM Viewer Pro)
- [CVE-2023-5059](https://cve.now/CVE-2023-5059.md): Santesoft Sante FFT Imaging Out-of-bounds Read (CVSS 7.8, Santesoft Sante FFT Imaging)
- [CVE-2023-34366](https://cve.now/CVE-2023-34366.md): A use-after-free vulnerability exists in the Figure stream parsing functionality of Ichitaro 2023 1.0.1.59372. (CVSS 7.8, Ichitaro)
- [CVE-2023-38127](https://cve.now/CVE-2023-38127.md): An integer overflow exists in the "HyperLinkFrame" stream parser of Ichitaro 2023 1.0.1.59372. (CVSS 7.8, Ichitaro)
- [CVE-2023-38128](https://cve.now/CVE-2023-38128.md): An out-of-bounds write vulnerability exists in the "HyperLinkFrame" stream parser of Ichitaro 2023 1.0.1.59372. (CVSS 7.8, Ichitaro)
- [CVE-2023-35126](https://cve.now/CVE-2023-35126.md): An out-of-bounds write vulnerability exists within the parsers for both the "DocumentViewStyles" and "DocumentEditStyles" streams of Ichitar (CVSS 7.8, Ichitaro)
- [CVE-2023-5654](https://cve.now/CVE-2023-5654.md): The React Developer Tools extension registers a message listener with window.addEventListener('message', \<listener\>) in a content script tha (CVSS 6.5, Meta React Developer Tools Extension · react-devtools-core)
- [CVE-2023-35181](https://cve.now/CVE-2023-35181.md): SolarWinds Access Rights Manager Incorrect Default Permissions Local Privilege Escalation Vulnerability (CVSS 7.8, SolarWinds Access Rights Manager)
- [CVE-2023-35187](https://cve.now/CVE-2023-35187.md): SolarWinds Access Rights Manager Directory Traversal Remote Code Execution Vulnerability (CVSS 8.8, SolarWinds Access Rights Manager)
- [CVE-2023-35185](https://cve.now/CVE-2023-35185.md): SolarWinds Access Rights Manager OpenFile Directory Traversal Remote Code Execution Vulnerability (CVSS 6.8, SolarWinds Access Rights Manager)
- [CVE-2023-35183](https://cve.now/CVE-2023-35183.md): SolarWinds Access Rights Manager Incorrect Default Permissions Local Privilege Escalation Vulnerability (CVSS 7.8, SolarWinds Access Rights Manager)
- [CVE-2023-35180](https://cve.now/CVE-2023-35180.md): SolarWinds Access Rights Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVSS 8.0, SolarWinds Access Rights Manager)
- [CVE-2023-35182](https://cve.now/CVE-2023-35182.md): SolarWinds Access Rights Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVSS 8.8, SolarWinds Access Rights Manager)
- [CVE-2023-35184](https://cve.now/CVE-2023-35184.md): SolarWinds Access Rights Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVSS 8.8, SolarWinds Access Rights Manager)
- [CVE-2023-35186](https://cve.now/CVE-2023-35186.md): SolarWinds Access Rights Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVSS 8.0, SolarWinds Access Rights Manager)
- [CVE-2023-46227](https://cve.now/CVE-2023-46227.md): Apache inlong has an Arbitrary File Read Vulnerability (CVSS 7.5, Apache Software Foundation Apache InLong · org.apache.in… +1)
- [CVE-2022-25332](https://cve.now/CVE-2022-25332.md): SK\_LOAD timing side channel during AES module decryption in Texas Instruments OMAP L138 (CVSS 4.4, Texas Instruments OMAP)
- [CVE-2022-25334](https://cve.now/CVE-2022-25334.md): Stack overflow on SK\_LOAD signature length field in Texas Instruments OMAP L138 (CVSS 8.2, Texas Instruments OMAP)
- [CVE-2022-26941](https://cve.now/CVE-2022-26941.md): Format string vulnerability in AT+CTGL command in Motorola MTM5000 (CVSS 9.6, Motorola Mobile Radio)
- [CVE-2022-26942](https://cve.now/CVE-2022-26942.md): Multiple missing pointer validation checks in trusted execution module in Motorola MTM5000 (CVSS 8.2, Motorola Mobile Radio)
- [CVE-2022-25333](https://cve.now/CVE-2022-25333.md): Flawed SK\_LOAD module authenticity check in Texas Instruments OMAP L138 (CVSS 8.2, Texas Instruments OMAP)
- [CVE-2022-27813](https://cve.now/CVE-2022-27813.md): Unconfigured memory protection modules in Motorola MTM5000 (CVSS 8.1, Motorola Mobile Radio)
- [CVE-2022-26943](https://cve.now/CVE-2022-26943.md): Weak PRNG entropy source used for authentication challenge generation in Motorola MTM5000 (CVSS 8.8, Motorola Mobile Radio)
- [CVE-2022-24400](https://cve.now/CVE-2022-24400.md): DCK pinning attack in TETRA (CVSS 7.5, ETSI TETRA Standard)
- [CVE-2022-24401](https://cve.now/CVE-2022-24401.md): Keystream recovery for arbitrary frames in TETRA (CVSS 8.8, ETSI TETRA Standard)
- [CVE-2022-24402](https://cve.now/CVE-2022-24402.md): Intentionally weakened effective strength in TETRA TEA1 (CVSS 8.8, ETSI TETRA Standard)
- [CVE-2022-24404](https://cve.now/CVE-2022-24404.md): Ciphertext Malleability in TETRA (CVSS 5.9, ETSI TETRA Standard)
- [CVE-2023-25753](https://cve.now/CVE-2023-25753.md): Server-Side Request Forgery in Apache ShenYu (low (no CVSS), Apache Software Foundation Apache ShenYu · org.apache.sh… +1)
- [CVE-2023-34050](https://cve.now/CVE-2023-34050.md): Spring AMQP Deserialization Vulnerability (CVSS 5.0, Spring AMQP)
- [CVE-2023-5254](https://cve.now/CVE-2023-5254.md): AI ChatBot \<= 4.8.9 - Unauthenticated Sensitive Information Exposure via qcld\_wb\_chatbot\_check\_user (CVSS 5.3, quantumcloud WPBot – AI ChatBot for Live Support, Lead Gene…)
- [CVE-2023-5212](https://cve.now/CVE-2023-5212.md): AI ChatBot \<= 4.8.9 and 4.9.2- Authenticated (Subscriber+) Arbitrary File Deletion via qcld\_openai\_delete\_training\_file (CVSS 9.6, quantumcloud WPBot – AI ChatBot for Live Support, Lead Gene…)
- [CVE-2023-5204](https://cve.now/CVE-2023-5204.md): AI ChatBot \<= 4.8.9 - Unauthenticated SQL Injection via qc\_wpbo\_search\_response (CVSS 9.8, quantumcloud WPBot – AI ChatBot for Live Support, Lead Gene…)
- [CVE-2023-5241](https://cve.now/CVE-2023-5241.md): AI ChatBot \<= 4.8.9 and 4.9.2 - Authenticated (Subscriber+) Directory Traversal to Arbitrary File Write via qcld\_openai\_upload\_pagetraining\_file (CVSS 9.6, quantumcloud WPBot – AI ChatBot for Live Support, Lead Gene…)
- [CVE-2023-37503](https://cve.now/CVE-2023-37503.md): A weak password requirements vulnerability affects HCL Compass (CVSS 8.1, HCL Software HCL Compass)
- [CVE-2023-5638](https://cve.now/CVE-2023-5638.md): Booster for WooCommerce \<= 7.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, pluggabl Booster for WooCommerce – PDF Invoices, Abandoned…)
- [CVE-2023-5639](https://cve.now/CVE-2023-5639.md): Team Showcase \<= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, themepoints Team Showcase – Responsive Team Members Grid, S…)
- [CVE-2023-4645](https://cve.now/CVE-2023-4645.md): Ad Inserter \<= 2.7.30 - Unauthenticated Sensitive Information Exposure via ai\_ajax (CVSS 5.3, spacetime Ad Inserter – Ad Manager & AdSense Ads)
- [CVE-2023-5336](https://cve.now/CVE-2023-5336.md): iPanorama 360 – WordPress Virtual Tour Builder \<= 1.8.0 - Authenticated (Contributor+) SQL Injection via Shortcode (CVSS 8.8, avirtum iPanorama 360 – Advanced Virtual Tour Builder)
- [CVE-2023-37504](https://cve.now/CVE-2023-37504.md): An insufficient session expiration vulnerability affects HCL Compass (CVSS 7.1, HCL Software HCL Compass)
- [CVE-2022-37830](https://cve.now/CVE-2022-37830.md): Interway a.s WebJET CMS 8.6.896 is vulnerable to Cross Site Scripting (XSS). (no CVSS)
- [CVE-2022-42150](https://cve.now/CVE-2022-42150.md): TinyLab linux-lab v1.1-rc1 and cloud-labv0.8-rc2, v1.1-rc1 are vulnerable to insecure permissions. (no CVSS)
- [CVE-2022-47583](https://cve.now/CVE-2022-47583.md): Terminal character injection in Mintty before 3.6.3 allows code execution via unescaped output to the terminal. (no CVSS)
- [CVE-2023-27791](https://cve.now/CVE-2023-27791.md): An issue found in IXP Data Easy Install 6.6.148840 allows a remote attacker to escalate privileges via insecure PRNG. (no CVSS)
- [CVE-2023-27792](https://cve.now/CVE-2023-27792.md): An issue found in IXP Data Easy Install v.6.6.14884.0 allows an attacker to escalate privileges via lack of permissions applied to sub direc (no CVSS)
- [CVE-2023-27793](https://cve.now/CVE-2023-27793.md): An issue discovered in IXP Data Easy Install v.6.6.14884.0 allows local attackers to gain escalated privileges via weak encoding of sensitiv (no CVSS)
- [CVE-2023-27795](https://cve.now/CVE-2023-27795.md): An issue found in IXP Data Easy Install v.6.6.14884.0 allows a local attacker to gain privileges via a static XOR key. (no CVSS)
- [CVE-2023-30131](https://cve.now/CVE-2023-30131.md): An issue discovered in IXP EasyInstall 6.6.14884.0 allows attackers to run arbitrary commands, gain escalated privilege, and cause other uns (no CVSS)
- [CVE-2023-30132](https://cve.now/CVE-2023-30132.md): An issue discovered in IXP Data EasyInstall 6.6.14907.0 allows attackers to gain escalated privileges via static Cryptographic Key. (no CVSS)
- [CVE-2023-30633](https://cve.now/CVE-2023-30633.md): An issue was discovered in TrEEConfigDriver in Insyde InsydeH2O with kernel 5.0 through 5.5. (no CVSS)
- [CVE-2023-31046](https://cve.now/CVE-2023-31046.md): A Path Traversal vulnerability exists in PaperCut NG before 22.1.1 and PaperCut MF before 22.1.1. (no CVSS)
- [CVE-2023-39731](https://cve.now/CVE-2023-39731.md): The leakage of the client secret in Kaibutsunosato v13.6.1 allows attackers to obtain the channel access token and send crafted broadcast me (no CVSS)
- [CVE-2023-43251](https://cve.now/CVE-2023-43251.md): XNSoft Nconvert 7.136 has an Exception Handler Chain Corrupted via a crafted image file. (no CVSS)
- [CVE-2023-43252](https://cve.now/CVE-2023-43252.md): XNSoft Nconvert 7.136 is vulnerable to Buffer Overflow via a crafted image file. (no CVSS)
- [CVE-2023-43340](https://cve.now/CVE-2023-43340.md): Cross-site scripting (XSS) vulnerability in evolution v.3.2.3 allows a local attacker to execute arbitrary code via a crafted payload inject (no CVSS, evolutioncms/evolution)
- [CVE-2023-43341](https://cve.now/CVE-2023-43341.md): Cross-site scripting (XSS) vulnerability in evolution evo v.3.2.3 allows a local attacker to execute arbitrary code via a crafted payload in (no CVSS, evolutioncms/evolution)
- [CVE-2023-43342](https://cve.now/CVE-2023-43342.md): Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted scr (CVSS 5.4)
- [CVE-2023-43344](https://cve.now/CVE-2023-43344.md): Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted scr (CVSS 5.4)
- [CVE-2023-43345](https://cve.now/CVE-2023-43345.md): Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted scr (no CVSS)
- [CVE-2023-43359](https://cve.now/CVE-2023-43359.md): Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the P (no CVSS)
- [CVE-2023-43875](https://cve.now/CVE-2023-43875.md): Multiple Cross-Site Scripting (XSS) vulnerabilities in installation of Subrion CMS v.4.2.1 allows a local attacker to execute arbitrary web (no CVSS, intelliants/subrion)
- [CVE-2023-43986](https://cve.now/CVE-2023-43986.md): DM Concept configurator before v4.9.4 was discovered to contain a SQL injection vulnerability via the component ConfiguratorAttachment::getA (no CVSS)
- [CVE-2023-44690](https://cve.now/CVE-2023-44690.md): Inadequate encryption strength in mycli 1.27.0 allows attackers to view sensitive information via /mycli/config.py (no CVSS, mycli)
- [CVE-2023-45277](https://cve.now/CVE-2023-45277.md): Yamcs 5.8.6 is vulnerable to directory traversal (issue 1 of 2). (no CVSS, org.yamcs:yamcs)
- [CVE-2023-45278](https://cve.now/CVE-2023-45278.md): Directory Traversal vulnerability in the storage functionality of the API in Yamcs 5.8.6 allows attackers to delete arbitrary files via craf (no CVSS, org.yamcs:yamcs)
- [CVE-2023-45279](https://cve.now/CVE-2023-45279.md): Yamcs 5.8.6 allows XSS (issue 1 of 2). (no CVSS, org.yamcs:yamcs)
- [CVE-2023-45280](https://cve.now/CVE-2023-45280.md): Yamcs 5.8.6 allows XSS (issue 2 of 2). (no CVSS, org.yamcs:yamcs)
- [CVE-2023-45281](https://cve.now/CVE-2023-45281.md): An issue in Yamcs 5.8.6 allows attackers to obtain the session cookie via upload of crafted HTML file. (no CVSS)
- [CVE-2023-45376](https://cve.now/CVE-2023-45376.md): In the module "Carousels Pack - Instagram, Products, Brands, Supplier" (hicarouselspack) for PrestaShop up to version 1.5.0 from HiPresta fo (no CVSS)
- [CVE-2023-45379](https://cve.now/CVE-2023-45379.md): In the module "Rotator Img" (posrotatorimg) in versions at least up to 1.1 from PosThemes for PrestaShop, a guest can perform SQL injection. (no CVSS)
- [CVE-2023-45381](https://cve.now/CVE-2023-45381.md): In the module "Creative Popup" (creativepopup) up to version 1.6.9 from WebshopWorks for PrestaShop, a guest can perform SQL injection via \` (no CVSS)
- [CVE-2023-45384](https://cve.now/CVE-2023-45384.md): KnowBand supercheckout \> 5.0.7 and \< 6.0.7 is vulnerable to Unrestricted Upload of File with Dangerous Type. (no CVSS)
- [CVE-2023-45883](https://cve.now/CVE-2023-45883.md): A privilege escalation vulnerability exists within the Qumu Multicast Extension v2 before 2.0.63 for Windows. (no CVSS)
- [CVE-2023-45992](https://cve.now/CVE-2023-45992.md): A vulnerability in the web-based interface of the RUCKUS Cloudpath product on version 5.12 build 5538 or before to could allow a remote, una (no CVSS)
- [CVE-2023-46033](https://cve.now/CVE-2023-46033.md): D-Link (Non-US) DSL-2750U N300 ADSL2+ and (Non-US) DSL-2730U N150 ADSL2+ are vulnerable to Incorrect Access Control. (no CVSS)
- [CVE-2023-46042](https://cve.now/CVE-2023-46042.md): An issue in GetSimpleCMS v.3.4.0a allows a remote attacker to execute arbitrary code via a crafted payload to the phpinfo(). (no CVSS)
- [CVE-2023-46228](https://cve.now/CVE-2023-46228.md): zchunk before 1.3.2 has multiple integer overflows via malformed zchunk files to lib/comp/comp.c, lib/comp/zstd/zstd.c, lib/dl/multipart.c, (no CVSS)
- [CVE-2023-46229](https://cve.now/CVE-2023-46229.md): LangChain before 0.0.317 allows SSRF via document\_loaders/recursive\_url\_loader.py because crawling can proceed from an external server to an (no CVSS, langchain)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-10-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.