# CVEs published 2023-10-23

53 CVEs were published on October 23, 2023: 0 critical, 10 high. Days are UTC.

- [CVE-2023-5633](https://cve.now/CVE-2023-5633.md): Kernel: vmwgfx: reference count issue leads to use-after-free in surface handling (CVSS 7.8, Red Hat Enterprise Linux)
- [CVE-2023-33837](https://cve.now/CVE-2023-33837.md): IBM Security Verify Governance information disclosure (CVSS 4.1, IBM Security Verify Governance)
- [CVE-2023-33839](https://cve.now/CVE-2023-33839.md): IBM Security Verify Governance command execution (CVSS 7.2, IBM Security Verify Governance)
- [CVE-2022-22466](https://cve.now/CVE-2022-22466.md): IBM Security Verify Governance information disclosure (CVSS 6.8, IBM Security Verify Governance)
- [CVE-2023-33840](https://cve.now/CVE-2023-33840.md): IBM Security Verify Governance cross-site scripting (CVSS 4.8, IBM Security Verify Governance)
- [CVE-2023-46288](https://cve.now/CVE-2023-46288.md): Apache Airflow: Sensitive parameters exposed in API when "non-sensitive-only" configuration is set (low (no CVSS), Apache Software Foundation Apache Airflow · apache-airflow)
- [CVE-2023-38722](https://cve.now/CVE-2023-38722.md): IBM Sterling Partner Engagement Manager cross-site scripting (CVSS 6.4, IBM Sterling Partner Engagement Manager)
- [CVE-2023-43045](https://cve.now/CVE-2023-43045.md): IBM Sterling Partner Engagement Manager security bypass (CVSS 5.9, IBM Sterling Partner Engagement Manager)
- [CVE-2023-37532](https://cve.now/CVE-2023-37532.md): A path traversal vulnerability affects HCL Commerce (CVSS 5.8, HCL Software HCL Commerce)
- [CVE-2023-46122](https://cve.now/CVE-2023-46122.md): Arbitrary file write via archive extraction (Zip Slip) vulnerability in sbt (CVSS 3.9, sbt · org.scala-sbt:sbt +3)
- [CVE-2023-43067](https://cve.now/CVE-2023-43067.md): Dell Unity prior to 5.3 contains an XML External Entity injection vulnerability. (CVSS 4.9, Dell Unity)
- [CVE-2023-43066](https://cve.now/CVE-2023-43066.md): Dell Unity prior to 5.3 contains a Restricted Shell Bypass vulnerability. (CVSS 5.1, Dell Unity)
- [CVE-2023-43065](https://cve.now/CVE-2023-43065.md): Dell Unity prior to 5.3 contains a Cross-site scripting vulnerability. (CVSS 5.5, Dell Unity)
- [CVE-2023-43074](https://cve.now/CVE-2023-43074.md): Dell Unity 5.3 contain(s) an Arbitrary File Creation vulnerability. (CVSS 5.2, Dell Unity)
- [CVE-2023-46127](https://cve.now/CVE-2023-46127.md): Frappe vulnerable to HTML injection by any Desk user (CVSS 5.4, frappe)
- [CVE-2023-5718](https://cve.now/CVE-2023-5718.md): The Vue.js Devtools extension was found to leak screenshot data back to a malicious web page via the standard \`postMessage()\` API. (CVSS 4.3, Vue.js devtools)
- [CVE-2023-28805](https://cve.now/CVE-2023-28805.md): ZCC on Linux privilege escalation (CVSS 6.7, Zscaler Client Connector)
- [CVE-2023-28804](https://cve.now/CVE-2023-28804.md): Linux ZCC allows unsigned updates, allowing elevated Code Execution (CVSS 8.2, Zscaler Client Connector)
- [CVE-2023-28803](https://cve.now/CVE-2023-28803.md): Traffic being bypassed by ZCC by configuring synthetic IP range as local network (CVSS 5.9, Zscaler Client Connector)
- [CVE-2023-28797](https://cve.now/CVE-2023-28797.md): LPE using arbitrary file delete with Symlinks (CVSS 6.3, Zscaler Client Connector)
- [CVE-2023-28796](https://cve.now/CVE-2023-28796.md): IPC Bypass Through PLT Section in ELF (CVSS 7.1, Zscaler Client Connector)
- [CVE-2023-28795](https://cve.now/CVE-2023-28795.md): Client IPC validation bypass (CVSS 7.8, Zscaler Client Connector)
- [CVE-2023-28793](https://cve.now/CVE-2023-28793.md): Heap Based Buffer Overflow in Library (CVSS 7.8, Zscaler Client Connector)
- [CVE-2021-26738](https://cve.now/CVE-2021-26738.md): Privilege Escalation for ZCC macOS via PATH Variable (CVSS 7.8, Zscaler Client Connector)
- [CVE-2021-26737](https://cve.now/CVE-2021-26737.md): Privilege Escalation Using PID Reuse in ZCC macOS (CVSS 5.5, Zscaler Client Connector)
- [CVE-2021-26736](https://cve.now/CVE-2021-26736.md): ZApp Installer Privilege Escalation Vulnerabilities (CVSS 6.7, Zscaler Client Connector)
- [CVE-2021-26735](https://cve.now/CVE-2021-26735.md): Untrusted Search Path While Executing REG DELETE by Uninstaller (CVSS 6.7, Zscaler Client Connector)
- [CVE-2021-26734](https://cve.now/CVE-2021-26734.md): Junction Delete leading to elevation of privilege (CVSS 4.4, Zscaler Client Connector)
- [CVE-2023-5246](https://cve.now/CVE-2023-5246.md): Authentication Bypass by Capture-replay in SICK Flexi Soft Gateways with Partnumbers 1044073, 1127717, 1130282, 1044074, 1121597, 1099832, 1 (CVSS 8.8, SICK AG FX0-GMOD00000 · SICK AG FX0-GMOD00010 +11)
- [CVE-2023-31122](https://cve.now/CVE-2023-31122.md): Apache HTTP Server: mod\_macro buffer over-read (low (no CVSS), Apache Software Foundation Apache HTTP Server)
- [CVE-2023-43622](https://cve.now/CVE-2023-43622.md): Apache HTTP Server: DoS in HTTP/2 with initial windows size 0 (low (no CVSS), Apache Software Foundation Apache HTTP Server)
- [CVE-2023-45802](https://cve.now/CVE-2023-45802.md): Apache HTTP Server: HTTP/2 stream memory not reclaimed right away on RST (no CVSS, Apache Software Foundation Apache HTTP Server)
- [CVE-2023-43624](https://cve.now/CVE-2023-43624.md): CX-Designer Ver.3.740 and earlier (included in CX-One CXONE-AL\[\]\[\]D-V4) contains an improper restriction of XML external entity reference ( (no CVSS, OMRON CX-Designer)
- [CVE-2023-5702](https://cve.now/CVE-2023-5702.md): Viessmann Vitogate 300 direct request (CVSS 4.3, Viessmann Vitogate)
- [CVE-2023-5701](https://cve.now/CVE-2023-5701.md): vnotex vnote Markdown File cross site scripting (CVSS 4.3, vnotex vnote)
- [CVE-2023-27148](https://cve.now/CVE-2023-27148.md): A stored cross-site scripting (XSS) vulnerability in the Admin panel in Enhancesoft osTicket v1.17.2 allows attackers to execute arbitrary w (no CVSS)
- [CVE-2023-27149](https://cve.now/CVE-2023-27149.md): A stored cross-site scripting (XSS) vulnerability in Enhancesoft osTicket v1.17.2 allows attackers to execute arbitrary web scripts or HTML (no CVSS)
- [CVE-2023-27152](https://cve.now/CVE-2023-27152.md): DECISO OPNsense 23.1 does not impose rate limits for authentication, allowing attackers to perform a brute-force attack to bypass authentica (no CVSS)
- [CVE-2023-33517](https://cve.now/CVE-2023-33517.md): carRental 1.0 is vulnerable to Incorrect Access Control (Arbitrary File Read on the Back-end System). (CVSS 7.5)
- [CVE-2023-37635](https://cve.now/CVE-2023-37635.md): UVDesk Community Skeleton v1.1.1 allows unauthenticated attackers to perform brute force attacks on the login page to gain access to the app (no CVSS)
- [CVE-2023-37636](https://cve.now/CVE-2023-37636.md): A stored cross-site scripting (XSS) vulnerability in UVDesk Community Skeleton v1.1.1 allows attackers to execute arbitrary web scripts or H (no CVSS)
- [CVE-2023-42295](https://cve.now/CVE-2023-42295.md): An issue in OpenImageIO oiio v.2.4.12.0 allows a remote attacker to execute arbitrary code and cause a denial of service via the read\_rle\_im (no CVSS)
- [CVE-2023-43358](https://cve.now/CVE-2023-43358.md): Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the T (no CVSS)
- [CVE-2023-44760](https://cve.now/CVE-2023-44760.md): Multiple Cross Site Scripting (XSS) vulnerabilities in Concrete CMS v.9.2.1 allow an attacker to execute arbitrary code via a crafted script (no CVSS, concrete5/concrete5)
- [CVE-2023-45966](https://cve.now/CVE-2023-45966.md): umputun remark42 version 1.12.1 and before has a Blind Server-Side Request Forgery (SSRF) vulnerability. (CVSS 7.5)
- [CVE-2023-45998](https://cve.now/CVE-2023-45998.md): kodbox 1.44 is vulnerable to Cross Site Scripting (XSS). (no CVSS)
- [CVE-2023-46058](https://cve.now/CVE-2023-46058.md): Cross Site Scripting (XSS) vulnerability in Geeklog-Core geeklog v.2.2.2 allows a remote attacker to execute arbitrary code via a crafted pa (no CVSS)
- [CVE-2023-46059](https://cve.now/CVE-2023-46059.md): Cross Site Scripting (XSS) vulnerability in Geeklog-Core geeklog v.2.2.2 allows a remote attacker to execute arbitrary code via a crafted pa (no CVSS)
- [CVE-2023-46324](https://cve.now/CVE-2023-46324.md): pkg/suci/suci.go in free5GC udm before 1.2.0, when Go before 1.19 is used, allows an Invalid Curve Attack because it may compute a shared se (no CVSS, github.com/free5gc/udm)
- [CVE-2023-46331](https://cve.now/CVE-2023-46331.md): WebAssembly wabt 1.0.33 has an Out-of-Bound Memory Read in in DataSegment::IsValidRange(), which lead to segmentation fault. (no CVSS, wabt)
- [CVE-2023-46332](https://cve.now/CVE-2023-46332.md): WebAssembly wabt 1.0.33 contains an Out-of-Bound Memory Write in DataSegment::Drop(), which lead to segmentation fault. (no CVSS, wabt)
- [CVE-2023-46602](https://cve.now/CVE-2023-46602.md): In International Color Consortium DemoIccMAX 79ecb74, there is a stack-based buffer overflow in the icFixXml function in IccXML/IccLibXML/Ic (no CVSS)
- [CVE-2023-46603](https://cve.now/CVE-2023-46603.md): In International Color Consortium DemoIccMAX 79ecb74, there is an out-of-bounds read in the CIccPRMG::GetChroma function in IccProfLib/IccPr (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-10-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.