CVEs published October 24, 2023
122 CVEs were published on October 24, 2023: 3 critical, 33 high. 1 is now in CISA KEV.
- Published
- 122
- Critical
- 3
- High
- 33
- Medium
- 52
- Low
- 2
- Unrated
- 32
- Now in CISA KEV
- 1
- Fix available
- 35
Most affected products
- Mozilla Firefox · Mozilla Thunderbird
- 8
- Hewlett Packard Enterprise (HPE) Aruba ClearPass Policy Man…
- 5
- Mozilla Firefox
- 4
- ethyca fides · ethyca-fides
- 3
- Lenovo HardwareScanPlugin · Lenovo Diagnostics
- 3
- Lenovo XClarity Controller
- 3
- Alex Raven WP Report Post
- 1
- Anurag Deshmukh CPT Shortcode Generator
- 1
- AWESOME TOGI Product Category Tree
- 1
- bannersky BSK PDF Manager
- 1
Critical 3
- CVE-2023-5746A vulnerability regarding use of externally-controlled format string is found in the cgi component.Synology Camera Firmware
- CVE-2023-45554File Upload vulnerability in zzzCMS v.2.1.9 allows a remote attacker to execute arbitrary code via modification of the imageext parameter fr
- CVE-2023-46369Tenda W18E V16.01.0.8(1576) contains a stack overflow vulnerability via the portMirrorMirroredPorts parameter in the formSetNetCheckTools fu
High 33
- CVE-2023-46136Werkzeug vulnerable to high resource usage when parsing multipart/form-data containing a large part with CR/LF character at the beginningpallets werkzeug · werkzeug
- CVE-2023-46124Server-Side Request Forgery Vulnerability in Custom Integration Uploadethyca fides · ethyca-fides
- CVE-2023-43795WPS Server Side Request Forgery in GeoServergeoserver · org.geoserver.extension:gs-wps-core
- CVE-2023-26219TIBCO Operational Intelligence Hawk RedTail Credential Exposure VulnerabilityTIBCO Software TIBCO Hawk · TIBCO Software TIBCO Operati… +1
- CVE-2023-39930PingFederate PingID Radius PCV Authentication BypassPing Identity PingID Radius PCV
- CVE-2022-3699 A privilege escalation vulnerability was reported in the Lenovo HardwareScanPlugin prior to version 1.3.1.2 and Lenovo Diagnostics prior toLenovo HardwareScanPlugin · Lenovo Diagnostics
- CVE-2023-3112A vulnerability was reported in Elliptic Labs Virtual Lock Sensor for ThinkPad T14 Gen 3 that could allow an attacker with local access to eLenovo Elliptic Labs Virtual Lock Sensor · Lenovo AI Virtua…
- CVE-2023-4607An authenticated XCC user can change permissions for any user through a crafted API command.Lenovo XClarity Controller
- CVE-2023-4606An authenticated XCC user with Read-Only permission can change a different user’s password through a crafted API command.Lenovo XClarity Controller
- CVE-2023-41339Unsecured WMS dynamic styling sld=<url> parameter affords blind unauthenticated SSRF in GeoServergeoserver · org.geoserver:gs-wms +1
- CVE-2023-39231PingFederate PingOne MFA IK Device Pairing Second Factor Authentication BypassPing Identity PingOne MFA Integration Kit
- CVE-2023-43507Authenticated SQL Injection Vulnerability in ClearPass Policy Manager Web-based Management InterfaceHewlett Packard Enterprise (HPE) Aruba ClearPass Policy Man…
- CVE-2023-43506Local Privilege Escalation in ClearPass OnGuard Linux AgentHewlett Packard Enterprise (HPE) Aruba ClearPass Policy Man…
- CVE-2023-5363Incorrect cipher key & IV length processingOpenSSL
- CVE-2023-20273A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to inject commands with the priCisco IOS XE Software
- CVE-2023-46071WordPress Protección de Datos RGPD Plugin <= 3.1.0 is vulnerable to Cross Site Scripting (XSS)ClickDatos Protección de Datos RGPD
- CVE-2023-46070WordPress EG-Attachments Plugin <= 2.1.3 is vulnerable to Cross Site Scripting (XSS)Emmanuel GEORJON EG-Attachments
- CVE-2023-45837WordPress Ultimate Taxonomy Manager Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)XYDAC Ultimate Taxonomy Manager
- CVE-2023-5728During garbage collection extra operations were performed on a object that should not be.Mozilla Firefox · Mozilla Thunderbird
- CVE-2023-5724Drivers are not always robust to extremely large draw calls and in some cases this scenario could have led to a crash.Mozilla Firefox · Mozilla Thunderbird
- CVE-2023-45835WordPress Libsyn Publisher Hub Plugin <= 1.4.4 is vulnerable to Cross Site Scripting (XSS)Libsyn Publisher Hub
- CVE-2023-45772WordPress Proofreading Plugin <= 1.0.11 is vulnerable to Cross Site Scripting (XSS)Scribit Proofreading
- CVE-2023-45770WordPress Fast WP Speed Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)Fastwpspeed Fast WP Speed
- CVE-2023-45769WordPress WP Report Post Plugin <= 2.1.2 is vulnerable to Cross Site Scripting (XSS)Alex Raven WP Report Post
- CVE-2023-45761WordPress Sendle Shipping Plugin <= 5.13 is vulnerable to Cross Site Scripting (XSS)Joovii Sendle Shipping Plugin
- CVE-2023-45759WordPress Peter’s Custom Anti-Spam Plugin <= 3.2.2 is vulnerable to Cross Site Scripting (XSS)Peter Keung Peter’s Custom Anti-Spam
- CVE-2023-45756WordPress ApplyOnline – Application Form Builder and Manager Plugin <= 2.5.2 is vulnerable to Cross Site Scripting (XSS)Spider Teams ApplyOnline – Application Form Builder and Man…
- CVE-2023-45750WordPress Nexter Extension Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)POSIMYTH Nexter Extension
- CVE-2023-45637WordPress EventPrime Plugin <= 3.1.5 is vulnerable to Cross Site Scripting (XSS)EventPrime – Events Calendar, Bookings and Tickets
- CVE-2023-39735The leakage of the client secret in Uomasa_Saiji_news Line 13.6.1 allows attackers to obtain the channel access token and send crafted broad
- CVE-2023-39736The leakage of the client secret in Fukunaga_memberscard Line 13.6.1 allows attackers to obtain the channel access token and send crafted br
- CVE-2023-39737The leakage of the client secret in Matsuya Line 13.6.1 allows attackers to obtain the channel access token and send crafted broadcast messa
- CVE-2023-39739The leakage of the client secret in REGINA SWEETS&BAKERY Line 13.6.1 allows attackers to obtain the channel access token and send crafted br
Medium, low and unrated 86
- CVE-2023-46118Denial of Service by publishing large messages over the HTTP APIrabbitmq-server
- CVE-2023-46120RabbitMQ Java client's lack of message size limitation leads to remote DoS attackrabbitmq-java-client · com.rabbitmq:amqp-client
- CVE-2023-46125Fides Information Disclosure Vulnerability in Config API Endpointethyca fides · ethyca-fides
- CVE-2023-46126Fides JavaScript Injection Vulnerability in Privacy Center URLethyca fides · ethyca-fides
- CVE-2023-5568Samba: heap buffer overflow with freshness tokens in the heimdal kdcRed Hat Enterprise Linux · Red Hat Storage
- CVE-2023-5752Mercurial configuration injectable in repo revision when installing via pipPip maintainers pip · pip
- CVE-2022-3698 A denial of service vulnerability was reported in the Lenovo HardwareScanPlugin versions prior to 1.3.1.2 and Lenovo Diagnostics versLenovo HardwareScanPlugin · Lenovo Diagnostics
- CVE-2022-0353 A denial of service vulnerability was reported in the Lenovo HardwareScanPlugin versions prior to 1.3.1.2 and Lenovo Diagnostics versLenovo HardwareScanPlugin · Lenovo Diagnostics
- CVE-2023-4608An authenticated XCC user with elevated privileges can perform blind SQL injection in limited cases through a crafted API command.Lenovo XClarity Controller
- CVE-2023-5758When opening a page in reader mode, the redirect URL could have caused attacker-controlled script to execute in a reflected Cross-Site ScripMozilla Firefox for iOS
- CVE-2023-43510Authenticated Remote Command Injection in ClearPass Policy Manager Web-Based Management Interface Leading to Partial System CompromiseHewlett Packard Enterprise (HPE) Aruba ClearPass Policy Man…
- CVE-2023-43509Unauthenticated Endpoint Allows Sending Arbitrary OnGuard NotificationsHewlett Packard Enterprise (HPE) Aruba ClearPass Policy Man…
- CVE-2023-43508Authorization Bypass Leading to Privilege Escalation in ClearPass Policy Manager Web-Based Management InterfaceHewlett Packard Enterprise (HPE) Aruba ClearPass Policy Man…
- CVE-2023-42031IBM CICS TX denial of serviceIBM TXSeries for Multiplatforms · IBM CICS TX Standard +1
- CVE-2023-5753Potential buffer overflow vulnerabilities in the Zephyr Bluetooth subsystemzephyrproject-rtos Zephyr
- CVE-2023-46128Exposure of hashed user passwords via REST API in Nautobotnautobot
- CVE-2023-5744Very Simple Google Maps <= 2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodemasterk Very Simple Google Maps
- CVE-2023-5740Live Chat with Facebook Messenger <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodeninjateam Live Chat with Facebook Messenger
- CVE-2023-5126Delete Me <= 3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodecmc3215 Delete Me
- CVE-2023-5110BSK PDF Manager <= 3.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodebannersky BSK PDF Manager
- CVE-2023-5085Advanced Menu Widget <= 0.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodejohnnypea Advanced Menu Widget
- CVE-2023-5127WP Font Awesome <= 1.7.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodezayedbaloch WP Font Awesome
- CVE-2023-5745Reusable Text Blocks <= 1.5.3 - Authenticated (Author+) Stored Cross-Site Scripting via Shortcoderichardgabriel Reusable Text Blocks
- CVE-2023-46069WordPress Ajax Archive Calendar Plugin <= 2.6.7 is vulnerable to Cross Site Scripting (XSS)Osmansorkar Ajax Archive Calendar
- CVE-2023-46068WordPress Maileon Plugin <= 2.16.0 is vulnerable to Cross Site Scripting (XSS)XQueue Maileon for WordPress
- CVE-2023-5732Address bar spoofing via bidirectional charactersMozilla Firefox · Mozilla Thunderbird
- CVE-2023-5731Memory safety bugs present in Firefox 118.Mozilla Firefox
- CVE-2023-5730Memory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3.Mozilla Firefox · Mozilla Thunderbird
- CVE-2023-5729A malicious web site can enter fullscreen mode while simultaneously triggering a WebAuthn prompt.Mozilla Firefox
- CVE-2023-5727The executable file warning was not presented when downloading .msix, .msixbundle, .appx, and .appxbundle files, which can run commands on aMozilla Firefox · Mozilla Thunderbird
- CVE-2023-5726A website could have obscured the full screen notification by using the file open dialog.Mozilla Firefox · Mozilla Thunderbird
- CVE-2023-5725A malicious installed WebExtension could open arbitrary URLs, which under the right circumstance could be leveraged to collect sensitive useMozilla Firefox · Mozilla Thunderbird
- CVE-2023-5723An attacker with temporary script access to a site could have set a cookie containing invalid characters using `document.cookie` that could Mozilla Firefox
- CVE-2023-5722Using iterative requests an attacker was able to learn the size of an opaque response, as well as the contents of a server-supplied Vary heaMozilla Firefox
- CVE-2023-5721It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the user due to an insufficient actiMozilla Firefox · Mozilla Thunderbird
- CVE-2023-45833WordPress LeadSquared Suite Plugin <= 0.7.4 is vulnerable to Cross Site Scripting (XSS)LeadSquared Suite
- CVE-2023-45829WordPress Newsletter & Bulk Email Sender Plugin <= 2.0.1 is vulnerable to Cross Site Scripting (XSS)HappyBox Newsletter & Bulk Email Sender – Email Newsletter…
- CVE-2023-45832WordPress WP GoToWebinar Plugin <= 14.45 is vulnerable to Cross Site Scripting (XSS)Martin Gibson WP GoToWebinar
- CVE-2023-45768WordPress Next Page Plugin <= 1.5.2 is vulnerable to Cross Site Scripting (XSS)Stephanie Leary Next Page
- CVE-2023-45767WordPress Simple Tweet Plugin <= 1.4.0.2 is vulnerable to Cross Site Scripting (XSS)Wokamoto Simple Tweet
- CVE-2023-45764WordPress Scroll post excerpt Plugin <= 8.0 is vulnerable to Cross Site Scripting (XSS)Gopi Ramasamy Scroll post excerpt
- CVE-2023-39924WordPress Simple File List Plugin <= 6.1.9 is vulnerable to Cross Site Scripting (XSS)Mitchell Bennis Simple File List
- CVE-2023-45758WordPress Amministrazione Trasparente Plugin <= 8.0.2 is vulnerable to Cross Site Scripting (XSS)Marco Milesi Amministrazione Trasparente
- CVE-2023-25032WordPress Print, PDF, Email by PrintFriendly Plugin <= 5.5.1 is vulnerable to Cross Site Scripting (XSS)Print, PDF, & Email by PrintFriendly Print, PDF, Email by P…
- CVE-2023-45755WordPress BuddyPress Global Search Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS)BuddyBoss BuddyPress Global Search
- CVE-2023-45754WordPress Easy Testimonial Slider and Form Plugin <= 1.0.18 is vulnerable to Cross Site Scripting (XSS)I Thirteen Web Solution Easy Testimonial Slider and Form
- CVE-2023-45747WordPress WP Lightbox 2 Plugin <= 3.0.6.5 is vulnerable to Cross Site Scripting (XSS)Syed Balkhi WP Lightbox
- CVE-2023-45646WordPress PDF Block Plugin <= 1.1.0 is vulnerable to Cross Site Scripting (XSS)Henryholtgeerts PDF Block
- CVE-2023-45644WordPress CPT Shortcode Generator Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)Anurag Deshmukh CPT Shortcode Generator
- CVE-2023-45640WordPress WP ULike Plugin <= 4.6.8 is vulnerable to Cross Site Scripting (XSS)TechnoWich WP ULike – Most Advanced WordPress Marketing Too…
- CVE-2023-45634WordPress Copy Or Move Comments Plugin <= 5.0.4 is vulnerable to Cross Site Scripting (XSS)Biztechc Copy or Move Comments
- CVE-2023-46204WordPress Duplicate Theme Plugin <= 0.1.6 is vulnerable to Cross Site Request Forgery (CSRF)Muller Digital Duplicate Theme
- CVE-2023-46202WordPress Auto Login New User After Registration Plugin <= 1.9.6 is vulnerable to Cross Site Request Forgery (CSRF)Jeff Sherk Auto Login New User After Registration
- CVE-2023-46198WordPress Appointment Calendar Plugin <= 2.9.6 is vulnerable to Cross Site Request Forgery (CSRF)Scientech It Solution Appointment Calendar
- CVE-2023-46193WordPress Internal Link Building Plugin <= 1.2.3 is vulnerable to Cross Site Request Forgery (CSRF)Internet Marketing Ninjas Internal Link Building
- CVE-2023-46191WordPress Open Graph Metabox Plugin <= 1.4.4 is vulnerable to Cross Site Request Forgery (CSRF)Niels van Renselaar Open Graph Metabox
- CVE-2023-5748Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in cgi component in Synology SSL VPN Client before 1.4.Synology SSL VPN Client
- CVE-2023-46190WordPress Novo-Map : your WP posts on custom google maps Plugin <= 1.1.2 is vulnerable to Cross Site Request Forgery (CSRF)Novo-media Novo-Map : your WP posts on custom google maps
- CVE-2023-46189WordPress Google Calendar Events Plugin <= 3.2.5 is vulnerable to Cross Site Request Forgery (CSRF)Simple Calendar – Google Calendar Plugin
- CVE-2023-46152WordPress WOLF Plugin <= 1.0.7.1 is vulnerable to Cross Site Request Forgery (CSRF)realmag777 WOLF – WordPress Posts Bulk Editor and Manager P…
- CVE-2023-46151WordPress Product Category Tree Plugin <= 2.5 is vulnerable to Cross Site Request Forgery (CSRF)AWESOME TOGI Product Category Tree
- CVE-2023-46150WordPress WP Radio plugin <= 3.1.9 is vulnerable to Cross Site Request Forgery (CSRF)WP Military WP Radio
- CVE-2022-38484An arbitrary file upload and directory traversal vulnerability exist in the file upload functionality of the System Setup menu in AgeVolt Po
- CVE-2022-38485A directory traversal vulnerability exists in the AgeVolt Portal prior to version 0.1 that leads to Information Disclosure.
- CVE-2023-29973Pfsense CE version 2.6.0 is vulnerable to No rate limit which can lead to an attacker creating multiple malicious users in firewall.
- CVE-2023-31580light-oauth2 before version 2.1.27 obtains the public key without any verification.com.networknt:light-oauth2
- CVE-2023-31581Dromara Sureness before v1.0.8 was discovered to use a hardcoded key.com.usthe.sureness:sureness-core
- CVE-2023-31582jose4j before v0.9.3 allows attackers to set a low iteration count of 1000 or less.org.bitbucket.b_c:jose4j
- CVE-2023-36085The sisqualWFM 7.1.319.103 thru 7.1.319.111 for Android, has a host header injection vulnerability in its "/sisqualIdentityServer/core/" end
- CVE-2023-39619ReDos in NPMJS Node Email Check v.1.0.4 allows an attacker to cause a denial of service via a crafted string to the scpSyntax component.node-email-check
- CVE-2023-39732The leakage of the client secret in Tokueimaru_waiting Line 13.6.1 allows attackers to obtain the channel access token and send crafted broa
- CVE-2023-39733The leakage of the client secret in TonTon-Tei Line v13.6.1 allows attackers to obtain the channel access token and send crafted broadcast m
- CVE-2023-39734The leakage of the client secret in VISION MEAT WORKS TrackDiner10/10_mc Line v13.6.1 allows attackers to obtain the channel access token an
- CVE-2023-39740The leakage of the client secret in Onigiriya-musubee Line 13.6.1 allows attackers to obtain the channel access token and send crafted broad
- CVE-2023-43281Double Free vulnerability in Nothings Stb Image.h v.2.28 allows a remote attacker to cause a denial of service via a crafted file to the stb
- CVE-2023-43360Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the T
- CVE-2023-44767A File upload vulnerability in RiteCMS 3.0 allows a local attacker to upload a SVG file with XSS content.
- CVE-2023-44769A Cross-Site Scripting (XSS) vulnerability in Zenario CMS v.9.4.59197 allows a local attacker to execute arbitrary code via a crafted scripttribalsystems/zenario
- CVE-2023-45555File Upload vulnerability in zzzCMS v.2.1.9 allows a remote attacker to execute arbitrary code via a crafted file to the down_url function i
- CVE-2023-45990Insecure Permissions vulnerability in WenwenaiCMS v.1.0 allows a remote attacker to escalate privileges.
- CVE-2023-46010An issue in SeaCMS v.12.9 allows an attacker to execute arbitrary commands via the admin_safe.php component.
- CVE-2023-46316In buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse command lines.
- CVE-2023-46370Tenda W18E V16.01.0.8(1576) has a command injection vulnerability via the hostName parameter in the formSetNetCheckTools function.
- CVE-2023-46371TP-Link device TL-WDR7660 2.0.30 and TL-WR886N 2.0.12 has a stack overflow vulnerability via the function upgradeInfoJsonToBin.
- CVE-2023-46373TP-Link TL-WDR7660 2.0.30 has a stack overflow vulnerability via the function deviceInfoJsonToBincauses.
- CVE-2023-46574An issue in TOTOLINK A3700R v.9.1.2u.6165_20211012 allows a remote attacker to execute arbitrary code via the FileName parameter of the Uplo