# CVEs published 2023-10-26

89 CVEs were published on October 26, 2023: 10 critical, 28 high. 3 are now in CISA KEV. Days are UTC.

- [CVE-2023-5805](https://cve.now/CVE-2023-5805.md): SourceCodester Simple Real Estate Portal System view\_estate.php sql injection (CVSS 6.3, SourceCodester Simple Real Estate Portal System)
- [CVE-2023-46665](https://cve.now/CVE-2023-46665.md): Improper Access Control in Sielco PolyEco1000 (CVSS 9.8, Sielco PolyEco1000)
- [CVE-2023-46748](https://cve.now/CVE-2023-46748.md): BIG-IP Configuration utility authenticated SQL injection vulnerability (CVSS 8.8, KEV, F5 BIG-IP)
- [CVE-2023-46747](https://cve.now/CVE-2023-46747.md): BIG-IP Configuration utility unauthenticated remote code execution vulnerability (CVSS 9.8, KEV, F5 BIG-IP)
- [CVE-2023-46664](https://cve.now/CVE-2023-46664.md): Improper Access Control in Sielco PolyEco1000 (CVSS 7.5, Sielco PolyEco1000)
- [CVE-2023-46663](https://cve.now/CVE-2023-46663.md): Improper Access Control in Sielco PolyEco1000 (CVSS 7.5, Sielco PolyEco1000)
- [CVE-2023-5804](https://cve.now/CVE-2023-5804.md): PHPGurukul Nipah Virus Testing Management System login.php sql injection (CVSS 7.3, PHPGurukul Nipah Virus Testing Management System)
- [CVE-2023-46662](https://cve.now/CVE-2023-46662.md): Improper Access Control in Sielco PolyEco1000 (CVSS 7.5, Sielco PolyEco1000)
- [CVE-2023-46661](https://cve.now/CVE-2023-46661.md): Improper Access Control in Sielco PolyEco1000 (CVSS 9.8, Sielco PolyEco1000)
- [CVE-2023-5754](https://cve.now/CVE-2023-5754.md): Improper Restriction of Excessive Authentication Attempts in Sielco PolyEco1000 (CVSS 9.1, Sielco PolyEco1000)
- [CVE-2023-0897](https://cve.now/CVE-2023-0897.md): Session FIxation in Sielco PolyEco1000 (CVSS 8.8, Sielco PolyEco1000)
- [CVE-2023-39427](https://cve.now/CVE-2023-39427.md): Ashlar-Vellum Cobalt, Xenon, Argon, Lithium Out-of-bounds Write (CVSS 7.8, Ashlar-Vellum Cobalt · Ashlar-Vellum Xenon +2)
- [CVE-2023-39936](https://cve.now/CVE-2023-39936.md): Ashlar-Vellum Graphite Out-of-bounds Read (CVSS 7.8, Ashlar-Vellum Graphite)
- [CVE-2023-44267](https://cve.now/CVE-2023-44267.md): Online Art Gallery v1.0 - Multiple Unauthenticated SQL Injections (SQLi) (CVSS 9.8, Projectworlds Pvt. Limited Online Art Gallery)
- [CVE-2023-31416](https://cve.now/CVE-2023-31416.md): Elastic Cloud on Kubernetes (ECK) secret token configuration issue (CVSS 5.3, Elastic Cloud on Kubernetes)
- [CVE-2023-31417](https://cve.now/CVE-2023-31417.md): Elasticsearch Insertion of sensitive information in audit logs (CVSS 4.1, Elasticsearch · org.elasticsearch:elasticsearch)
- [CVE-2023-31418](https://cve.now/CVE-2023-31418.md): Elasticsearch uncontrolled resource consumption (CVSS 7.5, Elasticsearch · org.elasticsearch:elasticsearch)
- [CVE-2023-5796](https://cve.now/CVE-2023-5796.md): CodeAstro POS System Logo setting unrestricted upload (CVSS 6.3, CodeAstro POS System)
- [CVE-2023-5795](https://cve.now/CVE-2023-5795.md): CodeAstro POS System Profile Picture profil unrestricted upload (CVSS 6.3, CodeAstro POS System)
- [CVE-2023-31419](https://cve.now/CVE-2023-31419.md): Elasticsearch StackOverflow vulnerability (CVSS 6.5, Elasticsearch · org.elasticsearch:elasticsearch)
- [CVE-2023-5794](https://cve.now/CVE-2023-5794.md): PHPGurukul Online Railway Catering System Login index.php sql injection (CVSS 7.3, PHPGurukul Online Railway Catering System)
- [CVE-2023-5793](https://cve.now/CVE-2023-5793.md): flusity CMS Dashboard customblock.php loadCustomBlocCreateForm cross site scripting (CVSS 3.5, flusity CMS)
- [CVE-2023-5624](https://cve.now/CVE-2023-5624.md): Blind SQL Injection (CVSS 7.2, Tenable Nessus Network Monitor)
- [CVE-2023-5792](https://cve.now/CVE-2023-5792.md): SourceCodester Sticky Notes App delete-note.php sql injection (CVSS 6.3, SourceCodester Sticky Notes App)
- [CVE-2023-5791](https://cve.now/CVE-2023-5791.md): SourceCodester Sticky Notes App add-note.php cross site scripting (CVSS 3.5, SourceCodester Sticky Notes App)
- [CVE-2023-5623](https://cve.now/CVE-2023-5623.md): Privilege Escalation (CVSS 7.0, Tenable Nessus Network Monitor)
- [CVE-2023-41966](https://cve.now/CVE-2023-41966.md): Sielco Radio Link and Analog FM Transmitters Privilege Defined With Unsafe Actions (CVSS 6.5, Sielco Analog FM transmitter · Sielco Radio Link)
- [CVE-2023-45228](https://cve.now/CVE-2023-45228.md): Sielco Radio Link and Analog FM Transmitters Improper Access Control (CVSS 6.5, Sielco Analog FM transmitter · Sielco Radio Link)
- [CVE-2023-5622](https://cve.now/CVE-2023-5622.md): Privilege Escalation (CVSS 7.1, Tenable Nessus Network Monitor)
- [CVE-2023-45317](https://cve.now/CVE-2023-45317.md): Sielco Radio Link and Analog FM Transmitters Cross-Site Request Forgery (CVSS 8.8, Sielco Analog FM transmitter · Sielco Radio Link)
- [CVE-2023-46666](https://cve.now/CVE-2023-46666.md): Elastic Sharepoint Online Python Connector Improper Access Control (CVSS 5.3, Elastic Sharepoint Online Python Connector)
- [CVE-2023-42769](https://cve.now/CVE-2023-42769.md): Sielco Radio Link and Analog FM Transmitters Improper Access Control (CVSS 9.8, Sielco Analog FM transmitter · Sielco Radio Link)
- [CVE-2023-5790](https://cve.now/CVE-2023-5790.md): SourceCodester File Manager App add-file.php unrestricted upload (CVSS 6.3, SourceCodester File Manager App)
- [CVE-2023-5789](https://cve.now/CVE-2023-5789.md): Dragon Path 707GR1 Ping Diagnostics cross site scripting (CVSS 2.4, Dragon Path 707GR1)
- [CVE-2023-5787](https://cve.now/CVE-2023-5787.md): Shaanxi Chanming Education Technology Score Query System sql injection (CVSS 7.3, Shaanxi Chanming Education Technology Score Query System)
- [CVE-2023-5786](https://cve.now/CVE-2023-5786.md): GeoServer GeoWebCache rest.html direct request (CVSS 5.3, GeoServer GeoWebCache)
- [CVE-2023-5785](https://cve.now/CVE-2023-5785.md): Netentsec NS-ASG Application Security Gateway addaddress\_interpret.php sql injection (CVSS 5.5, Netentsec NS-ASG Application Security Gateway)
- [CVE-2023-46234](https://cve.now/CVE-2023-46234.md): browserify-sign vulnerable via an upper bound check issue in \`dsaVerify\` that leads to a signature forgery attack (CVSS 6.5, browserify-sign)
- [CVE-2023-5784](https://cve.now/CVE-2023-5784.md): Netentsec NS-ASG Application Security Gateway uploadfirewall.php sql injection (CVSS 5.5, Netentsec NS-ASG Application Security Gateway)
- [CVE-2023-46238](https://cve.now/CVE-2023-46238.md): XSS with User Avatar image in ZITADEL (CVSS 8.7, zitadel)
- [CVE-2023-5783](https://cve.now/CVE-2023-5783.md): Tongda OA 2017 delete.php sql injection (CVSS 6.3, Tongda OA)
- [CVE-2023-5782](https://cve.now/CVE-2023-5782.md): Tongda OA 2017 General News delete\_query.php sql injection (CVSS 5.5, Tongda OA)
- [CVE-2023-46090](https://cve.now/CVE-2023-46090.md): WordPress Spider Facebook Plugin \<= 1.0.15 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, WebDorado WDSocialWidgets)
- [CVE-2023-41096](https://cve.now/CVE-2023-41096.md): Keys Stored in Plaintext on Secure Vault High for Silabs Ember ZNet devices (CVSS 6.8, silabs.com Ember ZNet SDK)
- [CVE-2023-41095](https://cve.now/CVE-2023-41095.md): Keys Stored in Plaintext on Secure Vault High for Silabs OpenThread devices (CVSS 6.8, silabs.com OpenThread SDK)
- [CVE-2023-5781](https://cve.now/CVE-2023-5781.md): Tongda OA 2017 delete\_webmail.php DELETE\_STR sql injection (CVSS 6.3, Tongda OA)
- [CVE-2023-46088](https://cve.now/CVE-2023-46088.md): WordPress WP Full Stripe Free Plugin \<= 1.6.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Mammothology WP Full Stripe Free)
- [CVE-2023-46094](https://cve.now/CVE-2023-46094.md): WordPress Conversios.io Plugin \<= 6.5.3 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Conversios Track Google Analytics 4, Facebook Pixel & Conve…)
- [CVE-2023-32116](https://cve.now/CVE-2023-32116.md): WordPress Custom post types Plugin \<= 4.0.12 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, TotalPress.org Custom post types, Custom Fields & more)
- [CVE-2023-46081](https://cve.now/CVE-2023-46081.md): WordPress Lava Directory Manager Plugin \<= 1.1.34 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Lavacode Lava Directory Manager)
- [CVE-2023-46077](https://cve.now/CVE-2023-46077.md): WordPress The Awesome Feed – Custom Feed Plugin \<= 2.2.5 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Arrow Plugins The Awesome Feed – Custom Feed)
- [CVE-2023-46076](https://cve.now/CVE-2023-46076.md): WordPress WooCommerce PDF Invoice Builder Plugin \<= 1.2.102 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, RedNao WooCommerce PDF Invoice Builder, Create invoices, pa…)
- [CVE-2023-46075](https://cve.now/CVE-2023-46075.md): WordPress Contact Form Builder, Contact Widget Plugin \<= 2.1.6 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, wpdevart Contact Form Builder, Contact Widget)
- [CVE-2023-5780](https://cve.now/CVE-2023-5780.md): Tongda OA 2017 delete.php sql injection (CVSS 7.3, Tongda OA)
- [CVE-2023-30492](https://cve.now/CVE-2023-30492.md): WordPress Minimum Purchase for WooCommerce Plugin \<= 2.0.0.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Vark Minimum Purchase for WooCommerce)
- [CVE-2023-46074](https://cve.now/CVE-2023-46074.md): WordPress FreshMail For WordPress Plugin \<= 2.3.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.8, Borbis Media FreshMail For WordPress)
- [CVE-2023-5802](https://cve.now/CVE-2023-5802.md): WordPress WP Knowledgebase Plugin \<= 1.3.4 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Mihai Iova WordPress Knowledge base & Documentation Plugin…)
- [CVE-2023-46072](https://cve.now/CVE-2023-46072.md): WordPress Add Shortcodes Actions And Filters Plugin \<= 2.0.9 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Michael Simpson Add Shortcodes Actions And Filters)
- [CVE-2023-5798](https://cve.now/CVE-2023-5798.md): Assistant \< 1.4.4 - Editor+ SSRF (CVSS 8.8, Assistant)
- [CVE-2023-5139](https://cve.now/CVE-2023-5139.md): Potential buffer overflow vulnerability in the Zephyr STM32 Crypto driver (CVSS 4.4, zephyrproject-rtos Zephyr)
- [CVE-2023-31421](https://cve.now/CVE-2023-31421.md): Beats, Elastic Agent, APM Server, and Fleet Server Improper Certificate Validation issue (CVSS 5.9, Elastic Beats · Elastic Agent +2)
- [CVE-2023-31422](https://cve.now/CVE-2023-31422.md): Kibana Insertion of Sensitive Information into Log File (CVSS 9.0, Elastic Kibana)
- [CVE-2023-46667](https://cve.now/CVE-2023-46667.md): Fleet Server Insertion of Sensitive Information into Log File (CVSS 8.1, Elastic Fleet Server)
- [CVE-2018-16739](https://cve.now/CVE-2018-16739.md): An issue was discovered on certain ABUS TVIP devices. (CVSS 8.8)
- [CVE-2018-17558](https://cve.now/CVE-2018-17558.md): Hardcoded manufacturer credentials and an OS command injection vulnerability in the /cgi-bin/mft/ directory on ABUS TVIP TVIP20050 LM.1.6.18 (CVSS 9.8)
- [CVE-2018-17559](https://cve.now/CVE-2018-17559.md): Due to incorrect access control, unauthenticated remote attackers can view the /video.mjpg video stream of certain ABUS TVIP cameras. (CVSS 7.5)
- [CVE-2018-17878](https://cve.now/CVE-2018-17878.md): Buffer Overflow vulnerability in certain ABUS TVIP cameras allows attackers to gain control of the program via crafted string sent to sprint (no CVSS)
- [CVE-2018-17879](https://cve.now/CVE-2018-17879.md): An issue was discovered on certain ABUS TVIP cameras. (no CVSS)
- [CVE-2020-17477](https://cve.now/CVE-2020-17477.md): Incorrect LDAP ACLs in ucs-school-ldap-acls-master in UCS@school before 4.4v5-errata allow remote teachers, staff, and school administrators (no CVSS)
- [CVE-2023-27170](https://cve.now/CVE-2023-27170.md): Xpand IT Write-back manager v2.3.1 allows attackers to perform a directory traversal via modification of the siteName parameter. (no CVSS)
- [CVE-2023-33558](https://cve.now/CVE-2023-33558.md): An information disclosure vulnerability in the component users-grid-data.php of Ocomon before v4.0.1 allows attackers to obtain sensitive in (no CVSS)
- [CVE-2023-33559](https://cve.now/CVE-2023-33559.md): A local file inclusion vulnerability via the lang parameter in OcoMon before v4.0.1 allows attackers to execute arbitrary code by supplying (no CVSS)
- [CVE-2023-38328](https://cve.now/CVE-2023-38328.md): An issue was discovered in eGroupWare 17.1.20190111. (no CVSS)
- [CVE-2023-39726](https://cve.now/CVE-2023-39726.md): An issue in Mintty v.3.6.4 and before allows a remote attacker to execute arbitrary code via crafted commands to the terminal. (no CVSS)
- [CVE-2023-42188](https://cve.now/CVE-2023-42188.md): IceCMS v2.0.1 is vulnerable to Cross Site Request Forgery (CSRF). (no CVSS)
- [CVE-2023-42406](https://cve.now/CVE-2023-42406.md): SQL injection vulnerability in D-Link Online behavior audit gateway DAR-7000 V31R02B1413C allows a remote attacker to obtain sensitive infor (no CVSS)
- [CVE-2023-43208](https://cve.now/CVE-2023-43208.md): NextGen Healthcare Mirth Connect before version 4.4.1 is vulnerable to unauthenticated remote code execution. (CVSS 9.8, KEV)
- [CVE-2023-43352](https://cve.now/CVE-2023-43352.md): An issue in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted payload to the Content Manager Menu compo (no CVSS)
- [CVE-2023-45867](https://cve.now/CVE-2023-45867.md): ILIAS (2013-09-12 release) contains a medium-criticality Directory Traversal local file inclusion vulnerability in the ScormAicc module. (no CVSS)
- [CVE-2023-45868](https://cve.now/CVE-2023-45868.md): The Learning Module in ILIAS 7.25 (2023-09-12 release) allows an attacker (with basic user privileges) to achieve a high-impact Directory Tr (no CVSS)
- [CVE-2023-45869](https://cve.now/CVE-2023-45869.md): ILIAS 7.25 (2023-09-12) allows any authenticated user to execute arbitrary operating system commands remotely, when a highly privileged acco (CVSS 9.0)
- [CVE-2023-46374](https://cve.now/CVE-2023-46374.md): ZenTao Enterprise Edition version 4.1.3 and before is vulnerable to Cross Site Scripting (XSS). (no CVSS)
- [CVE-2023-46435](https://cve.now/CVE-2023-46435.md): Sourcecodester Packers and Movers Management System v1.0 is vulnerable to SQL Injection via mpms/?p=services/view\_service&id. (no CVSS)
- [CVE-2023-46449](https://cve.now/CVE-2023-46449.md): Sourcecodester Free and Open Source inventory management system v1.0 is vulnerable to Incorrect Access Control. (no CVSS)
- [CVE-2023-46450](https://cve.now/CVE-2023-46450.md): Sourcecodester Free and Open Source inventory management system 1.0 is vulnerable to Cross Site Scripting (XSS) via the Add supplier functio (no CVSS)
- [CVE-2023-46491](https://cve.now/CVE-2023-46491.md): ZenTao Biz version 4.1.3 and before has a Cross Site Scripting (XSS) vulnerability in the Version Library. (no CVSS)
- [CVE-2023-46752](https://cve.now/CVE-2023-46752.md): An issue was discovered in FRRouting FRR through 9.0.1. (no CVSS)
- [CVE-2023-46753](https://cve.now/CVE-2023-46753.md): An issue was discovered in FRRouting FRR through 9.0.1. (no CVSS)
- [CVE-2023-46754](https://cve.now/CVE-2023-46754.md): The admin panel for Obl.ong before 1.1.2 allows authorization bypass because the email OTP feature accepts arbitrary numerical values. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-10-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.