CVEs published October 27, 2023
96 CVEs were published on October 27, 2023: 4 critical, 28 high. 1 is now in CISA KEV.
- Published
- 96
- Critical
- 4
- High
- 28
- Medium
- 26
- Low
- 3
- Unrated
- 35
- Now in CISA KEV
- 1
- Fix available
- 17
Most affected products
- Google Android
- 19
- flusity CMS
- 3
- Lenovo Printer GM265DN · Lenovo Printer GM266DNS +1
- 3
- Lenovo Vantage SystemUpdate Plugin
- 2
- Rockwell Automation Arena Simulation
- 2
- SourceCodester Task Reminder System
- 2
- Alkaweb Eonet Manual User Approve
- 1
- Apache Software Foundation Apache ActiveMQ · org.apache.… +1
- 1
- Bala Krishna, Sergey Yakovlev Category SEO Meta Tags
- 1
- baserproject basercms · baserproject/basercms
- 1
Critical 4
- CVE-2023-46604Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attackApache Software Foundation Apache ActiveMQ · org.apache.… +1
- CVE-2023-5807SQLi in TRtek Software's Education PortalTRtek Software Education Portal
- CVE-2023-5820The Thumbnail Slider With Lightbox plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0.nik00726 Thumbnail Slider With Lightbox
- CVE-2023-45498VinChin Backup & Recovery v5.0.*, v6.0.*, v6.7.*, and v7.0.* was discovered to contain a command injection vulnerability.
High 28
- CVE-2023-44480Leave Management System Project v1.0 - Multiple Authenticated SQL Injections (SQLi)Projectworlds Pvt. Limited Leave Management System Project
- CVE-2023-46209WordPress Grid Plus Plugin <= 1.3.2 is vulnerable to Cross Site Scripting (XSS)G5Theme Grid Plus – Unlimited grid layout
- CVE-2023-5830ColumbiaSoft Document Locator WebTools login improper authenticationColumbiaSoft Document Locator
- CVE-2023-46208WordPress Motors – Car Dealer & Classified Ads Plugin <= 1.4.6 is vulnerable to Cross Site Scripting (XSS)StylemixThemes Motors – Car Dealer, Classifieds & Listing
- CVE-2023-40140In android_view_InputDevice_create of android_view_InputDevice.cpp, there is a possible way to execute arbitrary code due to a use after freGoogle Android
- CVE-2023-40131In GpuService of GpuService.cpp, there is a possible use after free due to a race condition.Google Android
- CVE-2023-40130In notifyTimeout of CallRedirectionProcessor, there is a possible permission bypass due to a logic error in the code.Google Android
- CVE-2023-40125In onCreate of ApnEditor.java, there is a possible way for a Guest user to change the APN due to a permission bypass.Google Android
- CVE-2023-40120In multiple locations, there is a possible way to bypass user notification of foreground services due to improper input validation.Google Android
- CVE-2023-40117In resetSettingsLocked of SettingsProvider.java, there is a possible lockscreen bypass due to a permissions bypass.Google Android
- CVE-2023-40116In onTaskAppeared of PipTaskOrganizer.java, there is a possible way to bypass background activity launch restrictions due to a logic error iGoogle Android
- CVE-2022-3701 A privilege elevation vulnerability was reported in the Lenovo Vantage SystemUpdate plugin version 2.0.0.212 and earlier that could allow aLenovo Vantage SystemUpdate Plugin
- CVE-2023-5828Nanning Ontall Longxing Industrial Development Zone Project Construction and Installation Management System login.aspx sql injectionNanning Ontall Longxing Industrial Development Zone Project…
- CVE-2022-3611An information disclosure vulnerability has been identified in the Lenovo App Store which may allow some applications to gain unauthorized aLenovo App Store
- CVE-2023-27858Rockwell Automation Arena® Simulation Uninitialized Pointer VulnerabilityRockwell Automation Arena Simulation
- CVE-2023-27854Rockwell Automation Arena® Simulation Out of Bounds Read VulnerabilityRockwell Automation Arena Simulation
- CVE-2022-34886A remote code execution vulnerability was found in the firmware used in some Lenovo printers, which can be caused by a remote user pushing aLenovo Printer GM265DN · Lenovo Printer GM266DNS +1
- CVE-2023-46289Rockwell Automation FactoryTalk® View Site Edition Vulnerable to Improper Input ValidationRockwell Automation FactoryTalk® View Site Edition
- CVE-2023-46290Rockwell Automation FactoryTalk Services Platform Elevated Privileges VulnerabilityRockwell Automation FactoryTalk® Services Platform
- CVE-2023-4967Denial of serviceCloud Software Group NetScaler ADC · Cloud Software Group N…
- CVE-2023-5443User Enumeration in EDM Informatic's E-Invoice SoftwareEDM Informatics E-invoice
- CVE-2023-5570User Enumeration in Inohom's Home Manager GatewayInohom Home Manager Gateway
- CVE-2023-46153WordPress User Feedback Plugin <= 1.0.9 is vulnerable to Cross Site Scripting (XSS)UserFeedback Team User Feedback
- CVE-2023-34059open-vm-tools contains a file descriptor hijack vulnerability in the vmware-user-suid-wrapper.open-vm-tools
- CVE-2023-34058VMware Tools contains a SAML token signature bypass vulnerability.VMware Tools · open-vm-tools
- CVE-2023-34057VMware Tools contains a local privilege escalation vulnerability.VMware Tools
- CVE-2023-46813An issue was discovered in the Linux kernel before 6.5.9, exploitable by local users with userspace access to MMIO registers.
- CVE-2023-46818An issue was discovered in ISPConfig before 3.2.11p1.
Medium, low and unrated 64
- CVE-2023-5834Vagrant’s Windows Installer Allowed Directory Junction WriteHashiCorp Vagrant · github.com/hashicorp/vagrant
- CVE-2023-40139In FillUi of FillUi.java, there is a possible way to view another user's images due to a confused deputy.Google Android
- CVE-2023-40138In FillUi of FillUi.java, there is a possible way to view another user's images due to a confused deputy.Google Android
- CVE-2023-40137In multiple functions of DialogFillUi.java, there is a possible way to view another user's images due to a confused deputy.Google Android
- CVE-2023-40136In setHeader of DialogFillUi.java, there is a possible way to view another user's images due to a confused deputy.Google Android
- CVE-2023-40135In applyCustomDescription of SaveUi.java, there is a possible way to view another user's images due to a confused deputy.Google Android
- CVE-2023-40134In isFullScreen of FillUi.java, there is a possible way to view another user's images due to a confused deputy.Google Android
- CVE-2023-40133In multiple locations of DialogFillUi.java, there is a possible way to view another user's images due to a confused deputy.Google Android
- CVE-2023-40129In build_read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to a heap buffer overflow.Google Android
- CVE-2023-40128In several functions of xmlregexp.c, there is a possible out of bounds write due to a heap buffer overflow.Google Android
- CVE-2023-40127In multiple locations, there is a possible way to access screenshots due to a confused deputy.Google Android
- CVE-2023-46211WordPress Ultimate Addons for WPBakery Page Builder Plugin <= 3.19.14 is vulnerable to Cross Site Scripting (XSS)Brainstorm Force Ultimate Addons for WPBakery Page Builder
- CVE-2023-40123In updateActionViews of PipMenuView.java, there is a possible bypass of a multi user security boundary due to a confused deputy.Google Android
- CVE-2023-40121In appendEscapedSQLString of DatabaseUtils.java, there is a possible SQL injection due to unsafe deserialization.Google Android
- CVE-2023-32738WordPress Eonet Manual User Approve Plugin <= 2.1.3 is vulnerable to Cross Site Scripting (XSS)Alkaweb Eonet Manual User Approve
- CVE-2023-46200WordPress Smart App Banner Plugin <= 1.1.3 is vulnerable to Cross Site Scripting (XSS)Stephen Darlington, Wandle Software Limited Smart App Banner
- CVE-2023-5829code-projects Admission Management System student_avatar.php unrestricted uploadcode-projects Admission Management System
- CVE-2022-3702 A denial of service vulnerability was reported in Lenovo Vantage HardwareScan Plugin version 1.3.0.5 and earlier that could allow a local aLenovo Vantage HardwareScan Plugin
- CVE-2022-3700A Time of Check Time of Use (TOCTOU) vulnerability was reported in the Lenovo Vantage SystemUpdate Plugin version 2.0.0.212 and earlier thatLenovo Vantage SystemUpdate Plugin
- CVE-2023-29009basercms XSS Vulnerability via Favorites Featurebaserproject basercms · baserproject/basercms
- CVE-2022-3681A vulnerability has been identified in the MR2600 router v1.0.18 and earlier that could allow an attacker within range of the wireless netwoMotorola MR2600 Router
- CVE-2022-3429A denial-of-service vulnerability was found in the firmware used in Lenovo printers, where users send illegal or malformed strings to an opeLenovo Printer GM265DN · Lenovo Printer GM266DNS +1
- CVE-2022-34887Standard users can directly operate and set printer configuration information , such as IP, in some Lenovo Printers without having to authenLenovo Printer GM265DN · Lenovo Printer GM266DNS +1
- CVE-2023-46246Integer Overflow in :history command in Vimvim
- CVE-2023-5827Shanghai CTI Navigation CTI Monitoring and Early Warning System UserEdit.aspx sql injectionShanghai CTI Navigation CTI Monitoring and Early Warning Sy…
- CVE-2023-5826Netentsec NS-ASG Application Security Gateway list_onlineuser.php sql injectionNetentsec NS-ASG Application Security Gateway
- CVE-2023-5821The Thumbnail carousel slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0.nik00726 Thumbnail carousel slider
- CVE-2023-5705VK Filter Search <= 2.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodevektor-inc VK Filter Search
- CVE-2023-5817Neon text <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scriptingfreeben Neon text
- CVE-2023-5774Animated Counters <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodefreeben Animated Counters
- CVE-2023-46199WordPress Triberr Plugin <= 4.1.1 is vulnerable to Cross Site Scripting (XSS)Triberr
- CVE-2023-46194WordPress Archivist – Custom Archive Templates Plugin <= 1.7.5 is vulnerable to Cross Site Scripting (XSS)Eric Teubert Archivist – Custom Archive Templates
- CVE-2023-44220SonicWall NetExtender Windows (32-bit and 64-bit) client 10.2.336 and earlier versions have a DLL Search Order Hijacking vulnerability in thSonicWall NetExtender
- CVE-2023-46192WordPress Internal Link Building Plugin <= 1.2.3 is vulnerable to Cross Site Scripting (XSS)Internet Marketing Ninjas Internal Link Building
- CVE-2023-46093WordPress Webmaster Tools Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)LionScripts.com Webmaster Tools
- CVE-2023-46091WordPress Category SEO Meta Tags Plugin <= 2.5 is vulnerable to Cross Site Scripting (XSS)Bala Krishna, Sergey Yakovlev Category SEO Meta Tags
- CVE-2023-44219A local privilege escalation vulnerability in SonicWall Directory Services Connector Windows MSI client 4.1.21 and earlier versions allows aSonicWall Directory Services Connector
- CVE-2023-5051CallRail Phone Call Tracking <= 0.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCallRail Phone Call Tracking
- CVE-2023-5814SourceCodester Task Reminder System sql injectionSourceCodester Task Reminder System
- CVE-2023-5813SourceCodester Task Reminder System sql injectionSourceCodester Task Reminder System
- CVE-2023-5812flusity CMS upload.php handleFileUpload unrestricted uploadflusity CMS
- CVE-2023-5811flusity CMS posts.php loadPostAddForm cross site scriptingflusity CMS
- CVE-2023-5810flusity CMS posts.php loadPostAddForm cross site scriptingflusity CMS
- CVE-2022-34832An issue was discovered in VERMEG AgileReporter 21.3.
- CVE-2022-34833An issue was discovered in VERMEG AgileReporter 21.3.
- CVE-2022-34834An issue was discovered in VERMEG AgileReporter 21.3.
- CVE-2023-35794An issue was discovered in Cassia Access Controller 2.1.1.2303271039.
- CVE-2023-45499VinChin Backup & Recovery v5.0.*, v6.0.*, v6.7.*, and v7.0.* was discovered to contain hardcoded credentials.
- CVE-2023-46375ZenTao Biz version 4.1.3 and before is vulnerable to Cross Site Request Forgery (CSRF).
- CVE-2023-46376Zentao Biz version 8.7 and before is vulnerable to Information Disclosure.
- CVE-2023-46393gougucms v4.08.18 was discovered to contain a password reset poisoning vulnerability which allows attackers to arbitrarily reset users' pass
- CVE-2023-46394A stored cross-site scripting (XSS) vulnerability in /home/user/edit_submit of gougucms v4.08.18 allows attackers to execute arbitrary web s
- CVE-2023-46407FFmpeg prior to commit bf814 was discovered to contain an out of bounds read via the dist->alphabet_size variable in the read_vlc_prefix() f
- CVE-2023-46490SQL Injection vulnerability in Cacti v1.2.25 allows a remote attacker to obtain sensitive information via the form_actions() function in the
- CVE-2023-46503Cross Site Scripting (XSS) vulnerability in PwnCYN YXBOOKCMS v.1.0.2 allows a remote attacker to execute arbitrary code via the reader manag
- CVE-2023-46504Cross Site Scripting (XSS) vulnerability in PwnCYN YXBOOKCMS v.1.0.2 allows a physically proximate attacker to execute arbitrary code via th
- CVE-2023-46505Cross Site Scripting vulnerability in FanCMS v.1.0.0 allows an attacker to execute arbitrary code via the content1 parameter in the demo.php
- CVE-2023-46509An issue in Contec SolarView Compact v.6.0 and before allows an attacker to execute arbitrary code via the texteditor.php component.
- CVE-2023-46510An issue in ZIONCOM (Hong Kong) Technology Limited A7000R v.4.1cu.4154 allows an attacker to execute arbitrary code via the cig-bin/cstecgi.
- CVE-2023-46587Buffer Overflow vulnerability in XnView Classic v.2.51.5 allows a local attacker to execute arbitrary code via a crafted TIF file.
- CVE-2023-46815An issue was discovered in SugarCRM 12 before 12.0.4 and 13 before 13.0.2.
- CVE-2023-46816An issue was discovered in SugarCRM 12 before 12.0.4 and 13 before 13.0.2.
- CVE-2023-46852In Memcached before 1.6.22, a buffer overflow exists when processing multiget requests in proxy mode, if there are many spaces after the "ge
- CVE-2023-46853In Memcached before 1.6.22, an off-by-one error exists when processing proxy requests in proxy mode, if \n is used instead of \r\n.