# CVEs published 2023-10-27

96 CVEs were published on October 27, 2023: 4 critical, 28 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2023-5834](https://cve.now/CVE-2023-5834.md): Vagrant’s Windows Installer Allowed Directory Junction Write (CVSS 3.8, HashiCorp Vagrant · github.com/hashicorp/vagrant)
- [CVE-2023-44480](https://cve.now/CVE-2023-44480.md): Leave Management System Project v1.0 - Multiple Authenticated SQL Injections (SQLi) (CVSS 8.8, Projectworlds Pvt. Limited Leave Management System Project)
- [CVE-2023-46209](https://cve.now/CVE-2023-46209.md): WordPress Grid Plus Plugin \<= 1.3.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, G5Theme Grid Plus – Unlimited grid layout)
- [CVE-2023-5830](https://cve.now/CVE-2023-5830.md): ColumbiaSoft Document Locator WebTools login improper authentication (CVSS 7.3, ColumbiaSoft Document Locator)
- [CVE-2023-46208](https://cve.now/CVE-2023-46208.md): WordPress Motors – Car Dealer & Classified Ads Plugin \<= 1.4.6 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, StylemixThemes Motors – Car Dealer, Classifieds & Listing)
- [CVE-2023-40140](https://cve.now/CVE-2023-40140.md): In android\_view\_InputDevice\_create of android\_view\_InputDevice.cpp, there is a possible way to execute arbitrary code due to a use after fre (CVSS 7.8, Google Android)
- [CVE-2023-40139](https://cve.now/CVE-2023-40139.md): In FillUi of FillUi.java, there is a possible way to view another user's images due to a confused deputy. (no CVSS, Google Android)
- [CVE-2023-40138](https://cve.now/CVE-2023-40138.md): In FillUi of FillUi.java, there is a possible way to view another user's images due to a confused deputy. (no CVSS, Google Android)
- [CVE-2023-40137](https://cve.now/CVE-2023-40137.md): In multiple functions of DialogFillUi.java, there is a possible way to view another user's images due to a confused deputy. (no CVSS, Google Android)
- [CVE-2023-40136](https://cve.now/CVE-2023-40136.md): In setHeader of DialogFillUi.java, there is a possible way to view another user's images due to a confused deputy. (no CVSS, Google Android)
- [CVE-2023-40135](https://cve.now/CVE-2023-40135.md): In applyCustomDescription of SaveUi.java, there is a possible way to view another user's images due to a confused deputy. (no CVSS, Google Android)
- [CVE-2023-40134](https://cve.now/CVE-2023-40134.md): In isFullScreen of FillUi.java, there is a possible way to view another user's images due to a confused deputy. (no CVSS, Google Android)
- [CVE-2023-40133](https://cve.now/CVE-2023-40133.md): In multiple locations of DialogFillUi.java, there is a possible way to view another user's images due to a confused deputy. (no CVSS, Google Android)
- [CVE-2023-40131](https://cve.now/CVE-2023-40131.md): In GpuService of GpuService.cpp, there is a possible use after free due to a race condition. (CVSS 7.0, Google Android)
- [CVE-2023-40130](https://cve.now/CVE-2023-40130.md): In notifyTimeout of CallRedirectionProcessor, there is a possible permission bypass due to a logic error in the code. (CVSS 7.8, Google Android)
- [CVE-2023-40129](https://cve.now/CVE-2023-40129.md): In build\_read\_multi\_rsp of gatt\_sr.cc, there is a possible out of bounds write due to a heap buffer overflow. (no CVSS, Google Android)
- [CVE-2023-40128](https://cve.now/CVE-2023-40128.md): In several functions of xmlregexp.c, there is a possible out of bounds write due to a heap buffer overflow. (no CVSS, Google Android)
- [CVE-2023-40127](https://cve.now/CVE-2023-40127.md): In multiple locations, there is a possible way to access screenshots due to a confused deputy. (no CVSS, Google Android)
- [CVE-2023-46211](https://cve.now/CVE-2023-46211.md): WordPress Ultimate Addons for WPBakery Page Builder Plugin \<= 3.19.14 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Brainstorm Force Ultimate Addons for WPBakery Page Builder)
- [CVE-2023-40125](https://cve.now/CVE-2023-40125.md): In onCreate of ApnEditor.java, there is a possible way for a Guest user to change the APN due to a permission bypass. (CVSS 7.8, Google Android)
- [CVE-2023-40123](https://cve.now/CVE-2023-40123.md): In updateActionViews of PipMenuView.java, there is a possible bypass of a multi user security boundary due to a confused deputy. (no CVSS, Google Android)
- [CVE-2023-40121](https://cve.now/CVE-2023-40121.md): In appendEscapedSQLString of DatabaseUtils.java, there is a possible SQL injection due to unsafe deserialization. (no CVSS, Google Android)
- [CVE-2023-40120](https://cve.now/CVE-2023-40120.md): In multiple locations, there is a possible way to bypass user notification of foreground services due to improper input validation. (CVSS 7.8, Google Android)
- [CVE-2023-40117](https://cve.now/CVE-2023-40117.md): In resetSettingsLocked of SettingsProvider.java, there is a possible lockscreen bypass due to a permissions bypass. (CVSS 7.8, Google Android)
- [CVE-2023-40116](https://cve.now/CVE-2023-40116.md): In onTaskAppeared of PipTaskOrganizer.java, there is a possible way to bypass background activity launch restrictions due to a logic error i (CVSS 7.8, Google Android)
- [CVE-2023-32738](https://cve.now/CVE-2023-32738.md): WordPress Eonet Manual User Approve Plugin \<= 2.1.3 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Alkaweb Eonet Manual User Approve)
- [CVE-2023-46200](https://cve.now/CVE-2023-46200.md): WordPress Smart App Banner Plugin \<= 1.1.3 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Stephen Darlington, Wandle Software Limited Smart App Banner)
- [CVE-2023-5829](https://cve.now/CVE-2023-5829.md): code-projects Admission Management System student\_avatar.php unrestricted upload (CVSS 6.3, code-projects Admission Management System)
- [CVE-2022-3702](https://cve.now/CVE-2022-3702.md): A denial of service vulnerability was reported in Lenovo Vantage HardwareScan Plugin version 1.3.0.5 and earlier that could allow a local a (CVSS 6.1, Lenovo Vantage HardwareScan Plugin)
- [CVE-2022-3701](https://cve.now/CVE-2022-3701.md): A privilege elevation vulnerability was reported in the Lenovo Vantage SystemUpdate plugin version 2.0.0.212 and earlier that could allow a (CVSS 7.8, Lenovo Vantage SystemUpdate Plugin)
- [CVE-2022-3700](https://cve.now/CVE-2022-3700.md): A Time of Check Time of Use (TOCTOU) vulnerability was reported in the Lenovo Vantage SystemUpdate Plugin version 2.0.0.212 and earlier that (CVSS 6.1, Lenovo Vantage SystemUpdate Plugin)
- [CVE-2023-5828](https://cve.now/CVE-2023-5828.md): Nanning Ontall Longxing Industrial Development Zone Project Construction and Installation Management System login.aspx sql injection (CVSS 7.3, Nanning Ontall Longxing Industrial Development Zone Project…)
- [CVE-2023-29009](https://cve.now/CVE-2023-29009.md): basercms XSS Vulnerability via Favorites Feature (CVSS 6.1, baserproject basercms · baserproject/basercms)
- [CVE-2022-3681](https://cve.now/CVE-2022-3681.md): A vulnerability has been identified in the MR2600 router v1.0.18 and earlier that could allow an attacker within range of the wireless netwo (CVSS 6.5, Motorola MR2600 Router)
- [CVE-2022-3611](https://cve.now/CVE-2022-3611.md): An information disclosure vulnerability has been identified in the Lenovo App Store which may allow some applications to gain unauthorized a (CVSS 7.6, Lenovo App Store)
- [CVE-2023-27858](https://cve.now/CVE-2023-27858.md): Rockwell Automation Arena® Simulation Uninitialized Pointer Vulnerability (CVSS 7.8, Rockwell Automation Arena Simulation)
- [CVE-2022-3429](https://cve.now/CVE-2022-3429.md): A denial-of-service vulnerability was found in the firmware used in Lenovo printers, where users send illegal or malformed strings to an ope (CVSS 6.5, Lenovo Printer GM265DN · Lenovo Printer GM266DNS +1)
- [CVE-2023-27854](https://cve.now/CVE-2023-27854.md): Rockwell Automation Arena® Simulation Out of Bounds Read Vulnerability (CVSS 7.8, Rockwell Automation Arena Simulation)
- [CVE-2022-34887](https://cve.now/CVE-2022-34887.md): Standard users can directly operate and set printer configuration information , such as IP, in some Lenovo Printers without having to authen (CVSS 4.3, Lenovo Printer GM265DN · Lenovo Printer GM266DNS +1)
- [CVE-2022-34886](https://cve.now/CVE-2022-34886.md): A remote code execution vulnerability was found in the firmware used in some Lenovo printers, which can be caused by a remote user pushing a (CVSS 8.8, Lenovo Printer GM265DN · Lenovo Printer GM266DNS +1)
- [CVE-2023-46246](https://cve.now/CVE-2023-46246.md): Integer Overflow in :history command in Vim (CVSS 4.0, vim)
- [CVE-2023-46289](https://cve.now/CVE-2023-46289.md): Rockwell Automation FactoryTalk® View Site Edition Vulnerable to Improper Input Validation (CVSS 7.5, Rockwell Automation FactoryTalk® View Site Edition)
- [CVE-2023-46290](https://cve.now/CVE-2023-46290.md): Rockwell Automation FactoryTalk Services Platform Elevated Privileges Vulnerability (CVSS 8.1, Rockwell Automation FactoryTalk® Services Platform)
- [CVE-2023-4967](https://cve.now/CVE-2023-4967.md): Denial of service (CVSS 8.2, Cloud Software Group NetScaler ADC · Cloud Software Group N…)
- [CVE-2023-5827](https://cve.now/CVE-2023-5827.md): Shanghai CTI Navigation CTI Monitoring and Early Warning System UserEdit.aspx sql injection (CVSS 5.5, Shanghai CTI Navigation CTI Monitoring and Early Warning Sy…)
- [CVE-2023-5826](https://cve.now/CVE-2023-5826.md): Netentsec NS-ASG Application Security Gateway list\_onlineuser.php sql injection (CVSS 5.5, Netentsec NS-ASG Application Security Gateway)
- [CVE-2023-46604](https://cve.now/CVE-2023-46604.md): Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack (CVSS 10.0, KEV, Apache Software Foundation Apache ActiveMQ · org.apache.… +1)
- [CVE-2023-5443](https://cve.now/CVE-2023-5443.md): User Enumeration in EDM Informatic's E-Invoice Software (CVSS 7.5, EDM Informatics E-invoice)
- [CVE-2023-5807](https://cve.now/CVE-2023-5807.md): SQLi in TRtek Software's Education Portal (CVSS 9.8, TRtek Software Education Portal)
- [CVE-2023-5570](https://cve.now/CVE-2023-5570.md): User Enumeration in Inohom's Home Manager Gateway (CVSS 7.5, Inohom Home Manager Gateway)
- [CVE-2023-5820](https://cve.now/CVE-2023-5820.md): The Thumbnail Slider With Lightbox plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. (CVSS 9.6, nik00726 Thumbnail Slider With Lightbox)
- [CVE-2023-5821](https://cve.now/CVE-2023-5821.md): The Thumbnail carousel slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. (CVSS 4.3, nik00726 Thumbnail carousel slider)
- [CVE-2023-5705](https://cve.now/CVE-2023-5705.md): VK Filter Search \<= 2.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, vektor-inc VK Filter Search)
- [CVE-2023-5817](https://cve.now/CVE-2023-5817.md): Neon text \<= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, freeben Neon text)
- [CVE-2023-5774](https://cve.now/CVE-2023-5774.md): Animated Counters \<= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, freeben Animated Counters)
- [CVE-2023-46199](https://cve.now/CVE-2023-46199.md): WordPress Triberr Plugin \<= 4.1.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Triberr)
- [CVE-2023-46194](https://cve.now/CVE-2023-46194.md): WordPress Archivist – Custom Archive Templates Plugin \<= 1.7.5 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.8, Eric Teubert Archivist – Custom Archive Templates)
- [CVE-2023-44220](https://cve.now/CVE-2023-44220.md): SonicWall NetExtender Windows (32-bit and 64-bit) client 10.2.336 and earlier versions have a DLL Search Order Hijacking vulnerability in th (no CVSS, SonicWall NetExtender)
- [CVE-2023-46192](https://cve.now/CVE-2023-46192.md): WordPress Internal Link Building Plugin \<= 1.2.3 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Internet Marketing Ninjas Internal Link Building)
- [CVE-2023-46153](https://cve.now/CVE-2023-46153.md): WordPress User Feedback Plugin \<= 1.0.9 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, UserFeedback Team User Feedback)
- [CVE-2023-46093](https://cve.now/CVE-2023-46093.md): WordPress Webmaster Tools Plugin \<= 2.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, LionScripts.com Webmaster Tools)
- [CVE-2023-46091](https://cve.now/CVE-2023-46091.md): WordPress Category SEO Meta Tags Plugin \<= 2.5 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Bala Krishna, Sergey Yakovlev Category SEO Meta Tags)
- [CVE-2023-44219](https://cve.now/CVE-2023-44219.md): A local privilege escalation vulnerability in SonicWall Directory Services Connector Windows MSI client 4.1.21 and earlier versions allows a (no CVSS, SonicWall Directory Services Connector)
- [CVE-2023-34059](https://cve.now/CVE-2023-34059.md): open-vm-tools contains a file descriptor hijack vulnerability in the vmware-user-suid-wrapper. (CVSS 7.4, open-vm-tools)
- [CVE-2023-34058](https://cve.now/CVE-2023-34058.md): VMware Tools contains a SAML token signature bypass vulnerability. (CVSS 7.1, VMware Tools · open-vm-tools)
- [CVE-2023-34057](https://cve.now/CVE-2023-34057.md): VMware Tools contains a local privilege escalation vulnerability. (CVSS 7.8, VMware Tools)
- [CVE-2023-5051](https://cve.now/CVE-2023-5051.md): CallRail Phone Call Tracking \<= 0.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, CallRail Phone Call Tracking)
- [CVE-2023-5814](https://cve.now/CVE-2023-5814.md): SourceCodester Task Reminder System sql injection (CVSS 6.3, SourceCodester Task Reminder System)
- [CVE-2023-5813](https://cve.now/CVE-2023-5813.md): SourceCodester Task Reminder System sql injection (CVSS 6.3, SourceCodester Task Reminder System)
- [CVE-2023-5812](https://cve.now/CVE-2023-5812.md): flusity CMS upload.php handleFileUpload unrestricted upload (CVSS 4.7, flusity CMS)
- [CVE-2023-5811](https://cve.now/CVE-2023-5811.md): flusity CMS posts.php loadPostAddForm cross site scripting (CVSS 2.4, flusity CMS)
- [CVE-2023-5810](https://cve.now/CVE-2023-5810.md): flusity CMS posts.php loadPostAddForm cross site scripting (CVSS 2.4, flusity CMS)
- [CVE-2022-34832](https://cve.now/CVE-2022-34832.md): An issue was discovered in VERMEG AgileReporter 21.3. (no CVSS)
- [CVE-2022-34833](https://cve.now/CVE-2022-34833.md): An issue was discovered in VERMEG AgileReporter 21.3. (no CVSS)
- [CVE-2022-34834](https://cve.now/CVE-2022-34834.md): An issue was discovered in VERMEG AgileReporter 21.3. (no CVSS)
- [CVE-2023-35794](https://cve.now/CVE-2023-35794.md): An issue was discovered in Cassia Access Controller 2.1.1.2303271039. (no CVSS)
- [CVE-2023-45498](https://cve.now/CVE-2023-45498.md): VinChin Backup & Recovery v5.0.\*, v6.0.\*, v6.7.\*, and v7.0.\* was discovered to contain a command injection vulnerability. (CVSS 9.8)
- [CVE-2023-45499](https://cve.now/CVE-2023-45499.md): VinChin Backup & Recovery v5.0.\*, v6.0.\*, v6.7.\*, and v7.0.\* was discovered to contain hardcoded credentials. (no CVSS)
- [CVE-2023-46375](https://cve.now/CVE-2023-46375.md): ZenTao Biz version 4.1.3 and before is vulnerable to Cross Site Request Forgery (CSRF). (no CVSS)
- [CVE-2023-46376](https://cve.now/CVE-2023-46376.md): Zentao Biz version 8.7 and before is vulnerable to Information Disclosure. (no CVSS)
- [CVE-2023-46393](https://cve.now/CVE-2023-46393.md): gougucms v4.08.18 was discovered to contain a password reset poisoning vulnerability which allows attackers to arbitrarily reset users' pass (no CVSS)
- [CVE-2023-46394](https://cve.now/CVE-2023-46394.md): A stored cross-site scripting (XSS) vulnerability in /home/user/edit\_submit of gougucms v4.08.18 allows attackers to execute arbitrary web s (no CVSS)
- [CVE-2023-46407](https://cve.now/CVE-2023-46407.md): FFmpeg prior to commit bf814 was discovered to contain an out of bounds read via the dist-\>alphabet\_size variable in the read\_vlc\_prefix() f (no CVSS)
- [CVE-2023-46490](https://cve.now/CVE-2023-46490.md): SQL Injection vulnerability in Cacti v1.2.25 allows a remote attacker to obtain sensitive information via the form\_actions() function in the (no CVSS)
- [CVE-2023-46503](https://cve.now/CVE-2023-46503.md): Cross Site Scripting (XSS) vulnerability in PwnCYN YXBOOKCMS v.1.0.2 allows a remote attacker to execute arbitrary code via the reader manag (no CVSS)
- [CVE-2023-46504](https://cve.now/CVE-2023-46504.md): Cross Site Scripting (XSS) vulnerability in PwnCYN YXBOOKCMS v.1.0.2 allows a physically proximate attacker to execute arbitrary code via th (no CVSS)
- [CVE-2023-46505](https://cve.now/CVE-2023-46505.md): Cross Site Scripting vulnerability in FanCMS v.1.0.0 allows an attacker to execute arbitrary code via the content1 parameter in the demo.php (no CVSS)
- [CVE-2023-46509](https://cve.now/CVE-2023-46509.md): An issue in Contec SolarView Compact v.6.0 and before allows an attacker to execute arbitrary code via the texteditor.php component. (no CVSS)
- [CVE-2023-46510](https://cve.now/CVE-2023-46510.md): An issue in ZIONCOM (Hong Kong) Technology Limited A7000R v.4.1cu.4154 allows an attacker to execute arbitrary code via the cig-bin/cstecgi. (no CVSS)
- [CVE-2023-46587](https://cve.now/CVE-2023-46587.md): Buffer Overflow vulnerability in XnView Classic v.2.51.5 allows a local attacker to execute arbitrary code via a crafted TIF file. (no CVSS)
- [CVE-2023-46813](https://cve.now/CVE-2023-46813.md): An issue was discovered in the Linux kernel before 6.5.9, exploitable by local users with userspace access to MMIO registers. (CVSS 7.0)
- [CVE-2023-46815](https://cve.now/CVE-2023-46815.md): An issue was discovered in SugarCRM 12 before 12.0.4 and 13 before 13.0.2. (no CVSS)
- [CVE-2023-46816](https://cve.now/CVE-2023-46816.md): An issue was discovered in SugarCRM 12 before 12.0.4 and 13 before 13.0.2. (no CVSS)
- [CVE-2023-46818](https://cve.now/CVE-2023-46818.md): An issue was discovered in ISPConfig before 3.2.11p1. (CVSS 7.2)
- [CVE-2023-46852](https://cve.now/CVE-2023-46852.md): In Memcached before 1.6.22, a buffer overflow exists when processing multiget requests in proxy mode, if there are many spaces after the "ge (no CVSS)
- [CVE-2023-46853](https://cve.now/CVE-2023-46853.md): In Memcached before 1.6.22, an off-by-one error exists when processing proxy requests in proxy mode, if \\n is used instead of \\r\\n. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-10-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.