CVEs published October 28, 2023
13 CVEs were published on October 28, 2023: 2 critical, 4 high.
- Published
- 13
- Critical
- 2
- High
- 4
- Medium
- 3
- Low
- 2
- Unrated
- 2
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- gandhihitesh9 Post Meta Data Manager
- 2
- AlexanderLivanov FotosCMS2
- 1
- Apache Software Foundation Apache Airflow Celery provide… +2
- 1
- hu60t hu60wap6
- 1
- juzaweb/cms
- 1
- SourceCodester Task Reminder System
- 1
Critical 2
High 4
- CVE-2023-5425Post Meta Data Manager <=1.2.0 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalationgandhihitesh9 Post Meta Data Manager
- CVE-2023-5426Post Meta Data Manager <=1.2.0 - Missing Authorization to User, Term, and Post Meta Deletiongandhihitesh9 Post Meta Data Manager
- CVE-2023-46215Apache Airflow Celery provider, Apache Airflow: Sensitive information logged as clear text when rediss, amqp, rpc protocols are used as Celery result backendApache Software Foundation Apache Airflow Celery provide… +2
- CVE-2023-43322ZPE Systems, Inc Nodegrid OS v5.0.0 to v5.0.17, v5.2.0 to v5.2.19, v5.4.0 to v5.4.16, v5.6.0 to v5.6.13, v5.8.0 to v5.8.10, and v5.10.0 to v
Medium, low and unrated 7
- CVE-2023-5837AlexanderLivanov FotosCMS2 Cookie profile.php cross site scriptingAlexanderLivanov FotosCMS2
- CVE-2023-5836SourceCodester Task Reminder System sql injectionSourceCodester Task Reminder System
- CVE-2023-5835hu60t hu60wap6 ubbparser.php markdown cross site scriptinghu60t hu60wap6
- CVE-2023-45897exfatprogs before 1.2.2 allows out-of-bounds memory access, such as in read_file_dentry_set.
- CVE-2023-46467Cross Site Scripting vulnerability in juzawebCMS v.3.4 and before allows a remote attacker to execute arbitrary code via a crafted payload t
- CVE-2023-46468An issue in juzawebCMS v.3.4 and before allows a remote attacker to execute arbitrary code via a crafted file to the custom plugin function.juzaweb/cms
- CVE-2023-46854Proxmox proxmox-widget-toolkit before 4.0.9, as used in multiple Proxmox products, allows XSS via the edit notes feature.