CVEs published October 29, 2023
18 CVEs were published on October 29, 2023: 1 critical, 5 high.
- Published
- 18
- Critical
- 1
- High
- 5
- Medium
- 8
- Low
- 0
- Unrated
- 4
- Now in CISA KEV
- 0
- Fix available
- 5
Most affected products
- openEuler iSulad
- 4
- IBM i
- 2
- linkstackorg/linkstack
- 2
- almosteffortless secure-files Plugin
- 1
- hestiacp/hestiacp
- 1
- IBM QRadar SIEM
- 1
- LiquidFiles Pty LiquidFiles
- 1
- openEuler lcr
- 1
- The Hackers Diet Plugin
- 1
Critical 1
High 5
- CVE-2021-33638Run copy with container in a malicious directory may cause container escapingopenEuler iSulad
- CVE-2021-33637Export container in a malicious directory may cause process to be hijackedopenEuler iSulad
- CVE-2021-33636Load malicious images may cause process to be hijackedopenEuler iSulad
- CVE-2023-40685IBM i privilege escalationIBM i
- CVE-2023-5839Privilege Chaining in hestiacp/hestiacphestiacp/hestiacp
Medium, low and unrated 12
- CVE-2023-4393HTML and SMTP Injection in LiquidFilesLiquidFiles Pty LiquidFiles
- CVE-2007-10003The Hackers Diet Plugin HTTP POST Request ajax_blurb.php sql injectionThe Hackers Diet Plugin
- CVE-2005-10002almosteffortless secure-files Plugin secure-files.php sf_downloads path traversalalmosteffortless secure-files Plugin
- CVE-2021-33634Malicious image running containers may cause DoS attacksopenEuler lcr
- CVE-2023-40686IBM i privilege escalationIBM i
- CVE-2023-43041IBM QRadar information disclosureIBM QRadar SIEM
- CVE-2023-5838Insufficient Session Expiration in linkstackorg/linkstacklinkstackorg/linkstack
- CVE-2023-5840Weak Password Recovery Mechanism for Forgotten Password in linkstackorg/linkstacklinkstackorg/linkstack
- CVE-2023-46858Moodle 4.3 allows /grade/report/grader/index.php?searchvalue= reflected XSS when logged in as a teacher.
- CVE-2023-46862An issue was discovered in the Linux kernel through 6.5.9.
- CVE-2023-46863Peppermint Ticket Management before 0.2.4 allows remote attackers to read arbitrary files via a /api/v1/users/file/download?filepath=./../ P
- CVE-2023-46864Peppermint Ticket Management through 0.2.4 allows remote attackers to read arbitrary files via a /api/v1/ticket/1/file/download?filepath=../