# CVEs published 2023-10-30 169 CVEs were published on October 30, 2023: 6 critical, 27 high. Days are UTC. - [CVE-2023-46139](https://cve.now/CVE-2023-46139.md): KernelSU signature validation mismatch (CVSS 5.0, tiann KernelSU) - [CVE-2023-46138](https://cve.now/CVE-2023-46138.md): JumpServer default admin user email leak password reset (CVSS 3.7, jumpserver) - [CVE-2023-46129](https://cve.now/CVE-2023-46129.md): xkeys Seal encryption used fixed key for all encryption (CVSS 7.5, nats-io nkeys · github.com/nats-io/nkeys +1) - [CVE-2023-45672](https://cve.now/CVE-2023-45672.md): Frigate unsafe deserialization in \`load\_config\_with\_no\_duplicates\` of \`frigate/util/builtin.py\` (CVSS 7.5, blakeblackshear frigate) - [CVE-2023-45671](https://cve.now/CVE-2023-45671.md): Frigate reflected XSS through \`/\\` API endpoints (CVSS 4.7, blakeblackshear frigate) - [CVE-2023-45670](https://cve.now/CVE-2023-45670.md): Frigate cross-site request forgery in \`config\_save\` and \`config\_set\` request handlers (CVSS 7.5, blakeblackshear frigate) - [CVE-2023-44397](https://cve.now/CVE-2023-44397.md): CloudExplorer Lite permission bypass vulnerability (CVSS 7.5, CloudExplorer-Dev CloudExplorer-Lite) - [CVE-2023-43798](https://cve.now/CVE-2023-43798.md): BigBlueButton Blind SSRF When Uploading Presentation (mitigation bypass) (CVSS 5.6, bigbluebutton) - [CVE-2023-43797](https://cve.now/CVE-2023-43797.md): BigBlueButton Stored Cross-site Scripting vulnerability at Guest Lobby (CVSS 6.3, bigbluebutton) - [CVE-2023-5349](https://cve.now/CVE-2023-5349.md): Draw while calling getdrawinfo() (CVSS 5.3, rmagick · Red Hat 3scale API Management Platform +1) - [CVE-2023-43792](https://cve.now/CVE-2023-43792.md): baserCMS Code Injection Vulnerability in Mail Form Feature (CVSS 5.3, baserproject basercms · baserproject/basercms) - [CVE-2023-43649](https://cve.now/CVE-2023-43649.md): baserCMS CSRF vulnerability in Content preview Feature (CVSS 4.7, baserproject basercms · baserproject/basercms) - [CVE-2023-43648](https://cve.now/CVE-2023-43648.md): baserCMS Directory Traversal vulnerability in Form submission data management Feature (CVSS 4.9, baserproject basercms · baserproject/basercms) - [CVE-2023-43647](https://cve.now/CVE-2023-43647.md): baserCMS Cross-site Scripting vulnerability in File upload Feature (CVSS 6.1, baserproject basercms · baserproject/basercms) - [CVE-2023-42804](https://cve.now/CVE-2023-42804.md): BigBlueButton Path Traversal – Reading Certain File Extensions (CVSS 3.1, bigbluebutton) - [CVE-2023-42803](https://cve.now/CVE-2023-42803.md): BigBlueButton Unrestricted File Upload vulnerability (CVSS 5.3, bigbluebutton) - [CVE-2023-41891](https://cve.now/CVE-2023-41891.md): FlyteAdmin SQL Injection in List Filters (CVSS 3.5, flyteorg flyteadmin · github.com/flyteorg/flyteadmin) - [CVE-2023-45780](https://cve.now/CVE-2023-45780.md): In Print Service, there is a possible background activity launch due to a logic error in the code. (CVSS 7.3, Google Android) - [CVE-2023-40101](https://cve.now/CVE-2023-40101.md): In collapse of canonicalize\_md.c, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Google Android) - [CVE-2023-21398](https://cve.now/CVE-2023-21398.md): In sdksandbox, there is a possible strandhogg style overlay attack due to a logic error in the code. (no CVSS, Google Android) - [CVE-2023-21397](https://cve.now/CVE-2023-21397.md): In Setup Wizard, there is a possible way to save a WiFi network due to an insecure default value. (no CVSS, Google Android) - [CVE-2023-21396](https://cve.now/CVE-2023-21396.md): In Activity Manager, there is a possible background activity launch due to a logic error in the code. (no CVSS, Google Android) - [CVE-2023-21395](https://cve.now/CVE-2023-21395.md): In Bluetooth, there is a possible out of bounds read due to a use after free. (no CVSS, Google Android) - [CVE-2023-21394](https://cve.now/CVE-2023-21394.md): In registerPhoneAccount of TelecomServiceImpl.java, there is a possible way to reveal images from another user due to a missing permission c (no CVSS, Google Android) - [CVE-2023-21393](https://cve.now/CVE-2023-21393.md): In Settings, there is a possible way for the user to change SIM due to a missing permission check. (no CVSS, Google Android) - [CVE-2023-21392](https://cve.now/CVE-2023-21392.md): In Bluetooth, there is a possible way to corrupt memory due to a use after free. (no CVSS, Google Android) - [CVE-2023-21391](https://cve.now/CVE-2023-21391.md): In Messaging, there is a possible way to disable the messaging application due to improper input validation. (no CVSS, Google Android) - [CVE-2023-21390](https://cve.now/CVE-2023-21390.md): In Sim, there is a possible way to evade mobile preference restrictions due to a permission bypass. (CVSS 7.8, Google Android) - [CVE-2023-21389](https://cve.now/CVE-2023-21389.md): In Settings, there is a possible bypass of profile owner restrictions due to a missing permission check. (no CVSS, Google Android) - [CVE-2023-21388](https://cve.now/CVE-2023-21388.md): In Settings, there is a possible restriction bypass due to a missing permission check. (no CVSS, Google Android) - [CVE-2023-21387](https://cve.now/CVE-2023-21387.md): In User Backup Manager, there is a possible way to leak a token to bypass user confirmation for backup due to log information disclosure. (no CVSS, Google Android) - [CVE-2023-21385](https://cve.now/CVE-2023-21385.md): In Whitechapel, there is a possible out of bounds read due to memory corruption. (no CVSS, Google Android) - [CVE-2023-21384](https://cve.now/CVE-2023-21384.md): In Package Manager, there is a possible possible permissions bypass due to an unsafe PendingIntent. (no CVSS, Google Android) - [CVE-2023-21383](https://cve.now/CVE-2023-21383.md): In Settings, there is a possible way for the user to unintentionally send extra data due to an unclear prompt. (no CVSS, Google Android) - [CVE-2023-21382](https://cve.now/CVE-2023-21382.md): In Content Resolver, there is a possible method to access metadata about existing content providers on the device due to a missing permissio (no CVSS, Google Android) - [CVE-2023-21381](https://cve.now/CVE-2023-21381.md): In Media Resource Manager, there is a possible local arbitrary code execution due to use after free. (no CVSS, Google Android) - [CVE-2023-21380](https://cve.now/CVE-2023-21380.md): In Bluetooth, there is a possible out of bounds write due to a heap buffer overflow. (no CVSS, Google Android) - [CVE-2023-21379](https://cve.now/CVE-2023-21379.md): In Bluetooth, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Google Android) - [CVE-2023-21378](https://cve.now/CVE-2023-21378.md): In Telecomm, there is a possible way to silence the ring for calls of secondary users due to a missing permission check. (no CVSS, Google Android) - [CVE-2023-21377](https://cve.now/CVE-2023-21377.md): In SELinux Policy, there is a possible restriction bypass due to a permissions bypass. (no CVSS, Google Android) - [CVE-2023-21376](https://cve.now/CVE-2023-21376.md): In Telephony, there is a possible way to retrieve the ICCID due to a logic error in the code. (CVSS 5.5, Google Android) - [CVE-2023-21375](https://cve.now/CVE-2023-21375.md): In Sysproxy, there is a possible out of bounds write due to an integer underflow. (no CVSS, Google Android) - [CVE-2023-21374](https://cve.now/CVE-2023-21374.md): In System UI, there is a possible factory reset protection bypass due to a logic error in the code. (no CVSS, Google Android) - [CVE-2023-21373](https://cve.now/CVE-2023-21373.md): In Telephony, there is a possible way for a guest user to change the preferred SIM due to a missing permission check. (no CVSS, Google Android) - [CVE-2023-21372](https://cve.now/CVE-2023-21372.md): In libdexfile, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Google Android) - [CVE-2023-21371](https://cve.now/CVE-2023-21371.md): In Secure Element, there is a possible out of bounds write due to an integer overflow. (no CVSS, Google Android) - [CVE-2023-21370](https://cve.now/CVE-2023-21370.md): In the Security Element API, there is a possible out of bounds write due to an integer overflow. (no CVSS, Google Android) - [CVE-2023-21369](https://cve.now/CVE-2023-21369.md): In Usage Access, there is a possible way to display a Settings usage access restriction toggle screen due to a permissions bypass. (no CVSS, Google Android) - [CVE-2023-21368](https://cve.now/CVE-2023-21368.md): In Audio, there is a possible out of bounds read due to missing bounds check. (no CVSS, Google Android) - [CVE-2023-21367](https://cve.now/CVE-2023-21367.md): In Scudo, there is a possible way to exploit certain heap OOB read/write issues due to an insecure implementation/design. (no CVSS, Google Android) - [CVE-2023-21366](https://cve.now/CVE-2023-21366.md): In Scudo, there is a possible way for an attacker to predict heap allocation patterns due to insecure implementation/design. (no CVSS, Google Android) - [CVE-2023-21365](https://cve.now/CVE-2023-21365.md): In Contacts, there is a possible crash loop due to resource exhaustion. (no CVSS, Google Android) - [CVE-2023-21364](https://cve.now/CVE-2023-21364.md): In ContactsProvider, there is a possible crash loop due to resource exhaustion. (no CVSS, Google Android) - [CVE-2023-21362](https://cve.now/CVE-2023-21362.md): In Usage, there is a possible permanent DoS due to resource exhaustion. (no CVSS, Google Android) - [CVE-2023-21361](https://cve.now/CVE-2023-21361.md): In Bluetooth, there is a possibility of code-execution due to a use after free. (no CVSS, Google Android) - [CVE-2023-21360](https://cve.now/CVE-2023-21360.md): In Bluetooth, there is a possible out of bounds write due to improper input validation. (no CVSS, Google Android) - [CVE-2023-21359](https://cve.now/CVE-2023-21359.md): In Bluetooth, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Google Android) - [CVE-2023-21358](https://cve.now/CVE-2023-21358.md): In UWB Google, there is a possible way for a malicious app to masquerade as system app com.android.uwb.resources due to improperly used cryp (CVSS 7.8, Google Android) - [CVE-2023-21357](https://cve.now/CVE-2023-21357.md): In NFC, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Google Android) - [CVE-2023-21356](https://cve.now/CVE-2023-21356.md): In Bluetooth, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Google Android) - [CVE-2023-21355](https://cve.now/CVE-2023-21355.md): In libaudioclient, there is a possible out of bounds write due to a use after free. (no CVSS, Google Android) - [CVE-2023-21354](https://cve.now/CVE-2023-21354.md): In Package Manager Service, there is a possible way to determine whether an app is installed, without query permissions, due to side channel (no CVSS, Google Android) - [CVE-2023-21353](https://cve.now/CVE-2023-21353.md): In NFA, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Google Android) - [CVE-2023-21352](https://cve.now/CVE-2023-21352.md): In NFA, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Google Android) - [CVE-2023-21351](https://cve.now/CVE-2023-21351.md): In multiple locations, there is a possible background activity launch due to a logic error in the code. (CVSS 7.7, Google Android) - [CVE-2023-21350](https://cve.now/CVE-2023-21350.md): In Media Projection, there is a possible way to determine whether an app is installed, without query permissions, due to side channel inform (no CVSS, Google Android) - [CVE-2023-21349](https://cve.now/CVE-2023-21349.md): In Package Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informa (no CVSS, Google Android) - [CVE-2023-21348](https://cve.now/CVE-2023-21348.md): In Window Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informat (no CVSS, Google Android) - [CVE-2023-21347](https://cve.now/CVE-2023-21347.md): In Bluetooth, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Google Android) - [CVE-2023-21346](https://cve.now/CVE-2023-21346.md): In the Device Idle Controller, there is a possible way to determine whether an app is installed, without query permissions, due to side chan (no CVSS, Google Android) - [CVE-2023-21345](https://cve.now/CVE-2023-21345.md): In Game Manager Service, there is a possible way to determine whether an app is installed, without query permissions, due to side channel in (no CVSS, Google Android) - [CVE-2023-21344](https://cve.now/CVE-2023-21344.md): In Job Scheduler, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informati (no CVSS, Google Android) - [CVE-2023-21343](https://cve.now/CVE-2023-21343.md): In ActivityStarter, there is a possible background activity launch due to an unsafe PendingIntent. (no CVSS, Google Android) - [CVE-2023-21342](https://cve.now/CVE-2023-21342.md): In RemoteSpeechRecognitionService of RemoteSpeechRecognitionService.java, there is a possible way to launch an activity from the background (CVSS 7.8, Google Android) - [CVE-2023-21341](https://cve.now/CVE-2023-21341.md): In Permission Manager, there is a possible way to bypass required permissions due to a missing permission check. (CVSS 7.8, Google Android) - [CVE-2023-21340](https://cve.now/CVE-2023-21340.md): In Telecomm, there is a possible way to get the call state due to a missing permission check. (no CVSS, Google Android) - [CVE-2023-21339](https://cve.now/CVE-2023-21339.md): In Minikin, there is a possible way to trigger ANR by showing a malicious message due to resource exhaustion. (CVSS 7.5, Google Android) - [CVE-2023-21338](https://cve.now/CVE-2023-21338.md): In Input Method, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informatio (no CVSS, Google Android) - [CVE-2023-21337](https://cve.now/CVE-2023-21337.md): In InputMethod, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information (CVSS 7.8, Google Android) - [CVE-2023-21336](https://cve.now/CVE-2023-21336.md): In Input Method, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informatio (no CVSS, Google Android) - [CVE-2023-21335](https://cve.now/CVE-2023-21335.md): In Settings, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information di (no CVSS, Google Android) - [CVE-2023-21334](https://cve.now/CVE-2023-21334.md): In App Ops Service, there is a possible disclosure of information about installed packages due to a logic error in the code. (no CVSS, Google Android) - [CVE-2023-21333](https://cve.now/CVE-2023-21333.md): In Text Services, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informati (no CVSS, Google Android) - [CVE-2023-21332](https://cve.now/CVE-2023-21332.md): In Text Services, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informati (no CVSS, Google Android) - [CVE-2023-21331](https://cve.now/CVE-2023-21331.md): In InputMethod, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information (no CVSS, Google Android) - [CVE-2023-21330](https://cve.now/CVE-2023-21330.md): In Overlay Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informa (no CVSS, Google Android) - [CVE-2023-21329](https://cve.now/CVE-2023-21329.md): In Activity Manager, there is a possible way to determine whether an app is installed due to a missing permission check. (no CVSS, Google Android) - [CVE-2023-21328](https://cve.now/CVE-2023-21328.md): In Package Installer, there is a possible way to determine whether an app is installed, without query permissions, due to a missing permissi (no CVSS, Google Android) - [CVE-2023-21327](https://cve.now/CVE-2023-21327.md): In Permission Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel info (no CVSS, Google Android) - [CVE-2023-21326](https://cve.now/CVE-2023-21326.md): In Package Manager Service, there is a possible way to determine whether an app is installed, without query permissions, due to side channel (no CVSS, Google Android) - [CVE-2023-21325](https://cve.now/CVE-2023-21325.md): In Settings, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information di (no CVSS, Google Android) - [CVE-2023-21324](https://cve.now/CVE-2023-21324.md): In Package Installer, there is a possible way to determine whether an app is installed, without query permissions, due to side channel infor (CVSS 7.8, Google Android) - [CVE-2023-21323](https://cve.now/CVE-2023-21323.md): In Activity Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel inform (no CVSS, Google Android) - [CVE-2023-21321](https://cve.now/CVE-2023-21321.md): In Package Manager, there is a possible cross-user settings disclosure due to a missing permission check. (no CVSS, Google Android) - [CVE-2023-21320](https://cve.now/CVE-2023-21320.md): In Device Policy, there is a possible way to verify if a particular admin app is registered on the device due to side channel information di (no CVSS, Google Android) - [CVE-2023-21319](https://cve.now/CVE-2023-21319.md): In UsageStatsService, there is a possible way to read installed 3rd party apps due to side channel information disclosure. (no CVSS, Google Android) - [CVE-2023-21318](https://cve.now/CVE-2023-21318.md): In Content, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information dis (no CVSS, Google Android) - [CVE-2023-21317](https://cve.now/CVE-2023-21317.md): In ContentService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informat (no CVSS, Google Android) - [CVE-2023-21316](https://cve.now/CVE-2023-21316.md): In Content, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information dis (no CVSS, Google Android) - [CVE-2023-21315](https://cve.now/CVE-2023-21315.md): In Bluetooth, there is a possible out of bounds read due to a heap buffer overflow. (no CVSS, Google Android) - [CVE-2023-21314](https://cve.now/CVE-2023-21314.md): In Bluetooth, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Google Android) - [CVE-2023-21313](https://cve.now/CVE-2023-21313.md): In Core, there is a possible way to forward calls without user knowledge due to a missing permission check. (no CVSS, Google Android) - [CVE-2023-21312](https://cve.now/CVE-2023-21312.md): In IntentResolver, there is a possible cross-user media read due to a confused deputy. (no CVSS, Google Android) - [CVE-2023-21311](https://cve.now/CVE-2023-21311.md): In Settings, there is a possible way to control private DNS settings from a secondary user due to a permissions bypass. (no CVSS, Google Android) - [CVE-2023-21310](https://cve.now/CVE-2023-21310.md): In Bluetooth, there is a possible out of bounds write due to a heap buffer overflow. (no CVSS, Google Android) - [CVE-2023-21309](https://cve.now/CVE-2023-21309.md): In libcore, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Google Android) - [CVE-2023-21308](https://cve.now/CVE-2023-21308.md): In Composer, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Google Android) - [CVE-2023-21307](https://cve.now/CVE-2023-21307.md): In Bluetooth, there is a possible way for a paired Bluetooth device to access a long term identifier for an Android device due to a permissi (no CVSS, Google Android) - [CVE-2023-21306](https://cve.now/CVE-2023-21306.md): In ContentService, there is a possible way to read installed sync content providers due to side channel information disclosure. (no CVSS, Google Android) - [CVE-2023-21305](https://cve.now/CVE-2023-21305.md): In Content, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information dis (no CVSS, Google Android) - [CVE-2023-21304](https://cve.now/CVE-2023-21304.md): In Content Service, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informa (no CVSS, Google Android) - [CVE-2023-21303](https://cve.now/CVE-2023-21303.md): In Content, here is a possible way to determine whether an app is installed, without query permissions, due to side channel information disc (no CVSS, Google Android) - [CVE-2023-21302](https://cve.now/CVE-2023-21302.md): In Package Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informa (no CVSS, Google Android) - [CVE-2023-21301](https://cve.now/CVE-2023-21301.md): In ActivityManagerService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel (no CVSS, Google Android) - [CVE-2023-21300](https://cve.now/CVE-2023-21300.md): In PackageManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informat (no CVSS, Google Android) - [CVE-2023-21299](https://cve.now/CVE-2023-21299.md): In Package Manager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel informa (no CVSS, Google Android) - [CVE-2023-21298](https://cve.now/CVE-2023-21298.md): In Slice, there is a possible disclosure of installed applications due to side channel information disclosure. (CVSS 7.8, Google Android) - [CVE-2023-21297](https://cve.now/CVE-2023-21297.md): In SEPolicy, there is a possible way to access the factory MAC address due to a permissions bypass. (no CVSS, Google Android) - [CVE-2023-36920](https://cve.now/CVE-2023-36920.md): Clickjacking vulnerability in SAP Enable Now (CVSS 6.1, SAP SE SAP Enable Now) - [CVE-2023-21296](https://cve.now/CVE-2023-21296.md): In Permission, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information (no CVSS, Google Android) - [CVE-2023-21295](https://cve.now/CVE-2023-21295.md): In SliceManagerService, there is a possible way to check if a content provider is installed due to a missing null check. (no CVSS, Google Android) - [CVE-2023-21294](https://cve.now/CVE-2023-21294.md): In Slice, there is a possible disclosure of installed packages due to a missing permission check. (no CVSS, Google Android) - [CVE-2023-21293](https://cve.now/CVE-2023-21293.md): In PackageManagerNative, there is a possible way to determine whether an app is installed, without query permissions, due to side channel in (no CVSS, Google Android) - [CVE-2022-20531](https://cve.now/CVE-2022-20531.md): In Telecom, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information dis (no CVSS, Google Android) - [CVE-2022-20264](https://cve.now/CVE-2022-20264.md): In Usage Stats Service, there is a possible way to determine whether an app is installed, without query permissions due to side channel info (CVSS 5.5, Google Android) - [CVE-2021-39810](https://cve.now/CVE-2021-39810.md): In verifyDefaults of CardEmulationManager.java, there is a possible way to set a third party app as the default contactless payment app with (CVSS 7.8, Google Android) - [CVE-2023-44323](https://cve.now/CVE-2023-44323.md): PDF Jbig2 memory-corruption Vulnerability - MSFT T5 (CVSS 5.5, Adobe Acrobat for Edge) - [CVE-2022-4575](https://cve.now/CVE-2022-4575.md): A vulnerability due to improper write protection of UEFI variables was reported in the BIOS of some ThinkPad models could allow an attacker (CVSS 6.7, Lenovo ThinkPad BIOS) - [CVE-2022-48189](https://cve.now/CVE-2022-48189.md): An SMM driver input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated priv (CVSS 6.7, Lenovo ThinkPad BIOS) - [CVE-2022-4574](https://cve.now/CVE-2022-4574.md): An SMI handler input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated pr (CVSS 6.7, Lenovo ThinkPad BIOS) - [CVE-2022-4573](https://cve.now/CVE-2022-4573.md): An SMI handler input validation vulnerability in the ThinkPad X1 Fold Gen 1 could allow an attacker with local access and elevated privileg (CVSS 6.7, Lenovo ThinkPad X1 Fold Gen) - [CVE-2023-4964](https://cve.now/CVE-2023-4964.md): Potential open redirect vulnerability in opentext SMAX and AMX product. (CVSS 8.2, opentext Service Management Automation X · opentext Asset M…) - [CVE-2023-5251](https://cve.now/CVE-2023-5251.md): Grid Plus \<= 1.3.2 - Missing Authorization to Authenticated (Subscriber+) Grid Layout Add/Update/Delete (CVSS 5.4, g5theme Grid Plus – Unlimited grid layout) - [CVE-2023-5362](https://cve.now/CVE-2023-5362.md): Carousel, Recent Post Slider and Banner Slider \<= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, spicethemes Carousel, Recent Post Slider and Banner Slider) - [CVE-2023-5335](https://cve.now/CVE-2023-5335.md): Buzzsprout Podcasting \<= 1.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, molehill Buzzsprout Podcasting) - [CVE-2023-5666](https://cve.now/CVE-2023-5666.md): Accordion \<= 2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, themepoints Accordions – Responsive Accordion & FAQ Plugin…) - [CVE-2023-5049](https://cve.now/CVE-2023-5049.md): Giveaways and Contests by RafflePress \<= 1.12.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, smub Giveaways and Contests by RafflePress – Get More Websi…) - [CVE-2023-5250](https://cve.now/CVE-2023-5250.md): Grid Plus \<= 1.3.3 - Authenticated (Subscriber+) Local File Inclusion via Shortcode (CVSS 8.8, g5theme Grid Plus – Unlimited grid layout) - [CVE-2023-5566](https://cve.now/CVE-2023-5566.md): Simple Shortcodes \<= 1.0.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, simplethemes Simple Shortcodes) - [CVE-2023-5199](https://cve.now/CVE-2023-5199.md): PHP to Page \<= 0.3 - Authenticated (Subscriber+) Local File Inclusion to Remote Code Execution via Shortcode (CVSS 9.9, bloafer PHP to Page) - [CVE-2023-5843](https://cve.now/CVE-2023-5843.md): Ads by datafeedr.com \<= 1.1.3 - Unauthenticated (Limited) Remote Code Execution (CVSS 9.0, datafeedrcom Ads by datafeedr.com) - [CVE-2023-5164](https://cve.now/CVE-2023-5164.md): Bellows Accordion Menu \<= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, sevenspark Bellows Accordion Menu) - [CVE-2023-5565](https://cve.now/CVE-2023-5565.md): Shortcode Menu \<= 3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, amitsukapure Shortcode Menu) - [CVE-2023-5252](https://cve.now/CVE-2023-5252.md): FareHarbor for WordPress \<= 3.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, FareHarbor for WordPress) - [CVE-2023-5315](https://cve.now/CVE-2023-5315.md): Google Maps made Simple \<= 0.6 - Authenticated (Subscriber+) SQL Injection via Shortcode (CVSS 8.8, mschwar Google Maps made Simple) - [CVE-2023-5583](https://cve.now/CVE-2023-5583.md): WP Simple Galleries \<= 1.34 - Authenticated (Contributor+) PHP Object Injection (CVSS 8.8, maca134 WP Simple Galleries) - [CVE-2023-5833](https://cve.now/CVE-2023-5833.md): Improper Access Control in mintplex-labs/anything-llm (CVSS 8.1, mintplex-labs/anything-llm) - [CVE-2023-5832](https://cve.now/CVE-2023-5832.md): Improper Input Validation in mintplex-labs/anything-llm (CVSS 9.1, mintplex-labs/anything-llm) - [CVE-2023-42431](https://cve.now/CVE-2023-42431.md): Potential XSS on user preferences page (CVSS 2.1, Hallo Welt! BlueSpice) - [CVE-2023-5844](https://cve.now/CVE-2023-5844.md): Unverified Password Change in pimcore/admin-ui-classic-bundle (CVSS 4.3, pimcore/admin-ui-classic-bundle) - [CVE-2023-45799](https://cve.now/CVE-2023-45799.md): MLSoft TCO!stream Remote Code Execution Vulnerability (CVSS 7.2, MLSoft TCO!stream) - [CVE-2023-45798](https://cve.now/CVE-2023-45798.md): Yettiesoft VestCert Remote Code Execution Vulnerability (CVSS 8.4, Yettiesoft VestCert) - [CVE-2023-45797](https://cve.now/CVE-2023-45797.md): DreamSecurity MagicLine Buffer Overflow Vulnerability (CVSS 9.8, Dream Security MagicLine4NX) - [CVE-2023-45746](https://cve.now/CVE-2023-45746.md): Cross-site scripting vulnerability in Movable Type series allows a remote authenticated attacker to inject an arbitrary script. (CVSS 5.4, Six Apart Movable Type) - [CVE-2023-44141](https://cve.now/CVE-2023-44141.md): Inkdrop prior to v5.6.0 allows a local attacker to conduct a code injection attack by having a legitimate user open a specially crafted mark (no CVSS, Takuya Matsuyama Inkdrop) - [CVE-2021-25736](https://cve.now/CVE-2021-25736.md): Windows kube-proxy LoadBalancer contention (CVSS 5.8, Kubernetes · k8s.io/kubernetes) - [CVE-2023-5842](https://cve.now/CVE-2023-5842.md): Cross-site Scripting (XSS) - Stored in dolibarr/dolibarr (CVSS 4.8, dolibarr/dolibarr) - [CVE-2020-36767](https://cve.now/CVE-2020-36767.md): tinyfiledialogs (aka tiny file dialogs) before 3.8.0 allows shell metacharacters in titles, messages, and other input data. (CVSS 7.5) - [CVE-2022-39172](https://cve.now/CVE-2022-39172.md): A stored XSS in the process overview (bersicht zugewiesener Vorgaenge) in mbsupport openVIVA c2 20220101 allows a remote, authenticated, low (CVSS 5.4) - [CVE-2023-42323](https://cve.now/CVE-2023-42323.md): Cross Site Request Forgery (CSRF) vulnerability in DouHaocms v.3.3 allows a remote attacker to execute arbitrary code via the adminAction.cl (CVSS 8.8) - [CVE-2023-45956](https://cve.now/CVE-2023-45956.md): An issue discovered in Govee LED Strip v3.00.42 allows attackers to cause a denial of service via crafted Move and MoveWithOnoff commands. (CVSS 7.5) - [CVE-2023-46478](https://cve.now/CVE-2023-46478.md): An issue in minCal v.1.0.0 allows a remote attacker to execute arbitrary code via a crafted script to the customer\_data parameter. (CVSS 8.8) - [CVE-2023-46502](https://cve.now/CVE-2023-46502.md): An issue in openCRX v.5.2.2 allows a remote attacker to read internal files and execute server side request forgery attack via insecure Docu (CVSS 9.8, org.opencrx:opencrx-client) - [CVE-2023-46865](https://cve.now/CVE-2023-46865.md): /api/v1/company/upload-logo in CompanyController.php in crater through 6.0.6 allows a superadmin to execute arbitrary PHP code by placing th (no CVSS) - [CVE-2023-46866](https://cve.now/CVE-2023-46866.md): In International Color Consortium DemoIccMAX 79ecb74, CIccCLUT::Interp3d in IccProfLib/IccTagLut.cpp in libSampleICC.a attempts to access ar (CVSS 6.5) - [CVE-2023-46867](https://cve.now/CVE-2023-46867.md): In International Color Consortium DemoIccMAX 79ecb74, CIccXformMatrixTRC::GetCurve in IccCmm.cpp in libSampleICC.a has a NULL pointer derefe (CVSS 6.5) - [CVE-2023-47090](https://cve.now/CVE-2023-47090.md): NATS nats-server before 2.9.23 and 2.10.x before 2.10.2 has an authentication bypass. (no CVSS, github.com/nats-io/nats-server/v2) - [CVE-2023-47101](https://cve.now/CVE-2023-47101.md): The installer (aka openvpn-client-installer) in Securepoint SSL VPN Client before 2.0.40 allows local privilege escalation during installati (CVSS 7.8) - [CVE-2023-47104](https://cve.now/CVE-2023-47104.md): tinyfiledialogs (aka tiny file dialogs) before 3.15.0 allows shell metacharacters (such as a backquote or a dollar sign) in titles, messages (CVSS 9.8) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2023-10-30 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.