CVEs published October 31, 2023
121 CVEs were published on October 31, 2023: 11 critical, 43 high. 1 is now in CISA KEV.
- Published
- 121
- Critical
- 11
- High
- 43
- Medium
- 33
- Low
- 0
- Unrated
- 34
- Now in CISA KEV
- 1
- Fix available
- 39
Most affected products
- thorsten/phpmyfaq
- 5
- EventPrime
- 4
- fogproject
- 3
- David F. Carr RSVPMaker
- 2
- Atera Agent Package Availability
- 1
- Atlassian Confluence Data Center · Atlassian Confluence Ser…
- 1
- authzed spicedb · github.com/authzed/spicedb
- 1
- Campaign Monitor Forms by Optin Cat
- 1
- CITS Support svg, webp Media and TTF,OTF File Upload
- 1
- CodeIgniter4 · codeigniter4/framework
- 1
Critical 11
- CVE-2023-46249authentik potential installation takeover when default admin user is deletedgoauthentik authentik
- CVE-2023-46248Overwrite of builtin Cody commands facilitates RCEsourcegraph cody
- CVE-2023-22518All versions of Confluence Data Center and Server are affected by this unexploited vulnerability.Atlassian Confluence Data Center · Atlassian Confluence Ser…
- CVE-2023-40050Automate Vulnerable to Malicious Content Uploaded Through Embedded Compliance ApplicationProgress Software Chef Automate
- CVE-2023-36263Prestashop opartlimitquantity 1.4.5 and before is vulnerable to SQL Injection.
- CVE-2023-46484An issue in TOTOlink X6000R V9.4.0cu.852_B20230719 allows a remote attacker to execute arbitrary code via the setLedCfg function.
- CVE-2023-46485An issue in TOTOlink X6000R V9.4.0cu.852_B20230719 allows a remote attacker to execute arbitrary code via the setTracerouteCfg function of t
- CVE-2023-46976TOTOLINK A3300R 17.0.0cu.557_B20221024 contains a command injection via the file_name parameter in the UploadFirmwareFile function.
- CVE-2023-46977TOTOLINK LR1200GB V9.1.0u.6619_B20230130 was discovered to contain a stack overflow via the password parameter in the function loginAuth.
- CVE-2023-46979TOTOLINK X6000R V9.4.0cu.852_B20230719 was discovered to contain a command injection vulnerability via the enable parameter in the setLedCfg
- CVE-2023-46993In TOTOLINK A3300R V17.0.0cu.557_B20221024 when dealing with setLedCfg request, there is no verification for the enable parameter, which can
High 43
- CVE-2023-20886VMware Workspace ONE UEM console contains an open redirect vulnerability.VMware Workspace ONE UEM Console
- CVE-2023-3955Kubernetes - Windows nodes - Insufficient input sanitization leads to privilege escalationKubernetes kubelet · k8s.io/kubernetes +1
- CVE-2023-3676Kubernetes - Windows nodes - Insufficient input sanitization leads to privilege escalationKubernetes kubelet · k8s.io/kubernetes
- CVE-2023-5739Certain versions of HP PC Hardware Diagnostics Windows are potentially vulnerable to elevation of privilege.HP PC Hardware Diagnostics Windows
- CVE-2023-46723lte-pic32-writer's sendto.txt may disclose URL and the API keypaijp lte-pic32-writer
- CVE-2023-46245Kimai (Authenticated) SSTI to RCE by Uploading a Malicious Twig Filekimai · kimai/kimai
- CVE-2023-46240CodeIgniter4 vulnerable to information disclosure when detailed error report is displayed in production environmentCodeIgniter4 · codeigniter4/framework
- CVE-2023-46239quic-go vulnerable to pointer dereference that can lead to panicquic-go · github.com/quic-go/quic-go
- CVE-2023-37966WordPress User Activity Log Plugin <= 1.6.2 is vulnerable to SQL InjectionSolwin Infotech User Activity Log
- CVE-2023-37243The C:\Windows\Temp\Agent.Package.Availability\Agent.Package.Availability.exe file is automatically launched as SYSTEM when the system rebooAtera Agent Package Availability
- CVE-2023-46236FOG SSRF via unauthenticated endpoint(s)fogproject
- CVE-2023-36508WordPress Contact Form to DB by BestWebSoft Plugin <= 1.7.1 is vulnerable to SQL InjectionContact Form to DB by BestWebSoft – Messages Database Plugi…
- CVE-2023-35879WordPress WooCommerce Product Vendors Plugin <= 2.1.78 is vulnerable to SQL InjectionWooCommerce Product Vendors
- CVE-2023-33927WordPress Multiple Page Generator Plugin – MPG Plugin <= 3.3.19 is vulnerable to SQL InjectionThemeisle Multiple Page Generator Plugin – MPG
- CVE-2023-42658InSpec Archive Command Vulnerable to Maliciously Crafted ProfileProgress Software Chef InSpec
- CVE-2023-31212WordPress Contact Form Entries Plugin <= 1.3.0 is vulnerable to SQL InjectionCRM Perks Database for Contact Form 7, WPforms, Elementor f…
- CVE-2023-28777WordPress LearnDash LMS Plugin <= 4.5.3 is vulnerable to SQL InjectionLearnDash LMS
- CVE-2023-5098Campaign Monitor Forms < 2.5.6 - Subscriber+ Arbitrary Options UpdateCampaign Monitor Forms by Optin Cat
- CVE-2023-24000WordPress GamiPress Plugin <= 2.5.7 is vulnerable to SQL InjectionGamiPress
- CVE-2023-5099HTML filter and csv-file search <= 2.7 - Authenticated (Contributor+) Local File Inclusion via Shortcodejonashjalmarsson HTML filter and csv-file search
- CVE-2022-3007Unauthorized Access Vulnerability in Syska SW100 SmartwatchSyska Led Lights Pvt Syska SW100 Smartwatch
- CVE-2023-46622WordPress WPPizza Plugin <= 3.18.2 is vulnerable to Cross Site Scripting (XSS)ollybach WPPizza – A Restaurant Plugin
- CVE-2023-46313WordPress Zotpress Plugin <= 7.3.4 is vulnerable to Cross Site Scripting (XSS)Katie Seaborn Zotpress
- CVE-2023-46312WordPress Smart Online Order for Clover Plugin <= 1.5.4 is vulnerable to Cross Site Scripting (XSS)Zaytech Smart Online Order for Clover
- CVE-2023-5433Message ticker <= 9.2 - Authenticated (Subscriber+) SQL Injection via Shortcodegopiplus Message ticker
- CVE-2023-5436Vertical marquee plugin <= 7.1 - Authenticated (Subscriber+) SQL Injection via Shortcodegopiplushotmailcom Vertical marquee plugin
- CVE-2023-5437WP fade in text news <= 12.0 - Authenticated (Subscriber+) SQL Injection via Shortcodegopiplus WP fade in text news
- CVE-2023-5438wp image slideshow <= 12.0 - Authenticated (Subscriber+) SQL Injection via Shortcodegopiplus wp image slideshow
- CVE-2023-5431Left right image slideshow gallery <= 12.0 - Authenticated (Subscriber+) SQL Injection via Shortcodegopiplus Left right image slideshow gallery
- CVE-2023-5429Information Reel <= 10.0 - Authenticated (Subscriber+) SQL Injection via Shortcodegopiplus Information Reel
- CVE-2023-5439Wp photo text slider 50 <= 8.0 - Authenticated (Subscriber+) SQL Injection via Shortcodegopiplus Wp photo text slider
- CVE-2023-5430Jquery news ticker <= 3.0 - Authenticated (Subscriber+) SQL Injection via Shortcodegopiplushotmailcom Jquery news ticker
- CVE-2023-5434Superb slideshow gallery <= 13.1 - Authenticated (Subscriber+) SQL Injection via Shortcodegopiplus Superb slideshow gallery
- CVE-2023-5435Up down image slideshow gallery <= 12.0 - Authenticated (Subscriber+) SQL Injection via Shortcodegopiplus Up down image slideshow gallery
- CVE-2023-5412Image horizontal reel scroll slideshow <= 13.2 - Authenticated (Subscriber+) SQL Injection via Shortcodegopiplus Image horizontal reel scroll slideshow
- CVE-2023-5464Jquery accordion slideshow <= 8.1 - Authenticated (Subscriber+) SQL Injection via Shortcodegopi_plus Jquery accordion slideshow
- CVE-2023-5428Image vertical reel scroll slideshow <= 9.0 - Authenticated (Subscriber+) SQL Injection via Shortcodegopiplus Image vertical reel scroll slideshow
- CVE-2023-5865Insufficient Session Expiration in thorsten/phpmyfaqthorsten/phpmyfaq
- CVE-2023-5864Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaqthorsten/phpmyfaq
- CVE-2023-5863Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaqthorsten/phpmyfaq
- CVE-2023-38994The 'check_univention_joinstatus' prometheus monitoring script (and other scripts) in UCS 5.0-5 revealed the LDAP plaintext password of the
- CVE-2023-46978TOTOLINK X6000R V9.4.0cu.852_B20230719 is vulnerable to Incorrect Access Control.Attackers can reset login password & WIFI passwords without
- CVE-2023-46992TOTOLINK A3300R V17.0.0cu.557_B20221024 is vulnerable to Incorrect Access Control.
Medium, low and unrated 67
- CVE-2023-46278Uncontrolled resource consumption vulnerability in Cybozu Remote Service 4.1.0 to 4.1.1 allows a remote authenticated attacker to consume huCybozu Remote Service
- CVE-2023-44484Online Blood Donation Management System v1.0 - Stored Cross-Site Scripting (XSS)Projectworlds Pvt. Limited Online Blood Donation Management…
- CVE-2023-43796Synapse vulnerable to leak of remote user device informationmatrix-org synapse · matrix-synapse
- CVE-2023-46722Pimcore Admin Classic Bundle Cross-site Scripting (XSS) in PDF previewspimcore admin-ui-classic-bundle · pimcore/admin-ui-classic-…
- CVE-2023-46256PX4-Autopilot Heap Buffer Overflow BugPX4-Autopilot
- CVE-2023-46255`SPICEDB_DATASTORE_CONN_URI` is leaked when URI cannot be parsedauthzed spicedb · github.com/authzed/spicedb
- CVE-2023-46250pypdf possible Infinite Loop when PdfWriter(clone_from) is used with a PDFpy-pdf pypdf · pypdf
- CVE-2023-46237FOG path traversal via unauthenticated endpointfogproject
- CVE-2023-24410WordPress FluentForm Plugin <= 4.3.25 is vulnerable to SQL InjectionContact Form - WPManageNinja Contact Form Plugin – Fastest…
- CVE-2023-46235FOG stored XSS on log screen via unsanitized request loggingfogproject
- CVE-2023-4250EventPrime < 3.2.0 - Reflected XSSEventPrime
- CVE-2023-4836WordPress File Sharing Plugin < 2.0.5 - Subscriber+ Sensitive Data and Files Exposure via IDORWordPress File Sharing Plugin
- CVE-2023-4251EventPrime < 3.2.0 - Booking Creation via CSRFEventPrime
- CVE-2023-5211Fattura24 < 6.2.8 - Reflected Cross-Site ScriptingFattura24
- CVE-2023-4390Popup box < 3.7.2 - Admin+ Stored Cross-Site ScriptingPopup box
- CVE-2023-5237Memberlite Shortcodes < 1.3.9 - Contributor+ Stored XSS via ShortcodeMemberlite Shortcodes
- CVE-2023-5519EventPrime < 3.2.0 - Booking Creation via CSRFEventPrime
- CVE-2023-5238EventPrime < 3.2.0 - Reflected HTML Injection on keyword parameterEventPrime
- CVE-2023-5243Login screen manager <= 3.5.2 - Admin+ Stored XSSLogin Screen Manager
- CVE-2023-5307Photos and Files Contest Gallery – Contact Form < 21.2.8.1 - Unauthenticated Stored XSS via HTTP HeadersPhotos and Files Contest Gallery
- CVE-2023-4823WP Meta and Date Remover < 2.2.0 - Subscriber+ Stored XSS WP Meta and Date Remover
- CVE-2023-5458CITS Support svg, webp Media and TTF,OTF File Upload < 3.0 - Author+ Stored XSS via SVGCITS Support svg, webp Media and TTF,OTF File Upload
- CVE-2023-5360Royal Elementor Addons and Templates < 1.3.79 - Unauthenticated Arbitrary File UploadRoyal Elementor Addons and Templates
- CVE-2023-5229E2Pdf < 1.20.20 - Admin+ Stored Cross-Site ScripingE2Pdf
- CVE-2023-25047WordPress RSVPMarker Plugin <= 9.9.3 is vulnerable to SQL InjectionDavid F. Carr RSVPMaker
- CVE-2023-25045WordPress RSVPMarker Plugin <= 9.9.3 is vulnerable to SQL InjectionDavid F. Carr RSVPMaker
- CVE-2023-5116Live updates from Excel <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodeipushpull Live updates from Excel
- CVE-2016-1203Improper file verification vulnerability in SaAT Netizen installer ver.1.2.0.424 and earlier, and SaAT Netizen ver.1.2.0.8 (Build427) and eaNetMove SaAT Netizen installer · NetMove SaAT Netizen
- CVE-2023-5114idbbee <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodefaikdjikic idbbee
- CVE-2023-5073iframe forms <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via iframe Shortcodejrbecart iframe forms
- CVE-2023-40681WordPress Groundhogg Plugin <= 2.7.11.10 is vulnerable to Cross Site Scripting (XSS)Groundhogg
- CVE-2015-2968LINE@ for Android version 1.0.0 and LINE@ for iOS version 1.0.0 are vulnerable to MITM (man-in-the-middle) attack since the application alloLINE@ for Android · LINE@ for iOS
- CVE-2015-0897LINE for Android version 5.0.2 and earlier and LINE for iOS version 5.0.0 and earlier are vulnerable to MITM (man-in-the-middle) attack sincLINE for Android · LINE for iOS
- CVE-2023-5873Cross-site Scripting (XSS) - Stored in pimcore/pimcorepimcore/pimcore
- CVE-2023-46210WordPress WC Captcha Plugin <= 1.4 is vulnerable to Cross Site Scripting (XSS)WebCource WC Captcha
- CVE-2023-5866Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in thorsten/phpmyfaqthorsten/phpmyfaq
- CVE-2023-5867Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaqthorsten/phpmyfaq
- CVE-2023-5861Cross-site Scripting (XSS) - Stored in microweber/microwebermicroweber/microweber
- CVE-2023-5862Missing Authorization in hamza417/inurehamza417/inure
- CVE-2015-20110JHipster generator-jhipster before 2.23.0 allows a timing attack against validateToken due to a string comparison that stops at the first chgenerator-jhipster
- CVE-2019-25155DOMPurify before 1.0.11 allows reverse tabnabbing in demos/hooks-target-blank-demo.html because links lack a 'rel="noopener noreferrer"' attdompurify
- CVE-2023-27846SQL injection vulnerability found in PrestaShop themevolty v.4.0.8 and before allow a remote attacker to gain privileges via the tvcmsblog,
- CVE-2023-31794MuPDF v1.21.1 was discovered to contain an infinite recursion in the component pdf_mark_list_push.
- CVE-2023-37831An issue discovered in Elenos ETG150 FM transmitter v3.12 allows attackers to enumerate user accounts based on server responses when credent
- CVE-2023-37832A lack of rate limiting in Elenos ETG150 FM transmitter v3.12 allows attackers to obtain user credentials via brute force and cause other un
- CVE-2023-37833Improper access control in Elenos ETG150 FM transmitter v3.12 allows attackers to make arbitrary configuration edits that are only accessed
- CVE-2023-39610An issue in TP-Link Tapo C100 v1.1.15 Build 211130 Rel.15378n(4555) and before allows attackers to cause a Denial of Service (DoS) via suppl
- CVE-2023-39695Insufficient session expiration in Elenos ETG150 FM Transmitter v3.12 allows attackers to arbitrarily change transmitter configuration and d
- CVE-2023-42425An issue in Turing Video Turing Edge+ EVC5FD v.1.38.6 allows remote attacker to execute arbitrary code and obtain sensitive information via
- CVE-2023-43139An issue in franfinance before v.2.0.27 allows a remote attacker to execute arbitrary code via the validation.php, and controllers/front/val
- CVE-2023-43295Cross Site Request Forgery vulnerability in Click Studios (SA) Pty Ltd Passwordstate v.Build 9785 and before allows a local attacker to exec
- CVE-2023-45378In the module "PrestaBlog" (prestablog) version 4.4.7 and before from HDclic for PrestaShop, a guest can perform SQL injection.
- CVE-2023-45899An issue in the component SuperUserSetuserModuleFrontController:init() of idnovate superuser before v2.4.2 allows attackers to bypass authen
- CVE-2023-45955An issue discovered in Nanoleaf Light strip v3.5.10 allows attackers to cause a denial of service via crafted write binding attribute comman
- CVE-2023-45996SQL injection vulnerability in Senayan Library Management Systems Slims v.9 and Bulian v.9.6.1 allows a remote attacker to obtain sensitive
- CVE-2023-46040Cross Site Scripting vulnerability in GetSimpleCMS v.3.4.0a allows a remote attacker to execute arbitrary code via the a crafted payload to
- CVE-2023-46356In the module "CSV Feeds PRO" (csvfeeds) before 2.6.1 from Bl Modules for PrestaShop, a guest can perform SQL injection.
- CVE-2023-46361Artifex Software jbig2dec v0.20 was discovered to contain a SEGV vulnerability via jbig2_error at /jbig2dec/jbig2.c.
- CVE-2023-46378Stored Cross Site Scripting (XSS) vulnerability in MiniCMS 1.1.1 allows attackers to run arbitrary code via crafted string appended to /mc-a
- CVE-2023-46451Best Courier Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in the change username field.
- CVE-2023-47094A Stored Cross-Site Scripting (XSS) vulnerability in the Account Plans tab of System Settings in Virtualmin 7.7 allows remote attackers to i
- CVE-2023-47095A Stored Cross-Site Scripting (XSS) vulnerability in the Custom fields of Edit Virtual Server under System Customization in Virtualmin 7.7 a
- CVE-2023-47096A Reflected Cross-Site Scripting (XSS) vulnerability in the Cloudmin Services Client under System Setting in Virtualmin 7.7 allows remote at
- CVE-2023-47097A Stored Cross-Site Scripting (XSS) vulnerability in the Server Template under System Setting in Virtualmin 7.7 allows remote attackers to i
- CVE-2023-47098A Stored Cross-Site Scripting (XSS) vulnerability in the Manage Extra Admins under Administration Options in Virtualmin 7.7 allows remote at
- CVE-2023-47099A Stored Cross-Site Scripting (XSS) vulnerability in the Create Virtual Server in Virtualmin 7.7 allows remote attackers to inject arbitrary
- CVE-2023-47174Thorn SFTP gateway 3.4.x before 3.4.4 uses Pivotal Spring Framework for Java deserialization of untrusted data, which is not supported by Pi