# CVEs published 2023-10-31

121 CVEs were published on October 31, 2023: 11 critical, 43 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2023-46278](https://cve.now/CVE-2023-46278.md): Uncontrolled resource consumption vulnerability in Cybozu Remote Service 4.1.0 to 4.1.1 allows a remote authenticated attacker to consume hu (no CVSS, Cybozu Remote Service)
- [CVE-2023-44484](https://cve.now/CVE-2023-44484.md): Online Blood Donation Management System v1.0 - Stored Cross-Site Scripting (XSS) (CVSS 6.1, Projectworlds Pvt. Limited Online Blood Donation Management…)
- [CVE-2023-20886](https://cve.now/CVE-2023-20886.md): VMware Workspace ONE UEM console contains an open redirect vulnerability. (CVSS 8.8, VMware Workspace ONE UEM Console)
- [CVE-2023-3955](https://cve.now/CVE-2023-3955.md): Kubernetes - Windows nodes - Insufficient input sanitization leads to privilege escalation (CVSS 8.8, Kubernetes kubelet · k8s.io/kubernetes +1)
- [CVE-2023-3676](https://cve.now/CVE-2023-3676.md): Kubernetes - Windows nodes - Insufficient input sanitization leads to privilege escalation (CVSS 8.8, Kubernetes kubelet · k8s.io/kubernetes)
- [CVE-2023-43796](https://cve.now/CVE-2023-43796.md): Synapse vulnerable to leak of remote user device information (CVSS 5.3, matrix-org synapse · matrix-synapse)
- [CVE-2023-5739](https://cve.now/CVE-2023-5739.md): Certain versions of HP PC Hardware Diagnostics Windows are potentially vulnerable to elevation of privilege. (CVSS 7.8, HP PC Hardware Diagnostics Windows)
- [CVE-2023-46722](https://cve.now/CVE-2023-46722.md): Pimcore Admin Classic Bundle Cross-site Scripting (XSS) in PDF previews (CVSS 6.1, pimcore admin-ui-classic-bundle · pimcore/admin-ui-classic-…)
- [CVE-2023-46723](https://cve.now/CVE-2023-46723.md): lte-pic32-writer's sendto.txt may disclose URL and the API key (CVSS 8.9, paijp lte-pic32-writer)
- [CVE-2023-46256](https://cve.now/CVE-2023-46256.md): PX4-Autopilot Heap Buffer Overflow Bug (CVSS 4.4, PX4-Autopilot)
- [CVE-2023-46255](https://cve.now/CVE-2023-46255.md): \`SPICEDB\_DATASTORE\_CONN\_URI\` is leaked when URI cannot be parsed (CVSS 4.2, authzed spicedb · github.com/authzed/spicedb)
- [CVE-2023-46250](https://cve.now/CVE-2023-46250.md): pypdf possible Infinite Loop when PdfWriter(clone\_from) is used with a PDF (CVSS 5.1, py-pdf pypdf · pypdf)
- [CVE-2023-46249](https://cve.now/CVE-2023-46249.md): authentik potential installation takeover when default admin user is deleted (CVSS 9.7, goauthentik authentik)
- [CVE-2023-46248](https://cve.now/CVE-2023-46248.md): Overwrite of builtin Cody commands facilitates RCE (CVSS 9.1, sourcegraph cody)
- [CVE-2023-46245](https://cve.now/CVE-2023-46245.md): Kimai (Authenticated) SSTI to RCE by Uploading a Malicious Twig File (CVSS 7.2, kimai · kimai/kimai)
- [CVE-2023-46240](https://cve.now/CVE-2023-46240.md): CodeIgniter4 vulnerable to information disclosure when detailed error report is displayed in production environment (CVSS 7.5, CodeIgniter4 · codeigniter4/framework)
- [CVE-2023-46239](https://cve.now/CVE-2023-46239.md): quic-go vulnerable to pointer dereference that can lead to panic (CVSS 7.5, quic-go · github.com/quic-go/quic-go)
- [CVE-2023-46237](https://cve.now/CVE-2023-46237.md): FOG path traversal via unauthenticated endpoint (CVSS 5.8, fogproject)
- [CVE-2023-37966](https://cve.now/CVE-2023-37966.md): WordPress User Activity Log Plugin \<= 1.6.2 is vulnerable to SQL Injection (CVSS 7.6, Solwin Infotech User Activity Log)
- [CVE-2023-37243](https://cve.now/CVE-2023-37243.md): The C:\\Windows\\Temp\\Agent.Package.Availability\\Agent.Package.Availability.exe file is automatically launched as SYSTEM when the system reboo (CVSS 7.8, Atera Agent Package Availability)
- [CVE-2023-46236](https://cve.now/CVE-2023-46236.md): FOG SSRF via unauthenticated endpoint(s) (CVSS 8.6, fogproject)
- [CVE-2023-22518](https://cve.now/CVE-2023-22518.md): All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. (CVSS 10.0, KEV, Atlassian Confluence Data Center · Atlassian Confluence Ser…)
- [CVE-2023-24410](https://cve.now/CVE-2023-24410.md): WordPress FluentForm Plugin \<= 4.3.25 is vulnerable to SQL Injection (CVSS 5.5, Contact Form - WPManageNinja Contact Form Plugin – Fastest…)
- [CVE-2023-46235](https://cve.now/CVE-2023-46235.md): FOG stored XSS on log screen via unsanitized request logging (CVSS 5.4, fogproject)
- [CVE-2023-36508](https://cve.now/CVE-2023-36508.md): WordPress Contact Form to DB by BestWebSoft Plugin \<= 1.7.1 is vulnerable to SQL Injection (CVSS 7.6, Contact Form to DB by BestWebSoft – Messages Database Plugi…)
- [CVE-2023-35879](https://cve.now/CVE-2023-35879.md): WordPress WooCommerce Product Vendors Plugin \<= 2.1.78 is vulnerable to SQL Injection (CVSS 7.6, WooCommerce Product Vendors)
- [CVE-2023-33927](https://cve.now/CVE-2023-33927.md): WordPress Multiple Page Generator Plugin – MPG Plugin \<= 3.3.19 is vulnerable to SQL Injection (CVSS 7.6, Themeisle Multiple Page Generator Plugin – MPG)
- [CVE-2023-42658](https://cve.now/CVE-2023-42658.md): InSpec Archive Command Vulnerable to Maliciously Crafted Profile (CVSS 8.8, Progress Software Chef InSpec)
- [CVE-2023-40050](https://cve.now/CVE-2023-40050.md): Automate Vulnerable to Malicious Content Uploaded Through Embedded Compliance Application (CVSS 9.9, Progress Software Chef Automate)
- [CVE-2023-31212](https://cve.now/CVE-2023-31212.md): WordPress Contact Form Entries Plugin \<= 1.3.0 is vulnerable to SQL Injection (CVSS 8.5, CRM Perks Database for Contact Form 7, WPforms, Elementor f…)
- [CVE-2023-28777](https://cve.now/CVE-2023-28777.md): WordPress LearnDash LMS Plugin \<= 4.5.3 is vulnerable to SQL Injection (CVSS 8.5, LearnDash LMS)
- [CVE-2023-4250](https://cve.now/CVE-2023-4250.md): EventPrime \< 3.2.0 - Reflected XSS (CVSS 6.1, EventPrime)
- [CVE-2023-4836](https://cve.now/CVE-2023-4836.md): WordPress File Sharing Plugin \< 2.0.5 - Subscriber+ Sensitive Data and Files Exposure via IDOR (CVSS 4.3, WordPress File Sharing Plugin)
- [CVE-2023-4251](https://cve.now/CVE-2023-4251.md): EventPrime \< 3.2.0 - Booking Creation via CSRF (CVSS 4.3, EventPrime)
- [CVE-2023-5211](https://cve.now/CVE-2023-5211.md): Fattura24 \< 6.2.8 - Reflected Cross-Site Scripting (CVSS 6.1, Fattura24)
- [CVE-2023-4390](https://cve.now/CVE-2023-4390.md): Popup box \< 3.7.2 - Admin+ Stored Cross-Site Scripting (CVSS 4.8, Popup box)
- [CVE-2023-5237](https://cve.now/CVE-2023-5237.md): Memberlite Shortcodes \< 1.3.9 - Contributor+ Stored XSS via Shortcode (CVSS 5.4, Memberlite Shortcodes)
- [CVE-2023-5519](https://cve.now/CVE-2023-5519.md): EventPrime \< 3.2.0 - Booking Creation via CSRF (CVSS 4.3, EventPrime)
- [CVE-2023-5098](https://cve.now/CVE-2023-5098.md): Campaign Monitor Forms \< 2.5.6 - Subscriber+ Arbitrary Options Update (CVSS 8.1, Campaign Monitor Forms by Optin Cat)
- [CVE-2023-5238](https://cve.now/CVE-2023-5238.md): EventPrime \< 3.2.0 - Reflected HTML Injection on keyword parameter (CVSS 6.1, EventPrime)
- [CVE-2023-5243](https://cve.now/CVE-2023-5243.md): Login screen manager \<= 3.5.2 - Admin+ Stored XSS (CVSS 4.8, Login Screen Manager)
- [CVE-2023-5307](https://cve.now/CVE-2023-5307.md): Photos and Files Contest Gallery – Contact Form \< 21.2.8.1 - Unauthenticated Stored XSS via HTTP Headers (CVSS 6.1, Photos and Files Contest Gallery)
- [CVE-2023-4823](https://cve.now/CVE-2023-4823.md): WP Meta and Date Remover \< 2.2.0 - Subscriber+ Stored XSS (CVSS 5.4, WP Meta and Date Remover)
- [CVE-2023-5458](https://cve.now/CVE-2023-5458.md): CITS Support svg, webp Media and TTF,OTF File Upload \< 3.0 - Author+ Stored XSS via SVG (no CVSS, CITS Support svg, webp Media and TTF,OTF File Upload)
- [CVE-2023-5360](https://cve.now/CVE-2023-5360.md): Royal Elementor Addons and Templates \< 1.3.79 - Unauthenticated Arbitrary File Upload (no CVSS, Royal Elementor Addons and Templates)
- [CVE-2023-5229](https://cve.now/CVE-2023-5229.md): E2Pdf \< 1.20.20 - Admin+ Stored Cross-Site Scriping (CVSS 4.8, E2Pdf)
- [CVE-2023-24000](https://cve.now/CVE-2023-24000.md): WordPress GamiPress Plugin \<= 2.5.7 is vulnerable to SQL Injection (CVSS 8.2, GamiPress)
- [CVE-2023-25047](https://cve.now/CVE-2023-25047.md): WordPress RSVPMarker Plugin \<= 9.9.3 is vulnerable to SQL Injection (CVSS 5.5, David F. Carr RSVPMaker)
- [CVE-2023-25045](https://cve.now/CVE-2023-25045.md): WordPress RSVPMarker Plugin \<= 9.9.3 is vulnerable to SQL Injection (CVSS 6.7, David F. Carr RSVPMaker)
- [CVE-2023-5116](https://cve.now/CVE-2023-5116.md): Live updates from Excel \<= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, ipushpull Live updates from Excel)
- [CVE-2016-1203](https://cve.now/CVE-2016-1203.md): Improper file verification vulnerability in SaAT Netizen installer ver.1.2.0.424 and earlier, and SaAT Netizen ver.1.2.0.8 (Build427) and ea (no CVSS, NetMove SaAT Netizen installer · NetMove SaAT Netizen)
- [CVE-2023-5099](https://cve.now/CVE-2023-5099.md): HTML filter and csv-file search \<= 2.7 - Authenticated (Contributor+) Local File Inclusion via Shortcode (CVSS 8.8, jonashjalmarsson HTML filter and csv-file search)
- [CVE-2023-5114](https://cve.now/CVE-2023-5114.md): idbbee \<= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 5.4, faikdjikic idbbee)
- [CVE-2023-5073](https://cve.now/CVE-2023-5073.md): iframe forms \<= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via iframe Shortcode (CVSS 6.4, jrbecart iframe forms)
- [CVE-2022-3007](https://cve.now/CVE-2022-3007.md): Unauthorized Access Vulnerability in Syska SW100 Smartwatch (CVSS 8.1, Syska Led Lights Pvt Syska SW100 Smartwatch)
- [CVE-2023-40681](https://cve.now/CVE-2023-40681.md): WordPress Groundhogg Plugin \<= 2.7.11.10 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Groundhogg)
- [CVE-2023-46622](https://cve.now/CVE-2023-46622.md): WordPress WPPizza Plugin \<= 3.18.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, ollybach WPPizza – A Restaurant Plugin)
- [CVE-2023-46313](https://cve.now/CVE-2023-46313.md): WordPress Zotpress Plugin \<= 7.3.4 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Katie Seaborn Zotpress)
- [CVE-2015-2968](https://cve.now/CVE-2015-2968.md): LINE@ for Android version 1.0.0 and LINE@ for iOS version 1.0.0 are vulnerable to MITM (man-in-the-middle) attack since the application allo (no CVSS, LINE@ for Android · LINE@ for iOS)
- [CVE-2015-0897](https://cve.now/CVE-2015-0897.md): LINE for Android version 5.0.2 and earlier and LINE for iOS version 5.0.0 and earlier are vulnerable to MITM (man-in-the-middle) attack sinc (no CVSS, LINE for Android · LINE for iOS)
- [CVE-2023-46312](https://cve.now/CVE-2023-46312.md): WordPress Smart Online Order for Clover Plugin \<= 1.5.4 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Zaytech Smart Online Order for Clover)
- [CVE-2023-5433](https://cve.now/CVE-2023-5433.md): Message ticker \<= 9.2 - Authenticated (Subscriber+) SQL Injection via Shortcode (CVSS 8.8, gopiplus Message ticker)
- [CVE-2023-5436](https://cve.now/CVE-2023-5436.md): Vertical marquee plugin \<= 7.1 - Authenticated (Subscriber+) SQL Injection via Shortcode (CVSS 8.8, gopiplushotmailcom Vertical marquee plugin)
- [CVE-2023-5437](https://cve.now/CVE-2023-5437.md): WP fade in text news \<= 12.0 - Authenticated (Subscriber+) SQL Injection via Shortcode (CVSS 8.8, gopiplus WP fade in text news)
- [CVE-2023-5438](https://cve.now/CVE-2023-5438.md): wp image slideshow \<= 12.0 - Authenticated (Subscriber+) SQL Injection via Shortcode (CVSS 8.8, gopiplus wp image slideshow)
- [CVE-2023-5431](https://cve.now/CVE-2023-5431.md): Left right image slideshow gallery \<= 12.0 - Authenticated (Subscriber+) SQL Injection via Shortcode (CVSS 8.8, gopiplus Left right image slideshow gallery)
- [CVE-2023-5429](https://cve.now/CVE-2023-5429.md): Information Reel \<= 10.0 - Authenticated (Subscriber+) SQL Injection via Shortcode (CVSS 8.8, gopiplus Information Reel)
- [CVE-2023-5439](https://cve.now/CVE-2023-5439.md): Wp photo text slider 50 \<= 8.0 - Authenticated (Subscriber+) SQL Injection via Shortcode (CVSS 8.8, gopiplus Wp photo text slider)
- [CVE-2023-5430](https://cve.now/CVE-2023-5430.md): Jquery news ticker \<= 3.0 - Authenticated (Subscriber+) SQL Injection via Shortcode (CVSS 8.8, gopiplushotmailcom Jquery news ticker)
- [CVE-2023-5434](https://cve.now/CVE-2023-5434.md): Superb slideshow gallery \<= 13.1 - Authenticated (Subscriber+) SQL Injection via Shortcode (CVSS 8.8, gopiplus Superb slideshow gallery)
- [CVE-2023-5435](https://cve.now/CVE-2023-5435.md): Up down image slideshow gallery \<= 12.0 - Authenticated (Subscriber+) SQL Injection via Shortcode (CVSS 8.8, gopiplus Up down image slideshow gallery)
- [CVE-2023-5412](https://cve.now/CVE-2023-5412.md): Image horizontal reel scroll slideshow \<= 13.2 - Authenticated (Subscriber+) SQL Injection via Shortcode (CVSS 8.8, gopiplus Image horizontal reel scroll slideshow)
- [CVE-2023-5464](https://cve.now/CVE-2023-5464.md): Jquery accordion slideshow \<= 8.1 - Authenticated (Subscriber+) SQL Injection via Shortcode (CVSS 8.8, gopi\_plus Jquery accordion slideshow)
- [CVE-2023-5428](https://cve.now/CVE-2023-5428.md): Image vertical reel scroll slideshow \<= 9.0 - Authenticated (Subscriber+) SQL Injection via Shortcode (CVSS 8.8, gopiplus Image vertical reel scroll slideshow)
- [CVE-2023-5873](https://cve.now/CVE-2023-5873.md): Cross-site Scripting (XSS) - Stored in pimcore/pimcore (CVSS 4.0, pimcore/pimcore)
- [CVE-2023-46210](https://cve.now/CVE-2023-46210.md): WordPress WC Captcha Plugin \<= 1.4 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, WebCource WC Captcha)
- [CVE-2023-5866](https://cve.now/CVE-2023-5866.md): Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in thorsten/phpmyfaq (CVSS 6.3, thorsten/phpmyfaq)
- [CVE-2023-5867](https://cve.now/CVE-2023-5867.md): Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq (CVSS 4.6, thorsten/phpmyfaq)
- [CVE-2023-5865](https://cve.now/CVE-2023-5865.md): Insufficient Session Expiration in thorsten/phpmyfaq (CVSS 7.6, thorsten/phpmyfaq)
- [CVE-2023-5864](https://cve.now/CVE-2023-5864.md): Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq (CVSS 7.4, thorsten/phpmyfaq)
- [CVE-2023-5863](https://cve.now/CVE-2023-5863.md): Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq (CVSS 7.4, thorsten/phpmyfaq)
- [CVE-2023-5861](https://cve.now/CVE-2023-5861.md): Cross-site Scripting (XSS) - Stored in microweber/microweber (CVSS 6.4, microweber/microweber)
- [CVE-2023-5862](https://cve.now/CVE-2023-5862.md): Missing Authorization in hamza417/inure (CVSS 5.1, hamza417/inure)
- [CVE-2015-20110](https://cve.now/CVE-2015-20110.md): JHipster generator-jhipster before 2.23.0 allows a timing attack against validateToken due to a string comparison that stops at the first ch (no CVSS, generator-jhipster)
- [CVE-2019-25155](https://cve.now/CVE-2019-25155.md): DOMPurify before 1.0.11 allows reverse tabnabbing in demos/hooks-target-blank-demo.html because links lack a 'rel="noopener noreferrer"' att (no CVSS, dompurify)
- [CVE-2023-27846](https://cve.now/CVE-2023-27846.md): SQL injection vulnerability found in PrestaShop themevolty v.4.0.8 and before allow a remote attacker to gain privileges via the tvcmsblog, (no CVSS)
- [CVE-2023-31794](https://cve.now/CVE-2023-31794.md): MuPDF v1.21.1 was discovered to contain an infinite recursion in the component pdf\_mark\_list\_push. (no CVSS)
- [CVE-2023-36263](https://cve.now/CVE-2023-36263.md): Prestashop opartlimitquantity 1.4.5 and before is vulnerable to SQL Injection. (CVSS 9.8)
- [CVE-2023-37831](https://cve.now/CVE-2023-37831.md): An issue discovered in Elenos ETG150 FM transmitter v3.12 allows attackers to enumerate user accounts based on server responses when credent (no CVSS)
- [CVE-2023-37832](https://cve.now/CVE-2023-37832.md): A lack of rate limiting in Elenos ETG150 FM transmitter v3.12 allows attackers to obtain user credentials via brute force and cause other un (no CVSS)
- [CVE-2023-37833](https://cve.now/CVE-2023-37833.md): Improper access control in Elenos ETG150 FM transmitter v3.12 allows attackers to make arbitrary configuration edits that are only accessed (no CVSS)
- [CVE-2023-38994](https://cve.now/CVE-2023-38994.md): The 'check\_univention\_joinstatus' prometheus monitoring script (and other scripts) in UCS 5.0-5 revealed the LDAP plaintext password of the (CVSS 7.9)
- [CVE-2023-39610](https://cve.now/CVE-2023-39610.md): An issue in TP-Link Tapo C100 v1.1.15 Build 211130 Rel.15378n(4555) and before allows attackers to cause a Denial of Service (DoS) via suppl (no CVSS)
- [CVE-2023-39695](https://cve.now/CVE-2023-39695.md): Insufficient session expiration in Elenos ETG150 FM Transmitter v3.12 allows attackers to arbitrarily change transmitter configuration and d (no CVSS)
- [CVE-2023-42425](https://cve.now/CVE-2023-42425.md): An issue in Turing Video Turing Edge+ EVC5FD v.1.38.6 allows remote attacker to execute arbitrary code and obtain sensitive information via (no CVSS)
- [CVE-2023-43139](https://cve.now/CVE-2023-43139.md): An issue in franfinance before v.2.0.27 allows a remote attacker to execute arbitrary code via the validation.php, and controllers/front/val (no CVSS)
- [CVE-2023-43295](https://cve.now/CVE-2023-43295.md): Cross Site Request Forgery vulnerability in Click Studios (SA) Pty Ltd Passwordstate v.Build 9785 and before allows a local attacker to exec (no CVSS)
- [CVE-2023-45378](https://cve.now/CVE-2023-45378.md): In the module "PrestaBlog" (prestablog) version 4.4.7 and before from HDclic for PrestaShop, a guest can perform SQL injection. (no CVSS)
- [CVE-2023-45899](https://cve.now/CVE-2023-45899.md): An issue in the component SuperUserSetuserModuleFrontController:init() of idnovate superuser before v2.4.2 allows attackers to bypass authen (no CVSS)
- [CVE-2023-45955](https://cve.now/CVE-2023-45955.md): An issue discovered in Nanoleaf Light strip v3.5.10 allows attackers to cause a denial of service via crafted write binding attribute comman (no CVSS)
- [CVE-2023-45996](https://cve.now/CVE-2023-45996.md): SQL injection vulnerability in Senayan Library Management Systems Slims v.9 and Bulian v.9.6.1 allows a remote attacker to obtain sensitive (no CVSS)
- [CVE-2023-46040](https://cve.now/CVE-2023-46040.md): Cross Site Scripting vulnerability in GetSimpleCMS v.3.4.0a allows a remote attacker to execute arbitrary code via the a crafted payload to (no CVSS)
- [CVE-2023-46356](https://cve.now/CVE-2023-46356.md): In the module "CSV Feeds PRO" (csvfeeds) before 2.6.1 from Bl Modules for PrestaShop, a guest can perform SQL injection. (no CVSS)
- [CVE-2023-46361](https://cve.now/CVE-2023-46361.md): Artifex Software jbig2dec v0.20 was discovered to contain a SEGV vulnerability via jbig2\_error at /jbig2dec/jbig2.c. (no CVSS)
- [CVE-2023-46378](https://cve.now/CVE-2023-46378.md): Stored Cross Site Scripting (XSS) vulnerability in MiniCMS 1.1.1 allows attackers to run arbitrary code via crafted string appended to /mc-a (no CVSS)
- [CVE-2023-46451](https://cve.now/CVE-2023-46451.md): Best Courier Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in the change username field. (no CVSS)
- [CVE-2023-46484](https://cve.now/CVE-2023-46484.md): An issue in TOTOlink X6000R V9.4.0cu.852\_B20230719 allows a remote attacker to execute arbitrary code via the setLedCfg function. (CVSS 9.8)
- [CVE-2023-46485](https://cve.now/CVE-2023-46485.md): An issue in TOTOlink X6000R V9.4.0cu.852\_B20230719 allows a remote attacker to execute arbitrary code via the setTracerouteCfg function of t (CVSS 9.8)
- [CVE-2023-46976](https://cve.now/CVE-2023-46976.md): TOTOLINK A3300R 17.0.0cu.557\_B20221024 contains a command injection via the file\_name parameter in the UploadFirmwareFile function. (CVSS 9.8)
- [CVE-2023-46977](https://cve.now/CVE-2023-46977.md): TOTOLINK LR1200GB V9.1.0u.6619\_B20230130 was discovered to contain a stack overflow via the password parameter in the function loginAuth. (CVSS 9.8)
- [CVE-2023-46978](https://cve.now/CVE-2023-46978.md): TOTOLINK X6000R V9.4.0cu.852\_B20230719 is vulnerable to Incorrect Access Control.Attackers can reset login password & WIFI passwords without (CVSS 7.5)
- [CVE-2023-46979](https://cve.now/CVE-2023-46979.md): TOTOLINK X6000R V9.4.0cu.852\_B20230719 was discovered to contain a command injection vulnerability via the enable parameter in the setLedCfg (CVSS 9.8)
- [CVE-2023-46992](https://cve.now/CVE-2023-46992.md): TOTOLINK A3300R V17.0.0cu.557\_B20221024 is vulnerable to Incorrect Access Control. (CVSS 7.5)
- [CVE-2023-46993](https://cve.now/CVE-2023-46993.md): In TOTOLINK A3300R V17.0.0cu.557\_B20221024 when dealing with setLedCfg request, there is no verification for the enable parameter, which can (CVSS 9.8)
- [CVE-2023-47094](https://cve.now/CVE-2023-47094.md): A Stored Cross-Site Scripting (XSS) vulnerability in the Account Plans tab of System Settings in Virtualmin 7.7 allows remote attackers to i (no CVSS)
- [CVE-2023-47095](https://cve.now/CVE-2023-47095.md): A Stored Cross-Site Scripting (XSS) vulnerability in the Custom fields of Edit Virtual Server under System Customization in Virtualmin 7.7 a (no CVSS)
- [CVE-2023-47096](https://cve.now/CVE-2023-47096.md): A Reflected Cross-Site Scripting (XSS) vulnerability in the Cloudmin Services Client under System Setting in Virtualmin 7.7 allows remote at (no CVSS)
- [CVE-2023-47097](https://cve.now/CVE-2023-47097.md): A Stored Cross-Site Scripting (XSS) vulnerability in the Server Template under System Setting in Virtualmin 7.7 allows remote attackers to i (no CVSS)
- [CVE-2023-47098](https://cve.now/CVE-2023-47098.md): A Stored Cross-Site Scripting (XSS) vulnerability in the Manage Extra Admins under Administration Options in Virtualmin 7.7 allows remote at (no CVSS)
- [CVE-2023-47099](https://cve.now/CVE-2023-47099.md): A Stored Cross-Site Scripting (XSS) vulnerability in the Create Virtual Server in Virtualmin 7.7 allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2023-47174](https://cve.now/CVE-2023-47174.md): Thorn SFTP gateway 3.4.x before 3.4.4 uses Pivotal Spring Framework for Java deserialization of untrusted data, which is not supported by Pi (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-10-31
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.