# CVEs published 2023-11-03

103 CVEs were published on November 3, 2023: 13 critical, 46 high. Days are UTC.

- [CVE-2023-40215](https://cve.now/CVE-2023-40215.md): WordPress Demon image annotation Plugin \<= 5.1 is vulnerable to SQL Injection (CVSS 7.6, Demonisblack demon image annotation)
- [CVE-2023-35910](https://cve.now/CVE-2023-35910.md): WordPress Quasar form Plugin \<= 6.0 is vulnerable to SQL Injection (CVSS 8.5, Nucleus\_genius Quasar form free – Contact Form Builder for…)
- [CVE-2023-38391](https://cve.now/CVE-2023-38391.md): WordPress Onepage Builder – Easiest Landing Page Builder For WordPress Plugin \<= 2.4.1 is vulnerable to SQL Injection (CVSS 6.7, Themesgrove Onepage Builder)
- [CVE-2023-32741](https://cve.now/CVE-2023-32741.md): WordPress Contact Form to Any API Plugin \<= 1.1.2 is vulnerable to SQL Injection (CVSS 7.6, IT Path Solutions PVT Contact Form to Any API)
- [CVE-2023-36677](https://cve.now/CVE-2023-36677.md): WordPress SP Project & Document Manager Plugin \<= 4.67 is vulnerable to SQL Injection (CVSS 8.3, Smartypants SP Project & Document Manager)
- [CVE-2023-45189](https://cve.now/CVE-2023-45189.md): IBM Robotic Process Automation information disclosure (CVSS 6.5, IBM Robotic Process Automation)
- [CVE-2023-41726](https://cve.now/CVE-2023-41726.md): Ivanti Avalanche Incorrect Default Permissions allows Local Privilege Escalation Vulnerability (CVSS 7.8, Ivanti Avalanche)
- [CVE-2023-41725](https://cve.now/CVE-2023-41725.md): Ivanti Avalanche EnterpriseServer Service Unrestricted File Upload Local Privilege Escalation Vulnerability (CVSS 7.8, Ivanti Avalanche)
- [CVE-2022-43554](https://cve.now/CVE-2022-43554.md): Ivanti Avalanche Smart Device Service Missing Authentication Local Privilege Escalation Vulnerability (CVSS 7.8, Ivanti Avalanche)
- [CVE-2022-43555](https://cve.now/CVE-2022-43555.md): Ivanti Avalanche Printer Device Service Missing Authentication Local Privilege Escalation Vulnerability (CVSS 7.8, Ivanti Avalanche)
- [CVE-2022-44569](https://cve.now/CVE-2022-44569.md): A locally authenticated attacker with low privileges can bypass authentication due to insecure inter-process communication. (CVSS 8.8, Ivanti Automation)
- [CVE-2022-3172](https://cve.now/CVE-2022-3172.md): Kubernetes - API server - Aggregated API server can cause clients to be redirected (SSRF) (CVSS 5.1, Kubernetes kube-apiserver)
- [CVE-2023-3893](https://cve.now/CVE-2023-3893.md): Kubernetes - csi-proxy - Insufficient input sanitization leads to privilege escalation (CVSS 8.8, Kubernetes csi-proxy · github.com/kubernetes-csi/csi-pro… +1)
- [CVE-2023-36529](https://cve.now/CVE-2023-36529.md): WordPress Houzez CRM Plugin \<= 1.3.4 is vulnerable to SQL Injection (CVSS 9.9, Favethemes Houzez - Real Estate WordPress Theme)
- [CVE-2023-34179](https://cve.now/CVE-2023-34179.md): WordPress Groundhogg Plugin \<= 2.7.11 is vulnerable to SQL Injection (CVSS 7.6, Groundhogg)
- [CVE-2023-25700](https://cve.now/CVE-2023-25700.md): WordPress Tutor LMS Plugin \<= 2.1.10 is vulnerable to SQL Injection (CVSS 8.2, Themeum Tutor LMS)
- [CVE-2023-39301](https://cve.now/CVE-2023-39301.md): QTS, QuTS hero, QuTScloud (CVSS 4.3, QNAP Systems QTS · QNAP Systems QuTS hero +1)
- [CVE-2023-39299](https://cve.now/CVE-2023-39299.md): Music Station (CVSS 7.5, QNAP Systems Music Station)
- [CVE-2023-23369](https://cve.now/CVE-2023-23369.md): QTS, Multimedia Console, and Media Streaming add-on (CVSS 9.0, QNAP Systems Multimedia Console · QNAP Systems QTS +1)
- [CVE-2023-23368](https://cve.now/CVE-2023-23368.md): QTS, QuTS hero, QuTScloud (CVSS 9.8, QNAP Systems QTS · QNAP Systems QuTS hero +1)
- [CVE-2023-25800](https://cve.now/CVE-2023-25800.md): WordPress Tutor LMS Plugin \<= 2.2.0 is vulnerable to SQL Injection (CVSS 8.1, Themeum Tutor LMS)
- [CVE-2023-25990](https://cve.now/CVE-2023-25990.md): WordPress Tutor LMS Plugin \<= 2.1.10 is vulnerable to SQL Injection (CVSS 7.1, Themeum Tutor LMS)
- [CVE-2023-32508](https://cve.now/CVE-2023-32508.md): WordPress Order Your Posts Manually Plugin \<= 2.2.5 is vulnerable to SQL Injection (CVSS 7.6, Rolf van Gelder Order Your Posts Manually)
- [CVE-2023-32121](https://cve.now/CVE-2023-32121.md): WordPress Zero Spam Plugin \<= 5.4.4 is vulnerable to SQL Injection (CVSS 7.6, Highfivery Zero Spam for WordPress)
- [CVE-2022-46818](https://cve.now/CVE-2022-46818.md): WordPress Email posts to subscribers Plugin \<= 6.2 is vulnerable to SQL Injection (CVSS 8.2, Gopi Ramasamy Email posts to subscribers)
- [CVE-2023-5088](https://cve.now/CVE-2023-5088.md): Qemu: improper ide controller reset can lead to mbr overwrite (CVSS 6.4, Red Hat Enterprise Linux)
- [CVE-2023-5946](https://cve.now/CVE-2023-5946.md): The Digirisk plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'current\_group\_id' parameter in version 6.0.0.0 du (CVSS 6.1, evarisk Digirisk)
- [CVE-2022-47426](https://cve.now/CVE-2022-47426.md): WordPress Neshan Maps Plugin \<= 1.1.4 is vulnerable to SQL Injection (CVSS 6.0, Neshan Maps Platform Neshan Maps)
- [CVE-2022-46859](https://cve.now/CVE-2022-46859.md): WordPress Spiffy Calendar Plugin \<= 4.9.1 is vulnerable to SQL Injection (CVSS 8.5, Spiffy Plugins Spiffy Calendar)
- [CVE-2023-26015](https://cve.now/CVE-2023-26015.md): WordPress MapPress Maps for WordPress Plugin \<= 2.85.4 is vulnerable to SQL Injection (CVSS 7.1, Chris Richardson MapPress Maps for WordPress)
- [CVE-2022-46808](https://cve.now/CVE-2022-46808.md): WordPress ARMember Plugin \<= 3.4.11 is vulnerable to SQL Injection (CVSS 8.2, Repute Infosystems ARMember)
- [CVE-2023-3961](https://cve.now/CVE-2023-3961.md): Samba: smbd allows client access to unix domain sockets on the file system as root (CVSS 9.1, Red Hat Enterprise Linux · Red Hat Virtualization 4 for… +1)
- [CVE-2023-5945](https://cve.now/CVE-2023-5945.md): The video carousel slider with lightbox plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. (CVSS 4.3, nik00726 video carousel slider with lightbox)
- [CVE-2023-5707](https://cve.now/CVE-2023-5707.md): SEO Slider \<= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, seothemes SEO Slider)
- [CVE-2022-47445](https://cve.now/CVE-2022-47445.md): WordPress Be POPIA Compliant Plugin \<= 1.2.0 is vulnerable to SQL Injection (CVSS 8.2, Web-X Be POPIA Compliant)
- [CVE-2023-25960](https://cve.now/CVE-2023-25960.md): WordPress Zendrop – Global Dropshipping Plugin \<= 1.0.0 is vulnerable to SQL Injection (CVSS 10.0, Zendrop – Global Dropshipping)
- [CVE-2022-45805](https://cve.now/CVE-2022-45805.md): WordPress Paytm Payment Gateway Plugin \<= 2.7.3 is vulnerable to SQL Injection (CVSS 8.2, Paytm Payment Gateway)
- [CVE-2023-3277](https://cve.now/CVE-2023-3277.md): MStore API \<= 4.10.7 - Unauthorized Account Access and Privilege Escalation (CVSS 9.8, inspireui MStore API – Create Native Android & iOS Apps On…)
- [CVE-2022-47588](https://cve.now/CVE-2022-47588.md): WordPress Simple Photo Gallery Plugin \<= v1.8.1 is vulnerable to SQL Injection (CVSS 6.7, Tips and Tricks HQ, Peter Petreski Simple Photo Gallery)
- [CVE-2023-34383](https://cve.now/CVE-2023-34383.md): WordPress WP Project Manager Plugin \<= 2.6.0 is vulnerable to SQL Injection (CVSS 8.5, weDevs WP Project Manager)
- [CVE-2023-41652](https://cve.now/CVE-2023-41652.md): WordPress RSVPMarker Plugin \<= 10.6.6 is vulnerable to SQL Injection (CVSS 8.2, David F. Carr RSVPMaker)
- [CVE-2023-4592](https://cve.now/CVE-2023-4592.md): Improper Neutralization of Input During Web Page Generation in WPN-XM Serverstack (CVSS 6.1, WPN-XM Serverstack)
- [CVE-2023-4591](https://cve.now/CVE-2023-4591.md): Inclusion of Functionality from Untrusted Control Sphere in WPN-XM Serverstack (CVSS 7.5, WPN-XM Serverstack)
- [CVE-2023-4769](https://cve.now/CVE-2023-4769.md): Server-Side Request Forgery in ManageEngine Desktop Central (CVSS 6.6, ManageEngine Desktop Central)
- [CVE-2023-4768](https://cve.now/CVE-2023-4768.md): Improper Neutralization of CRLF Sequences in ManageEngine Desktop Central (CVSS 6.1, ManageEngine Desktop Central)
- [CVE-2023-4767](https://cve.now/CVE-2023-4767.md): Improper Neutralization of CRLF Sequences in ManageEngine Desktop Central (CVSS 6.1, ManageEngine Desktop Central)
- [CVE-2023-4043](https://cve.now/CVE-2023-4043.md): Parsson DoS when parsing numbers from untrusted sources (CVSS 5.9, Eclipse Foundation Parsson · org.eclipse.parsson:project)
- [CVE-2023-1476](https://cve.now/CVE-2023-1476.md): Kpatch: mm/mremap.c: incomplete fix for cve-2022-41222 (CVSS 7.0, Red Hat Enterprise Linux)
- [CVE-2023-46847](https://cve.now/CVE-2023-46847.md): Squid: denial of service in http digest authentication (CVSS 8.6, squid · Red Hat Enterprise Linux 6 Extended Lifecycle Su… +1)
- [CVE-2023-46848](https://cve.now/CVE-2023-46848.md): Squid: denial of service in ftp (CVSS 8.6, squid · Red Hat Enterprise Linux)
- [CVE-2023-42670](https://cve.now/CVE-2023-42670.md): Samba: ad dc busy rpc multiple listener dos (CVSS 6.5, samba · Red Hat Enterprise Linux +1)
- [CVE-2023-5824](https://cve.now/CVE-2023-5824.md): Squid: dos against http and https (CVSS 7.5, Red Hat Enterprise Linux)
- [CVE-2023-4091](https://cve.now/CVE-2023-4091.md): Samba: smb clients can truncate files with read-only permissions (CVSS 6.5, Red Hat Enterprise Linux · Red Hat Virtualization 4 for… +1)
- [CVE-2023-1194](https://cve.now/CVE-2023-1194.md): Use-after-free in parse\_lease\_state() (CVSS 7.1, kernel · Red Hat Enterprise Linux +1)
- [CVE-2023-46846](https://cve.now/CVE-2023-46846.md): Squid: request/response smuggling in http/1.1 and icap (CVSS 9.3, squid · Red Hat Enterprise Linux 7 Extended Lifecycle Su… +1)
- [CVE-2023-5763](https://cve.now/CVE-2023-5763.md): Glassfish remote code execution (CVSS 6.8, Eclipse Foundation Glassfish · org.glassfish.main.orb:orb-c…)
- [CVE-2023-5948](https://cve.now/CVE-2023-5948.md): Improper Authorization in teamamaze/amazefileutilities (CVSS 8.2, teamamaze/amazefileutilities)
- [CVE-2023-41356](https://cve.now/CVE-2023-41356.md): WisdomGarden Tronclass ilearn - Path Traversal (CVSS 6.5, WisdomGarden Tronclass ilearn)
- [CVE-2023-41357](https://cve.now/CVE-2023-41357.md): Galaxy Software Services Vitals ESP - Arbitrary File Upload (CVSS 8.8, Galaxy Software Services Vitals ESP)
- [CVE-2023-41344](https://cve.now/CVE-2023-41344.md): NCSIST ManageEngine MDM - Path Traversal (CVSS 7.5, NCSIST ManageEngine MDM)
- [CVE-2023-41355](https://cve.now/CVE-2023-41355.md): Chunghwa Telecom NOKIA G-040W-Q - Improper Input Validation (CVSS 9.8, Chunghwa Telecom NOKIA G-040W-Q)
- [CVE-2023-41354](https://cve.now/CVE-2023-41354.md): Chunghwa Telecom NOKIA G-040W-Q - Exposure of Sensitive Information (CVSS 4.0, Chunghwa Telecom NOKIA G-040W-Q)
- [CVE-2023-41353](https://cve.now/CVE-2023-41353.md): Chunghwa Telecom NOKIA G-040W-Q - Weak Password Requirements (CVSS 8.8, Chunghwa Telecom NOKIA G-040W-Q)
- [CVE-2023-41352](https://cve.now/CVE-2023-41352.md): Chunghwa Telecom NOKIA G-040W-Q - Command Injection (CVSS 7.2, Chunghwa Telecom NOKIA G-040W-Q)
- [CVE-2023-41351](https://cve.now/CVE-2023-41351.md): Chunghwa Telecom NOKIA G-040W-Q - Broken Access Control (CVSS 9.8, Chunghwa Telecom NOKIA G-040W-Q)
- [CVE-2023-41350](https://cve.now/CVE-2023-41350.md): Chunghwa Telecom NOKIA G-040W-Q - Excessive Authentication Attempts (CVSS 7.5, Chunghwa Telecom NOKIA G-040W-Q)
- [CVE-2023-41348](https://cve.now/CVE-2023-41348.md): ASUS RT-AX55 - command injection - 4 (CVSS 8.8, ASUS RT-AX55)
- [CVE-2023-41347](https://cve.now/CVE-2023-41347.md): ASUS RT-AX55 - command injection - 3 (CVSS 8.8, ASUS RT-AX55)
- [CVE-2023-41346](https://cve.now/CVE-2023-41346.md): ASUS RT-AX55 - command injection - 2 (CVSS 8.8, ASUS RT-AX55)
- [CVE-2023-41345](https://cve.now/CVE-2023-41345.md): ASUS RT-AX55 - command injection - 1 (CVSS 8.8, ASUS RT-AX55)
- [CVE-2023-41343](https://cve.now/CVE-2023-41343.md): Ragic No-Code Database Builder - Stored XSS (CVSS 5.4, Ragic No-Code Database Builder)
- [CVE-2023-35896](https://cve.now/CVE-2023-35896.md): IBM Content Navigator server-side request forgery (CVSS 5.4, IBM Content Navigator)
- [CVE-2023-36022](https://cve.now/CVE-2023-36022.md): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (CVSS 6.6, Microsoft Edge)
- [CVE-2023-36029](https://cve.now/CVE-2023-36029.md): Microsoft Edge (Chromium-based) Spoofing Vulnerability (CVSS 4.3, Microsoft Edge for Android)
- [CVE-2023-36034](https://cve.now/CVE-2023-36034.md): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (CVSS 7.3, Microsoft Edge)
- [CVE-2023-46176](https://cve.now/CVE-2023-46176.md): IBM MQ privilege escalation (CVSS 6.7, IBM MQ Appliance)
- [CVE-2017-7252](https://cve.now/CVE-2017-7252.md): bcrypt password hashing in Botan before 2.1.0 does not correctly handle passwords with a length between 57 and 72 characters, which makes it (no CVSS)
- [CVE-2020-28407](https://cve.now/CVE-2020-28407.md): In swtpm before 0.4.2 and 0.5.x before 0.5.1, a local attacker may be able to overwrite arbitrary files via a symlink attack against a tempo (no CVSS)
- [CVE-2023-31102](https://cve.now/CVE-2023-31102.md): Ppmd7.c in 7-Zip before 23.00 allows an integer underflow and invalid read operation via a crafted 7Z archive. (CVSS 7.8)
- [CVE-2023-34259](https://cve.now/CVE-2023-34259.md): Kyocera TASKalfa 4053ci printers through 2VG\_S000.002.561 allow /wlmdeu%2f%2e%2e%2f%2e%2e directory traversal to read arbitrary files on the (CVSS 4.9)
- [CVE-2023-34260](https://cve.now/CVE-2023-34260.md): Kyocera TASKalfa 4053ci printers through 2VG\_S000.002.561 allow a denial of service (service outage) via /wlmdeu%2f%2e%2e%2f%2e%2e followed (no CVSS)
- [CVE-2023-34261](https://cve.now/CVE-2023-34261.md): Kyocera TASKalfa 4053ci printers through 2VG\_S000.002.561 allow identification of valid user accounts via username enumeration because they (no CVSS)
- [CVE-2023-36620](https://cve.now/CVE-2023-36620.md): An issue was discovered in the Boomerang Parental Control application before 13.83 for Android. (no CVSS)
- [CVE-2023-36621](https://cve.now/CVE-2023-36621.md): An issue was discovered in the Boomerang Parental Control application through 13.83 for Android. (no CVSS)
- [CVE-2023-38965](https://cve.now/CVE-2023-38965.md): Lost and Found Information System 1.0 allows account takeover via username and password to a /classes/Users.php?f=save URI. (no CVSS)
- [CVE-2023-41164](https://cve.now/CVE-2023-41164.md): In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uri\_to\_iri() is subject to a potential DoS (deni (no CVSS, django)
- [CVE-2023-41259](https://cve.now/CVE-2023-41259.md): Best Practical Request Tracker (RT) before 4.4.7 and 5.x before 5.0.5 allows Information Disclosure via fake or spoofed RT email headers in (no CVSS)
- [CVE-2023-41260](https://cve.now/CVE-2023-41260.md): Best Practical Request Tracker (RT) before 4.4.7 and 5.x before 5.0.5 allows Information Exposure in responses to mail-gateway REST API call (no CVSS)
- [CVE-2023-41914](https://cve.now/CVE-2023-41914.md): SchedMD Slurm 23.02.x before 23.02.6 and 22.05.x before 22.05.10 allows filesystem race conditions for gaining ownership of a file, overwrit (no CVSS)
- [CVE-2023-43665](https://cve.now/CVE-2023-43665.md): In Django 3.2 before 3.2.22, 4.1 before 4.1.12, and 4.2 before 4.2.6, the django.utils.text.Truncator chars() and words() methods (when used (no CVSS, django)
- [CVE-2023-43982](https://cve.now/CVE-2023-43982.md): Bon Presta boninstagramcarousel between v5.2.1 to v7.0.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the url paramete (no CVSS)
- [CVE-2023-44271](https://cve.now/CVE-2023-44271.md): An issue was discovered in Pillow before 10.0.0. (no CVSS, pillow)
- [CVE-2023-45024](https://cve.now/CVE-2023-45024.md): Best Practical Request Tracker (RT) 5 before 5.0.5 allows Information Disclosure via a transaction search in the transaction query builder. (CVSS 7.5)
- [CVE-2023-45360](https://cve.now/CVE-2023-45360.md): An issue was discovered in MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. (CVSS 5.4)
- [CVE-2023-45362](https://cve.now/CVE-2023-45362.md): An issue was discovered in DifferenceEngine.php in MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. (no CVSS)
- [CVE-2023-46404](https://cve.now/CVE-2023-46404.md): PCRS \<= 3.11 (d0de1e) “Questions” page and “Code editor” page are vulnerable to remote code execution (RCE) by escaping Python sandboxing. (CVSS 9.9)
- [CVE-2023-46817](https://cve.now/CVE-2023-46817.md): An issue was discovered in phpFox before 4.8.14. (CVSS 9.8)
- [CVE-2023-46947](https://cve.now/CVE-2023-46947.md): Subrion 4.2.1 has a remote command execution vulnerability in the backend. (CVSS 8.8, intelliants/subrion)
- [CVE-2023-46954](https://cve.now/CVE-2023-46954.md): SQL Injection vulnerability in Relativity ODA LLC RelativityOne v.12.1.537.3 Patch 2 and earlier allows a remote attacker to execute arbitra (CVSS 9.8)
- [CVE-2023-46980](https://cve.now/CVE-2023-46980.md): An issue in Best Courier Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted sc (CVSS 9.8)
- [CVE-2023-47233](https://cve.now/CVE-2023-47233.md): The brcm80211 component in the Linux kernel through 6.5.10 has a brcmf\_cfg80211\_detach use-after-free in the device unplugging (disconnect t (CVSS 4.3)
- [CVE-2023-47234](https://cve.now/CVE-2023-47234.md): An issue was discovered in FRRouting FRR through 9.0.1. (CVSS 7.5)
- [CVE-2023-47235](https://cve.now/CVE-2023-47235.md): An issue was discovered in FRRouting FRR through 9.0.1. (CVSS 6.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-11-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.