# CVEs published 2023-11-04

8 CVEs were published on November 4, 2023: 0 critical, 1 high. Days are UTC.

- [CVE-2023-40922](https://cve.now/CVE-2023-40922.md): kerawen before v2.5.1 was discovered to contain a SQL injection vulnerability via the ocs\_id\_cart parameter at KerawenDeliveryModuleFrontCon (no CVSS)
- [CVE-2023-46380](https://cve.now/CVE-2023-46380.md): LOYTEC LINX-151, LINX-212, LVIS-3ME12-A1, LIOB-586, LIOB-580 V2, LIOB-588, L-INX Configurator devices (all versions) send password-change re (CVSS 7.5)
- [CVE-2023-46381](https://cve.now/CVE-2023-46381.md): LOYTEC LINX-151, LINX-212, LVIS-3ME12-A1, LIOB-586, LIOB-580 V2, LIOB-588, L-INX Configurator devices (all versions) lack authentication for (no CVSS)
- [CVE-2023-46382](https://cve.now/CVE-2023-46382.md): LOYTEC LINX-151, LINX-212, LVIS-3ME12-A1, LIOB-586, LIOB-580 V2, LIOB-588, L-INX Configurator devices (all versions) use cleartext HTTP for (no CVSS)
- [CVE-2023-46963](https://cve.now/CVE-2023-46963.md): An issue in Beijing Yunfan Internet Technology Co., Ltd, Yunfan Learning Examination System v.6.5 allows a remote attacker to obtain sensiti (no CVSS)
- [CVE-2023-46964](https://cve.now/CVE-2023-46964.md): Cross Site Scripting (XSS) vulnerability in Hillstone Next Generation FireWall SG-6000-e3960 v.5.5 allows a remote attacker to execute arbit (no CVSS, Hillstone Next Generation FireWall SG-6000-E3960)
- [CVE-2023-46981](https://cve.now/CVE-2023-46981.md): SQL injection vulnerability in Novel-Plus v.4.2.0 allows a remote attacker to execute arbitrary code via a crafted script to the sort parame (no CVSS)
- [CVE-2023-47249](https://cve.now/CVE-2023-47249.md): In International Color Consortium DemoIccMAX 79ecb74, a CIccXmlArrayType:::ParseText function (for unsigned short) in IccUtilXml.cpp in libI (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-11-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.