# CVEs published 2023-11-06

116 CVEs were published on November 6, 2023: 9 critical, 40 high. Days are UTC.

- [CVE-2023-36409](https://cve.now/CVE-2023-36409.md): Microsoft Edge (Chromium-based) Information Disclosure Vulnerability (CVSS 6.5, Microsoft Edge)
- [CVE-2023-36769](https://cve.now/CVE-2023-36769.md): Microsoft OneNote Spoofing Vulnerability (CVSS 4.6, Microsoft Office · Microsoft OneNote)
- [CVE-2023-5605](https://cve.now/CVE-2023-5605.md): URL Shortify \< 1.7.9.1 - Admin+ Stored XSS (no CVSS, URL Shortify)
- [CVE-2023-5355](https://cve.now/CVE-2023-5355.md): Awesome Support \< 6.1.5 - Submitter+ Arbitrary File Deletion (CVSS 8.1, Awesome Support)
- [CVE-2023-5601](https://cve.now/CVE-2023-5601.md): WooCommerce Ninja Forms Product Add-ons \< 1.7.1 - Unauthenticated Arbitrary File Upload (CVSS 9.8, WooCommerce Ninja Forms Product Add-ons)
- [CVE-2023-5530](https://cve.now/CVE-2023-5530.md): Ninja Forms \< 3.6.34 - Admin+ Stored XSS (no CVSS, Ninja Forms Contact Form)
- [CVE-2023-5181](https://cve.now/CVE-2023-5181.md): WP Discord Invite \< 2.5.2 - Admin+ Stored Cross Site Scripting (CVSS 4.8, WP Discord Invite)
- [CVE-2023-4858](https://cve.now/CVE-2023-4858.md): WP Simple Table Manager Plugin \<= 1.5.6 - Admin+ Stored Cross-Site Scripting (CVSS 4.8, Simple Table Manager)
- [CVE-2023-4810](https://cve.now/CVE-2023-4810.md): Responsive Pricing Table \< 5.1.8 - Admin+ Stored Cross-Site Scriping (CVSS 4.8, Responsive Pricing Table)
- [CVE-2023-4930](https://cve.now/CVE-2023-4930.md): Front End PM \< 11.4.3 - Sensitive Data Exposure via Directory Listing (CVSS 6.5, Front End PM)
- [CVE-2023-5352](https://cve.now/CVE-2023-5352.md): Awesome Support \< 6.1.5 - Insufficient permission check in wpas\_edit\_reply (CVSS 4.3, Awesome Support)
- [CVE-2023-5228](https://cve.now/CVE-2023-5228.md): User Registration \< 3.0.4.2 - Admin+ Stored XSS (CVSS 4.8, User Registration)
- [CVE-2023-5082](https://cve.now/CVE-2023-5082.md): History Log by click5 \< 1.0.13 - Admin+ Time-Based Blind SQL Injection (CVSS 7.2, History Log by click5)
- [CVE-2023-5354](https://cve.now/CVE-2023-5354.md): Awesome Support \< 6.1.5 - Reflected Cross-Site Scripting (CVSS 6.1, Awesome Support)
- [CVE-2023-5454](https://cve.now/CVE-2023-5454.md): Templately \< 2.2.6 - Arbitrary post trashing via Missing Authorization (CVSS 7.5, Templately)
- [CVE-2023-5771](https://cve.now/CVE-2023-5771.md): HTML injection in AdminUI through email subject (CVSS 6.1, Proofpoint Enterprise Protection)
- [CVE-2023-5719](https://cve.now/CVE-2023-5719.md): Red Lion Crimson Improper Neutralization of Null Byte or NUL Character (CVSS 8.8, Red Lion Crimson)
- [CVE-2023-5777](https://cve.now/CVE-2023-5777.md): Weintek EasyBuilder Pro Use of Hard-coded Credentials (CVSS 9.8, Weintek EasyBuilder Pro)
- [CVE-2023-46731](https://cve.now/CVE-2023-46731.md): Remote code execution through the section parameter in Administration as guest in XWiki Platform (CVSS 10.0, xwiki-platform · org.xwiki.platform:xwiki-platform-admin… +1)
- [CVE-2023-46732](https://cve.now/CVE-2023-46732.md): Reflected Cross-site scripting through revision parameter in content menu in XWiki Platform (CVSS 9.7, xwiki-platform · org.xwiki.platform:xwiki-platform-flamingo…)
- [CVE-2023-46254](https://cve.now/CVE-2023-46254.md): Service accounts can see namespaces of other tenants in capsule-proxy (CVSS 4.3, projectcapsule capsule-proxy · github.com/projectcapsule… +1)
- [CVE-2023-39345](https://cve.now/CVE-2023-39345.md): Unauthorized Access to Private Fields in User Registration API in strapi (CVSS 7.6, strapi · @strapi/plugin-users-permissions +1)
- [CVE-2023-46251](https://cve.now/CVE-2023-46251.md): Visual editor persistent Cross-site Scripting (XSS) in MyBB (CVSS 7.5, mybb)
- [CVE-2023-44398](https://cve.now/CVE-2023-44398.md): Out-of-bounds write in exiv2 (CVSS 8.8, exiv2)
- [CVE-2023-4700](https://cve.now/CVE-2023-4700.md): Missing Authorization in GitLab (CVSS 3.5, GitLab)
- [CVE-2023-45827](https://cve.now/CVE-2023-45827.md): Prototype Pollution vulnerability in @clickbar/dot-diver (CVSS 7.3, clickbar dot-diver · @clickbar/dot-diver)
- [CVE-2023-46728](https://cve.now/CVE-2023-46728.md): SQUID-2021:8 Denial of Service in Gopher gateway (CVSS 7.5, squid-cache squid)
- [CVE-2023-40661](https://cve.now/CVE-2023-40661.md): Opensc: multiple memory issues with pkcs15-init (enrollment tool) (CVSS 5.4, OpenSC · Red Hat Enterprise Linux)
- [CVE-2023-40660](https://cve.now/CVE-2023-40660.md): Opensc: potential pin bypass when card tracks its own login state (CVSS 6.6, OpenSC · Red Hat Enterprise Linux)
- [CVE-2023-4535](https://cve.now/CVE-2023-4535.md): Opensc: out-of-bounds read in myeid driver handling encryption using symmetric keys (CVSS 4.5, Red Hat Enterprise Linux)
- [CVE-2023-5969](https://cve.now/CVE-2023-5969.md): Denial of Service via Link Preview in /api/v4/redirect\_location (CVSS 5.3, Mattermost · github.com/mattermost/mattermost-server/v6 +1)
- [CVE-2023-5678](https://cve.now/CVE-2023-5678.md): Excessive time spent in DH check / generation with large Q parameter value (CVSS 5.3, OpenSSL)
- [CVE-2023-5968](https://cve.now/CVE-2023-5968.md): Password hash in response body after username update (CVSS 4.9, Mattermost · github.com/mattermost/mattermost-server/v6 +3)
- [CVE-2023-5967](https://cve.now/CVE-2023-5967.md): Denial of Service via crashing the Calls Plugin (CVSS 4.3, Mattermost · github.com/mattermost/mattermost-server/v6 +1)
- [CVE-2023-41378](https://cve.now/CVE-2023-41378.md): Calico Typha hangs during unclean TLS handshake (CVSS 7.5, Calico Typha · Tigera Typha +1)
- [CVE-2023-5950](https://cve.now/CVE-2023-5950.md): Rapid7 Velociraptor Reflected XSS (CVSS 8.6, Rapid7 Velociraptor)
- [CVE-2023-4910](https://cve.now/CVE-2023-4910.md): 3scale-admin-portal: logged out users tokens can be accessed (CVSS 5.5, Red Hat 3scale API Management Platform)
- [CVE-2023-5964](https://cve.now/CVE-2023-5964.md): 1E-Exchange-DisplayMessage instruction allows for arbitrary code execution (CVSS 9.9, 1E Platform)
- [CVE-2023-45163](https://cve.now/CVE-2023-45163.md): 1E-Exchange-CommandLinePing instruction before v18.1 allows for arbitrary code execution (CVSS 9.9, 1E Platform)
- [CVE-2023-5963](https://cve.now/CVE-2023-5963.md): Allocation of Resources Without Limits or Throttling in GitLab (CVSS 3.1, GitLab)
- [CVE-2023-45161](https://cve.now/CVE-2023-45161.md): 1E-Exchange-URLResponseTime instruction before v20.1 allows arbitrary code execution (CVSS 9.9, 1E Platform)
- [CVE-2023-3399](https://cve.now/CVE-2023-3399.md): Insertion of Sensitive Information Into Sent Data in GitLab (CVSS 8.5, GitLab)
- [CVE-2023-3909](https://cve.now/CVE-2023-3909.md): Inefficient Regular Expression Complexity in GitLab (CVSS 4.3, GitLab)
- [CVE-2023-3246](https://cve.now/CVE-2023-3246.md): Allocation of Resources Without Limits or Throttling in GitLab (CVSS 4.3, GitLab)
- [CVE-2023-47186](https://cve.now/CVE-2023-47186.md): WordPress Kadence WooCommerce Email Designer Plugin \<= 1.5.11 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Kadence WP Kadence WooCommerce Email Designer)
- [CVE-2023-5823](https://cve.now/CVE-2023-5823.md): WordPress TK Google Fonts GDPR Compliant Plugin \<= 2.2.11 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, ThemeKraft TK Google Fonts GDPR Compliant)
- [CVE-2023-46781](https://cve.now/CVE-2023-46781.md): WordPress Current Menu Item for Custom Post Types Plugin \<= 1.5 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Roland Murg Current Menu Item for Custom Post Types)
- [CVE-2023-46780](https://cve.now/CVE-2023-46780.md): WordPress Alter Plugin \<= 1.0 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Alter)
- [CVE-2023-46779](https://cve.now/CVE-2023-46779.md): WordPress EasyRecipe Plugin \<= 3.5.3251 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, EasyRecipe)
- [CVE-2023-46778](https://cve.now/CVE-2023-46778.md): WordPress Auto Limit Posts Reloaded Plugin \<= 2.5 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, TheFreeWindows Auto Limit Posts Reloaded)
- [CVE-2023-46777](https://cve.now/CVE-2023-46777.md): WordPress Feather Login Page Plugin \<= 1.1.3 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, Custom Login Page | Temporary Users | Rebrand Login | Login…)
- [CVE-2023-46776](https://cve.now/CVE-2023-46776.md): WordPress Auto Excerpt everywhere Plugin \<= 1.5 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Serena Villa Auto Excerpt everywhere)
- [CVE-2023-46775](https://cve.now/CVE-2023-46775.md): WordPress Original texts Yandex WebMaster Plugin \<= 1.18 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Djo Original texts Yandex WebMaster)
- [CVE-2023-5090](https://cve.now/CVE-2023-5090.md): Kernel: kvm: svm: improper check in svm\_set\_x2apic\_msr\_interception allows direct access to host x2apic msrs (CVSS 6.0, Red Hat Enterprise Linux)
- [CVE-2023-47185](https://cve.now/CVE-2023-47185.md): WordPress wpDiscuz Plugin \<= 7.6.11 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, gVectors Team Comments — wpDiscuz)
- [CVE-2023-5825](https://cve.now/CVE-2023-5825.md): Loop with Unreachable Exit Condition ('Infinite Loop') in GitLab (CVSS 6.5, GitLab)
- [CVE-2023-5831](https://cve.now/CVE-2023-5831.md): Insertion of Sensitive Information Into Sent Data in GitLab (CVSS 3.7, GitLab)
- [CVE-2023-4996](https://cve.now/CVE-2023-4996.md): Local privilege escalation (CVSS 6.6, Netskope Client)
- [CVE-2023-47184](https://cve.now/CVE-2023-47184.md): WordPress Admin Bar & Dashboard Access Control Plugin \<= 1.2.8 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Proper Fraction LLC. Admin Bar & Dashboard Access Control)
- [CVE-2023-47182](https://cve.now/CVE-2023-47182.md): WordPress Login Screen Manager Plugin \<= 3.5.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Nazmul Hossain Nihal Login Screen Manager)
- [CVE-2023-47177](https://cve.now/CVE-2023-47177.md): WordPress Linker Plugin \<= 1.2.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Yakir Sitbon, Ariel Klikstein Linker)
- [CVE-2023-46824](https://cve.now/CVE-2023-46824.md): WordPress Slick Popup Plugin \<= 1.7.14 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Om Ak Solutions Slick Popup: Contact Form 7 Popup Plugin)
- [CVE-2023-23702](https://cve.now/CVE-2023-23702.md): WordPress Comments Ratings Plugin \<= 1.1.7 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Pixelgrade Comments Ratings)
- [CVE-2023-46822](https://cve.now/CVE-2023-46822.md): WordPress WooCommerce – Store Exporter Plugin \<= 2.7.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Visser Labs Store Exporter for WooCommerce – Export Product…)
- [CVE-2023-46783](https://cve.now/CVE-2023-46783.md): WordPress Pre-Orders for WooCommerce Plugin \<= 1.2.13 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Bright Plugins Pre-Orders for WooCommerce)
- [CVE-2023-46782](https://cve.now/CVE-2023-46782.md): WordPress MomentoPress for Momento360 Plugin \<= 1.0.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Chris Yee MomentoPress for Momento360)
- [CVE-2023-46823](https://cve.now/CVE-2023-46823.md): WordPress ImageLinks Interactive Image Builder Plugin \<= 1.5.4 is vulnerable to SQL Injection (CVSS 7.6, Avirtum ImageLinks Interactive Image Builder for WordPress)
- [CVE-2023-46821](https://cve.now/CVE-2023-46821.md): WordPress GD Security Headers Plugin \<= 1.7 is vulnerable to SQL Injection (CVSS 7.6, Milan Petrovic GD Security Headers)
- [CVE-2023-46084](https://cve.now/CVE-2023-46084.md): WordPress Icons Font Loader Plugin \<= 1.1.2 is vulnerable to SQL Injection (CVSS 8.5, bPlugins Icons Font Loader)
- [CVE-2023-45830](https://cve.now/CVE-2023-45830.md): WordPress Accessibility Suite by Online ADA Plugin \<= 4.12 is vulnerable to SQL Injection (CVSS 8.5, Accessibility Suite by Online ADA)
- [CVE-2023-45657](https://cve.now/CVE-2023-45657.md): WordPress Nexter Theme \<= 2.0.3 is vulnerable to SQL Injection (CVSS 8.5, POSIMYTH Nexter)
- [CVE-2023-35911](https://cve.now/CVE-2023-35911.md): WordPress Contact Form Generator Plugin \<= 2.6.0 is vulnerable to SQL Injection (CVSS 8.5, Creative Solutions Contact Form Generator : Creative form b…)
- [CVE-2023-45069](https://cve.now/CVE-2023-45069.md): WordPress Video Gallery – YouTube Gallery Plugin \<= 2.1.3 is vulnerable to SQL Injection (CVSS 7.6, Video Gallery by Total-Soft Video Gallery – Best WordPress…)
- [CVE-2023-45074](https://cve.now/CVE-2023-45074.md): WordPress Advanced Page Visit Counter Plugin \<= 7.1.1 is vulnerable to SQL Injection (CVSS 8.5, Advanced Page Visit Counter – Most Wanted Analytics Plugin…)
- [CVE-2023-45055](https://cve.now/CVE-2023-45055.md): WordPress MStore API Plugin \<= 4.0.6 is vulnerable to SQL Injection (CVSS 8.5, InspireUI MStore API)
- [CVE-2023-28748](https://cve.now/CVE-2023-28748.md): WordPress Copy Or Move Comments Plugin \<= 5.0.4 is vulnerable to SQL Injection (CVSS 8.5, biztechc Copy or Move Comments)
- [CVE-2023-45046](https://cve.now/CVE-2023-45046.md): WordPress Pressference Exporter Plugin \<= 1.0.3 is vulnerable to SQL Injection (CVSS 5.5, Pressference Exporter)
- [CVE-2023-45001](https://cve.now/CVE-2023-45001.md): WordPress Seriously Simple Stats Plugin \<= 1.5.0 is vulnerable to SQL Injection (CVSS 8.5, Castos Seriously Simple Stats)
- [CVE-2023-41685](https://cve.now/CVE-2023-41685.md): WordPress Woocommerce Support System Plugin \<= 1.2.1 is vulnerable to SQL Injection (CVSS 7.6, ilGhera Woocommerce Support System)
- [CVE-2023-40609](https://cve.now/CVE-2023-40609.md): WordPress Contact form 7 Custom validation Plugin \<= 1.1.3 is vulnerable to SQL Injection (CVSS 8.2, Aiyaz, maheshpatel Contact form 7 Custom validation)
- [CVE-2023-27605](https://cve.now/CVE-2023-27605.md): WordPress WP Reroute Email Plugin \<= 1.4.6 is vulnerable to SQL Injection (CVSS 5.5, Sajjad Hossain WP Reroute Email)
- [CVE-2023-33924](https://cve.now/CVE-2023-33924.md): WordPress SIS Handball Plugin \<= 1.0.45 is vulnerable to SQL Injection (CVSS 7.6, Felix Welberg SIS Handball)
- [CVE-2023-38382](https://cve.now/CVE-2023-38382.md): WordPress Subscribe to Category Plugin \<= 2.7.4 is vulnerable to SQL Injection (no CVSS, Daniel Söderström / Sidney van de Stouwe Subscribe to Categ…)
- [CVE-2023-40207](https://cve.now/CVE-2023-40207.md): WordPress Donations Made Easy – Smart Donations Plugin \<= 4.0.12 is vulnerable to SQL Injection (CVSS 7.6, RedNao Donations Made Easy – Smart Donations)
- [CVE-2022-46849](https://cve.now/CVE-2022-46849.md): WordPress Coming Soon Plugin \<= 1.5.9 is vulnerable to SQL Injection (CVSS 7.6, Weblizar Coming Soon Page – Responsive Coming Soon & Mainte…)
- [CVE-2022-46860](https://cve.now/CVE-2022-46860.md): WordPress Short URL Plugin \<= 1.6.4 is vulnerable to SQL Injection (CVSS 8.5, KaizenCoders Short URL)
- [CVE-2022-45373](https://cve.now/CVE-2022-45373.md): WordPress Slimstat Analytics Plugin \<= 5.0.4 is vulnerable to SQL Injection (CVSS 8.8, Jason Crouse, VeronaLabs Slimstat Analytics)
- [CVE-2022-47432](https://cve.now/CVE-2022-47432.md): WordPress Shortcode IMDB Plugin \<= 6.0.8 is vulnerable to SQL Injection (CVSS 6.7, Kemal YAZICI - PluginPress Shortcode IMDB)
- [CVE-2022-47430](https://cve.now/CVE-2022-47430.md): WordPress The School Management – Education & Learning Management Plugin \<= 4.1 is vulnerable to SQL Injection (CVSS 6.7, Weblizar The School Management – Education & Learning Manag…)
- [CVE-2022-47420](https://cve.now/CVE-2022-47420.md): WordPress Accessibility Suite by Online ADA Plugin \<= 4.12 is vulnerable to SQL Injection (CVSS 6.4, Accessibility Suite by Online ADA)
- [CVE-2022-47428](https://cve.now/CVE-2022-47428.md): WordPress Booking calendar, Appointment Booking System Plugin \<= 3.2.7 is vulnerable to SQL Injection (CVSS 6.7, WpDevArt Booking calendar, Appointment Booking System)
- [CVE-2021-4430](https://cve.now/CVE-2021-4430.md): Ortus Solutions ColdBox Elixir ENV Variable defaultConfig.js information disclosure (CVSS 3.5, Ortus Solutions ColdBox Elixir)
- [CVE-2023-28794](https://cve.now/CVE-2023-28794.md): PAC Files Exposed to Internet Websites (CVSS 4.3, Zscaler Client Connector)
- [CVE-2023-42669](https://cve.now/CVE-2023-42669.md): Samba: "rpcecho" development server allows denial of service via sleep() call on ad dc (CVSS 6.5, samba · Red Hat Enterprise Linux +2)
- [CVE-2023-4699](https://cve.now/CVE-2023-4699.md): Arbitrary Command Execution Vulnerability in Mitsubishi Electric proprietary protocol communication of multiple FA products (CVSS 10.0, Mitsubishi Electric MELSEC-F Series FX3U-16MT/ES · Mit… +281)
- [CVE-2023-4625](https://cve.now/CVE-2023-4625.md): Denial-of-Service（DoS） Vulnerability in Web server function on MELSEC Series CPU module (CVSS 5.3, Mitsubishi Electric MELSEC iQ-F Series FX5U-32MT/ES · M… +78)
- [CVE-2023-32840](https://cve.now/CVE-2023-32840.md): In modem CCCI, there is a possible out of bounds write due to a missing bounds check. (CVSS 8.4, MediaTek MT2731, MT2735, MT6731, MT6739, MT6761, MT6762, MT…)
- [CVE-2023-32825](https://cve.now/CVE-2023-32825.md): In bluethooth service, there is a possible out of bounds reads due to improper input validation. (no CVSS, MediaTek MT2713, MT6580, MT6761, MT6765, MT6768, MT6779, MT…)
- [CVE-2023-32839](https://cve.now/CVE-2023-32839.md): In dpe, there is a possible out of bounds write due to a missing valid range checking. (CVSS 6.7, MediaTek MT2713, MT6895, MT6983, MT8188, MT8195, MT8673, MT…)
- [CVE-2023-32838](https://cve.now/CVE-2023-32838.md): In dpe, there is a possible out of bounds write due to a missing valid range checking. (CVSS 6.7, MediaTek MT2713, MT6895, MT6983, MT8188, MT8195, MT8390, MT…)
- [CVE-2023-20702](https://cve.now/CVE-2023-20702.md): In 5G NRLC, there is a possible invalid memory access due to lack of error handling. (CVSS 7.5, MediaTek MT6835, MT6873, MT6875, MT6879, MT6883, MT6885, MT…)
- [CVE-2023-32837](https://cve.now/CVE-2023-32837.md): In video, there is a possible out of bounds write due to a missing bounds check. (CVSS 7.8, MediaTek MT6883, MT6885, MT6889, MT6893, MT8797, MT8798)
- [CVE-2023-32836](https://cve.now/CVE-2023-32836.md): In display, there is a possible out of bounds write due to an integer overflow. (CVSS 6.7, MediaTek MT6893, MT6895, MT6983, MT6985, MT8797, MT8798)
- [CVE-2023-32835](https://cve.now/CVE-2023-32835.md): In keyinstall, there is a possible memory corruption due to type confusion. (CVSS 6.7, MediaTek MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT…)
- [CVE-2023-32834](https://cve.now/CVE-2023-32834.md): In secmem, there is a possible memory corruption due to type confusion. (CVSS 6.7, MediaTek MT6580, MT6735, MT6737, MT6739, MT6753, MT6761, MT…)
- [CVE-2023-32818](https://cve.now/CVE-2023-32818.md): In vdec, there is a possible out of bounds write due to type confusion. (CVSS 6.7, MediaTek MT6761, MT6763, MT6765, MT6768, MT6771, MT6779, MT…)
- [CVE-2023-32832](https://cve.now/CVE-2023-32832.md): In video, there is a possible memory corruption due to a race condition. (CVSS 7.0, MediaTek MT6883, MT6885, MT6889, MT6893, MT6895, MT6983, MT…)
- [CVE-2023-46802](https://cve.now/CVE-2023-46802.md): e-Tax software Version3.0.10 and earlier improperly restricts XML external entity references (XXE) due to the configuration of the embedded (CVSS 5.5, National Tax Agency e-Tax software)
- [CVE-2018-25093](https://cve.now/CVE-2018-25093.md): Vaerys-Dawn DiscordSailv2 Tag access control (CVSS 5.5, Vaerys-Dawn DiscordSailv2)
- [CVE-2022-48192](https://cve.now/CVE-2022-48192.md): Cross-site scripting vulnerability in Softing smartLink SW-HT (CVSS 7.2)
- [CVE-2022-48193](https://cve.now/CVE-2022-48193.md): Weak ciphers vulnerability in Softing smartLink SW-HT (CVSS 5.9)
- [CVE-2023-38406](https://cve.now/CVE-2023-38406.md): bgpd/bgp\_flowspec.c in FRRouting (FRR) before 8.4.3 mishandles an nlri length of zero, aka a "flowspec overflow." (no CVSS)
- [CVE-2023-38407](https://cve.now/CVE-2023-38407.md): bgpd/bgp\_label.c in FRRouting (FRR) before 8.5 attempts to read beyond the end of the stream during labeled unicast parsing. (CVSS 7.5)
- [CVE-2023-45556](https://cve.now/CVE-2023-45556.md): Cross Site Scripting vulnerability in Mybb Mybb Forums v.1.8.33 allows a local attacker to execute arbitrary code via the theme Name paramet (no CVSS)
- [CVE-2023-47004](https://cve.now/CVE-2023-47004.md): Buffer Overflow vulnerability in Redis RedisGraph v.2.x through v.2.12.8 and fixed in v.2.12.9 allows an attacker to execute arbitrary code (CVSS 8.8)
- [CVE-2023-47253](https://cve.now/CVE-2023-47253.md): Qualitor through 8.20 allows remote attackers to execute arbitrary code via PHP code in the html/ad/adpesquisasql/request/processVariavel.ph (CVSS 9.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-11-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.