CVE List - 2023 / October
Showing 101 - 200 of 2690 CVEs for October 2023 (Page 2 of 27)
| CVE ID | Date | Title |
|---|---|---|
| CVE-2023-43176 | 2023-10-03 | A deserialization vulnerability in Afterlogic Aurora Files v9.7.3 allows attackers... |
| CVE-2023-43898 | 2023-10-03 | Nothings stb 2.28 was discovered to contain a Null Pointer... |
| CVE-2023-43951 | 2023-10-03 | SSCMS 7.2.2 was discovered to contain a cross-site scripting (XSS)... |
| CVE-2023-43952 | 2023-10-03 | SSCMS 7.2.2 was discovered to contain a stored cross-site scripting... |
| CVE-2023-43953 | 2023-10-03 | SSCMS 7.2.2 was discovered to contain a cross-site scripting (XSS)... |
| CVE-2023-43976 | 2023-10-03 | An issue in CatoNetworks CatoClient before v.5.4.0 allows attackers to... |
| CVE-2023-44973 | 2023-10-03 | An arbitrary file upload vulnerability in the component /content/templates/ of... |
| CVE-2023-44974 | 2023-10-03 | An arbitrary file upload vulnerability in the component /admin/plugin.php of... |
| CVE-2023-40830 | 2023-10-03 | Tenda AC6 v15.03.05.19 is vulnerable to Buffer Overflow as the... |
| CVE-2023-39222 | 2023-10-03 | OS command injection vulnerability in FURUNO SYSTEMS wireless LAN access... |
| CVE-2023-39429 | 2023-10-03 | Cross-site scripting vulnerability in FURUNO SYSTEMS wireless LAN access point... |
| CVE-2023-41086 | 2023-10-03 | Cross-site request forgery (CSRF) vulnerability exists in FURUNO SYSTEMS wireless... |
| CVE-2023-42771 | 2023-10-03 | Authentication bypass vulnerability in ACERA 1320 firmware ver.01.26 and earlier,... |
| CVE-2023-43627 | 2023-10-03 | Path traversal vulnerability in ACERA 1320 firmware ver.01.26 and earlier,... |
| CVE-2023-3335 | 2023-10-03 | Information Exposure Vulnerability in Hitachi Ops Center Administrator |
| CVE-2023-3967 | 2023-10-03 | DoS Vulnerability in Hitachi Ops Center Common Services |
| CVE-2023-3440 | 2023-10-03 | File and Directory Permission Vulnerability in JP1/Performance Management |
| CVE-2023-5334 | 2023-10-03 | The WP Responsive header image slider plugin for WordPress is... |
| CVE-2023-5345 | 2023-10-03 | Use-after-free in Linux kernel's fs/smb/client component |
| CVE-2023-26151 | 2023-10-03 | Versions of the package asyncua before 0.9.96 are vulnerable to... |
| CVE-2023-26150 | 2023-10-03 | Versions of the package asyncua before 0.9.96 are vulnerable to... |
| CVE-2023-26152 | 2023-10-03 | All versions of the package static-server are vulnerable to Directory... |
| CVE-2023-21673 | 2023-10-03 | Improper Access Control in Kernel |
| CVE-2023-22382 | 2023-10-03 | Improper Input Validation in Automotive |
| CVE-2023-22384 | 2023-10-03 | Buffer Copy Without Checking Size of Input in VR Service |
| CVE-2023-22385 | 2023-10-03 | Buffer Over-read in Data Modem |
| CVE-2023-24843 | 2023-10-03 | Reachable Assertion in Modem |
| CVE-2023-24844 | 2023-10-03 | Improper Access Control in Core |
| CVE-2023-24847 | 2023-10-03 | NULL pointer Dereference in Modem |
| CVE-2023-24848 | 2023-10-03 | Buffer Over-read in Data Modem |
| CVE-2023-24849 | 2023-10-03 | Buffer Over-read in Data Modem |
| CVE-2023-24850 | 2023-10-03 | Improper Validation of Array Index in HLOS |
| CVE-2023-24853 | 2023-10-03 | Improper Input Validation in HLOS |
| CVE-2023-24855 | 2023-10-03 | Use of Out-of-range Pointer Offset in Modem |
| CVE-2023-28539 | 2023-10-03 | Buffer Copy Without Checking Size of Input in WLAN Host |
| CVE-2023-28540 | 2023-10-03 | Improper Authentication in Data Modem |
| CVE-2023-28571 | 2023-10-03 | Buffer Over-read in WLAN HOST |
| CVE-2023-33026 | 2023-10-03 | Buffer over-read in WLAN Firmware |
| CVE-2023-33027 | 2023-10-03 | Buffer Over-read in WLAN Firmware |
| CVE-2023-33028 | 2023-10-03 | Buffer Copy without Checking Size of Input in WLAN Firmware |
| CVE-2023-33029 | 2023-10-03 | Use After Free in DSP Service |
| CVE-2023-33034 | 2023-10-03 | Signed-to-unsigned conversion error in Audio |
| CVE-2023-33035 | 2023-10-03 | Buffer Copy Without Checking Size of Input in Audio |
| CVE-2023-33039 | 2023-10-03 | Use After Free in Automotive Display |
| CVE-2023-3656 | 2023-10-03 | Unauthenticated Remote Code Execution |
| CVE-2023-3655 | 2023-10-03 | Unauthenticated Remote Database Exfiltration |
| CVE-2023-44217 | 2023-10-03 | A local privilege escalation vulnerability in SonicWall Net Extender MSI... |
| CVE-2023-44218 | 2023-10-03 | A flaw within the SonicWall NetExtender Pre-Logon feature enables an... |
| CVE-2023-3654 | 2023-10-03 | Origin Check Bypass |
| CVE-2023-37891 | 2023-10-03 | WordPress Exit Popups & Onsite Retargeting by OptiMonk Plugin <= 2.0.4 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-37991 | 2023-10-03 | WordPress WP Emoji One Plugin <= 0.6.0 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-37992 | 2023-10-03 | WordPress Smarty for WordPress Plugin <= 3.1.35 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-37996 | 2023-10-03 | WordPress GTmetrix for WordPress Plugin <= 0.4.7 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-37998 | 2023-10-03 | WordPress Disabler Plugin <= 3.0.3 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-38381 | 2023-10-03 | WordPress WP-FlyBox Plugin <= 6.46 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2022-46841 | 2023-10-03 | WordPress Oxygen Builder Plugin < 4.4 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-38398 | 2023-10-03 | WordPress Taboola Plugin <= 2.0.1 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-37990 | 2023-10-03 | WordPress Perelink Pro Plugin <= 2.1.4 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-38396 | 2023-10-03 | WordPress Google Map Shortcode Plugin <= 3.1.2 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-38390 | 2023-10-03 | WordPress Mobile Address Bar Changer Plugin <= 3.0 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-25463 | 2023-10-03 | WordPress wp tell a friend popup form Plugin <= 7.1 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-24518 | 2023-10-03 | Disabling the administrator's account through cross-site request forgery |
| CVE-2023-0828 | 2023-10-03 | Stored Cross Site Scripting in syslog section |
| CVE-2023-4097 | 2023-10-03 | Multiple vulnerabilities in IDM Sistemas QSige |
| CVE-2023-25989 | 2023-10-03 | Cross-Site Request Forgery (CSRF) vulnerability in multiple WordPress plugins by Meks |
| CVE-2023-4098 | 2023-10-03 | Multiple vulnerabilities in IDM Sistemas QSige |
| CVE-2023-39923 | 2023-10-03 | WordPress The Post Grid Plugin <= 7.2.7 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-4099 | 2023-10-03 | Multiple vulnerabilities in IDM Sistemas QSige |
| CVE-2023-39165 | 2023-10-03 | WordPress Sign-up Sheets Plugin <= 2.2.8 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-39917 | 2023-10-03 | WordPress Photo Gallery by Ays Plugin <= 5.2.6 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-39989 | 2023-10-03 | WordPress Header Footer Code Manager Plugin <= 1.1.34 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-4100 | 2023-10-03 | Multiple vulnerabilities in IDM Sistemas QSige |
| CVE-2023-2830 | 2023-10-03 | WordPress WP Testimonials Plugin <= 1.4.2 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2022-47891 | 2023-10-03 | Admin password reset in NetMan 204 |
| CVE-2023-4101 | 2023-10-03 | Multiple vulnerabilities in IDM Sistemas QSige |
| CVE-2022-47892 | 2023-10-03 | Information disclosure in NetMan 204 |
| CVE-2023-40210 | 2023-10-03 | WordPress SB Child List Plugin <= 4.5 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2022-47893 | 2023-10-03 | NetMan 204 Remote Code Execution |
| CVE-2023-4102 | 2023-10-03 | Multiple vulnerabilities in IDM Sistemas QSige |
| CVE-2023-4103 | 2023-10-03 | Multiple vulnerabilities in IDM Sistemas QSige |
| CVE-2023-5350 | 2023-10-03 | SQL Injection in salesagility/suitecrm |
| CVE-2023-5351 | 2023-10-03 | Cross-site Scripting (XSS) - Stored in salesagility/suitecrm |
| CVE-2023-40202 | 2023-10-03 | WordPress WP HTML Mail Plugin <= 3.4.1 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-5353 | 2023-10-03 | Improper Access Control in salesagility/suitecrm |
| CVE-2023-2681 | 2023-10-03 | SQL Injection on Jorani |
| CVE-2023-40201 | 2023-10-03 | WordPress Futurio Extra Plugin <= 1.8.4 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-32669 | 2023-10-03 | Authorization Bypass on BuddyBoss |
| CVE-2023-32670 | 2023-10-03 | BuddyBoss XSS vulnerability |
| CVE-2023-32671 | 2023-10-03 | BuddyBoss XSS vulnerability |
| CVE-2023-42508 | 2023-10-03 | JFrog Artifactory Improper header input validation leads to email manipulation sent from the platform |
| CVE-2023-40198 | 2023-10-03 | WordPress Easy Cookie Law Plugin <= 3.1 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-40199 | 2023-10-03 | WordPress WP Like Button Plugin <= 1.7.0 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-40212 | 2023-10-03 | WordPress WooCommerce Product Attachment Plugin <= 2.1.8 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-39159 | 2023-10-03 | WordPress Fraud Prevention For Woocommerce Plugin <= 2.1.5 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-32790 | 2023-10-03 | XSS on NXLog Manager |
| CVE-2023-32791 | 2023-10-03 | Cross-Site Request Forgery on NXLog Manager |
| CVE-2023-40009 | 2023-10-03 | WordPress WP Pipes Plugin <= 1.4.0 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-32792 | 2023-10-03 | Cross-Site Request Forgery on NXLog Manager |
| CVE-2023-2544 | 2023-10-03 | Authorization Bypass on UPV PEIX |
| CVE-2023-32091 | 2023-10-03 | WordPress POEditor Plugin <= 0.9.4 is vulnerable to Cross Site Request Forgery (CSRF) |