Skip to content
OpenAdvisories

Archive

18 October 2023

Vulnerabilities first published on this day (UTC), newest first.

← September 2023 2023 / October /18 November 2023 →
  1. 18
  2. 281
  3. 3138
  4. 4107
  5. 562
  6. 672
  7. 72
  8. 824
  9. 985
  10. 10256
  11. 11111
  12. 1288
  13. 1364
  14. 1430
  15. 1511
  16. 16168
  17. 17163
  18. 1874
  19. 19105
  20. 20125
  21. 2115
  22. 2226
  23. 2353
  24. 24122
  25. 25213
  26. 2690
  27. 2797
  28. 2813
  29. 2918
  30. 30171
  31. 31121
All Critical High Medium Low Exploited only Public exploit

74 results · Feed

  • Medium 5.4
    CVE-2023-36857

    Baker Hughes Bently Nevada 3500 System Authentication Bypass by Capture-replay

    Baker Hughes – Bently Nevada 3500 System TDI Firmware version 5.05 contains a replay vulnerability which could allow an attacker to replay older captured packets of traffic to the device to gain access.

    Baker Hughes - Bently Nevada Bently Nevada 3500 System
  • High 7.5
    CVE-2023-34437

    Baker Hughes Bently Nevada 3500 System Incorrect Permission Assignment for Critical Resource

    Baker Hughes – Bently Nevada 3500 System TDI Firmware version 5.05 contains a vulnerability in their password retrieval functionality which could allow an attacker to access passwords stored on the device.

    Baker Hughes - Bently Nevada Bently Nevada 3500 System
  • Medium 6.8
    CVE-2023-34441

    Baker Hughes Bently Nevada 3500 System Cleartext Transmission of Sensitive Information

    Baker Hughes – Bently Nevada 3500 System TDI Firmware version 5.05 contains a cleartext transmission vulnerability which could allow an attacker to steal the authentication secret from communication traffic to the device and reuse it for arbitrary requests.

    Baker Hughes - Bently Nevada Bently Nevada 3500 System
  • Critical 9.0
    CVE-2023-37502

    An unrestricted file upload vulnerability affects HCL Compass

    HCL Compass is vulnerable to lack of file upload security.  An attacker could upload files containing active code that can be executed by the server or by a user's web browser.

    HCL Software HCL Compass
  • Critical 9.1
    CVE-2023-45146

    Remote code execution in XXL-RPC

    XXL-RPC is a high performance, distributed RPC framework. With it, a TCP server can be set up using the Netty framework and the Hessian serialization mechanism. When such a configuration is used, attackers may be able to connect to the server and provide mali…

    xuexueli xxl-rpc com.xuxueli:xxl-rpc-core Maven
  • High 7.5
    CVE-2023-45812

    Improper Check or Handling of Exceptional Conditions in apollo-router

    The Apollo Router is a configurable, high-performance graph router written in Rust to run a federated supergraph that uses Apollo Federation. Affected versions are subject to a Denial-of-Service (DoS) type vulnerability which causes the Router to panic and te…

    apollographql router apollo-router crates.io
  • Medium 5.3
    CVE-2023-45814

    Tokens cached in the AuthenticationService are susceptible to reuse in Bunkum

    Bunkum is an open-source protocol-agnostic request server for custom game servers. First, a little bit of background. So, in the beginning, Bunkum's `AuthenticationService` only supported injecting `IUser`s. However, as Refresh and SoundShapesServer implement…

    LittleBigRefresh Bunkum Bunkum NuGet
  • High 7.3
    CVE-2023-43800

    Insufficient Verification of Data Authenticity in Arduino Create Agent

    Arduino Create Agent is a package to help manage Arduino development. The vulnerability affects the endpoint `/v2/pkgs/tools/installed`. A user who has the ability to perform HTTP requests to the localhost interface, or is able to bypass the CORS configuratio…

    arduino arduino-create-agent github.com/arduino/arduino-create-agent Go
  • Medium 6.1
    CVE-2023-43801

    Path traversal in Arduino Create Agent

    Arduino Create Agent is a package to help manage Arduino development. This vulnerability affects the endpoint `/v2/pkgs/tools/installed` and the way it handles plugin names supplied as user input. A user who has the ability to perform HTTP requests to the loc…

    arduino arduino-create-agent github.com/arduino/arduino-create-agent Go
  • High 7.1
    CVE-2023-43802

    Path traversal in Arduino Create Agent

    Arduino Create Agent is a package to help manage Arduino development. This vulnerability affects the endpoint `/upload` which handles request with the `filename` parameter. A user who has the ability to perform HTTP requests to the localhost interface, or is …

    arduino arduino-create-agent github.com/arduino/arduino-create-agent Go
  • Medium 6.1
    CVE-2023-43803

    Path traversal in Arduino Create Agent

    Arduino Create Agent is a package to help manage Arduino development. This vulnerability affects the endpoint `/v2/pkgs/tools/installed` and the way it handles plugin names supplied as user input. A user who has the ability to perform HTTP requests to the loc…

    arduino arduino-create-agent github.com/arduino/arduino-create-agent Go
  • Medium 4.6
    CVE-2023-45813

    Inefficient Regular Expression Complexity in TorBot

    Torbot is an open source tor network intelligence tool. In affected versions the `torbot.modules.validators.validate_link function` uses the python-validators URL validation regex. This particular regular expression has an exponential complexity which allows …

    DedSecInside TorBot torbot PyPI
  • Low 3.6
    CVE-2023-45145

    Redis Unix-domain socket may have be exposed with the wrong permissions for a short time window.

    Redis is an in-memory database that persists on disk. On startup, Redis begins listening on a Unix socket before adjusting its permissions to the user-provided configuration. If a permissive umask(2) is used, this creates a race condition that enables, during…

    Redis Redis redis redis Debian Ubuntu Azure Linux Alpine
  • High 8.1
    CVE-2023-4601

    Stack-based Buffer Overflow in NI System Configuration Software

    A stack-based buffer overflow vulnerability exists in NI System Configuration that could result in information disclosure and/or arbitrary code execution. Successful exploitation requires that an attacker can provide a specially crafted response. This affects…

    NI System Configuration
  • Unscored —
    CVE-2023-35656

    In multiple functions of protocolembmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check…

    Google Android Android
  • Unscored —
    CVE-2023-35663

    In Init of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lea…

    Google Android Android
  • Unscored —
    CVE-2023-26300

    A potential security vulnerability has been identified in the system BIOS for certain HP PC products which might allow …

    HP HP PC products
  • Medium 6.8
    CVE-2023-30911

    HPE Integrated Lights-Out 5, and Integrated Lights-Out 6 using iLOrest may cause denial of service.

    Hewlett Packard Enterprise (HPE) HPE Integrated Lights-Out
  • Medium 6.5
    CVE-2023-20261

    A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to retriev…

    Cisco Cisco SD-WAN vManage Network devices
  • Critical 9.8
    CVE-2023-5642 EPSS 18%

    Advantech R-SeeNet Unauthenticated Read/Write

    Advantech R-SeeNet v2.4.23 allows an unauthenticated remote attacker to read from and write to the snmpmon.ini file, which contains sensitive information.

    Advantech R-SeeNet
  • Medium 6.1
    CVE-2023-5631 Exploited EPSS 76%

    Stored XSS vulnerability in Roundcube

    Roundcube before 1.4.15, 1.5.x before 1.5.5, and 1.6.x before 1.6.4 allows stored XSS via an HTML e-mail message with a crafted SVG document because of program/lib/Roundcube/rcube_washtml.php behavior. This could allow a remote attacker to load arbitrary Java…

    Roundcube Roundcubemail roundcube roundcube Debian Ubuntu
    KEV Oct 26, 2023
  • High 7.1
    CVE-2023-30781

    WordPress Tweeple Plugin <= 0.9.5 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Theme Blvd Tweeple plugin <= 0.9.5 versions.

    Theme Blvd Tweeple
  • High 7.1
    CVE-2023-45632

    WordPress Video Player Plugin <= 1.5.22 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WebDorado SpiderVPlayer plugin <= 1.5.22 versions.

    WebDorado SpiderVPlayer
  • High 7.1
    CVE-2023-45630

    WordPress Responsive Image Gallery, Gallery Album Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Stored Cross-Site Scripting (XSS) vulnerability in wpdevart Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 versions.

    wpdevart Gallery – Image and Video Gallery with Thumbnails
  • Medium 6.5
    CVE-2023-45628

    WordPress QR Twitter Widget Plugin <= 0.2.3 is vulnerable to Cross Site Scripting (XSS)

    Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in QROkes QR Twitter Widget plugin <= 0.2.3 versions.

    QROkes QR Twitter Widget
  • High 7.1
    CVE-2023-45602

    WordPress Ebook Store Plugin <= 5.785 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Shopfiles Ltd Ebook Store plugin <= 5.785 versions.

    Shopfiles Ebook Store
  • Medium 5.9
    CVE-2023-45604

    WordPress Get Custom Field Values Plugin <= 4.0.1 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Scott Reilly Get Custom Field Values plugin <= 4.0.1 versions.

    Scott Reilly Get Custom Field Values
  • Medium 6.5
    CVE-2023-45607

    WordPress WordPress Popular Posts Plugin <= 6.3.2 is vulnerable to Cross Site Scripting (XSS)

    Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Hector Cabrera WordPress Popular Posts plugin <= 6.3.2 versions.

    Hector Cabrera WordPress Popular Posts Web / CMS
  • Medium 6.5
    CVE-2023-45608

    WordPress Smart Cookie Kit Plugin <= 2.3.1 is vulnerable to Cross Site Scripting (XSS)

    Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Nicola Modugno Smart Cookie Kit plugin <= 2.3.1 versions.

    Nicola Modugno Smart Cookie Kit
  • Medium 5.9
    CVE-2023-45073

    WordPress Mendeley Plugin <= 1.3.2 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Michael Koch Mendeley Plugin plugin <= 1.3.2 versions.

    Michael Koch Mendeley Plugin
  • Medium 6.5
    CVE-2023-31217

    WordPress User Location and IP Plugin <= 1.6 is vulnerable to Cross Site Scripting (XSS)

    Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in MyTechTalky User Location and IP plugin <= 1.6 versions.

    MyTechTalky User Location and IP
  • Medium 5.9
    CVE-2023-45072

    WordPress Order auto complete for WooCommerce Plugin <= 1.2.0 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Kardi Order auto complete for WooCommerce plugin <= 1.2.0 versions.

    Kardi Order auto complete for WooCommerce Web / CMS
  • High 7.1
    CVE-2023-45071

    WordPress Form Maker by 10Web Plugin <= 1.15.18 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Stored Cross-Site Scripting (XSS) vulnerability in 10Web Form Builder Team Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin <= 1.15.18 versions.

    10Web Form Builder Team Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
  • High 7.1
    CVE-2023-45070

    WordPress Form Maker by 10Web Plugin <= 1.15.18 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in 10Web Form Builder Team Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin <= 1.15.18 versions.

    10Web Form Builder Team Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
  • Medium 6.5
    CVE-2023-45067

    WordPress WP Simple HTML Sitemap Plugin <= 2.1 is vulnerable to Cross Site Scripting (XSS)

    Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Ashish Ajani WordPress Simple HTML Sitemap plugin <= 2.1 versions.

    Ashish Ajani WordPress Simple HTML Sitemap Web / CMS
  • High 7.1
    CVE-2023-45065

    WordPress Bulk NoIndex & NoFollow Toolkit Plugin <= 1.42 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Mad Fish Digital Bulk NoIndex & NoFollow Toolkit plugin <= 1.42 versions.

    Mad Fish Digital Bulk NoIndex & NoFollow Toolkit
  • Medium 4.6
    CVE-2023-32089

    Pega Platform versions 8.1 to 8.8.2 are affected by an XSS issue with Pin description

    Pega Systems Pega Platform
  • Medium 4.6
    CVE-2023-32088

    Pega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with ad-hoc case creation

    Pega Systems Pega Platform
  • Medium 4.6
    CVE-2023-32087

    Pega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with task creation

    Pega Systems Pega Platform
  • High 7.5
    CVE-2023-45727 Exploited

    Proself Enterprise/Standard Edition Ver5.62 and earlier, Proself Gateway Edition Ver1.65 and earlier, and Proself Mail …

    North Grid Proself Enterprise/Standard Edition Proself Mail Sanitize Edition Proself Gateway Edition
    KEV Dec 3, 2024