CVE Notifier

CVE-2023-50462 CWE-863 5.3

CVE-2023-50462

An issue was discovered in the content_consent (aka Content Consent) extension through 2.0.1 for TYPO3. It fails to verify whether a specified content element identifier is permitted by the plugin. This enables an unauth…

MITRE TYPO3:content_consent 14 Sep 2026

CVE-2023-50461 CWE-863 8.8

CVE-2023-50461

An issue was discovered in the direct_mail (aka Direct Mail) extension through 9.5.1 for TYPO3. The Configuration backend module of the extension allows an authenticated user to write to an arbitrary TSConfig page for fo…

MITRE TYPO3:direct_mail 14 Sep 2026

CVE-2023-50460 CWE-863 5.4

CVE-2023-50460

An issue was discovered in the femanager extension 7.x before 7.2.3 for TYPO3. The backend module allows an authenticated backend user to perform various actions (userLogout, confirmUser, refuseUser, and resendUserConfir…

MITRE TYPO3:femanager 14 Sep 2026

CVE-2023-50459 CWE-863 5.4

CVE-2023-50459

An issue was discovered in the femanager extension 7.x before 7.2.3 for TYPO3. It fails to check access permissions for the edit user component. An authenticated frontend user can exploit this to either edit data of vari…

MITRE TYPO3:femanager 14 Sep 2026

CVE-2023-46273 CWE-121 8.8

CVE-2023-46273

Bonjour Gateway in Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, has an ah_bgd buffer overflow via ah_event_send.

MITRE extremenetworks:IQ · Engine 14 Sep 2026

CVE-2023-46035 CWE-776 5.9

CVE-2023-46035

The svg_optimizer gem before 0.3.0 for Ruby performs entity expansion on untrusted documents.

MITRE fnando:svg_optimizer 14 Sep 2026

CVE-2023-45858 CWE-23 8.6

CVE-2023-45858

A directory traversal was identified in Paessler PRTG before 23.4.88.1429 that made it possible to read local files.

MITRE Paessler:PRTG · Network · Monitor 14 Sep 2026

CVE-2023-45023 CWE-863 4.2

CVE-2023-45023

The femanager extension 7 before 7.2.2 for TYPO3 has Incorrect Access Control: it lacks a check for permissions for the invitation component.

MITRE TYPO3:femanager 14 Sep 2026

CVE-2023-40772 CWE-23 4.3

CVE-2023-40772

A directory Traversal vulnerability in DataEase before 1.18.10 allows a remote attacker to obtain sensitive information via a a crafted request to the StaticResourceController.java component.

MITRE DataEase:DataEase 14 Sep 2026

CVE-2023-37366 CWE-835 2.8

CVE-2023-37366

An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor, and Modem Exynos 9810, Exynos 9610, Exynos 9820, Exynos 980, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, …

MITRE Samsung:Exynos · 850 · firmware 14 Sep 2026

CVE-2023-37253 CWE-669 3.1

CVE-2023-37253

An issue was discovered in the ProofreadPage extension for MediaWiki through 1.39.3. It leaks information about a suppressed user via the API and config variables.

MITRE MediaWiki:ProofreadPage 14 Sep 2026

CVE-2023-37252 CWE-669 3.1

CVE-2023-37252

An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. Special:CheckUserLog shows usernames that have been hidden.

MITRE MediaWiki:CheckUser 14 Sep 2026