Week 3, 2023

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.8
  CVE-2022-47966 Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due to use of Apache Santuario xmlsec (aka …
  EPSS 100%
• Critical 9.8
  CVE-2023-23488 The Paid Memberships Pro WordPress Plugin, version < 2.9.8, is affected by an unauthenticated SQL injection vulnerability in the 'code' parameter of the '/pmpr…
  EPSS 92%
• Critical 9.8
  CVE-2022-23521 gitattributes parsing integer overflow in git

  git · git

  EPSS 56%
• Critical 9.8
  CVE-2022-41903 Integer overflow in `git archive`, `git log --format` leading to RCE in git

  git · git

  EPSS 44%
• Critical 9.8
  CVE-2022-4060 User Post Gallery <= 2.19 - Unauthenticated RCE
  EPSS 43%
• Critical 9.8
  CVE-2022-46476 D-Link DIR-859 A1 1.05 was discovered to contain a command injection vulnerability via the service= variable in the soapcgi_main function.
  EPSS 41%
• Critical 9.1
  CVE-2022-4101 Images Optimize and Upload CF7 <= 2.1.4 - Unauthenticated Arbitrary File Deletion
  EPSS 29%
• Critical 9.8
  CVE-2022-46887 Multiple SQL injection vulnerabilities in NexusPHP before 1.7.33 allow remote attackers to execute arbitrary SQL commands via the conuser[] parameter in takeco…
  EPSS 19%
• Critical 9.8
  CVE-2020-35326 SQL Injection vulnerability in file /inxedu/demo_inxedu_open/src/main/resources/mybatis/inxedu/website/WebsiteImagesMapper.xml in inxedu 2.0.6 via the id value.
  EPSS 14%
• Critical 9.8
  CVE-2023-22884 Apache Airflow, Apache Airflow MySQL Provider: Arbitrary file read via MySQL provider in Apache Airflow

  Apache Software Foundation · Apache Airflow · Apache Airflow MySQL Provider

  EPSS 12%
• Critical 9.8
  CVE-2023-23489 The Easy Digital Downloads WordPress Plugin, versions 3.1.0.2 & 3.1.0.3, is affected by an unauthenticated SQL injection vulnerability in the 's' parameter of …
  EPSS 11%
• Critical 9.8
  CVE-2022-46475 D-Link DIR 645A1 1.06B01_Beta01 was discovered to contain a stack overflow via the service= variable in the genacgi_main function.
  EPSS 9.5%
• Critical 9.8
  CVE-2022-4447 Fontsy <= 1.8.6 - Multiple Unauthenticated SQLi
  EPSS 4.8%
• Critical 9.1
  CVE-2023-22964 Zoho ManageEngine ServiceDesk Plus MSP before 10611, and 13x before 13004, is vulnerable to authentication bypass when LDAP authentication is enabled.
  EPSS 2.5%
• Critical 9.8
  CVE-2023-22741 heap-over-flow in stun_parse_attribute in sofia-sip

  freeswitch · sofia-sip

  EPSS 2.5%

All 60 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• High 7.5
  CVE-2023-21839 Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.3.0, 12.2.1.…

  Oracle · WebLogic Server

  EPSS 100%
• High 7.2
  CVE-2023-0315 Command Injection in froxlor/froxlor

  froxlor · froxlor/froxlor

  EPSS 98%
• High 7.5
  CVE-2023-0126 Pre-authentication path traversal vulnerability in SMA1000 firmware version 12.4.2, which allows an unauthenticated attacker to access arbitrary files and dire…

  SonicWall · SonicWall SMA1000

  EPSS 73%
• Medium 5.5
  CVE-2023-22458 Integer overflow in multiple Redis commands can lead to denial-of-service

  Redis · Redis

  EPSS 72%
• Medium 5.4
  CVE-2022-46889 A persistent cross-site scripting (XSS) vulnerability in NexusPHP before 1.7.33 allows remote authenticated attackers to permanently inject arbitrary web scrip…
  EPSS 60%
• High 7.8
  CVE-2023-21608 Adobe Acrobat Reader DC resetForm Use-After-Free Remote Code Execution Vulnerability

  Adobe · Acrobat Reader

  EPSS 59%
• High 8.8
  CVE-2023-23492 The Login with Phone Number WordPress Plugin, version < 1.4.2, is affected by an authenticated SQL injection vulnerability in the 'ID' parameter of its 'lwp_fo…
  EPSS 57%
• High 7.8
  CVE-2023-22809 In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and E…
  EPSS 55%