Week 8, 2023

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.8
  CVE-2022-2024 OS Command Injection in gogs/gogs

  Gogs · gogs/gogs

  EPSS 98%
• Critical 9.8
  CVE-2023-25157 Unfiltered SQL Injection Vulnerabilities in Geoserver

  geoserver · geoserver

  EPSS 86%
• Critical 9.3
  CVE-2023-0104 The listed versions for Weintek EasyBuilder Pro are vulnerable to a ZipSlip attack caused by decompiling a malicious project file. This may allow an attacker t…

  Weintek · EasyBuilder Pro cMT

  EPSS 22%
• Critical 9.8
  CVE-2023-0755 The affected products are vulnerable to an improper validation of array index, which could allow an attacker to crash the server and remotely execute arbitrary…

  Microsoft · Rockwell Automation · PTC · General Electric

  EPSS 12%
• Critical 9.8
  CVE-2023-0232 ShopLentor < 2.5.4 - PHP Object Injection
  EPSS 3.3%
• Critical 9.8
  CVE-2022-36231 Code injection in pdf_info
  EPSS 3%
• Critical 9.8
  CVE-2023-0754 The affected products are vulnerable to an integer overflow or wraparound, which could  allow an attacker to crash the server and remotely execute arbitrary co…

  Microsoft · Rockwell Automation · PTC · General Electric

  EPSS 2.9%
• Critical 9.8
  CVE-2023-25696 Apache Airflow Hive Provider Beeline RCE

  Apache Software Foundation · Apache Airflow Hive Provider

  EPSS 2%
• Critical 9.8
  CVE-2023-25693 Sqoop Apache Airflow Provider Remote Code Execution Vulnerability

  Apache Software Foundation · Apache Airflow Sqoop Provider

  EPSS 1.9%
• Critical 9.8
  CVE-2022-48337 GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, because lib-src/etags.c uses the system…
  EPSS 1.6%
• Critical 9.8
  CVE-2023-25691 Apache Airflow Google Provider: Google Cloud Sql Provider Remote Command Execution

  Apache Software Foundation · Apache Airflow Google provider

  EPSS 1.6%
• Critical 9.6
  CVE-2023-26034 ZoneMinder SQL Injection

  ZoneMinder · zoneminder

  EPSS 1.6%
• Critical 9.8
  CVE-2023-25805 versionn Command Injection Vulnerability

  commenthol · versionn

  EPSS 1.6%
• Critical 9.8
  CVE-2022-46637 Prolink router PRS1841 was discovered to contain hardcoded credentials for its Telnet and FTP services.
  EPSS 1.5%
• Critical 9.8
  CVE-2023-25613 LDAP Injection Vulnerability in Apache Kerby

  Apache Software Foundation · Apache Kerby LDAP Backend

  EPSS 1.5%

All 50 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• High 7.2
  CVE-2023-26035 ZoneMinder vulnerable to Missing Authorization

  ZoneMinder · zoneminder

  EPSS 80%
• Unscored
  CVE-2022-29273 pfSense CE through 2.6.0 and pfSense Plus before 22.05 allow XSS in the WebGUI via URL Table Alias URL parameters.
  EPSS 60%
• Medium 5.4
  CVE-2022-48343 In JetBrains TeamCity before 2022.10.2 there was an XSS vulnerability in the user creation process.

  JetBrains · TeamCity

  EPSS 59%
• High 7.5
  CVE-2023-24998 Apache Commons FileUpload, Apache Tomcat: FileUpload DoS with excessive parts

  Apache Software Foundation · Apache Tomcat · Apache Commons FileUpload

  EPSS 49%
• Medium 4.3
  CVE-2023-1034 Path Traversal: '\..\filename' in salesagility/suitecrm

  salesagility · salesagility/suitecrm

  EPSS 26%
• Unscored
  CVE-2023-26602 ASUS ASMB8 iKVM firmware through 1.14.51 allows remote attackers to execute arbitrary code by using SNMP to create extensions, as demonstrated by snmpset for N…
  EPSS 17%
• High 7.2
  CVE-2023-20858 VMware Carbon Black App Control 8.7.x prior to 8.7.8, 8.8.x prior to 8.8.6, and 8.9.x.prior to 8.9.4 contain an injection vulnerability. A malicious actor with…
  EPSS 17%
• Medium 6.5
  CVE-2023-1009 DrayTek Vigor 2960 Web Management Interface mainfunction.cgi sub_1DF14 path traversal

  DrayTek · Vigor 2960

  EPSS 16%