Week 10, 2023

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.8
  CVE-2023-25690 Apache HTTP Server: HTTP request splitting with mod_rewrite and mod_proxy

  Apache Software Foundation · Apache HTTP Server

  EPSS 84%
• Critical 10.0
  CVE-2023-27482 homeassistant is an open source home automation tool. A remotely exploitable vulnerability bypassing authentication for accessing the Supervisor API through Ho…

  home-assistant · core · supervisor

  EPSS 72%
• Critical 9.8
  CVE-2021-36393 Moodle SQL Injection vulnerability
  EPSS 52%
• Critical 9.8
  CVE-2023-24775 SQL Injection in Funadmin
  EPSS 20%
• Critical 9.8
  CVE-2023-27853 NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a format string vulnerability in a SOAP service that could allow an attacker to execute arbitrary c…
  EPSS 20%
• Critical 9.8
  CVE-2021-36394 Moodle Session Fixation vulnerability
  EPSS 7%
• Critical 9.8
  CVE-2022-4328 WooCommerce Checkout Field Manager < 18.0 - Unauthenticated Arbitrary File Upload
  EPSS 4.4%
• Critical 9.8
  CVE-2021-33353 Directory Traversal vulnerability in Wyomind Help Desk Magento 2 extension v.1.3.6 and before fixed in v.1.3.7 allows attacker to execute arbitrary code via th…
  EPSS 2.2%
• Critical 9.6
  CVE-2023-27898 Cross-site Scripting vulnerability in Jenkins

  Jenkins Project · Jenkins

  EPSS 1.8%
• Critical 9.8
  CVE-2023-25143 An uncontrolled search path element vulnerability in the Trend Micro Apex One Server installer could allow an attacker to achieve a remote code execution state…

  Trend Micro · Trend Micro Apex One

  EPSS 1.7%
• Critical 9.6
  CVE-2023-27905 Cross site scripting vulnerability in update-center2

  Jenkins Project · Jenkins update-center2

  EPSS 1.5%
• Critical 9.8
  CVE-2023-24776 Remote code execution in Funadmin
  EPSS 1.4%
• Critical 9.8
  CVE-2021-33352 An issue in Wyomind Help Desk Magento 2 extension v.1.3.6 and before fixed in v.1.3.7 allows attacker to execute arbitrary code via a phar file upload in the t…
  EPSS 1.4%
• Critical 9.8
  CVE-2023-22889 SmartBear Zephyr Enterprise through 7.15.0 mishandles user-defined input during report generation. This could lead to remote code execution by unauthenticated …
  EPSS 1.3%
• Critical 10.0
  CVE-2023-26489 Guest-controlled out-of-bounds read/write on x86_64 in wasmtime

  bytecodealliance · wasmtime

  EPSS 1.3%

All 47 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• High 8.7
  CVE-2023-0050 An issue has been discovered in GitLab affecting all versions starting from 13.7 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions sta…

  GitLab · GitLab

  EPSS 92%
• High 7.5
  CVE-2023-27532 Vulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the configuration database to be obtained. This may lead to gainin…
  EPSS 81%
• Unscored
  CVE-2022-44574 An improper authentication vulnerability exists in Avalanche version 6.3.x and below allows unauthenticated attacker to modify properties on specific port.
  EPSS 64%
• High 8.6
  CVE-2023-25573 Improper access control to download file in metersphere

  metersphere · metersphere

  EPSS 52%
• Unscored
  CVE-2023-26601 Zoho ManageEngine ServiceDesk Plus through 14104, Asset Explorer through 6987, ServiceDesk Plus MSP before 14000, and Support Center Plus before 14000 allow De…
  EPSS 34%
• Unscored
  CVE-2023-24734 An arbitrary file upload vulnerability in the camera_upload.php component of PMB v7.4.6 allows attackers to execute arbitrary code via a crafted image file.
  EPSS 21%
• Medium 6.5
  CVE-2022-41328 A improper limitation of a pathname to a restricted directory vulnerability ('path traversal') [CWE-22] in Fortinet FortiOS version 7.2.0 through 7.2.3, 7.0.0 …

  Fortinet · FortiOS

  EPSS 11%
• Medium 6.8
  CVE-2022-41333 An uncontrolled resource consumption vulnerability [CWE-400] in FortiRecorder version 6.4.3 and below, 6.0.11 and below login authentication mechanism may allo…

  Fortinet · FortiRecorder

  EPSS 7.2%