Week 12, 2023

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.8
  CVE-2023-26801 LB-LINK BL-AC1900_2.0 v1.0.1, LB-LINK BL-WR9000 v2.4.9, LB-LINK BL-X26 v1.2.5, and LB-LINK BL-LTE300 v1.0.8 were discovered to contain a command injection vuln…
  EPSS 78%
• Critical 9.3
  CVE-2023-1177 Path Traversal: '\..\filename' in mlflow/mlflow

  MLflow · mlflow/mlflow

  EPSS 70%
• Critical 9.8
  CVE-2023-27034 PrestaShop jmsblog 2.5.5 was discovered to contain a SQL injection vulnerability.
  EPSS 59%
• Critical 9.8
  CVE-2023-26802 An issue in the component /network_config/nsg_masq.cgi of DCN (Digital China Networks) DCBI-Netlog-LAB v1.0 allows attackers to bypass authentication and execu…
  EPSS 49%
• Critical 9.8
  CVE-2023-28662 The Gift Cards (Gift Vouchers and Packages) WordPress Plugin, version <= 4.3.1, is affected by an unauthenticated SQL injection vulnerability in the template p…
  EPSS 42%
• Critical 9.1
  CVE-2023-28725 General Bytes Crypto Application Server (CAS) 20230120, as distributed with General Bytes BATM devices, allows remote attackers to execute arbitrary Java code …
  EPSS 21%
• Critical 9.8
  CVE-2023-26359 Adobe ColdFusion Deserialization of Untrusted Data Arbitrary code execution

  Adobe · ColdFusion

  EPSS 17%
• Critical 9.8
  CVE-2023-27855 Rockwell Automation ThinManager ThinServer Path Traversal Upload

  Rockwell Automation · ThinManager® ThinServer™

  EPSS 13%
• Critical 9.8
  CVE-2023-27100 Improper restriction of excessive authentication attempts in the SSHGuard component of Netgate pfSense Plus software v22.05.1 and pfSense CE software v2.6.0 al…
  EPSS 9.9%
• Critical 9.8
  CVE-2023-27637 An issue was discovered in the tshirtecommerce (aka Custom Product Designer) component 2.1.4 for PrestaShop. An HTTP request can be forged with a compromised p…
  EPSS 3.3%
• Critical 9.8
  CVE-2023-27638 An issue was discovered in the tshirtecommerce (aka Custom Product Designer) component 2.1.4 for PrestaShop. An HTTP request can be forged with a compromised t…
  EPSS 3.3%
• Critical 9.1
  CVE-2022-37337 A command execution vulnerability exists in the access control functionality of Netgear Orbi Router RBR750 4.6.8.5. A specially-crafted HTTP request can lead t…

  NETGEAR · Orbi Router RBR750

  EPSS 2.8%
• Critical 9.8
  CVE-2022-42948 Cobalt Strike 4.7.1 fails to properly escape HTML tags when they are displayed on Swing components. By injecting crafted HTML code, it is possible to remotely …
  EPSS 2.7%
• Critical 9.8
  CVE-2023-27078 A command injection issue was found in TP-Link MR3020 v.1_150921 that allows a remote attacker to execute arbitrary commands via a crafted request to the tftp …
  EPSS 2.5%
• Critical 9.8
  CVE-2022-28495 TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the setWebWlanIdx function via the webWlanIdx para…
  EPSS 2.4%

All 49 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• High 8.6
  CVE-2023-26360 Adobe ColdFusion Improper Access Control Arbitrary code execution

  Adobe · ColdFusion

  EPSS 97%
• High 7.5
  CVE-2023-28432 Minio Information Disclosure in Cluster Deployment

  minio · minio

  EPSS 84%
• High 7.5
  CVE-2023-27856 Rockwell Automation ThinManager ThinServer Path Traversal Download

  Rockwell Automation · ThinManager® ThinServer™

  EPSS 77%
• Medium 6.7
  CVE-2023-1578 SQL Injection in pimcore/pimcore

  pimcore · pimcore/pimcore

  EPSS 63%
• Unscored
  CVE-2023-0631 Paid Memberships Pro < 2.9.12 - Subscriber+ SQL Injection
  EPSS 60%
• Medium 4.9
  CVE-2023-26361 Adobe ColdFusion Directory Traversal Arbitrary file system read Vulnerability

  Adobe · ColdFusion

  EPSS 59%
• Medium 5.5
  CVE-2023-28425 Specially crafted MSETNX command can lead to denial-of-service

  Redis · Redis

  EPSS 59%
• High 7.5
  CVE-2023-24709 An issue found in Paradox Security Systems IPR512 allows attackers to cause a denial of service via the login.html and login.xml parameters.
  EPSS 44%