Week 15, 2023

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.8
  CVE-2023-21554 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

  Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

  EPSS 95%
• Critical 10.0
  CVE-2023-29509 org.xwiki.platform:xwiki-platform-flamingo-theme-ui Eval Injection vulnerability

  xwiki · xwiki-platform

  EPSS 76%
• Critical 9.1
  CVE-2023-2034 Unrestricted Upload of File with Dangerous Type in froxlor/froxlor

  froxlor · froxlor/froxlor

  EPSS 71%
• Critical 9.8
  CVE-2023-27076 Command injection vulnerability found in Tenda G103 v.1.0.0.5 allows attacker to execute arbitrary code via a the language parameter.
  EPSS 23%
• Critical 9.8
  CVE-2023-28765 Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Promotion Management )

  SAP · BusinessObjects Business Intelligence Platform (Promotion Management)

  EPSS 15%
• Critical 9.0
  CVE-2023-27267 Multiple vulnerabilities in SAP Diagnostics Agent (OSCommand Bridge)

  SAP · Diagnostics Agent (OSCommand Bridge)

  EPSS 14%
• Critical 9.8
  CVE-2021-33990 Liferay Portal 6.2.5 allows Command=FileUpload&Type=File&CurrentFolder=/ requests when frmfolders.html exists. NOTE: The vendor disputes this issue because the…
  EPSS 12%
• Critical 9.8
  CVE-2023-26068 Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 2 of 4).
  EPSS 12%
• Critical 9.8
  CVE-2022-34128 The Cartography (aka positions) plugin before 6.0.1 for GLPI allows remote code execution via PHP code in the POST data to front/upload.php.
  EPSS 7.7%
• Critical 9.8
  CVE-2023-26918 Diasoft File Replication Pro 7.5.0 allows attackers to escalate privileges by replacing a legitimate file with a Trojan horse that will be executed as LocalSys…
  EPSS 6.1%
• Critical 9.8
  CVE-2023-29199 vm2 Sandbox escape vulnerability

  patriksimek · vm2

  EPSS 3.9%
• Critical 9.8
  CVE-2023-27032 Prestashop advancedpopupcreator v1.1.21 to v1.1.24 was discovered to contain a SQL injection vulnerability via the component AdvancedPopup::getPopups().
  EPSS 3%
• Critical 9.8
  CVE-2023-28489 A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050 MASTER MODULE (All versions < CPCI85 V05). Affected devices a…

  Siemens · CP-8031 MASTER MODULE · CP-8050 MASTER MODULE

  EPSS 2.8%
• Critical 9.8
  CVE-2023-29492 Novi Survey before 8.9.43676 allows remote attackers to execute arbitrary code on the server in the context of the service account. This does not provide acces…
  EPSS 2.7%
• Critical 9.8
  CVE-2023-27648 Directory Traversal vulnerability found in T-ME Studios Change Color of Keypad v.1.275.1.277 allows a remote attacker to execute arbitrary code via the dex fil…
  EPSS 2.6%

All 80 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• Medium 6.1
  CVE-2023-28341 Stored Cross site scripting (XSS) vulnerability in Zoho ManageEngine Applications Manager through 16340 allows an unauthenticated user to inject malicious java…
  EPSS 99%
• High 7.2
  CVE-2023-29084 Zoho ManageEngine ADManager Plus before 7181 allows for authenticated users to exploit command injection via Proxy settings.
  EPSS 98%
• High 7.5
  CVE-2023-28302 Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

  Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

  EPSS 93%
• High 7.5
  CVE-2023-21769 Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

  Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

  EPSS 89%
• Unscored
  CVE-2023-28121 An issue in WooCommerce Payments plugin for WordPress (versions 5.6.1 and lower) allows an unauthenticated attacker to send requests on behalf of an elevated u…
  EPSS 87%
• High 7.5
  CVE-2023-27179 GDidees CMS v3.9.1 and lower was discovered to contain an arbitrary file download vulenrability via the filename parameter at /_admin/imgdownload.php.
  EPSS 61%
• High 7.8
  CVE-2023-28252 Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

  EPSS 49%
• High 8.8
  CVE-2023-2033 Type confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi…

  Google · Chrome

  EPSS 41%