Week 17, 2023

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.8
  CVE-2023-28771 Improper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73, VPN series firmware versions 4.60 through 5.35, USG FLEX series…

  Zyxel · USG FLEX series firmware · ATP series firmware · VPN series Firmware

  EPSS 99%
• Critical 9.6
  CVE-2023-28131 Expo SDK has an OAuth vulnerability

  Expo.io · Expo AuthSession module

  EPSS 23%
• Critical 9.8
  CVE-2023-28769 The buffer overflow vulnerability in the library “libclinkc.so” of the web server “zhttpd” in Zyxel DX5401-B0 firmware versions prior to V5.17(ABYO.1)C0 could …

  Zyxel · DX5401-B0 firmware

  EPSS 5.4%
• Critical 9.8
  CVE-2023-1020 Steveas WP Live Chat Shoutbox <= 1.4.2 - Unauthenticated SQLi
  EPSS 4.9%
• Critical 10.0
  CVE-2023-2356 Relative Path Traversal in mlflow/mlflow

  MLflow · mlflow/mlflow

  EPSS 4.1%
• Critical 9.8
  CVE-2023-30404 Aigital Wireless-N Repeater Mini_Router v0.131229 was discovered to contain a remote code execution (RCE) vulnerability via the sysCmd parameter in the formSys…
  EPSS 2.2%
• Critical 9.1
  CVE-2023-30846 typed-rest-client vulnerable to potential leak of authentication data to 3rd parties

  Microsoft · typed-rest-client

  EPSS 2.2%
• Critical 9.8
  CVE-2023-29566 Remote code execution in dawnsparks-node-tesseract
  EPSS 2.2%
• Critical 9.8
  CVE-2023-27848 Remote code execution in broccoli-compass
  EPSS 1.9%
• Critical 10.0
  CVE-2023-1968 CVE-2023-1968

  Illumina · NextSeq 1000/2000 Control Software · MiniSeq Control Software · NovaSeq Control Software

  EPSS 1.8%
• Critical 9.8
  CVE-2023-27849 rails-routes-to-json v1.0.0 was discovered to contain a remote code execution (RCE) vulnerability via the child_process function.
  EPSS 1.8%
• Critical 10.0
  CVE-2023-30839 PrestaShop vulnerable to SQL filter bypass leading to arbitrary write requests using "SQL Manager"

  PrestaShop · PrestaShop

  EPSS 1.7%
• Critical 9.8
  CVE-2023-24796 Password vulnerability found in Vinga WR-AC1200 81.102.1.4370 and before allows a remote attacker to execute arbitrary code via the password parameter at the /…
  EPSS 1.6%
• Critical 9.8
  CVE-2023-30349 Remote code execution in JFinal CMS
  EPSS 1.6%
• Critical 9.8
  CVE-2023-27973 Certain HP LaserJet Pro print products are potentially vulnerable to Heap Overflow and/or Remote Code Execution.

  HP · HP LaserJet Pro

  EPSS 1.5%

All 64 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• High 8.9
  CVE-2023-27524 Apache Superset: Session validation vulnerability when using provided default SECRET_KEY

  Apache Software Foundation · Apache Superset

  EPSS 98%
• Medium 5.3
  CVE-2023-29489 An issue was discovered in cPanel before 11.109.9999.116. XSS can occur on the cpsrvd error page via an invalid webcall ID, aka SEC-669. The fixed versions are…
  EPSS 66%
• High 7.5
  CVE-2023-29552 The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the attacker to use s…
  EPSS 64%
• High 7.5
  CVE-2023-28770 The sensitive information exposure vulnerability in the CGI “Export_Log” and the binary “zcmd” in Zyxel DX5401-B0 firmware versions prior to V5.17(ABYO.1)C0 co…

  Zyxel · DX5401-B0 firmware

  EPSS 58%
• High 7.5
  CVE-2023-25652 "git apply --reject" partially-controlled arbitrary file write

  git · git

  EPSS 52%
• High 8.8
  CVE-2023-28384 CVE-2023-28384

  mySCADA · mySCADA myPRO

  EPSS 45%
• Medium 5.4
  CVE-2023-30405 A cross-site scripting (XSS) vulnerability in Aigital Wireless-N Repeater Mini_Router v0.131229 allows attackers to execute arbitrary web scripts or HTML via a…
  EPSS 29%
• High 8.8
  CVE-2023-28400 CVE-2023-28400

  mySCADA · mySCADA myPRO

  EPSS 25%