Week 20, 2023

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.8
  CVE-2023-1698 WAGO: WBM Command Injection in multiple products

  WAGO · Compact Controller CC100 · PFC100 · Touch Panel 600 Advanced Line

  EPSS 82%
• Critical 9.8
  CVE-2023-31902 RPA Technology Mobile Mouse 3.6.0.4 is vulnerable to Remote Code Execution (RCE).
  EPSS 8.7%
• Critical 9.8
  CVE-2023-31986 A Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4 allows attacker to execute arbitrary code via the setWAN function in /bi…
  EPSS 8.2%
• Critical 9.8
  CVE-2023-32314 Sandbox Escape

  patriksimek · vm2

  EPSS 8.1%
• Critical 9.8
  CVE-2023-2780 Path Traversal: '\..\filename' in mlflow/mlflow

  MLflow · mlflow/mlflow

  EPSS 6.3%
• Critical 9.0
  CVE-2023-31703 Cross Site Scripting (XSS) in the edit user form in Microworld Technologies eScan management console 14.0.1400.2281 allows remote attacker to inject arbitrary …
  EPSS 4.5%
• Critical 9.8
  CVE-2023-0600 WP Visitor Statistics (Real Time Traffic) < 6.9 - Unauthenticated SQLi
  EPSS 4.2%
• Critical 9.8
  CVE-2023-31856 A command injection vulnerability in the hostTime parameter in the function NTPSyncWithHostof TOTOLINK CP300+ V5.2cu.7594_B20200910 allows attackers to execute…
  EPSS 2.9%
• Critical 9.8
  CVE-2022-47937 Multiple parsing problems in the Apache Sling Commons JSON module

  Apache Software Foundation · org.apache.sling.commons.json

  EPSS 2.2%
• Critical 9.8
  CVE-2023-31903 GuppY CMS 6.00.10 is vulnerable to Unrestricted File Upload which allows remote attackers to execute arbitrary code by uploading a php file.
  EPSS 2.1%
• Critical 9.8
  CVE-2023-31587 Tenda AC5 router V15.03.06.28 was discovered to contain a remote code execution (RCE) vulnerability via the Mac parameter at ip/goform/WriteFacMac.
  EPSS 2%
• Critical 9.8
  CVE-2023-29862 An issue found in Agasio-Camera device version not specified allows a remote attacker to execute arbitrary code via the check and authLevel parameters.
  EPSS 1.9%
• Critical 9.8
  CVE-2023-28753 netconsd prior to v0.2 was vulnerable to an integer overflow in its parse_packet function. A malicious individual could leverage this overflow to create heap m…

  Facebook · netconsd

  EPSS 1.9%
• Critical 9.8
  CVE-2022-4774 Bit Form < 1.9 - RCE via Unauthenticated Arbitrary File Upload
  EPSS 1.8%
• Critical 9.8
  CVE-2023-29861 An issue found in FLIR-DVTEL version not specified allows a remote attacker to execute arbitrary code via a crafted request to the management page of the devic…
  EPSS 1.8%

All 44 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• Medium 5.4
  CVE-2023-2745 WordPress Core < 6.2.1 - Directory Traversal

  WordPress · WordPress

  EPSS 80%
• Medium 4.3
  CVE-2023-32985 Jenkins Sidebar Link Plugin vulnerable to Path Traversal

  Jenkins Project · Jenkins Sidebar Link Plugin

  EPSS 72%
• High 8.8
  CVE-2023-32986 Jenkins File Parameter Plugin arbitrary file write vulnerability

  Jenkins Project · Jenkins File Parameter Plugin

  EPSS 61%
• Medium 5.3
  CVE-2023-2766 Weaver OA jx2_config.ini file access

  Weaver · OA

  EPSS 54%
• Medium 4.7
  CVE-2023-32068 URL Redirection to Untrusted Site in XWiki

  xwiki · xwiki-platform

  EPSS 54%
• High 8.8
  CVE-2023-2724 Type confusion in V8 in Google Chrome prior to 113.0.5672.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi…

  Google · Chrome

  EPSS 29%
• High 8.8
  CVE-2023-2725 Use after free in Guest View in Google Chrome prior to 113.0.5672.126 allowed an attacker who convinced a user to install a malicious extension to potentially …

  Google · Chrome

  EPSS 25%
• High 7.2
  CVE-2023-1549 Ad Inserter < 2.7.27 - Admin+ PHP Object Injection
  EPSS 17%