Week 21, 2023

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.8
  CVE-2023-33246 Apache RocketMQ: Possible remote code execution vulnerability when using the update configuration function

  Apache Software Foundation · Apache RocketMQ

  EPSS 97%
• Critical 9.4
  CVE-2023-2868 Remote Code injection in Barracuda Email Security Gateway

  Barracuda Networks · Barracuda Email Security Gateway

  EPSS 87%
• Critical 10.0
  CVE-2023-2825 An issue has been discovered in GitLab CE/EE affecting only version 16.0.0. An unauthenticated malicious user can use a path traversal vulnerability to read ar…

  GitLab · GitLab

  EPSS 72%
• Critical 9.8
  CVE-2023-2732 MStore API <= 3.9.2 - Authentication Bypass

  inspireui · MStore API – Create Native Android & iOS Apps On The Cloud

  EPSS 67%
• Critical 9.8
  CVE-2023-29919 SolarView Compact <= 6.0 is vulnerable to Insecure Permissions. Any file on the server can be read or modified because texteditor.php is not restricted.
  EPSS 60%
• Critical 9.8
  CVE-2023-30145 Server-Side Template Injection in Camaleon CMS
  EPSS 46%
• Critical 9.8
  CVE-2023-33010 A buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware versions 4.32 through 5.36 Patch 1, USG FLEX series firmware version…

  Zyxel · USG FLEX series firmware · ATP series firmware · VPN series Firmware

  EPSS 29%
• Critical 9.8
  CVE-2023-33009 A buffer overflow vulnerability in the notification function in Zyxel ATP series firmware versions 4.60 through 5.36 Patch 1, USG FLEX series firmware versions…

  Zyxel · USG FLEX series firmware · ATP series firmware · VPN series Firmware

  EPSS 28%
• Critical 9.8
  CVE-2023-31689 In Wcms 0.3.2, an attacker can send a crafted request from a vulnerable web application backend server /wcms/wex/html.php via the finish parameter and the text…
  EPSS 20%
• Critical 9.8
  CVE-2023-33362 Piwigo 13.6.0 is vulnerable to SQL Injection via in the "profile" function.
  EPSS 9.1%
• Critical 9.1
  CVE-2022-46945 Nagvis before 1.9.34 was discovered to contain an arbitrary file read vulnerability via the component /core/classes/NagVisHoverUrl.php.
  EPSS 4.1%
• Critical 9.8
  CVE-2023-2734 MStore API <= 3.9.1 - Authentication Bypass

  inspireui · MStore API – Create Native Android & iOS Apps On The Cloud

  EPSS 3.8%
• Critical 9.8
  CVE-2023-33338 Old Age Home Management 1.0 is vulnerable to SQL Injection via the username parameter.
  EPSS 3.6%
• Critical 10.0
  CVE-2023-1424 Denial-of-Service and Remote Code Execution Vulnerability in MELSEC Series CPU module

  Mitsubishi Electric · MELSEC iQ-F Series FX5U-32MR/DS · MELSEC iQ-F Series FX5UC-64MT/DSS · MELSEC iQ-F Series FX5U-80MT/ESS

  EPSS 3.4%
• Critical 9.8
  CVE-2023-28413 Directory traversal vulnerability in Snow Monkey Forms versions v5.0.6 and earlier allows a remote unauthenticated attacker to obtain sensitive information, al…

  Monkey Wrench · Snow Monkey Forms

  EPSS 2%

All 56 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• High 8.6
  CVE-2023-32315 Openfire administration console authentication bypass

  igniterealtime · Openfire

  EPSS 100%
• High 8.3
  CVE-2023-2948 Cross-site Scripting (XSS) - Generic in openemr/openemr

  Open-Emr · openemr/openemr

  EPSS 97%
• Medium 4.7
  CVE-2023-2947 Cross-site Scripting (XSS) - Stored in openemr/openemr

  Open-Emr · openemr/openemr

  EPSS 90%
• Medium 6.3
  CVE-2023-2928 DedeCMS article_allowurl_edit.php code injection
  EPSS 51%
• High 7.5
  CVE-2023-28709 Apache Tomcat: Fix for CVE-2023-24998 is incomplete

  Apache Software Foundation · Apache Tomcat

  EPSS 48%
• Medium 4.7
  CVE-2023-2924 Supcon SimField reportupload.aspx unrestricted upload

  Supcon · SimField

  EPSS 24%
• High 7.2
  CVE-2023-33440 Sourcecodester Faculty Evaluation System v1.0 is vulnerable to arbitrary code execution via /eval/ajax.php?action=save_user.
  EPSS 15%
• High 7.2
  CVE-2023-31742 There is a command injection vulnerability in the Linksys WRT54GL router with firmware version 4.30.18.006. If an attacker gains web management privileges, the…
  EPSS 9.1%