Week 23, 2023

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.8
  CVE-2023-20887 Aria Operations for Networks contains a command injection vulnerability. A malicious actor with network access to VMware Aria Operations for Networks may be ab…
  EPSS 98%
• Critical 9.8
  CVE-2020-36708 Epsilon Framework Themes (Various Versions) - Function Injection

  WP Chill · Macho Themes · silkalns · Activello

  EPSS 65%
• Critical 9.8
  CVE-2023-2986 Abandoned Cart Lite for WooCommerce <= 5.15.1 - Authentication Bypass

  Tyche Softwares · Abandoned Cart Lite for WooCommerce

  EPSS 43%
• Critical 9.1
  CVE-2021-4374 WordPress Automatic Plugin <= 3.53.2 - Unauthenticated Arbitrary Options Update

  ValvePress · WordPress Automatic Plugin

  EPSS 16%
• Critical 9.8
  CVE-2023-33532 There is a command injection vulnerability in the Netgear R6250 router with Firmware Version 1.0.4.48. If an attacker gains web management privileges, they can…
  EPSS 16%
• Critical 9.8
  CVE-2020-36705 Adning Advertising <= 1.5.5 - Arbitrary File Upload

  tunafish · Adning Advertising

  EPSS 6.9%
• Critical 9.8
  CVE-2021-4380 Pinterest Automatic <= 4.14.3 - Unuathenticated Arbitrary Options Update

  ValvePress · Pinterest Automatic

  EPSS 4.5%
• Critical 9.8
  CVE-2019-25141 Easy WP SMTP <= 1.3.9 - Missing Authorization to Arbitrary Options Update

  smub · Easy WP SMTP – WordPress SMTP and Email Logs: Gmail, Office 365, Outlook, Custom SMTP, and more

  EPSS 4.5%
• Critical 9.8
  CVE-2020-36719 ListingPro - WordPress Directory & Listing Theme < 2.6.1 - Arbitrary Plugin Installation, Activation and Deactivation
  EPSS 4.3%
• Critical 9.8
  CVE-2023-33864 StreamReader::ReadFromExternal in RenderDoc before 1.27 allows an Integer Overflow with a resultant Buffer Overflow. It uses uint32_t(m_BufferSize-m_InputSize)…
  EPSS 4.2%
• Critical 9.8
  CVE-2023-33863 SerialiseValue in RenderDoc before 1.27 allows an Integer Overflow with a resultant Buffer Overflow. 0xffffffff is sign-extended to 0xffffffffffffffff (SIZE_MA…
  EPSS 4.2%
• Critical 9.8
  CVE-2023-33443 Incorrect access control in the administrative functionalities of BES--6024PB-I50H1 VideoPlayTool v2.0.1.0 allow attackers to execute arbitrary administrative …
  EPSS 3.5%
• Critical 9.8
  CVE-2023-30400 An issue was discovered in Anyka Microelectronics AK3918EV300 MCU v18. A command injection vulnerability in the network configuration script within the MCU's o…
  EPSS 3.5%
• Critical 9.8
  CVE-2023-31569 TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain a command injection via the setWanCfg function.
  EPSS 3.1%
• Critical 9.8
  CVE-2016-15033 Delete All Comments <= 2.0 - Arbitrary File Upload

  Ganesh Chandra · Delete All Comments

  EPSS 2.3%

All 58 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• High 8.7
  CVE-2023-2442 An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2. A specia…

  GitLab · GitLab

  EPSS 96%
• High 7.2
  CVE-2023-0992 Shield Security <= 17.0.17 - Unauthenticated Stored Cross-Site Scripting

  paultgoodchild · Shield: Blocks Bots, Protects Users, and Prevents Security Breaches

  EPSS 93%
• Medium 4.3
  CVE-2023-0921 Allocation of Resources Without Limits or Throttling in GitLab

  GitLab · GitLab

  EPSS 84%
• High 8.8
  CVE-2023-20888 Aria Operations for Networks contains an authenticated deserialization vulnerability. A malicious actor with network access to VMware Aria Operations for Netwo…
  EPSS 82%
• High 7.5
  CVE-2023-20889 Aria Operations for Networks contains an information disclosure vulnerability. A malicious actor with network access to VMware Aria Operations for Networks may…
  EPSS 79%
• Medium 6.5
  CVE-2023-34096 Thruk has Path Traversal Vulnerability in panorama.pm

  sni · Thruk

  EPSS 63%
• High 8.8
  CVE-2023-2249 wpForo Forum <= 2.1.7 - Authenticated (Subscriber+) Local File Include, Server-Side Request Forgery, and PHAR Deserialization via file_get_contents

  Tomdever · wpForo Forum

  EPSS 61%
• High 8.8
  CVE-2023-33538 TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a command injection vulnerability via the component /userRpm/WlanNetwo…
  EPSS 42%