Week 24, 2023

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.8
  CVE-2023-29357 Microsoft SharePoint Server Elevation of Privilege Vulnerability

  Microsoft · Microsoft SharePoint Server 2019

  EPSS 100%
• Critical 9.2
  CVE-2023-27997 A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, version 6.4.12 and below, version 6.0.16 and…

  Fortinet · FortiOS · FortiProxy · FortiOS-6K7K

  EPSS 87%
• Critical 9.8
  CVE-2023-35042 GeoServer RCE due to improper control of generation of code in jai-ext`Jiffle` map algebra language
  EPSS 45%
• Critical 9.8
  CVE-2023-34800 D-Link Go-RT-AC750 revA_v101b03 was discovered to contain a command injection vulnerability via the service parameter at genacgi_main.
  EPSS 28%
• Critical 9.8
  CVE-2023-34747 File upload vulnerability in ujcms 6.0.2 via /api/backend/core/web-file-upload/upload.
  EPSS 20%
• Critical 9.1
  CVE-2023-35036 In Progress MOVEit Transfer before 2021.0.7 (13.0.7), 2021.1.5 (13.1.5), 2022.0.5 (14.0.5), 2022.1.6 (14.1.6), and 2023.0.2 (15.0.2), SQL injection vulnerabili…
  EPSS 13%
• Critical 9.8
  CVE-2023-34659 jeecg-boot SQL injection vulnerability
  EPSS 12%
• Critical 9.8
  CVE-2023-34752 bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the lid parameter at admin/index.php?mode=settings&page=lang&action=edit.
  EPSS 4.4%
• Critical 9.8
  CVE-2023-34756 bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the cid parameter at admin/index.php?mode=settings&page=charset&action=edit.
  EPSS 4.2%
• Critical 9.8
  CVE-2023-34755 bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the userid parameter at admin/index.php?mode=user&action=edit.
  EPSS 4.2%
• Critical 9.8
  CVE-2023-34753 bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the tid parameter at admin/index.php?mode=settings&page=tmpl&action=edit.
  EPSS 4.2%
• Critical 9.8
  CVE-2023-34751 bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the gid parameter at admin/index.php?mode=user&page=groups&action=edit.
  EPSS 4.2%
• Critical 9.8
  CVE-2023-30150 PrestaShop leocustomajax 1.0 and 1.0.0 are vulnerable to SQL Injection via modules/leocustomajax/leoajax.php.
  EPSS 3.8%
• Critical 9.8
  CVE-2023-3049 File Upload in TMT's Lockcell

  TMT · Lockcell

  EPSS 3.7%
• Critical 9.8
  CVE-2023-34754 bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the pid parameter at admin/index.php?mode=settings&page=plugins&action=edit.
  EPSS 3.4%

All 63 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• Unscored
  CVE-2023-35708 In Progress MOVEit Transfer before 2021.0.8 (13.0.8), 2021.1.6 (13.1.6), 2022.0.6 (14.0.6), 2022.1.7 (14.1.7), and 2023.0.3 (15.0.3), a SQL injection vulnerabi…
  EPSS 97%
• Unscored
  CVE-2023-35813 Multiple Sitecore products allow remote code execution. This affects Experience Manager, Experience Platform, and Experience Commerce through 10.3.
  EPSS 87%
• High 8.8
  CVE-2023-30625 rudder-server vulnerable to SQL Injection

  rudderlabs · rudder-server

  EPSS 86%
• High 8.8
  CVE-2023-32031 Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft · Microsoft Exchange Server 2016 Cumulative Update 23 · Microsoft Exchange Server 2019 Cumulative Update 12 · Microsoft Exchange Server 2019 Cumulative Update 13

  EPSS 81%
• High 8.8
  CVE-2023-34468 Apache NiFi: Potential Code Injection with Database Services using H2

  Apache Software Foundation · Apache NiFi

  EPSS 62%
• High 8.1
  CVE-2023-3224 Code Injection in nuxt/nuxt

  nuxt · nuxt/nuxt

  EPSS 59%
• High 7.8
  CVE-2023-32029 Microsoft Excel Remote Code Execution Vulnerability

  Microsoft · Microsoft 365 Apps for Enterprise · Microsoft Office LTSC 2021 · Microsoft Office LTSC for Mac 2021

  EPSS 54%
• High 7.2
  CVE-2023-33919 A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050 MASTER MODULE (All versions < CPCI85 V05). The web interface …

  Siemens · CP-8031 MASTER MODULE · CP-8050 MASTER MODULE

  EPSS 48%