Week 25, 2023

19–25 June 2023

New CVEs: 531
Critical: 54
High: 132
Newly exploited: 11
Advisories: 219
Malicious pkgs: 48

Newly exploited 11

Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.

Critical 9.8
CVE-2023-27992 KEV Jun 23, 2023 The pre-authentication command injection vulnerability in the Zyxel NAS326 firmware versions prior to V5.21(AAZF.14)C0, NAS540 firmware versions prior to V5.21…
Zyxel · NAS326 firmware · NAS542 firmware · NAS540 firmware

EPSS 82%
High 8.8
CVE-2023-32439 KEV Jun 23, 2023 A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5.1 and iPadOS 16.5.1, iOS 15.7.7 and iPadOS 15.7.7, macOS Ventura 13.…
Apple · macOS · iOS and iPadOS · Safari

EPSS 24%
High 8.8
CVE-2023-32435 KEV Jun 23, 2023 A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, iOS 1…
Apple · macOS · iOS and iPadOS · Safari

EPSS 23%
High 7.8
CVE-2023-32434 KEV Jun 23, 2023 An integer overflow was addressed with improved input validation. This issue is fixed in watchOS 9.5.2, macOS Big Sur 11.7.8, iOS 15.7.7 and iPadOS 15.7.7, mac…
Apple · macOS · iOS and iPadOS · watchOS

EPSS 58%
Low 3.9
CVE-2023-20867 KEV Jun 23, 2023 VMware Tools Authentication Bypass Vulnerability
VMware · VMware tools

EPSS 14%
Critical 9.8
CVE-2021-44026 KEV Jun 22, 2023 Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to a potential SQL injection via search or search_params.
EPSS 70%
Critical 9.8
CVE-2023-20887 KEV Jun 22, 2023 Aria Operations for Networks contains a command injection vulnerability. A malicious actor with network access to VMware Aria Operations for Networks may be ab…
EPSS 98%
Critical 9.8
CVE-2020-12641 KEV Jun 22, 2023 rcube_image.php in Roundcube Webmail before 1.4.4 allows attackers to execute arbitrary code via shell metacharacters in a configuration setting for im_convert…
EPSS 84%
High 7.8
CVE-2016-0165 KEV Jun 22, 2023 The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows…
EPSS 14%
High 7.5
CVE-2016-9079 KEV Jun 22, 2023 A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox a…
Mozilla · Firefox · Thunderbird · Firefox ESR

EPSS 87%
Medium 6.1
CVE-2020-35730 KEV Jun 22, 2023 An XSS issue was discovered in Roundcube Webmail before 1.2.13, 1.3.x before 1.3.16, and 1.4.x before 1.4.10. The attacker can send a plain text e-mail message…
EPSS 33%

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

Critical 9.8
CVE-2023-30258 Command Injection vulnerability in MagnusSolution magnusbilling 6.x and 7.x allows remote attackers to run arbitrary commands via unauthenticated HTTP request.
EPSS 94%
Critical 9.8
CVE-2023-27992 The pre-authentication command injection vulnerability in the Zyxel NAS326 firmware versions prior to V5.21(AAZF.14)C0, NAS540 firmware versions prior to V5.21…
Zyxel · NAS326 firmware · NAS542 firmware · NAS540 firmware

EPSS 82%
Critical 9.9
CVE-2023-35150 XWiki Platform vulnerable to privilege escalation (PR) from view right via Invitation application
xwiki · xwiki-platform

EPSS 78%
Critical 9.8
CVE-2023-35885 CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication.
EPSS 74%
Critical 9.8
CVE-2023-29711 An incorrect access control issue was discovered in Interlink PSG-5124 version 1.0.4, allows attackers to execute arbitrary code via crafted GET request.
EPSS 70%
Critical 10.0
CVE-2023-35166 Privilege escalation (PR) from account through TipsPanel
xwiki · xwiki-platform

EPSS 62%
Critical 9.8
CVE-2023-32571 Dynamic Linq vulnerable to remote code execution
EPSS 35%
Critical 9.6
CVE-2023-33299 A deserialization of untrusted data in Fortinet FortiNAC below 7.2.1, below 9.4.3, below 9.2.8 and all earlier versions of 8.x allows attacker to execute unaut…
Fortinet · FortiNAC

EPSS 24%
Critical 9.8
CVE-2023-34600 Adiscon LogAnalyzer v4.1.13 and before is vulnerable to SQL Injection.
EPSS 24%
Critical 9.8
CVE-2023-33584 Sourcecodester Enrollment System Project V1.0 is vulnerable to SQL Injection (SQLI) attacks, which allow an attacker to manipulate the SQL queries executed by …
EPSS 14%
Critical 9.8
CVE-2023-34563 netgear R6250 Firmware Version 1.0.4.48 is vulnerable to Buffer Overflow after authentication.
EPSS 14%
Critical 9.4
CVE-2023-3128 Grafana vulnerable to Authentication Bypass by Spoofing
Grafana · Grafana · Grafana Enterprise

EPSS 4%
Critical 9.8
CVE-2023-3197 MStore API <= 4.0.1 - Unauthenticated SQL Injection
inspireui · MStore API – Create Native Android & iOS Apps On The Cloud

EPSS 3.9%
Critical 9.1
CVE-2023-35169 php-imap vulnerable to RCE through a directory traversal vulnerability
Webklex · php-imap

EPSS 3.2%
Critical 9.7
CVE-2023-35162 XPlatform Wiki vulnerable to cross-site scripting via xcontinue parameter in preview actions template
xwiki · xwiki-platform

EPSS 2.4%

All 54 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

Advisories

SUSE-SU-2023:2579-1 Security update for SUSE Manager Client Tools 16 CVEs
SUSE-SU-2023:2578-1 Security update for SUSE Manager Client Tools 15 CVEs
SUSE-SU-2023:2575-1 Security update for SUSE Manager Client Tools 13 CVEs
SUSE-SU-2023:2594-1 Security update for SUSE Manager Server 4.2 2 CVEs
SUSE-RU-2023:2592-1 Security update for SUSE Manager Server 4.3 2 CVEs
ICSA-23-173-02 Advantech R-SeeNet 2 CVEs
SCA-2023-0005 Vulnerabilities in SICK EventCam App 2 CVEs
WID-SEC-2023-1555 D-LINK Router: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit Administratorrechten 1 CVEs
SUSE-RU-2023:2595-1 Security update for SUSE Manager Server 4.2 1 CVEs
SUSE-RU-2023:2566-1 Security update for SUSE Manager Server 4.3 1 CVEs