Week 30, 2023

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 10.0
  CVE-2023-35078 An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or resources of the application without prop…

  ivanti · Endpoint Manager Mobile

  EPSS 100%
• Critical 9.8
  CVE-2023-38992 SQL injection in jeecg-boot
  EPSS 73%
• Critical 9.8
  CVE-2023-37754 Code injection in PowerJob
  EPSS 30%
• Critical 9.8
  CVE-2023-37895 Apache Jackrabbit RMI access can lead to RCE

  Apache Software Foundation · Apache Jackrabbit Standalone (jackrabbit-standalone and jackrabbit-standalone-components) · Apache Jackrabbit Webapp (jackrabbit-webapp)

  EPSS 3.2%
• Critical 9.6
  CVE-2023-38673 Command injection in fs.py

  PaddlePaddle · PaddlePaddle

  EPSS 2.3%
• Critical 9.8
  CVE-2023-33308 A stack-based overflow vulnerability [CWE-124] in Fortinet FortiOS version 7.0.0 through 7.0.10 and 7.2.0 through 7.2.3 and FortiProxy version 7.0.0 through 7.…

  Fortinet · FortiOS · FortiProxy

  EPSS 2.1%
• Critical 9.8
  CVE-2023-34478 Apache Shiro before 1.12.0, or 2.0.0-alpha-3, may be susceptible to a path traversal attack when used together with APIs or other web frameworks that route req…

  Apache Software Foundation · Apache Shiro

  EPSS 2.1%
• Critical 9.8
  CVE-2023-35982 Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol

  Hewlett Packard Enterprise (HPE) · Aruba Access Points running InstantOS and ArubaOS 10

  EPSS 2.1%
• Critical 9.8
  CVE-2023-35981 Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol

  Hewlett Packard Enterprise (HPE) · Aruba Access Points running InstantOS and ArubaOS 10

  EPSS 2.1%
• Critical 9.8
  CVE-2023-35980 Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol

  Hewlett Packard Enterprise (HPE) · Aruba Access Points running InstantOS and ArubaOS 10

  EPSS 2.1%
• Critical 9.8
  CVE-2023-38647 Apache Helix: Deserialization vulnerability in Helix workflow and REST

  Apache Software Foundation · Apache Helix

  EPSS 2%
• Critical 9.8
  CVE-2023-35088 Apache InLong: SQL injection in audit endpoint

  Apache Software Foundation · Apache InLong

  EPSS 1.6%
• Critical 9.6
  CVE-2023-3974 OS Command Injection in jgraph/drawio

  jgraph · jgraph/drawio

  EPSS 1.2%
• Critical 9.8
  CVE-2023-39022 Code injection in oscore
  EPSS 1.2%
• Critical 9.8
  CVE-2023-39021 Code injection in wix-embedded-mysql
  EPSS 1%

All 29 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• High 8.2
  CVE-2023-3486 PaperCut NG Unauthenticated File Upload

  PaperCut · PaperCut NG

  EPSS 79%
• Unscored
  CVE-2023-31465 An issue was discovered in FSMLabs TimeKeeper 8.0.17 through 8.0.28. By intercepting requests from various timekeeper streams, it is possible to find the getsa…
  EPSS 46%
• High 7.2
  CVE-2023-28130 Local user may lead to privilege escalation using Gaia Portal hostnames page.
  EPSS 21%
• High 8.8
  CVE-2023-37450 The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, Safari 16.5.2, tvOS 16.6, macOS Ventura 13.5, watchOS 9.6. Proce…

  Apple · macOS · iOS and iPadOS · watchOS

  EPSS 19%
• High 7.8
  CVE-2023-2640 On Ubuntu kernels carrying both c914c0e27eb0 and "UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overlayfs.* xattrs", an unprivileged user may …

  Canonical · Ubuntu Kernel

  EPSS 15%
• Unscored
  CVE-2022-4906 Inappropriate implementation in Blink in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page…

  Google · Chrome

  EPSS 13%
• High 7.1
  CVE-2023-37979 WordPress Ninja Forms Plugin <= 3.6.25 is vulnerable to Cross Site Scripting (XSS)

  Saturday Drive · Ninja Forms Contact Form

  EPSS 9.7%
• Medium 6.3
  CVE-2023-38501 copyparty vulnerable to reflected cross-site scripting via k304 parameter

  9001 · copyparty

  EPSS 9.2%