Week 31, 2023

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.8
  CVE-2022-39986 RaspAP Command Injection vulnerability
  EPSS 99%
• Critical 9.8
  CVE-2023-39143 PaperCut NG and PaperCut MF before 22.1.3 on Windows allow path traversal, enabling attackers to upload, read, or delete arbitrary files. This leads to remote …
  EPSS 80%
• Critical 9.8
  CVE-2023-29689 PyroCMS remote code execution vulnerability
  EPSS 53%
• Critical 9.8
  CVE-2023-38692 Command injection vulnerability in module management function in CloudExplorer Lite

  CloudExplorer-Dev · CloudExplorer-Lite

  EPSS 3.4%
• Critical 9.8
  CVE-2023-38951 ZKTeco BioTime 8.5.5 through 9.x before 9.0.1 (20240617.19506) allows authenticated attackers to create or overwrite arbitrary files on the server via crafted …
  EPSS 3.3%
• Critical 9.8
  CVE-2023-1437 CVE-2023-1437

  Advantech · WebAccess/SCADA

  EPSS 2.8%
• Critical 9.8
  CVE-2023-3346 Denial of Service (DoS) and Remote Code Execution Vulnerability in MITSUBISHI CNC Series

  Mitsubishi Electric · MITSUBISHI CNC E80 Series E80 · MITSUBISHI CNC M800V Series M800VS · MITSUBISHI CNC E70 Series E70

  EPSS 2.1%
• Critical 9.8
  CVE-2023-36480 Aerospike Java Client vulnerable to unsafe deserialization of server responses

  Aerospike · aerospike-client-java

  EPSS 1.8%
• Critical 10.0
  CVE-2023-39344 social-media-skeleton vulnerable to Pre-Auth SQLi leading to RCE

  fobybus · social-media-skeleton

  EPSS 1.5%
• Critical 9.8
  CVE-2023-36091 Authentication Bypass vulnerability in D-Link DIR-895 FW102b07 allows remote attackers to gain escalated privileges via via function phpcgi_main in cgibin. NOT…
  EPSS 1.5%
• Critical 10.0
  CVE-2023-37470 Metabase vulnerable to remote code execution via POST /api/setup/validate API endpoint

  metabase · metabase

  EPSS 1.3%
• Critical 10.0
  CVE-2023-38702 Knowage Server vulnerable to path traversal via upload functionality

  KnowageLabs · Knowage-Server

  EPSS 1.2%
• Critical 9.8
  CVE-2023-36095 langchain Code Injection vulnerability
  EPSS 1.2%
• Critical 9.9
  CVE-2023-4195 PHP Remote File Inclusion in cockpit-hq/cockpit

  cockpit-hq · cockpit-hq/cockpit

  EPSS 1.1%
• Critical 9.9
  CVE-2023-4159 Unrestricted Upload of File with Dangerous Type in omeka/omeka-s

  omeka · omeka/omeka-s

All 22 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• Unscored
  CVE-2023-37679 A remote command execution (RCE) vulnerability in NextGen Mirth Connect v4.3.0 allows attackers to execute arbitrary commands on the hosting server.
  EPSS 99%
• Unscored
  CVE-2023-34960 A command injection vulnerability in the wsConvertPpt component of Chamilo v1.11.* up to v1.11.18 allows attackers to execute arbitrary commands via a SOAP API…
  EPSS 99%
• High 7.5
  CVE-2023-38950 A path traversal vulnerability in the iclock API of ZKTeco BioTime v8.5.5 allows unauthenticated attackers to read arbitrary files via supplying a crafted payl…
  EPSS 92%
• Medium 5.4
  CVE-2023-2164 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

  GitLab · GitLab

  EPSS 66%
• High 7.2
  CVE-2023-35081 A path traversal vulnerability in Ivanti EPMM versions (11.10.x < 11.10.0.3, 11.9.x < 11.9.1.2 and 11.8.x < 11.8.1.2) allows an authenticated administrator to …

  ivanti · EPMM

  EPSS 64%
• Medium 6.3
  CVE-2023-4120 Byzoro Smart S85F Management Platform importhtml.php command injection

  Byzoro · Smart S85F Management Platform

  EPSS 62%
• Unscored
  CVE-2023-36255 An issue in Eramba Limited Eramba Enterprise and Community edition v.3.19.1 allows a remote attacker to execute arbitrary code via the path parameter in the UR…
  EPSS 53%
• Medium 6.1
  CVE-2023-37580 Zimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41 allows XSS in the Zimbra Classic Web Client.
  EPSS 49%