Week 35, 2023

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.6
  CVE-2023-41265 An HTTP Request Tunneling vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier…
  EPSS 88%
• Critical 9.8
  CVE-2023-34039 Aria Operations for Networks contains an Authentication Bypass vulnerability due to a lack of unique cryptographic key generation. A malicious actor with netwo…
  EPSS 67%
• Critical 9.8
  CVE-2023-4596 Forminator <= 1.24.6 - Unauthenticated Arbitrary File Upload

  WPMU DEV · Forminator Forms – Contact Form, Payment Form & Custom Form Builder

  EPSS 14%
• Critical 9.8
  CVE-2023-40890 A stack-based buffer overflow vulnerability exists in the lookup_sequence function of ZBar 0.23.90. Specially crafted QR codes may lead to information disclosu…
  EPSS 1.9%
• Critical 9.8
  CVE-2023-4744 Tenda AC8 formSetDeviceName stack-based overflow

  Tenda · AC8

  EPSS 1.8%
• Critical 9.8
  CVE-2023-40582 Command Injection Vulnerability in find-exec

  shime · find-exec

  EPSS 1.8%
• Critical 9.8
  CVE-2023-40889 Heap-based buffer overflow in ZBar
  EPSS 1.7%
• Critical 9.8
  CVE-2023-39631 Langchain vulnerable to arbitrary code execution via the evaluate function in the numexpr library
  EPSS 1.6%
• Critical 9.8
  CVE-2023-38027 SpotCam Co., Ltd. SpotCam Sense - Command Injection

  SPOTCAM · SpotCam Sense

  EPSS 1.6%
• Critical 9.8
  CVE-2023-38025 SpotCam Co., Ltd. SpotCamFHD - Command Injection -1

  SPOTCAM · SpotCam FHD 2

  EPSS 1.6%
• Critical 10.0
  CVE-2023-1523 Using the TIOCLINUX ioctl request, a malicious snap could inject contents into the input of the controlling terminal which could allow it to cause arbitrary co…

  Canonical · snapd

  EPSS 1.4%
• Critical 9.8
  CVE-2023-36328 Integer Overflow vulnerability in mp_grow in libtom libtommath before commit beba892bc0d4e4ded4d667ab1d2a94f4d75109a9, allows attackers to execute arbitrary co…
  EPSS 1.3%
• Critical 9.8
  CVE-2023-3162 Stripe Payment Plugin for WooCommerce <= 3.7.7 - Authentication Bypass

  ThemeHigh · Payment Gateway of Stripe for WooCommerce

  EPSS 1.2%
• Critical 9.1
  CVE-2023-41360 An issue was discovered in FRRouting FRR through 9.0. bgpd/bgp_packet.c can read the initial byte of the ORF header in an ahead-of-stream situation.
  EPSS 1.2%
• Critical 9.8
  CVE-2023-4696 Improper Access Control in usememos/memos

  usememos · usememos/memos

  EPSS 1.1%

All 26 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• High 8.2
  CVE-2023-41266 A path traversal vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, Novembe…
  EPSS 85%
• Unscored
  CVE-2023-41109 SmartNode SN200 (aka SN200) 3.21.2-23021 allows unauthenticated OS Command Injection.
  EPSS 65%
• Medium 6.3
  CVE-2023-4708 Infosoftbd Clcknshop GET Parameter all sql injection

  Infosoftbd · Clcknshop

  EPSS 31%
• High 7.2
  CVE-2023-20890 Aria Operations for Networks contains an arbitrary file write vulnerability. An authenticated malicious actor with administrative access to VMware Aria Operati…
  EPSS 20%
• High 7.5
  CVE-2023-4481 Junos OS and Junos OS Evolved: A crafted BGP UPDATE message allows a remote attacker to de-peer (reset) BGP sessions (CVE-2023-4481)

  Juniper Networks · Junos OS · Junos OS Evolved

  EPSS 18%
• High
  CVE-2023-40787 SpringBlade vulnerable to SQL injection
  EPSS 18%
• Medium 5.0
  CVE-2023-4711 D-Link DAR-8000-10 decodmail.php os command injection

  D-Link · DAR-8000-10

  EPSS 6.8%
• Unscored
  CVE-2023-31714 Chitor-CMS before v1.1.2 was discovered to contain multiple SQL injection vulnerabilities.
  EPSS 5.8%