Week 39, 2023

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 10.0
  CVE-2023-40044 WS_FTP Server Ad Hoc Transfer Module .NET Deserialization Vulnerability

  Progress Software · WS_FTP Server

  EPSS 90%
• Critical 10.0
  CVE-2023-43654 TorchServe Server-Side Request Forgery

  pytorch · serve

  EPSS 42%
• Critical 9.8
  CVE-2023-4521 Import XML and RSS Feeds < 2.1.5 - Unauthenticated RCE
  EPSS 41%
• Critical 9.9
  CVE-2023-42657 WS_FTP Server Directory Traversal

  Progress Software · WS_FTP Server

  EPSS 16%
• Critical 9.8
  CVE-2023-4490 WP Job Portal < 2.0.6 - Unauthenticated SQLi
  EPSS 3.6%
• Critical 9.8
  CVE-2023-40400 This issue was addressed with improved checks. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. A remote user may cause an un…

  Apple · macOS · iOS and iPadOS · watchOS

  EPSS 1.8%
• Critical 9.9
  CVE-2023-5183 Authenticated RCE due to unsafe JSON deserialization

  Illumio · Core PCE

  EPSS 1.8%
• Critical 9.8
  CVE-2023-41419 Gevent allows remote attacker to escalate privileges
  EPSS 1.8%
• Critical 9.8
  CVE-2023-3767 OS command injection on EasyPHP Webserver

  EasyPHP · Webserver

  EPSS 1.8%
• Critical 9.9
  CVE-2023-5201 OpenHook <= 4.3.0 - Authenticated (Subscriber+) Remote Code Execution via Shortcode

  brazenlygeek · OpenHook

  EPSS 1.7%
• Critical 9.8
  CVE-2021-38243 xunruicms up to v4.5.1 was discovered to contain a remote code execution (RCE) vulnerability in /index.php. This vulnerability allows attackers to execute arbi…
  EPSS 1.6%
• Critical 9.1
  CVE-2023-5185 Gym Management System Project v1.0 - Insecure File Upload

  Gym Management System Project · Gym Management System Project

  EPSS 1.5%
• Critical 9.8
  CVE-2023-35002 A heap-based buffer overflow vulnerability exists in the pictwread functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to arb…

  Accusoft · ImageGear

  EPSS 1.4%
• Critical 9.8
  CVE-2023-5176 Memory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2. Some of these bugs showed evidence of memory corruption and we presume tha…

  Mozilla · Firefox · Thunderbird · Firefox ESR

  EPSS 1.4%
• Critical 10.0
  CVE-2023-40455 A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sonoma 14. A sandboxed process may be able to circumvent sandbox r…

  Apple · macOS

  EPSS 1.3%

All 40 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• Medium 6.3
  CVE-2023-5151 D-Link DAR-8000 autheditpwd.php sql injection

  D-Link · DAR-8000

  EPSS 81%
• Medium 6.3
  CVE-2023-5222 Viessmann Vitogate 300 Web Management Interface vitogate.cgi isValidUser hard-coded password

  Viessmann · Vitogate 300

  EPSS 80%
• High 7.5
  CVE-2023-30591 NodeBB Pre-Authentication Denial-of-Service

  NodeBB · NodeBB

  EPSS 59%
• High 8.8
  CVE-2023-5217 Electron affected by libvpx's heap buffer overflow in vp8 encoding

  Google · Chrome · libvpx

  EPSS 49%
• Unscored
  CVE-2023-43187 A remote code execution (RCE) vulnerability in the xmlrpc.php endpoint of NodeBB Inc NodeBB forum software prior to v1.18.6 allows attackers to execute arbitra…
  EPSS 47%
• Unscored
  CVE-2023-44466 An issue was discovered in net/ceph/messenger_v2.c in the Linux kernel before 6.4.5. There is an integer signedness error, leading to a buffer overflow and rem…
  EPSS 45%
• High 8.1
  CVE-2023-41326 Account takeover via Kanban feature in GLPI

  GLPI · glpi

  EPSS 37%
• High 8.1
  CVE-2023-41320 Account takeover via SQL Injection in UI layout preferences in GLPI

  GLPI · glpi

  EPSS 36%