Week 44, 2023

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 10.0
  CVE-2023-22518 All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authorization vulnerability allows an unauthent…

  Atlassian · Confluence Server · Confluence Data Center

  EPSS 100%
• Critical 9.9
  CVE-2023-20048 A vulnerability in the web services interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute cert…

  Cisco · Cisco Firepower Management Center

  EPSS 21%
• Critical 9.8
  CVE-2023-23368 QTS, QuTS hero, QuTScloud

  QNAP Systems · QTS · QuTS hero · QuTScloud

  EPSS 18%
• Critical 9.0
  CVE-2023-23369 QTS, Multimedia Console, and Media Streaming add-on

  QNAP Systems · QTS · Media Streaming Add-on · Multimedia Console

  EPSS 14%
• Critical 9.8
  CVE-2023-46977 TOTOLINK LR1200GB V9.1.0u.6619_B20230130 was discovered to contain a stack overflow via the password parameter in the function loginAuth.
  EPSS 9.7%
• Critical 9.3
  CVE-2023-46846 Squid: request/response smuggling in http/1.1 and icap

  Red Hat · Red Hat Enterprise Linux 9 · Red Hat Enterprise Linux 8 · Red Hat Enterprise Linux 6

  EPSS 7.2%
• Critical 9.8
  CVE-2023-3277 MStore API <= 4.10.7 - Unauthorized Account Access and Privilege Escalation

  inspireui · MStore API – Create Native Android & iOS Apps On The Cloud

  EPSS 3.4%
• Critical 9.1
  CVE-2023-3961 Samba: smbd allows client access to unix domain sockets on the file system as root

  Red Hat · Red Hat Enterprise Linux 9 · Red Hat Enterprise Linux 8 · Red Hat Enterprise Linux 7

  EPSS 2.7%
• Critical 9.0
  CVE-2023-5843 Ads by datafeedr.com <= 1.1.3 - Unauthenticated (Limited) Remote Code Execution

  datafeedrcom · Ads by datafeedr.com

  EPSS 2.6%
• Critical 9.8
  CVE-2023-46817 An issue was discovered in phpFox before 4.8.14. The url request parameter passed to the /core/redirect route is not properly sanitized before being used in a …
  EPSS 2.3%
• Critical 9.9
  CVE-2023-46404 PCRS <= 3.11 (d0de1e) “Questions” page and “Code editor” page are vulnerable to remote code execution (RCE) by escaping Python sandboxing.
  EPSS 2.3%
• Critical 9.8
  CVE-2023-46980 An issue in Best Courier Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted script to the userID …
  EPSS 1.9%
• Critical 9.8
  CVE-2023-46993 In TOTOLINK A3300R V17.0.0cu.557_B20221024 when dealing with setLedCfg request, there is no verification for the enable parameter, which can lead to command in…
  EPSS 1.8%
• Critical 9.8
  CVE-2023-46976 TOTOLINK A3300R 17.0.0cu.557_B20221024 contains a command injection via the file_name parameter in the UploadFirmwareFile function.
  EPSS 1.8%
• Critical 9.8
  CVE-2023-46979 TOTOLINK X6000R V9.4.0cu.852_B20230719 was discovered to contain a command injection vulnerability via the enable parameter in the setLedCfg function.
  EPSS 1.8%

All 58 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• Unscored
  CVE-2023-5360 Royal Elementor Addons and Templates < 1.3.79 - Unauthenticated Arbitrary File Upload
  EPSS 86%
• High 8.6
  CVE-2023-46847 Squid: denial of service in http digest authentication

  Red Hat · Red Hat Enterprise Linux 9 · Red Hat Enterprise Linux 8 · Red Hat Enterprise Linux 7

  EPSS 79%
• Unscored
  CVE-2023-34260 Kyocera TASKalfa 4053ci printers through 2VG_S000.002.561 allow a denial of service (service outage) via /wlmdeu%2f%2e%2e%2f%2e%2e followed by a directory refe…
  EPSS 75%
• Medium 4.9
  CVE-2023-34259 Kyocera TASKalfa 4053ci printers through 2VG_S000.002.561 allow /wlmdeu%2f%2e%2e%2f%2e%2e directory traversal to read arbitrary files on the filesystem, even f…
  EPSS 60%
• High 7.8
  CVE-2023-31102 Ppmd7.c in 7-Zip before 23.00 allows an integer underflow and invalid read operation via a crafted 7Z archive.
  EPSS 54%
• High 7.5
  CVE-2023-46695 Django potential denial of service vulnerability in UsernameField on Windows
  EPSS 53%
• High 7.5
  CVE-2023-4197 Dolibarr ERP CRM (<= 18.0.1) Improper Input Sanitization Authenticated RCE

  Dolibarr · Dolibarr ERP/CRM

  EPSS 36%
• High 7.5
  CVE-2023-1718 Bitrix24 Denial-of-Service (DoS) via Improper File Stream Access

  Bitrix24 · Bitrix24

  EPSS 29%