Week 45, 2023

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.8
  CVE-2023-47246 In SysAid On-Premise before 23.3.36, a path traversal vulnerability leads to code execution after an attacker writes a file to the Tomcat webroot, as exploited…
  EPSS 99%
• Critical 10.0
  CVE-2023-46731 Remote code execution through the section parameter in Administration as guest in XWiki Platform

  xwiki · xwiki-platform

  EPSS 90%
• Critical 9.8
  CVE-2023-3959 Zavio IP Camera Stack-Based Buffer Overflow

  Zavio · IP Camera CF7201 · IP Camera CB3211 · IP Camera CB5220

  EPSS 49%
• Critical 9.9
  CVE-2023-38547 A vulnerability in Veeam ONE allows an unauthenticated user to gain information about the SQL server connection Veeam ONE uses to access its configuration data…

  Veeam · One

  EPSS 21%
• Critical 9.8
  CVE-2023-47253 Qualitor through 8.20 allows remote attackers to execute arbitrary code via PHP code in the html/ad/adpesquisasql/request/processVariavel.php gridValoresPopHid…
  EPSS 16%
• Critical 9.8
  CVE-2023-47248 PyArrow, PyArrow: Arbitrary code execution when loading a malicious data file

  Apache Software Foundation · PyArrow

  EPSS 13%
• Critical 9.8
  CVE-2023-38548 A vulnerability in Veeam ONE allows an unprivileged user who has access to the Veeam ONE Web Client the ability to acquire the NTLM hash of the account used by…

  Veeam · One

  EPSS 12%
• Critical 9.9
  CVE-2021-43609 An issue was discovered in Spiceworks Help Desk Server before 1.3.3. A Blind Boolean SQL injection vulnerability within the order_by_for_ticket function in app…
  EPSS 2.4%
• Critical 9.7
  CVE-2023-46732 Reflected Cross-site scripting through revision parameter in content menu in XWiki Platform

  xwiki · xwiki-platform

  EPSS 2.3%
• Critical 9.8
  CVE-2023-29974 An issue discovered in Pfsense CE version 2.6.0 allows attackers to compromise user accounts via weak password requirements.
  EPSS 2.2%
• Critical 9.1
  CVE-2023-46253 Remote code execution in Squidex

  Squidex · squidex

  EPSS 1.9%
• Critical 9.1
  CVE-2023-46501 An issue in BoltWire v.6.03 allows a remote attacker to obtain sensitive information via a crafted payload to the view and change admin password function.
  EPSS 1.7%
• Critical 9.8
  CVE-2023-45225 Zavio IP Camera Stack-Based Buffer Overflow

  Zavio · IP Camera B8220 · IP Camera CF7201 · IP Camera CB3211

  EPSS 1.6%
• Critical 9.8
  CVE-2023-43755 Zavio IP Camera Stack-Based Buffer Overflow

  Zavio · IP Camera B8220 · IP Camera CF7201 · IP Camera CB3211

  EPSS 1.6%
• Critical 9.8
  CVE-2023-43791 Label Studio has Hardcoded Django `SECRET_KEY` that can be Abused to Forge Session Tokens

  HumanSignal · label-studio

  EPSS 1.6%

All 51 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• Medium 6.1
  CVE-2023-41425 Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary code via a crafted script uploaded to the i…
  EPSS 65%
• Medium 4.5
  CVE-2023-38549 A vulnerability in Veeam ONE allows an unprivileged user who has access to the Veeam ONE Web Client the ability to acquire the NTLM hash of the account used by…

  Veeam · One

  EPSS 19%
• High 8.8
  CVE-2023-4249 Zavio IP Camera Stack-Based Buffer Overflow

  Zavio · IP Camera CD321 · IP Camera CF7501 · IP Camera CB3212

  EPSS 13%
• Medium 4.3
  CVE-2023-41723 A vulnerability in Veeam ONE allows a user with the Veeam ONE Read-Only User role to view the Dashboard Schedule. Note: The criticality of this vulnerability i…

  Veeam · One

  EPSS 13%
• Unscored
  CVE-2023-39796 SQL injection vulnerability in the miniform module in WBCE CMS v.1.6.0 allows remote unauthenticated attacker to execute arbitrary code via the DB_RECORD_TABLE…
  EPSS 6.9%
• Medium 5.3
  CVE-2023-5678 Excessive time spent in DH check / generation with large Q parameter value

  OpenSSL · OpenSSL

  EPSS 5.1%
• High 7.5
  CVE-2023-46728 SQUID-2021:8 Denial of Service in Gopher gateway

  squid-cache · squid

  EPSS 3.8%
• High 8.0
  CVE-2023-40054 SolarWinds Network Configuration Manager Directory Traversal Remote Code Execution Vulnerability

  SolarWinds · Network Configuration Manager

  EPSS 3.4%