Week 47, 2023

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 10.0
  CVE-2023-49103 An issue was discovered in ownCloud owncloud/graphapi 0.2.x before 0.2.1 and 0.3.x before 0.3.1. The graphapi app relies on a third-party GetPhpInfo.php librar…
  EPSS 78%
• Critical 9.8
  CVE-2023-49105 An issue was discovered in ownCloud owncloud/core before 10.13.1. An attacker can access, modify, or delete any file without authentication if the username of …
  EPSS 43%
• Critical 9.7
  CVE-2023-48292 XWiki Admin Tools Application Run Shell Command allows CSRF RCE attacks

  xwiki-contrib · application-admintools

  EPSS 23%
• Critical 9.8
  CVE-2023-37924 Apache Submarine: SQL injection from unauthorized login

  Apache Software Foundation · Apache Submarine

  EPSS 7.2%
• Critical 9.8
  CVE-2023-2437 UserPro <= 5.1.1 - Authentication Bypass to Administrator
  EPSS 6.7%
• Critical 9.9
  CVE-2023-35762 OS Command Injection in INEA ME RTU

  INEA · ME RTU

  EPSS 2.1%
• Critical 9.8
  CVE-2023-49210 openssl npm package vulnerable to command execution
  EPSS 1.9%
• Critical 9.8
  CVE-2023-46302 Apache Submarine: Fix CVE-2022-1471 SnakeYaml unsafe deserialization

  Apache Software Foundation · Apache Submarine

  EPSS 1.7%
• Critical 9.8
  CVE-2022-46337 Apache Derby: LDAP injection vulnerability in authenticator

  Apache Software Foundation · Apache Derby

  EPSS 1.4%
• Critical 9.1
  CVE-2023-46575 SQL injection vulnerability in Meshery
  EPSS 1.3%
• Critical 10.0
  CVE-2023-6248 Data leakage and arbitrary remote code execution in Syrus cloud devices

  Digital Communications Technologies · Syrus4 IoT Telematics Gateway

  EPSS 1.2%
• Critical 9.8
  CVE-2023-38823 Buffer Overflow vulnerability in Tenda Ac19 v.1.0, AC18, AC9 v.1.0, AC6 v.2.0 and v.1.0 allows a remote attacker to execute arbitrary code via the formSetCfm f…
  EPSS 1.2%
• Critical 10.0
  CVE-2023-40151 Red Lion Controls Sixnet RTU Exposed Dangerous Method Or Function

  Red Lion Controls · VT-mIPm-135-D · VT-IPm2m-213-D · ST-IPm-6350

  EPSS 1.1%
• Critical 9.8
  CVE-2023-29075 A maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause an Out-Of-Bounds Write. A malicious actor can leverage t…

  Autodesk · AutoCAD, Advance Steel and Civil 3D

  EPSS 1.1%
• Critical 9.8
  CVE-2023-4149 WAGO: OS Command Injection Vulnerability in Managed Switch

  WAGO · Industrial Managed Switch (0852-1605) · Industrial Managed Switch (0852-0603) · Industrial Managed Switch (0852-0602)

  EPSS 1.1%

All 30 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• Unscored
  CVE-2023-48646 Zoho ManageEngine RecoveryManager Plus before 6070 allows admin users to execute arbitrary commands via proxy settings.
  EPSS 82%
• High 7.5
  CVE-2023-48241 XWiki exposed whole content of all documents of all wikis to anybody with view right on Solr suggest service

  xwiki · xwiki-platform

  EPSS 73%
• Unscored
  CVE-2023-5652 WP Hotel Booking < 2.0.8 - Unauthenticated SQLi
  EPSS 64%
• High 8.1
  CVE-2023-5815 News & Blog Designer Pack – WordPress Blog Plugin <= 3.4.1 - Unauthenticated Remote Code Execution via Local File Inclusion

  InfornWeb · Blog Designer Pack – Blog, Post Grid, Post Slider, Post Carousel, Category Post, News

  EPSS 5%
• Unscored
  CVE-2023-38879 The Community Edition version 9.0 of OS4ED's openSIS Classic allows remote attackers to read arbitrary files via a directory traversal vulnerability in the 'fi…
  EPSS 3.6%
• Low 3.1
  CVE-2023-47643 SuiteCRM has Unauthenticated Graphql Introspection Enabled

  salesagility · SuiteCRM-Core

  EPSS 3%
• Medium 6.3
  CVE-2023-6274 Byzoro Smart S80 PHP File updatelib.php unrestricted upload

  Byzoro · Smart S80

  EPSS 2.9%
• Low 3.5
  CVE-2023-6275 TOTVS Fluig Platform mobileredir openApp.jsp cross site scripting

  TOTVS · Fluig Platform

  EPSS 2.4%