Week 52, 2023

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.8
  CVE-2023-7095 Totolink A7100RU HTTP POST Request main buffer overflow

  Toto Link · A7100RU

  EPSS 14%
• Critical 9.8
  CVE-2023-50651 TOTOLINK X6000R v9.4.0cu.852_B20230719 was discovered to contain a remote command execution (RCE) vulnerability via the component /cgi-bin/cstecgi.cgi.
  EPSS 2.8%
• Critical 9.1
  CVE-2023-41544 JeecgBoot server-side template injection
  EPSS 2.7%
• Critical 9.8
  CVE-2023-50578 Mingsoft MCMS SQL injection
  EPSS 2.2%
• Critical 9.8
  CVE-2023-49954 The CRM Integration in 3CX before 18.0.9.23 and 20 before 20.0.0.1494 allows SQL Injection via a first name, search string, or email address.
  EPSS 2.2%
• Critical 9.3
  CVE-2023-50839 WordPress JS Help Desk – Best Help Desk & Support Plugin <= 2.8.1 is vulnerable to SQL Injection

  JS Help Desk · JS Help Desk – Best Help Desk & Support Plugin

  EPSS 2%
• Critical 10.0
  CVE-2023-7163 D-Link D-View 8 Unauthenticated Probe-Core Server Communication

  D-Link · D-View 8

  EPSS 1.7%
• Critical 9.8
  CVE-2022-34268 An issue was discovered in RWS WorldServer before 11.7.3. /clientLogin deserializes Java objects without authentication, leading to command execution on the ho…
  EPSS 1.5%
• Critical 9.9
  CVE-2023-47840 WordPress Qode Essential Addons Plugin <= 1.5.2 is vulnerable to Remote Code Execution (RCE)

  Qode Interactive · Qode Essential Addons

  EPSS 1.4%
• Critical 9.0
  CVE-2023-6879 heap buffer overflow in libaom

  libaom · libaom

  EPSS 1.2%
• Critical 9.8
  CVE-2023-43481 An issue in Shenzhen TCL Browser TV Web BrowseHere (aka com.tcl.browser) 6.65.022_dab24cc6_231221_gp allows a remote attacker to execute arbitrary JavaScript c…
  EPSS 1.1%
• Critical 9.3
  CVE-2023-50255 Zip Path Traversal in Deepin-Compressor

  linuxdeepin · developer-center

  EPSS 1.1%
• Critical 9.1
  CVE-2023-51773 BACnet Stack before 1.3.2 has a decode function APDU buffer over-read in bacapp_decode_application_data in bacapp.c.
  EPSS 1.1%
• Critical 9.8
  CVE-2023-41543 Jeecg Boot SQL Injection
• Critical 9.8
  CVE-2022-34270 An issue was discovered in RWS WorldServer before 11.7.3. Regular users can create users with the Administrator role via UserWSUserManager.

All 54 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• Unscored
  CVE-2023-51467 Apache OFBiz: Pre-authentication Remote Code Execution (RCE) vulnerability

  Apache Software Foundation · Apache OFBiz

  EPSS 96%
• Unscored
  CVE-2023-50968 Apache OFBiz: Arbitrary file properties reading and SSRF attack

  Apache Software Foundation · Apache OFBiz

  EPSS 63%
• Unscored
  CVE-2022-34267 An issue was discovered in RWS WorldServer before 11.7.3. Adding a token parameter with the value of 02 bypasses all authentication requirements. Arbitrary Jav…
  EPSS 42%
• Unscored
  CVE-2023-6114 Duplicator < 1.5.7.1; Duplicator Pro < 4.5.14.2 - Unauthenticated Sensitive Data Exposure
  EPSS 31%
• Low 3.3
  CVE-2023-52085 Winter CMS Local File Inclusion through Server Side Template Injection

  wintercms · winter

  EPSS 30%
• Medium 6.3
  CVE-2023-7137 code-projects Client Details System HTTP POST Request sql injection

  code-projects · Client Details System

  EPSS 17%
• High 8.8
  CVE-2023-50071 Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customer_support/ajax.php?action=save_department via id or name.
  EPSS 14%
• High 8.8
  CVE-2023-51092 Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function upgrade.
  EPSS 13%