# CVEs published 2023-02-03

117 CVEs were published on February 3, 2023: 35 critical, 36 high. Days are UTC.

- [CVE-2013-10018](https://cve.now/CVE-2013-10018.md): fanzila WebFinance save\_contact.php sql injection (CVSS 5.5, fanzila WebFinance)
- [CVE-2013-10017](https://cve.now/CVE-2013-10017.md): fanzila WebFinance save\_roles.php sql injection (CVSS 5.5, fanzila WebFinance)
- [CVE-2023-23615](https://cve.now/CVE-2023-23615.md): Malicious users in Discourse can create spam topics as any user due to improper access control (CVSS 5.3, discourse)
- [CVE-2022-24894](https://cve.now/CVE-2022-24894.md): Symfony storing cookie headers in HttpCache (CVSS 5.9, symfony · symfony/http-kernel +1)
- [CVE-2022-24895](https://cve.now/CVE-2022-24895.md): Symfony vulnerable to Session Fixation of CSRF tokens (CVSS 6.3, symfony · symfony/security-bundle +1)
- [CVE-2022-23498](https://cve.now/CVE-2022-23498.md): When query caching is enabled in Grafana users can query another users session (CVSS 7.1, grafana)
- [CVE-2023-22746](https://cve.now/CVE-2023-22746.md): CKAN is vulnerable to session secret shared across instances using Docker images (CVSS 8.6, ckan)
- [CVE-2023-0663](https://cve.now/CVE-2023-0663.md): Calendar Event Management System Login Page sql injection (CVSS 7.3, Calendar Event Management System)
- [CVE-2023-23941](https://cve.now/CVE-2023-23941.md): SwagPayPal payment not sent to PayPal correctly (CVSS 7.5, shopware SwagPayPal · swag/paypal)
- [CVE-2023-23932](https://cve.now/CVE-2023-23932.md): Specially crafted RTPS message may cause an OpenDDS application to crash (CVSS 5.3, OpenDDS)
- [CVE-2023-22474](https://cve.now/CVE-2023-22474.md): Parse Server is vulnerable to authentication bypass via spoofing (CVSS 8.7, parse-community parse-server · parse-server)
- [CVE-2013-10016](https://cve.now/CVE-2013-10016.md): fanzila WebFinance save\_taxes.php sql injection (CVSS 5.5, fanzila WebFinance)
- [CVE-2013-10015](https://cve.now/CVE-2013-10015.md): fanzila WebFinance save\_Contract\_Signer\_Role.php sql injection (CVSS 5.5, fanzila WebFinance)
- [CVE-2023-23940](https://cve.now/CVE-2023-23940.md): OpenZeppelin Contracts for Cairo is vulnerable to signature validation bypass (CVSS 6.4, OpenZeppelin cairo-contracts · openzeppelin-cairo-contracts)
- [CVE-2023-23937](https://cve.now/CVE-2023-23937.md): Missing file upload type validation in pimcore/pimcore (CVSS 8.2, pimcore · pimcore/pimcore)
- [CVE-2023-23933](https://cve.now/CVE-2023-23933.md): Issue in Anomaly Detection with document and field level rules in numerical feature aggregations (CVSS 5.7, opensearch-project anomaly-detection)
- [CVE-2023-23925](https://cve.now/CVE-2023-23925.md): Switcher Client contains Regular Expression Denial of Service (ReDoS) (CVSS 8.6, switcherapi switcher-client-master · switcher-client)
- [CVE-2023-23477](https://cve.now/CVE-2023-23477.md): IBM WebSphere Application Server code execution (CVSS 8.1, IBM WebSphere Application Server)
- [CVE-2023-24576](https://cve.now/CVE-2023-24576.md): EMC NetWorker may potentially be vulnerable to an unauthenticated remote code execution vulnerability in the NetWorker Client execution s (CVSS 7.5, Dell NetWorker, NVE)
- [CVE-2022-38396](https://cve.now/CVE-2022-38396.md): HP Factory Preinstalled Images on certain systems that shipped with Windows 10 versions 20H2 and earlier OS versions might allow escalation (CVSS 7.8, HP Factory Preinstalled Windows 10 20H2 Images)
- [CVE-2022-43779](https://cve.now/CVE-2022-43779.md): A potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in certain HP PC products using AMI UEFI Firmware (syste (CVSS 7.0, HP PC products using AMI UEFI Firmware)
- [CVE-2023-0661](https://cve.now/CVE-2023-0661.md): Improper access control in Devolutions Server allows an authenticated user to access unauthorized sensitive data. (CVSS 6.5, Devolutions Server)
- [CVE-2023-0659](https://cve.now/CVE-2023-0659.md): BDCOM 1704-WGL Backup File param.file.tgz information disclosure (CVSS 5.3, BDCOM 1704-WGL)
- [CVE-2021-36424](https://cve.now/CVE-2021-36424.md): An issue discovered in phpwcms 1.9.25 allows remote attackers to run arbitrary code via DB user field during installation. (CVSS 9.8)
- [CVE-2021-36425](https://cve.now/CVE-2021-36425.md): Directory traversal vulnerability in phpcms 1.9.25 allows remote attackers to delete arbitrary files via unfiltered $file parameter to unlin (CVSS 5.4)
- [CVE-2021-36426](https://cve.now/CVE-2021-36426.md): File Upload vulnerability in phpwcms 1.9.25 allows remote attackers to run arbitrary code via crafted file upload to include/inc\_lib/general (CVSS 8.8)
- [CVE-2021-36431](https://cve.now/CVE-2021-36431.md): SQL injection vulnerability in jocms 0.8 allows remote attackers to run arbitrary SQL commands and view sentivie information via jo\_json\_che (CVSS 9.1)
- [CVE-2021-36432](https://cve.now/CVE-2021-36432.md): SQL injection vulnerability in jocms 0.8 allows remote attackers to run arbitrary SQL commands and view sentivie information via jo\_set\_mask (CVSS 7.5)
- [CVE-2021-36433](https://cve.now/CVE-2021-36433.md): SQL injection vulnerability in jocms 0.8 allows remote attackers to run arbitrary SQL commands and view sentivie information via jo\_delete\_m (CVSS 9.1)
- [CVE-2021-36434](https://cve.now/CVE-2021-36434.md): SQL injection vulnerability in jocms 0.8 allows remote attackers to run arbitrary SQL commands and view sentivie information via jo\_json\_che (CVSS 9.1)
- [CVE-2021-36443](https://cve.now/CVE-2021-36443.md): Cross Site Request Forgery vulnerability in imcat 5.4 allows remote attackers to escalate privilege via lack of token verification. (CVSS 8.8)
- [CVE-2021-36444](https://cve.now/CVE-2021-36444.md): Cross Site Request Forgery (CSRF) vulnerability in imcat 5.4 allows remote attackers to gain escalated privileges via flaws one time token g (CVSS 8.8)
- [CVE-2021-36484](https://cve.now/CVE-2021-36484.md): SQL injection vulnerability in JIZHICMS 1.9.5 allows attackers to run arbitrary SQL commands via add or edit article page. (CVSS 9.8)
- [CVE-2021-36489](https://cve.now/CVE-2021-36489.md): Buffer Overflow vulnerability in Allegro through 5.2.6 allows attackers to cause a denial of service via crafted PCX/TGA/BMP files to allegr (CVSS 6.5)
- [CVE-2021-36493](https://cve.now/CVE-2021-36493.md): Buffer Overflow vulnerability in pdfimages in xpdf 4.03 allows attackers to crash the application via crafted command. (CVSS 7.5)
- [CVE-2021-36503](https://cve.now/CVE-2021-36503.md): SQL injection vulnerability in native-php-cms 1.0 allows remote attackers to run arbitrary SQL commands via the cat parameter to /list.php f (CVSS 9.8)
- [CVE-2021-36532](https://cve.now/CVE-2021-36532.md): Race condition vulnerability discovered in portfolioCMS 1.0 allows remote attackers to run arbitrary code via fileExt parameter to localhost (CVSS 8.1)
- [CVE-2021-36535](https://cve.now/CVE-2021-36535.md): Buffer Overflow vulnerability in Cesanta mJS 1.26 allows remote attackers to cause a denial of service via crafted .js file to mjs\_set\_error (CVSS 5.5)
- [CVE-2021-36538](https://cve.now/CVE-2021-36538.md): Cross Site Scripting (XSS) vulnerability in Gurock TestRail before 7.1.2 allows remote authenticated attackers to run arbitrary code via the (CVSS 5.4)
- [CVE-2021-36544](https://cve.now/CVE-2021-36544.md): Incorrect Access Control issue discovered in tpcms 3.2 allows remote attackers to view sensitive information via path in application URL. (CVSS 7.5)
- [CVE-2021-36545](https://cve.now/CVE-2021-36545.md): Cross Site Scripting (XSS) vulnerability in tpcms 3.2 allows remote attackers to run arbitrary code via the cfg\_copyright or cfg\_tel field i (CVSS 5.4)
- [CVE-2021-36546](https://cve.now/CVE-2021-36546.md): Incorrect Access Control issue discovered in KiteCMS 1.1 allows remote attackers to view sensitive information via path in application URL. (CVSS 7.5)
- [CVE-2021-36569](https://cve.now/CVE-2021-36569.md): Cross Site Request Forgery vulnerability in FUEL-CMS 1.4.13 allows remote attackers to run arbitrary code via post ID to /users/delete/2. (CVSS 8.8)
- [CVE-2021-36570](https://cve.now/CVE-2021-36570.md): Cross Site Request Forgery vulnerability in FUEL-CMS 1.4.13 allows remote attackers to run arbitrary code via post ID to /permissions/delete (CVSS 8.8)
- [CVE-2021-36712](https://cve.now/CVE-2021-36712.md): Cross Site Scripting (XSS) vulnerability in yzmcms 6.1 allows attackers to steal user cookies via image clipping function. (CVSS 5.4)
- [CVE-2021-37234](https://cve.now/CVE-2021-37234.md): Incorrect Access Control vulnerability in Modern Honey Network commit 0abf0db9cd893c6d5c727d036e1f817c02de4c7b allows remote attackers to vi (CVSS 6.5)
- [CVE-2021-37304](https://cve.now/CVE-2021-37304.md): An Insecure Permissions issue in jeecg-boot 2.4.5 allows unauthenticated remote attackers to gain escalated privilege and view sensitive inf (CVSS 7.5, org.jeecgframework.boot:jeecg-boot-base)
- [CVE-2021-37305](https://cve.now/CVE-2021-37305.md): An Insecure Permissions issue in jeecg-boot 2.4.5 and earlier allows remote attackers to gain escalated privilege and view sensitive informa (CVSS 7.5, org.jeecgframework.boot:jeecg-boot-base)
- [CVE-2021-37306](https://cve.now/CVE-2021-37306.md): An Insecure Permissions issue in jeecg-boot 2.4.5 and earlier allows remote attackers to gain escalated privilege and view sensitive informa (CVSS 7.5, org.jeecgframework.boot:jeecg-boot-base)
- [CVE-2021-37311](https://cve.now/CVE-2021-37311.md): Buffer Overflow vulnerability in fcitx5 5.0.8 allows attackers to cause a denial of service via crafted message to the application's listeni (CVSS 7.5)
- [CVE-2021-37315](https://cve.now/CVE-2021-37315.md): Incorrect Access Control issue discoverd in Cloud Disk in ASUS RT-AC68U router firmware version before 3.0.0.4.386.41634 allows remote attac (CVSS 9.1)
- [CVE-2021-37316](https://cve.now/CVE-2021-37316.md): SQL injection vulnerability in Cloud Disk in ASUS RT-AC68U router firmware version before 3.0.0.4.386.41634 allows remote attackers to view (CVSS 7.5)
- [CVE-2021-37317](https://cve.now/CVE-2021-37317.md): Directory Traversal vulnerability in Cloud Disk in ASUS RT-AC68U router firmware version before 3.0.0.4.386.41634 allows remote attackers to (CVSS 9.1)
- [CVE-2021-37373](https://cve.now/CVE-2021-37373.md): Cross Site Scripting (XSS) vulnerability in Teradek Slice 1st generation firmware 7.3.x and earlier allows remote attackers to run arbitrary (CVSS 5.4)
- [CVE-2021-37374](https://cve.now/CVE-2021-37374.md): Cross Site Scripting (XSS) vulnerability in Teradek Clip all firmware versions allows remote attackers to run arbitrary code via the Friendl (CVSS 5.4)
- [CVE-2021-37375](https://cve.now/CVE-2021-37375.md): Cross Site Scripting (XSS) vulnerability in Teradek VidiU / VidiU Mini firmware version 3.0.8 and earlier allows remote attackers to run arb (no CVSS)
- [CVE-2021-37376](https://cve.now/CVE-2021-37376.md): Cross Site Scripting (XSS) vulnerability in Teradek Bond, Bond 2 and Bond Pro firmware version 7.3.x and earlier allows remote attackers to (no CVSS)
- [CVE-2021-37377](https://cve.now/CVE-2021-37377.md): Cross Site Scripting (XSS) vulnerability in Teradek Brik firmware version 7.2.x and earlier allows remote attackers to run arbitrary code vi (no CVSS)
- [CVE-2021-37378](https://cve.now/CVE-2021-37378.md): Cross Site Scripting (XSS) vulnerability in Teradek Cube and Cube Pro firmware version 7.3.x and earlier allows remote attackers to run arbi (CVSS 5.4)
- [CVE-2021-37379](https://cve.now/CVE-2021-37379.md): Cross Site Scripting (XSS) vulnerability in Teradek Sphere all firmware versions allows remote attackers to run arbitrary code via the Frien (no CVSS)
- [CVE-2021-37497](https://cve.now/CVE-2021-37497.md): SQL injection vulnerability in route of PbootCMS 3.0.5 allows remote attackers to run arbitrary SQL commands via crafted GET request. (CVSS 9.8)
- [CVE-2021-37501](https://cve.now/CVE-2021-37501.md): Buffer Overflow vulnerability in HDFGroup hdf5-h5dump 1.12.0 through 1.13.0 allows attackers to cause a denial of service via h5tools\_str\_sp (CVSS 7.5)
- [CVE-2021-37502](https://cve.now/CVE-2021-37502.md): Cross Site Scripting (XSS) vulnerability in automad 1.7.5 allows remote attackers to run arbitrary code via the user name field when adding (CVSS 5.4, automad/automad)
- [CVE-2021-37518](https://cve.now/CVE-2021-37518.md): Universal Cross Site Scripting (UXSS) vulnerability in Vimium Extension 1.66 and earlier allows remote attackers to run arbitrary code via o (CVSS 6.1)
- [CVE-2021-37519](https://cve.now/CVE-2021-37519.md): Buffer Overflow vulnerability in authfile.c memcached 1.6.9 allows attackers to cause a denial of service via crafted authenticattion file. (CVSS 5.5)
- [CVE-2022-31733](https://cve.now/CVE-2022-31733.md): Starting with diego-release 2.55.0 and up to 2.69.0, and starting with CF Deployment 17.1 and up to 23.2.0, apps are accessible via another (CVSS 9.1, Cloud Foundry Diego and CF Deployment)
- [CVE-2022-34138](https://cve.now/CVE-2022-34138.md): Insecure direct object references (IDOR) in the web server of Biltema IP and Baby Camera Software v124 allows attackers to access sensitive (CVSS 7.5)
- [CVE-2022-42908](https://cve.now/CVE-2022-42908.md): WEPA Print Away is vulnerable to a stored XSS. (CVSS 6.3, Wepa Print Away)
- [CVE-2022-42909](https://cve.now/CVE-2022-42909.md): WEPA Print Away does not verify that a user has authorization to access documents before generating print orders and associated release code (CVSS 6.5, Wepa Print Away)
- [CVE-2022-45491](https://cve.now/CVE-2022-45491.md): Buffer overflow vulnerability in function json\_parse\_value in sheredom json.h before commit 0825301a07cbf51653882bf2b153cc81fdadf41 (Novembe (CVSS 7.8)
- [CVE-2022-45492](https://cve.now/CVE-2022-45492.md): Buffer overflow vulnerability in function json\_parse\_number in sheredom json.h before commit 0825301a07cbf51653882bf2b153cc81fdadf41 (Novemb (no CVSS)
- [CVE-2022-45493](https://cve.now/CVE-2022-45493.md): Buffer overflow vulnerability in function json\_parse\_key in sheredom json.h before commit 0825301a07cbf51653882bf2b153cc81fdadf41 (November (no CVSS)
- [CVE-2022-45496](https://cve.now/CVE-2022-45496.md): Buffer overflow vulnerability in function json\_parse\_string in sheredom json.h before commit 0825301a07cbf51653882bf2b153cc81fdadf41 (Novemb (CVSS 8.8)
- [CVE-2022-45588](https://cve.now/CVE-2022-45588.md): All versions before R2022-09 of Talend's Remote Engine Gen 2 are potentially vulnerable to XML External Entity (XXE) type of attacks. (CVSS 7.8)
- [CVE-2022-47070](https://cve.now/CVE-2022-47070.md): NVS365 V01 is vulnerable to Incorrect Access Control. (CVSS 7.5)
- [CVE-2022-47130](https://cve.now/CVE-2022-47130.md): A Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows a discount coupon to be arbitrarily created if an attacker with admin (CVSS 4.3)
- [CVE-2022-47131](https://cve.now/CVE-2022-47131.md): A Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows an attacker to arbitrarily create a page. (CVSS 4.8)
- [CVE-2022-47132](https://cve.now/CVE-2022-47132.md): A Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows attackers to arbitrarily add Administrator users. (no CVSS)
- [CVE-2022-47762](https://cve.now/CVE-2022-47762.md): In gin-vue-admin \< 2.5.5, the download module has a Path Traversal vulnerability. (CVSS 7.5, github.com/flipped-aurora/gin-vue-admin)
- [CVE-2022-48021](https://cve.now/CVE-2022-48021.md): A vulnerability in Zammad v5.3.0 allows attackers to execute arbitrary code or escalate privileges via a crafted message sent to the server. (CVSS 9.8)
- [CVE-2022-48022](https://cve.now/CVE-2022-48022.md): An issue in the component /api/v1/mentions of Zammad v5.3.0 allows authenticated attackers with agent permissions to view information about (CVSS 4.3)
- [CVE-2022-48023](https://cve.now/CVE-2022-48023.md): Insufficient privilege verification in Zammad v5.3.0 allows an authenticated attacker to perform changes on the tags of their customer ticke (no CVSS)
- [CVE-2022-48074](https://cve.now/CVE-2022-48074.md): An issue in NoMachine before v8.2.3 allows attackers to execute arbitrary commands via a crafted .nxs file. (no CVSS)
- [CVE-2022-48165](https://cve.now/CVE-2022-48165.md): An access control issue in the component /cgi-bin/ExportLogs.sh of Wavlink WL-WN530H4 M30H4.V5030.210121 allows unauthenticated attackers to (no CVSS)
- [CVE-2023-20854](https://cve.now/CVE-2023-20854.md): VMware Workstation contains an arbitrary file deletion vulnerability. (CVSS 8.4, VMware Workstation)
- [CVE-2023-22975](https://cve.now/CVE-2023-22975.md): A cross-site scripting (XSS) vulnerability in JFinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payl (no CVSS)
- [CVE-2023-23082](https://cve.now/CVE-2023-23082.md): A heap buffer overflow vulnerability in Kodi Home Theater Software up to 19.5 allows attackers to cause a denial of service due to an improp (no CVSS)
- [CVE-2023-23086](https://cve.now/CVE-2023-23086.md): Buffer OverFlow Vulnerability in MojoJson v1.2.3 allows an attacker to execute arbitrary code via the SkipString function. (CVSS 9.8)
- [CVE-2023-23087](https://cve.now/CVE-2023-23087.md): An issue was found in MojoJson v1.2.3 allows attackers to execute arbitary code via the destroy function. (CVSS 9.8)
- [CVE-2023-23088](https://cve.now/CVE-2023-23088.md): Buffer OverFlow Vulnerability in Barenboim json-parser master and v1.1.0 fixed in v1.1.1 allows an attacker to execute arbitrary code via th (CVSS 9.8)
- [CVE-2023-23635](https://cve.now/CVE-2023-23635.md): In Jellyfin 10.8.x through 10.8.3, the name of a collection is vulnerable to stored XSS. (CVSS 5.4, jellyfin-web)
- [CVE-2023-23636](https://cve.now/CVE-2023-23636.md): In Jellyfin 10.8.x through 10.8.3, the name of a playlist is vulnerable to stored XSS. (CVSS 5.4, jellyfin-web)
- [CVE-2023-24029](https://cve.now/CVE-2023-24029.md): In Progress WS\_FTP Server before 8.8, it is possible for a host administrator to elevate their privileges via the administrative interface d (CVSS 7.2)
- [CVE-2023-24138](https://cve.now/CVE-2023-24138.md): TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the host\_time parameter in the NTPSyncWithHost (CVSS 9.8)
- [CVE-2023-24139](https://cve.now/CVE-2023-24139.md): TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagHost parameter in the setNetworkDiag (CVSS 9.8)
- [CVE-2023-24140](https://cve.now/CVE-2023-24140.md): TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagPingNum parameter in the setNetworkD (CVSS 9.8)
- [CVE-2023-24141](https://cve.now/CVE-2023-24141.md): TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagPingTimeOut parameter in the setNetw (CVSS 9.8)
- [CVE-2023-24142](https://cve.now/CVE-2023-24142.md): TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagPingSize parameter in the setNetwork (CVSS 9.8)
- [CVE-2023-24143](https://cve.now/CVE-2023-24143.md): TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagTracertHop parameter in the setNetwo (CVSS 9.8)
- [CVE-2023-24144](https://cve.now/CVE-2023-24144.md): TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the hour parameter in the setRebootScheCfg func (CVSS 9.8)
- [CVE-2023-24145](https://cve.now/CVE-2023-24145.md): TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the plugin\_version parameter in the setUnloadUs (CVSS 9.8)
- [CVE-2023-24146](https://cve.now/CVE-2023-24146.md): TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the minute parameter in the setRebootScheCfg fu (CVSS 9.8)
- [CVE-2023-24147](https://cve.now/CVE-2023-24147.md): TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a hard code password for the telnet service which is stored in the component /etc/con (CVSS 7.5)
- [CVE-2023-24148](https://cve.now/CVE-2023-24148.md): TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the FileName parameter in the setUploadUserData (CVSS 9.8)
- [CVE-2023-24149](https://cve.now/CVE-2023-24149.md): TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a hard code password for root which is stored in the component /etc/shadow. (CVSS 9.8)
- [CVE-2023-24150](https://cve.now/CVE-2023-24150.md): A command injection vulnerability in the serverIp parameter in the function meshSlaveDlfw of TOTOLINK T8 V4.1.5cu allows attackers to execut (CVSS 9.8)
- [CVE-2023-24151](https://cve.now/CVE-2023-24151.md): A command injection vulnerability in the ip parameter in the function recvSlaveCloudCheckStatus of TOTOLINK T8 V4.1.5cu allows attackers to (CVSS 9.8)
- [CVE-2023-24152](https://cve.now/CVE-2023-24152.md): A command injection vulnerability in the serverIp parameter in the function meshSlaveUpdate of TOTOLINK T8 V4.1.5cu allows attackers to exec (CVSS 9.8)
- [CVE-2023-24153](https://cve.now/CVE-2023-24153.md): A command injection vulnerability in the version parameter in the function recvSlaveCloudCheckStatus of TOTOLINK T8 V4.1.5cu allows attacker (CVSS 9.8)
- [CVE-2023-24154](https://cve.now/CVE-2023-24154.md): TOTOLINK T8 V4.1.5cu was discovered to contain a command injection vulnerability via the slaveIpList parameter in the function setUpgradeFW. (CVSS 9.8)
- [CVE-2023-24155](https://cve.now/CVE-2023-24155.md): TOTOLINK T8 V4.1.5cu was discovered to contain a hard code password for the telnet service which is stored in the component /web\_cste/cgi-bi (CVSS 9.8)
- [CVE-2023-24156](https://cve.now/CVE-2023-24156.md): A command injection vulnerability in the ip parameter in the function recvSlaveUpgstatus of TOTOLINK T8 V4.1.5cu allows attackers to execute (CVSS 9.8)
- [CVE-2023-24157](https://cve.now/CVE-2023-24157.md): A command injection vulnerability in the serverIp parameter in the function updateWifiInfo of TOTOLINK T8 V4.1.5cu allows attackers to execu (CVSS 9.8)
- [CVE-2023-24613](https://cve.now/CVE-2023-24613.md): The user interface of Array Networks AG Series and vxAG through 9.4.0.470 could allow a remote attacker to use the gdb tool to overwrite the (CVSS 4.9)
- [CVE-2023-25135](https://cve.now/CVE-2023-25135.md): vBulletin before 5.6.9 PL1 allows an unauthenticated remote attacker to execute arbitrary code via a crafted HTTP request that triggers dese (CVSS 9.8)
- [CVE-2023-25136](https://cve.now/CVE-2023-25136.md): OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex\_algorithms handling. (no CVSS)
- [CVE-2023-25139](https://cve.now/CVE-2023-25139.md): sprintf in the GNU C Library (glibc) 2.37 has a buffer overflow (out-of-bounds write) in some situations with a correct buffer size. (CVSS 9.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-02-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.