# CVEs published 2023-02-23

57 CVEs were published on February 23, 2023: 8 critical, 7 high. Days are UTC.

- [CVE-2023-25824](https://cve.now/CVE-2023-25824.md): mod\_gnutls contains Infinite Loop on request read timeout (CVSS 7.5, airtower-luna mod\_gnutls)
- [CVE-2023-25823](https://cve.now/CVE-2023-25823.md): Gradio contains Use of Hard-coded Credentials (CVSS 5.4, gradio-app gradio · gradio)
- [CVE-2023-0754](https://cve.now/CVE-2023-0754.md): The affected products are vulnerable to an integer overflow or wraparound, which could allow an attacker to crash the server and remotely (CVSS 9.8, PTC ThingWorx Edge C-SDK · Microsoft .NET-SDK +7)
- [CVE-2023-0755](https://cve.now/CVE-2023-0755.md): The affected products are vulnerable to an improper validation of array index, which could allow an attacker to crash the server and remote (CVSS 9.8, PTC ThingWorx Edge C-SDK · Microsoft .NET-SDK +7)
- [CVE-2023-22476](https://cve.now/CVE-2023-22476.md): MantisBT: Exposure of Private issues' summary to unauthorized users (CVSS 4.3, mantisbt · mantisbt/mantisbt)
- [CVE-2022-48344](https://cve.now/CVE-2022-48344.md): In JetBrains TeamCity before 2022.10.2 there was an XSS vulnerability in the group creation process. (CVSS 5.4, JetBrains TeamCity)
- [CVE-2022-48343](https://cve.now/CVE-2022-48343.md): In JetBrains TeamCity before 2022.10.2 there was an XSS vulnerability in the user creation process. (CVSS 5.4, JetBrains TeamCity)
- [CVE-2022-48342](https://cve.now/CVE-2022-48342.md): In JetBrains TeamCity before 2022.10.2 jVMTI was enabled by default on agents. (CVSS 5.2, JetBrains TeamCity)
- [CVE-2023-0988](https://cve.now/CVE-2023-0988.md): SourceCodester Online Pizza Ordering System cross-site request forgery (CVSS 4.3, SourceCodester Online Pizza Ordering System)
- [CVE-2023-0987](https://cve.now/CVE-2023-0987.md): SourceCodester Online Pizza Ordering System cross site scripting (CVSS 3.5, SourceCodester Online Pizza Ordering System)
- [CVE-2023-0986](https://cve.now/CVE-2023-0986.md): SourceCodester Sales Tracker Management System Edit User sql injection (CVSS 6.3, SourceCodester Sales Tracker Management System)
- [CVE-2023-24415](https://cve.now/CVE-2023-24415.md): WordPress AI ChatBot plugin \<= 4.2.8 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, QuantumCloud AI ChatBot)
- [CVE-2023-24384](https://cve.now/CVE-2023-24384.md): WordPress Organization chart Plugin \<= 1.4.4 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, WpDevArt Organization chart)
- [CVE-2023-0815](https://cve.now/CVE-2023-0815.md): Plaintext Password Present in the Web logs (CVSS 6.8, The OpenNMS Group Meridian · The OpenNMS Group Horizon +1)
- [CVE-2023-0867](https://cve.now/CVE-2023-0867.md): Multiple stored and reflected Cross-site Scripting in webapp (CVSS 6.7, The OpenNMS Group Meridian · The OpenNMS Group Horizon +1)
- [CVE-2023-23659](https://cve.now/CVE-2023-23659.md): WordPress MainWP Matomo Extension Plugin \<= 4.0.4 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, MainWP Matomo Extension)
- [CVE-2023-0868](https://cve.now/CVE-2023-0868.md): Stealing Cookies using Reflected XSS via graph results (CVSS 6.7, The OpenNMS Group Meridian · The OpenNMS Group Horizon +1)
- [CVE-2023-0869](https://cve.now/CVE-2023-0869.md): Cross-site scripting in outage/list.htm (CVSS 5.8, The OpenNMS Group Meridian · The OpenNMS Group Horizon +1)
- [CVE-2022-2504](https://cve.now/CVE-2022-2504.md): SQLi in SDD-Baro (CVSS 9.8, SDD Computer Software SDD-Baro)
- [CVE-2023-0982](https://cve.now/CVE-2023-0982.md): SourceCodester Yoga Class Registration System Add Class Entry sql injection (CVSS 6.3, SourceCodester Yoga Class Registration System)
- [CVE-2023-0981](https://cve.now/CVE-2023-0981.md): SourceCodester Yoga Class Registration System Delete User sql injection (CVSS 6.3, SourceCodester Yoga Class Registration System)
- [CVE-2023-0980](https://cve.now/CVE-2023-0980.md): SourceCodester Yoga Class Registration System Status Update update\_status.php sql injection (CVSS 6.3, SourceCodester Yoga Class Registration System)
- [CVE-2023-25621](https://cve.now/CVE-2023-25621.md): Apache Sling does not allow to handle i18n content in a secure way (CVSS 6.5, Apache Software Foundation Apache Sling · org.apache.sling:…)
- [CVE-2023-0939](https://cve.now/CVE-2023-0939.md): Multiple SQL Injection on NTN Information Technologies' Online Services software (CVSS 9.8, NTN Information Technologies Online Services Software)
- [CVE-2022-3219](https://cve.now/CVE-2022-3219.md): GnuPG can be made to spin on a relatively small input by (for example) crafting a public key with thousands of signatures attached, compress (CVSS 3.3, gnupg)
- [CVE-2022-36231](https://cve.now/CVE-2022-36231.md): pdf\_info 0.5.3 is vulnerable to Command Execution because the Ruby code uses backticks instead of Open3. (CVSS 9.8, pdf\_info)
- [CVE-2022-4492](https://cve.now/CVE-2022-4492.md): The undertow client is not checking the server identity presented by the server certificate in https connections. (no CVSS, undertow · io.undertow:undertow-core)
- [CVE-2022-46784](https://cve.now/CVE-2022-46784.md): SquaredUp Dashboard Server SCOM edition before 5.7.1 GA allows open redirection. (no CVSS)
- [CVE-2022-46785](https://cve.now/CVE-2022-46785.md): SquaredUp Dashboard Server SCOM edition before 5.7.1 GA allows XSS (issue 1 of 2). (no CVSS)
- [CVE-2022-46786](https://cve.now/CVE-2022-46786.md): SquaredUp Dashboard Server SCOM edition before 5.7.1 GA allows XSS (issue 2 of 2). (no CVSS)
- [CVE-2022-48341](https://cve.now/CVE-2022-48341.md): ThingsBoard 3.4.1 could allow a remote authenticated attacker to achieve Vertical Privilege Escalation. (no CVSS)
- [CVE-2023-0044](https://cve.now/CVE-2023-0044.md): If the Quarkus Form Authentication session cookie Path attribute is set to \`/\` then a cross-site attack may be initiated which might lead to (no CVSS, quarkus-vertx-http · io.quarkus:quarkus-vertx-http)
- [CVE-2023-0597](https://cve.now/CVE-2023-0597.md): A flaw possibility of memory leak in the Linux kernel cpu\_entry\_area mapping of X86 CPU data to memory was found in the way user can guess l (CVSS 5.5, Kernel)
- [CVE-2023-20011](https://cve.now/CVE-2023-20011.md): Cisco Application Policy Infrastructure Controller and Cisco Cloud Network Controller Cross-Site Request Forgery Vulnerability (CVSS 8.8, Cisco Application Policy Infrastructure Controller)
- [CVE-2023-20012](https://cve.now/CVE-2023-20012.md): Cisco Nexus 9300-FX3 Series Fabric Extender for UCS Fabric Interconnects Authentication Bypass Vulnerability (CVSS 5.3, Cisco Unified Computing System)
- [CVE-2023-20015](https://cve.now/CVE-2023-20015.md): Cisco Firepower 4100 Series, Firepower 9300 Security Appliances, and UCS Fabric Interconnects Command Injection Vulnerability (CVSS 6.0, Cisco Unified Computing System)
- [CVE-2023-20016](https://cve.now/CVE-2023-20016.md): Cisco FXOS Software and UCS Manager Software Configuration Backup Static Key Vulnerability (CVSS 6.3, Cisco Unified Computing System)
- [CVE-2023-20050](https://cve.now/CVE-2023-20050.md): Cisco NX-OS Software CLI Command Injection Vulnerability (CVSS 4.4, Cisco NX-OS Software)
- [CVE-2023-20089](https://cve.now/CVE-2023-20089.md): Cisco Nexus 9000 Series Fabric Switches in ACI Mode Link Layer Discovery Protocol Memory Leak Denial of Service Vulnerability (CVSS 7.4, Cisco NX-OS System Software in ACI Mode)
- [CVE-2023-23294](https://cve.now/CVE-2023-23294.md): Korenix JetWave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection. (no CVSS)
- [CVE-2023-23295](https://cve.now/CVE-2023-23295.md): Korenix Jetwave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection via /goform/formSysCmd. (CVSS 8.8)
- [CVE-2023-23296](https://cve.now/CVE-2023-23296.md): Korenix JetWave 4200 Series 1.3.0 and JetWave 3200 Series 1.6.0 are vulnerable to Denial of Service via /goform/formDefault. (CVSS 6.5)
- [CVE-2023-23914](https://cve.now/CVE-2023-23914.md): A cleartext transmission of sensitive information vulnerability exists in curl \<v7.88.0 that could cause HSTS functionality fail when multip (CVSS 9.1, https://github.com/curl/curl)
- [CVE-2023-23915](https://cve.now/CVE-2023-23915.md): A cleartext transmission of sensitive information vulnerability exists in curl \<v7.88.0 that could cause HSTS functionality to behave incorr (CVSS 6.5, https://github.com/curl/curl)
- [CVE-2023-23916](https://cve.now/CVE-2023-23916.md): An allocation of resources without limits or throttling vulnerability exists in curl \<v7.88.0 based on the "chained" HTTP compression algori (CVSS 6.5, https://github.com/curl/curl)
- [CVE-2023-23917](https://cve.now/CVE-2023-23917.md): A prototype pollution vulnerability exists in Rocket.Chat server \<5.2.0 that could allow an attacker to a RCE under the admin account. (CVSS 8.8, Rocket.chat)
- [CVE-2023-23918](https://cve.now/CVE-2023-23918.md): A privilege escalation vulnerability exists in Node.js \<19.6.1, \<18.14.1, \<16.19.1 and \<14.21.3 that made it possible to bypass the experime (CVSS 7.5, NodeJS Node)
- [CVE-2023-23919](https://cve.now/CVE-2023-23919.md): A cryptographic vulnerability exists in Node.js \<19.2.0, \<18.14.1, \<16.19.1, \<14.21.3 that in some cases did does not clear the OpenSSL erro (CVSS 7.5, NodeJS Node)
- [CVE-2023-23920](https://cve.now/CVE-2023-23920.md): An untrusted search path vulnerability exists in Node.js. (CVSS 4.2, NodeJS Node)
- [CVE-2023-24104](https://cve.now/CVE-2023-24104.md): Ubiquiti Networks UniFi Dream Machine Pro v7.2.95 allows attackers to bypass domain restrictions via crafted packets. (CVSS 9.8)
- [CVE-2023-24205](https://cve.now/CVE-2023-24205.md): Clash for Windows v0.20.12 was discovered to contain a remote code execution (RCE) vulnerability which is exploited via overwriting the conf (CVSS 9.8)
- [CVE-2023-24212](https://cve.now/CVE-2023-24212.md): Tenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the timeType function at /goform/SetSysTimeCfg. (no CVSS)
- [CVE-2023-24317](https://cve.now/CVE-2023-24317.md): Judging Management System 1.0 was discovered to contain an arbitrary file upload vulnerability via the component edit\_organizer.php. (no CVSS)
- [CVE-2023-26325](https://cve.now/CVE-2023-26325.md): The 'rx\_export\_review' action in the ReviewX WordPress Plugin, is affected by an authenticated SQL injection vulnerability in the 'filterVal (no CVSS, ReviewX WordPress Plugin)
- [CVE-2023-26326](https://cve.now/CVE-2023-26326.md): The BuddyForms WordPress plugin, in versions prior to 2.7.8, was affected by an unauthenticated insecure deserialization issue. (no CVSS, BuddyForms WordPress Plugin)
- [CVE-2023-26462](https://cve.now/CVE-2023-26462.md): ThingsBoard 3.4.1 could allow a remote attacker to gain elevated privileges because hard-coded service credentials (usable for privilege esc (no CVSS)
- [CVE-2023-26468](https://cve.now/CVE-2023-26468.md): Cerebrate 1.12 does not properly consider organisation\_id during creation of API keys. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-02-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.