# CVEs published 2023-03-15

73 CVEs were published on March 15, 2023: 4 critical, 17 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2023-1421](https://cve.now/CVE-2023-1421.md): Reflected XSS in OAuth flow completion endpoints (CVSS 3.5, Mattermost)
- [CVE-2023-28099](https://cve.now/CVE-2023-28099.md): OpenSIPS has vulnerability in the ds\_is\_in\_list() function (CVSS 5.9, opensips)
- [CVE-2023-28098](https://cve.now/CVE-2023-28098.md): OpenSIPS has vulnerability in the Digest Authentication Parser (CVSS 5.9, opensips)
- [CVE-2023-28097](https://cve.now/CVE-2023-28097.md): OpenSIPS has vulnerability in the Content-Length Parser (CVSS 7.5, opensips)
- [CVE-2023-28096](https://cve.now/CVE-2023-28096.md): OpenSIPS has memory leak in cJSON lib (CVSS 4.5, opensips)
- [CVE-2023-28095](https://cve.now/CVE-2023-28095.md): OpenSIPS has vulnerability in the building the local negative replies (CVSS 7.5, opensips)
- [CVE-2023-27601](https://cve.now/CVE-2023-27601.md): OpenSIPS has vulnerability in the codec\_delete\_XX() functions (CVSS 7.5, opensips)
- [CVE-2023-27600](https://cve.now/CVE-2023-27600.md): OpenSIPS has vulnerability in the codec\_delete\_XX() functions (CVSS 7.5, opensips)
- [CVE-2023-27599](https://cve.now/CVE-2023-27599.md): OpenSIPS has vulnerability in the parse\_to\_param() function (CVSS 7.5, opensips)
- [CVE-2023-26484](https://cve.now/CVE-2023-26484.md): On a compromised KubeVirt node, the virt-handler service account can be used to modify all node specs (CVSS 8.2, kubevirt · kubevirt.io/kubevirt)
- [CVE-2023-27598](https://cve.now/CVE-2023-27598.md): OpenSIPS has vulnerability in the parse\_via() function (CVSS 7.5, opensips)
- [CVE-2023-27597](https://cve.now/CVE-2023-27597.md): OpenSIPS has vulnerability in the parse\_uri() function (CVSS 7.5, opensips)
- [CVE-2023-27596](https://cve.now/CVE-2023-27596.md): OpenSIPS has vulnerability in the codec\_delete\_XX() functions (CVSS 7.5, opensips)
- [CVE-2023-22591](https://cve.now/CVE-2023-22591.md): IBM Robotic Process Automation session fixation (CVSS 3.9, IBM Robotic Process Automation)
- [CVE-2022-46773](https://cve.now/CVE-2022-46773.md): IBM Robotic Process Automation security bypass (CVSS 4.3, IBM Robotic Process Automation)
- [CVE-2023-25680](https://cve.now/CVE-2023-25680.md): IBM Robotic Process Automation information disclosure (CVSS 4.2, IBM Robotic Process Automation)
- [CVE-2020-4556](https://cve.now/CVE-2020-4556.md): IBM Financial Transaction Manager information disclosure (CVSS 4.0, IBM Financial Transaction Manager)
- [CVE-2023-22876](https://cve.now/CVE-2023-22876.md): IBM Sterling B2B Integrator information disclosure (CVSS 4.3, IBM Sterling B2B Integrator)
- [CVE-2022-46774](https://cve.now/CVE-2022-46774.md): IBM Manage Application security bypass (CVSS 5.4, IBM Manage Application)
- [CVE-2020-4927](https://cve.now/CVE-2020-4927.md): IBM Spectrum Scale information disclosure (CVSS 5.7, IBM Spectrum Scale)
- [CVE-2023-25804](https://cve.now/CVE-2023-25804.md): Roxy-WI vulnerable to Limited Path Traversal in name parameter (CVSS 7.5, hap-wi roxy-wi)
- [CVE-2023-26284](https://cve.now/CVE-2023-26284.md): IBM MQ Certified Container improper access controls (CVSS 7.5, IBM MQ Certified Container)
- [CVE-2022-43874](https://cve.now/CVE-2022-43874.md): IBM App Connect Enterprise Certified Container (CVSS 6.1, IBM App Connect Enterprise Certified Container)
- [CVE-2022-37940](https://cve.now/CVE-2022-37940.md): Potential security vulnerabilities have been identified in the HPE FlexFabric 5700 Switch Series. (CVSS 5.3, Hewlett Packard Enterprise (HPE) HPE FlexFabric 5700 Switch…)
- [CVE-2023-1418](https://cve.now/CVE-2023-1418.md): SourceCodester Friendly Island Pizza Website and Ordering System POST Parameter cashconfirm.php cross site scripting (CVSS 3.5, SourceCodester Friendly Island Pizza Website and Ordering S…)
- [CVE-2023-1416](https://cve.now/CVE-2023-1416.md): Simple Art Gallery adminHome.php sql injection (CVSS 6.3, Simple Art Gallery)
- [CVE-2023-1379](https://cve.now/CVE-2023-1379.md): SourceCodester Friendly Island Pizza Website and Ordering System POST Parameter addmem.php sql injection (CVSS 6.3, SourceCodester Friendly Island Pizza Website and Ordering S…)
- [CVE-2022-37402](https://cve.now/CVE-2022-37402.md): WordPress AFS Analytics Plugin \<= 4.18 is vulnerable to Cross Site Scripting (XSS) (CVSS 4.8, AFS Analytics)
- [CVE-2023-1415](https://cve.now/CVE-2023-1415.md): Simple Art Gallery adminHome.php sliderPicSubmit unrestricted upload (CVSS 6.3, Simple Art Gallery)
- [CVE-2022-34148](https://cve.now/CVE-2022-34148.md): WordPress Backup Guard Plugin \<= 1.6.9.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 4.8, JetBackup – WP Backup, Migrate & Restore)
- [CVE-2022-38456](https://cve.now/CVE-2022-38456.md): WordPress Ajax Search Lite Plugin \<= 4.10.3 is vulnerable to Sensitive Data Exposure (CVSS 4.3, Ernest Marcinko Ajax Search Lite)
- [CVE-2022-44580](https://cve.now/CVE-2022-44580.md): WordPress Plugin for Google Reviews Plugin \<= 2.2.3 is vulnerable to SQL Injection (CVSS 9.1, RichPlugins Plugin for Google Reviews)
- [CVE-2023-0322](https://cve.now/CVE-2023-0322.md): XSS in Talent Software UNIS (CVSS 6.1, Talent Software UNIS)
- [CVE-2022-47427](https://cve.now/CVE-2022-47427.md): WordPress My Calendar Plugin \<= 3.3.24.1 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, Joseph C Dolson My Calendar)
- [CVE-2023-25708](https://cve.now/CVE-2023-25708.md): WordPress WP VR – 360 Panorama and Virtual Tour Builder For WordPress Plugin \<= 8.2.7 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Rextheme WP VR – 360 Panorama and Virtual Tour Builder For…)
- [CVE-2023-25709](https://cve.now/CVE-2023-25709.md): WordPress Locatoraid Store Locator Plugin \<= 3.9.11 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, Plainware Locatoraid Store Locator)
- [CVE-2023-25968](https://cve.now/CVE-2023-25968.md): WordPress Client Portal – Private user pages and login Plugin \<= 1.1.8 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Cozmoslabs, Madalin Ungureanu, Antohe Cristian Client Porta…)
- [CVE-2023-25695](https://cve.now/CVE-2023-25695.md): Information disclosure in Apache Airflow (CVSS 5.3, Apache Software Foundation Apache Airflow · apache-airflow)
- [CVE-2023-1407](https://cve.now/CVE-2023-1407.md): SourceCodester Student Study Center Desk Management System manage\_user.php sql injection (CVSS 4.7, SourceCodester Student Study Center Desk Management System)
- [CVE-2020-27507](https://cve.now/CVE-2020-27507.md): The Kamailio SIP before 5.5.0 server mishandles INVITE requests with duplicated fields and overlength tag, leading to a buffer overflow that (CVSS 9.8)
- [CVE-2022-4313](https://cve.now/CVE-2022-4313.md): A vulnerability was reported where through modifying the scan variables, an authenticated user in Tenable products, that has Scan Policy Con (CVSS 8.8, Tenable.io, Tenable.sc and Nessus)
- [CVE-2022-45155](https://cve.now/CVE-2022-45155.md): obs-service-go\_modules: arbitrary directory delete (CVSS 5.5, openSUSE Factory)
- [CVE-2023-0100](https://cve.now/CVE-2023-0100.md): In Eclipse BIRT, starting from version 2.6.2, the default configuration allowed to retrieve a report from the same host using an absolute HT (no CVSS, The Eclipse Foundation Eclipse BIRT · org.eclipse.birt:org.…)
- [CVE-2023-1389](https://cve.now/CVE-2023-1389.md): TP-Link Archer AX21 (AX1800) firmware versions before 1.1.4 Build 20230219 contained a command injection vulnerability in the country form o (CVSS 8.8, KEV, TP-Link Archer AX21)
- [CVE-2023-24229](https://cve.now/CVE-2023-24229.md): DrayTek Vigor2960 v1.5.1.4 allows an authenticated attacker with network access to the web management interface to inject operating system c (CVSS 7.8)
- [CVE-2023-24468](https://cve.now/CVE-2023-24468.md): Broken access control in Advanced Authentication versions prior to 6.4.1.1 and 6.3.7.2 (no CVSS, NetIQ Advanced Authentication)
- [CVE-2023-24726](https://cve.now/CVE-2023-24726.md): Art Gallery Management System v1.0 was discovered to contain a SQL injection vulnerability via the viewid parameter on the enquiry page. (no CVSS)
- [CVE-2023-24728](https://cve.now/CVE-2023-24728.md): Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the contact parameter in the (no CVSS)
- [CVE-2023-24729](https://cve.now/CVE-2023-24729.md): Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the address parameter in the (no CVSS)
- [CVE-2023-24730](https://cve.now/CVE-2023-24730.md): Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the company parameter in the (no CVSS)
- [CVE-2023-24731](https://cve.now/CVE-2023-24731.md): Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the query parameter in the us (no CVSS)
- [CVE-2023-24732](https://cve.now/CVE-2023-24732.md): Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the gender parameter in the u (no CVSS)
- [CVE-2023-25267](https://cve.now/CVE-2023-25267.md): An issue was discovered in GFI Kerio Connect 9.4.1 patch 1 (fixed in 10.0.0). (no CVSS)
- [CVE-2023-25282](https://cve.now/CVE-2023-25282.md): A heap overflow vulnerability in D-Link DIR820LA1\_FW106B02 allows attackers to cause a denial of service via the config.log\_to\_syslog and lo (no CVSS)
- [CVE-2023-25344](https://cve.now/CVE-2023-25344.md): An issue was discovered in swig-templates thru 2.0.4 and swig thru 1.4.2, allows attackers to execute arbitrary code via crafted Object.prot (no CVSS)
- [CVE-2023-25345](https://cve.now/CVE-2023-25345.md): Directory traversal vulnerability in swig-templates thru 2.0.4 and swig thru 1.4.2, allows attackers to read arbitrary files via the include (CVSS 7.5, swig-templates · swig)
- [CVE-2023-26084](https://cve.now/CVE-2023-26084.md): The armv8\_dec\_aes\_gcm\_full() API of Arm AArch64cryptolib before 86065c6 fails to the verify the authentication tag of AES-GCM protected data (CVSS 3.7)
- [CVE-2023-26912](https://cve.now/CVE-2023-26912.md): Cross site scripting (XSS) vulnerability in xenv S-mall-ssm thru commit 3d9e77f7d80289a30f67aaba1ae73e375d33ef71 on Feb 17, 2020, allows loc (CVSS 4.8)
- [CVE-2023-27102](https://cve.now/CVE-2023-27102.md): Libde265 v1.0.11 was discovered to contain a segmentation violation via the function decoder\_context::process\_slice\_segment\_header at decctx (no CVSS)
- [CVE-2023-27103](https://cve.now/CVE-2023-27103.md): Libde265 v1.0.11 was discovered to contain a heap buffer overflow via the function derive\_collocated\_motion\_vectors at motion.cc. (no CVSS)
- [CVE-2023-27234](https://cve.now/CVE-2023-27234.md): A Cross-Site Request Forgery (CSRF) in /Sys/index.html of Jizhicms v2.4.5 allows attackers to arbitrarily make configuration changes within (CVSS 6.5)
- [CVE-2023-27235](https://cve.now/CVE-2023-27235.md): An arbitrary file upload vulnerability in the \\admin\\c\\CommonController.php component of Jizhicms v2.4.5 allows attackers to execute arbitra (no CVSS)
- [CVE-2023-27239](https://cve.now/CVE-2023-27239.md): Tenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the shareSpeed parameter at /goform/WifiGuestSet. (CVSS 9.8)
- [CVE-2023-27240](https://cve.now/CVE-2023-27240.md): Tenda AX3 V16.03.12.11 was discovered to contain a command injection vulnerability via the lanip parameter at /goform/AdvSetLanip. (no CVSS)
- [CVE-2023-27757](https://cve.now/CVE-2023-27757.md): An arbitrary file upload vulnerability in the /admin/user/uploadImg component of PerfreeBlog v3.1.1 allows attackers to execute arbitrary co (no CVSS)
- [CVE-2023-27781](https://cve.now/CVE-2023-27781.md): jpegoptim v1.5.2 was discovered to contain a heap overflow in the optimize function at jpegoptim.c. (no CVSS)
- [CVE-2023-28337](https://cve.now/CVE-2023-28337.md): When uploading a firmware image to a Netgear Nighthawk Wifi6 Router (RAX30), a hidden “forceFWUpdate” parameter may be provided to force the (no CVSS, NETGEAR Nighthawk WiFi6 Router)
- [CVE-2023-28338](https://cve.now/CVE-2023-28338.md): Any request send to a Netgear Nighthawk Wifi6 Router (RAX30)'s web service containing a “Content-Type” of “multipartboundary=” will result i (no CVSS, NETGEAR Nighthawk WiFi6 Router)
- [CVE-2023-28371](https://cve.now/CVE-2023-28371.md): In Stellarium through 1.2, attackers can write to files that are typically unintended, such as ones with absolute pathnames or .. (no CVSS)
- [CVE-2023-28450](https://cve.now/CVE-2023-28450.md): An issue was discovered in Dnsmasq before 2.90. (CVSS 7.5)
- [CVE-2023-28460](https://cve.now/CVE-2023-28460.md): A command injection vulnerability was discovered in Array Networks APV products. (no CVSS)
- [CVE-2023-28461](https://cve.now/CVE-2023-28461.md): Array Networks Array AG Series and vxAG (9.4.0.481 and earlier) allow remote code execution. (CVSS 9.8, KEV)
- [CVE-2023-28466](https://cve.now/CVE-2023-28466.md): do\_tls\_getsockopt in net/tls/tls\_main.c in the Linux kernel through 6.2.6 lacks a lock\_sock call, leading to a race condition (with a result (CVSS 7.0)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-03-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.