# CVEs published 2023-03-30

65 CVEs were published on March 30, 2023: 7 critical, 17 high. Days are UTC.

- [CVE-2023-1747](https://cve.now/CVE-2023-1747.md): IBOS mark&op=delFromSend sql injection (CVSS 6.3, IBOS)
- [CVE-2023-1746](https://cve.now/CVE-2023-1746.md): Dreamer CMS File Upload cross site scripting (CVSS 3.5, Dreamer CMS)
- [CVE-2023-1745](https://cve.now/CVE-2023-1745.md): KMPlayer SHFOLDER.dll uncontrolled search path (CVSS 5.3, KMPlayer)
- [CVE-2023-1744](https://cve.now/CVE-2023-1744.md): IBOS htaccess unrestricted upload (CVSS 6.3, IBOS)
- [CVE-2023-1743](https://cve.now/CVE-2023-1743.md): SourceCodester Grade Point Average GPA Calculator index.php cross site scripting (CVSS 3.5, SourceCodester Grade Point Average GPA Calculator)
- [CVE-2023-1742](https://cve.now/CVE-2023-1742.md): IBOS Report Search getlist sql injection (CVSS 6.3, IBOS)
- [CVE-2023-1741](https://cve.now/CVE-2023-1741.md): jeecg-boot Sleep Command SysDictMapper.java sql injection (CVSS 4.3, jeecg-boot · org.jeecgframework.boot:jeecg-boot-parent)
- [CVE-2023-1740](https://cve.now/CVE-2023-1740.md): SourceCodester Air Cargo Management System GET Parameter manage\_user.php sql injection (CVSS 4.7, SourceCodester Air Cargo Management System)
- [CVE-2022-42452](https://cve.now/CVE-2022-42452.md): HCL Launch is vulnerable to HTML injection. (CVSS 4.6, HCL Software HCL Launch)
- [CVE-2023-1739](https://cve.now/CVE-2023-1739.md): SourceCodester Simple and Beautiful Shopping Cart System upload.php unrestricted upload (CVSS 6.3, SourceCodester Simple and Beautiful Shopping Cart System)
- [CVE-2023-1738](https://cve.now/CVE-2023-1738.md): SourceCodester Young Entrepreneur E-Negosyo System sql injection (CVSS 6.3, SourceCodester Young Entrepreneur E-Negosyo System)
- [CVE-2023-1737](https://cve.now/CVE-2023-1737.md): SourceCodester Young Entrepreneur E-Negosyo System login.php sql injection (CVSS 7.3, SourceCodester Young Entrepreneur E-Negosyo System)
- [CVE-2023-28846](https://cve.now/CVE-2023-28846.md): Denial of Service in unpoly-rails (CVSS 5.9, unpoly-rails)
- [CVE-2023-1736](https://cve.now/CVE-2023-1736.md): SourceCodester Young Entrepreneur E-Negosyo System sql injection (CVSS 5.5, SourceCodester Young Entrepreneur E-Negosyo System)
- [CVE-2023-1735](https://cve.now/CVE-2023-1735.md): SourceCodester Young Entrepreneur E-Negosyo System passwordrecover.php sql injection (CVSS 6.3, SourceCodester Young Entrepreneur E-Negosyo System)
- [CVE-2023-1734](https://cve.now/CVE-2023-1734.md): SourceCodester Young Entrepreneur E-Negosyo System unrestricted upload (CVSS 7.3, SourceCodester Young Entrepreneur E-Negosyo System)
- [CVE-2023-28835](https://cve.now/CVE-2023-28835.md): Insecure randomness for default password in nextcloud (CVSS 3.5, nextcloud security-advisories)
- [CVE-2023-28833](https://cve.now/CVE-2023-28833.md): Unrestricted filenames for logo or favicon as admin in the theming settings in nextcloud server (CVSS 2.4, nextcloud security-advisories)
- [CVE-2023-28644](https://cve.now/CVE-2023-28644.md): Reference fetch can saturate the server bandwidth for 10 seconds in nextcloud server (CVSS 5.7, nextcloud security-advisories)
- [CVE-2023-28643](https://cve.now/CVE-2023-28643.md): Potential share collision for recipients when caching is enabled in nextcloud server (CVSS 5.5, nextcloud security-advisories)
- [CVE-2023-26482](https://cve.now/CVE-2023-26482.md): Scope of workflow operations is not validated in nextcloud server (CVSS 9.1, nextcloud security-advisories)
- [CVE-2023-28646](https://cve.now/CVE-2023-28646.md): App lockout in nextcloud Android app can be bypassed via thirdparty apps (CVSS 4.4, nextcloud security-advisories)
- [CVE-2023-28647](https://cve.now/CVE-2023-28647.md): App pin of the iOS app can be bypassed in Nextcloud iOS (CVSS 4.4, nextcloud security-advisories)
- [CVE-2022-23522](https://cve.now/CVE-2022-23522.md): Arbitrary File Write when Extracting Tarballs retrieved from a remote location using in mindsdb (CVSS 8.5, mindsdb)
- [CVE-2022-43473](https://cve.now/CVE-2022-43473.md): A blind XML External Entity (XXE) vulnerability exists in the Add UCS Device functionality of ManageEngine OpManager 12.6.168. (CVSS 5.8, ManageEngine OpManager)
- [CVE-2023-24473](https://cve.now/CVE-2023-24473.md): An information disclosure vulnerability exists in the TGAInput::read\_tga2\_header functionality of OpenImageIO Project OpenImageIO v2.4.7.1. (CVSS 5.3, OpenImageIO Project OpenImageIO)
- [CVE-2023-22845](https://cve.now/CVE-2023-22845.md): An out-of-bounds read vulnerability exists in the TGAInput::decode\_pixel() functionality of OpenImageIO Project OpenImageIO v2.4.7.1. (CVSS 7.5, OpenImageIO Project OpenImageIO)
- [CVE-2023-24472](https://cve.now/CVE-2023-24472.md): A denial of service vulnerability exists in the FitsOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.7.1. (CVSS 7.5, OpenImageIO Project OpenImageIO)
- [CVE-2023-25076](https://cve.now/CVE-2023-25076.md): A buffer overflow vulnerability exists in the handling of wildcard backend hosts of SNIProxy 0.6.0-2 and the master branch (commit: 822bb80d (CVSS 9.8, SNIProxy)
- [CVE-2023-1725](https://cve.now/CVE-2023-1725.md): SSRF in Infoline Project Management System (CVSS 9.8, Infoline Project Management System)
- [CVE-2023-28733](https://cve.now/CVE-2023-28733.md): Stored XSS affecting the AcyMailing plugin for Joomla (CVSS 7.2, AcyMailing Newsletter Plugin for Joomla in the Enterprise v…)
- [CVE-2023-28732](https://cve.now/CVE-2023-28732.md): Missing access control affecting the AcyMailing plugin for Joomla (CVSS 6.5, AcyMailing Newsletter Plugin for Joomla)
- [CVE-2023-28731](https://cve.now/CVE-2023-28731.md): Unauthenticated RCE affecting the AcyMailing plugin for Joomla (CVSS 9.8, AcyMailing Newsletter Plugin for Joomla in the Enterprise v…)
- [CVE-2023-24399](https://cve.now/CVE-2023-24399.md): WordPress Ocean Extra Plugin \<= 2.1.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.5, OceanWP Ocean Extra)
- [CVE-2023-25040](https://cve.now/CVE-2023-25040.md): WordPress Shortcodes Ultimate Plugin \<= 5.12.6 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Vova Anokhin WordPress Shortcodes Plugin — Shortcodes Ultim…)
- [CVE-2023-23681](https://cve.now/CVE-2023-23681.md): WordPress Image Hover Effects For WPBakery Page Builder Plugin \<= 4.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Labib Ahmed Image Hover Effects For WPBakery Page Builder)
- [CVE-2023-23677](https://cve.now/CVE-2023-23677.md): WordPress GTmetrix for WordPress Plugin \<= 0.4.5 is vulnerable to Cross Site Scripting (XSS) (CVSS 3.8, GTmetrix for WordPress)
- [CVE-2023-23675](https://cve.now/CVE-2023-23675.md): WordPress WP Smart Preloader Plugin \<= 1.15 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Catchsquare WP Smart Preloader)
- [CVE-2023-23670](https://cve.now/CVE-2023-23670.md): WordPress Fancy Comments WordPress Plugin \<= 1.2.10 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Team Heateor Fancy Comments WordPress)
- [CVE-2023-1699](https://cve.now/CVE-2023-1699.md): Rapid7 Nexpose Forced Browsing (CVSS 4.3, Rapid7 Nexpose)
- [CVE-2023-28935](https://cve.now/CVE-2023-28935.md): Apache UIMA DUCC: DUCC (EOL) allows RCE (CVSS 8.8, Apache Software Foundation Apache UIMA DUCC · org.apache.ui…)
- [CVE-2023-1014](https://cve.now/CVE-2023-1014.md): Information disclosure in Vira-Investing (CVSS 7.5, Virames Vira-Investing)
- [CVE-2023-1013](https://cve.now/CVE-2023-1013.md): XSS in Vira-Investing (CVSS 6.1, Virames Vira-Investing)
- [CVE-2023-26116](https://cve.now/CVE-2023-26116.md): Versions of the package angular from 1.2.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the angular.copy() utility fu (CVSS 5.3, angular · org.webjars.bower:angular +2)
- [CVE-2023-26118](https://cve.now/CVE-2023-26118.md): Versions of the package angular from 1.4.9 are vulnerable to Regular Expression Denial of Service (ReDoS) via the \<input type="url"\> element (CVSS 5.3, angular · org.webjars.bower:angular +2)
- [CVE-2023-26117](https://cve.now/CVE-2023-26117.md): Versions of the package angular from 1.0.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the $resource service due to t (CVSS 5.3, angular · org.webjars.bower:angular +2)
- [CVE-2023-0620](https://cve.now/CVE-2023-0620.md): Vault Vulnerable to SQL Injection When Configuring the Microsoft SQL Database Storage Backend (CVSS 6.5, HashiCorp Vault · github.com/hashicorp/vault)
- [CVE-2023-0665](https://cve.now/CVE-2023-0665.md): Vault PKI Issuer Endpoint Did Not Correctly Authorize Access to Issuer Metadata (CVSS 6.5, HashiCorp Vault · github.com/hashicorp/vault)
- [CVE-2023-25000](https://cve.now/CVE-2023-25000.md): Vault Vulnerable to Cache-Timing Attacks During Seal and Unseal Operations (CVSS 5.0, HashiCorp Vault · github.com/hashicorp/vault)
- [CVE-2022-30350](https://cve.now/CVE-2022-30350.md): Avanquest Software RAD PDF (PDFEscape Online) 3.19.2.2 is vulnerable to Information Leak / Disclosure. (CVSS 7.5)
- [CVE-2022-30351](https://cve.now/CVE-2022-30351.md): PDFZorro PDFZorro Online r20220428 using TCPDF 6.2.5, despite having workflows claiming to correctly remove redacted information from a supp (CVSS 7.5)
- [CVE-2022-4744](https://cve.now/CVE-2022-4744.md): A double-free flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user registers the device when the register\_ (CVSS 7.8, Kernel)
- [CVE-2022-47542](https://cve.now/CVE-2022-47542.md): Red Gate SQL Monitor 11.0.14 through 12.1.46 has Incorrect Access Control, exploitable remotely for Escalation of Privileges. (CVSS 8.8)
- [CVE-2023-1393](https://cve.now/CVE-2023-1393.md): A flaw was found in X.Org Server Overlay Window. (CVSS 7.8, xorg-server)
- [CVE-2023-1670](https://cve.now/CVE-2023-1670.md): A flaw use after free in the Linux kernel Xircom 16-bit PCMCIA (PC-card) Ethernet driver was found.A local user could use this flaw to crash (CVSS 7.8, Kernel)
- [CVE-2023-1712](https://cve.now/CVE-2023-1712.md): Use of Hard-coded, Security-relevant Constants in deepset-ai/haystack (CVSS 9.1, deepset-ai/haystack · farm-haystack)
- [CVE-2023-26692](https://cve.now/CVE-2023-26692.md): ZCBS Zijper Collectie Beheer Systeem (ZCBS), Zijper Publication Management System (ZPBS), and Zijper Image Bank Management System (ZBBS) 4.1 (CVSS 6.1)
- [CVE-2023-27533](https://cve.now/CVE-2023-27533.md): A vulnerability in input validation exists in curl \<8.0 during communication using the TELNET protocol may allow an attacker to pass on mali (CVSS 9.8, https://github.com/curl/curl)
- [CVE-2023-27534](https://cve.now/CVE-2023-27534.md): A path traversal vulnerability exists in curl \<8.0.0 SFTP implementation causes the tilde (~) character to be wrongly replaced when used as (CVSS 8.8, https://github.com/curl/curl)
- [CVE-2023-27535](https://cve.now/CVE-2023-27535.md): An authentication bypass vulnerability exists in libcurl \<8.0.0 in the FTP connection reuse feature that can result in wrong credentials bei (CVSS 5.9, https://github.com/curl/curl)
- [CVE-2023-27536](https://cve.now/CVE-2023-27536.md): An authentication bypass vulnerability exists libcurl \<8.0.0 in the connection reuse feature which can reuse previously established connecti (CVSS 5.9, https://github.com/curl/curl)
- [CVE-2023-27537](https://cve.now/CVE-2023-27537.md): A double free vulnerability exists in libcurl \<8.0.0 when sharing HSTS data between separate "handles". (no CVSS, https://github.com/curl/curl)
- [CVE-2023-27538](https://cve.now/CVE-2023-27538.md): An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH connection despite the (CVSS 7.7, https://github.com/curl/curl)
- [CVE-2023-28462](https://cve.now/CVE-2023-28462.md): A JNDI rebind operation in the default ORB listener in Payara Server 4.1.2.191 (Enterprise), 5.20.0 and newer (Enterprise), and 5.2020.1 and (CVSS 9.8, fish.payara.server:payara-aggregator)
- [CVE-2023-29059](https://cve.now/CVE-2023-29059.md): 3CX DesktopApp through 18.12.416 has embedded malicious code, as exploited in the wild in March 2023. (CVSS 7.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-03-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.