# CVEs published 2023-04-14

111 CVEs were published on April 14, 2023: 21 critical, 30 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2023-24934](https://cve.now/CVE-2023-24934.md): Microsoft Defender Security Feature Bypass Vulnerability (CVSS 6.2, Microsoft Malware Protection Platform)
- [CVE-2023-2077](https://cve.now/CVE-2023-2077.md): Campcodes Online Traffic Offense Management System view\_details.php cross site scripting (CVSS 3.5, Campcodes Online Traffic Offense Management System)
- [CVE-2023-2076](https://cve.now/CVE-2023-2076.md): Campcodes Online Traffic Offense Management System Users.phpp cross site scripting (CVSS 3.5, Campcodes Online Traffic Offense Management System)
- [CVE-2023-2075](https://cve.now/CVE-2023-2075.md): Campcodes Online Traffic Offense Management System view\_details.php sql injection (CVSS 6.3, Campcodes Online Traffic Offense Management System)
- [CVE-2023-30535](https://cve.now/CVE-2023-30535.md): Snowflake JDBC vulnerable to command injection via SSO URL authentication (CVSS 7.3, snowflakedb snowflake-jdbc · net.snowflake:snowflake-jdbc)
- [CVE-2023-29193](https://cve.now/CVE-2023-29193.md): SpiceDB binding metrics port to untrusted networks and can leak command-line flags (CVSS 8.7, authzed spicedb · github.com/authzed/spicedb)
- [CVE-2023-2074](https://cve.now/CVE-2023-2074.md): Campcodes Online Traffic Offense Management System Master.php sql injection (CVSS 6.3, Campcodes Online Traffic Offense Management System)
- [CVE-2023-2073](https://cve.now/CVE-2023-2073.md): Campcodes Online Traffic Offense Management System Login.php sql injection (CVSS 7.3, Campcodes Online Traffic Offense Management System)
- [CVE-2023-29018](https://cve.now/CVE-2023-29018.md): OpenFeature Operator vulnerable to Cluster-level Privilege Escalation (CVSS 8.1, open-feature-operator · github.com/open-feature/open-featur…)
- [CVE-2023-29194](https://cve.now/CVE-2023-29194.md): vitess allows users to create keyspaces that can deny access to already existing keyspaces (CVSS 4.1, vitessio vitess · vitess.io/vitess)
- [CVE-2023-29199](https://cve.now/CVE-2023-29199.md): vm2 Sandbox escape vulnerability (CVSS 9.8, patriksimek vm2 · vm2)
- [CVE-2023-29529](https://cve.now/CVE-2023-29529.md): matrix-js-sdk vulnerable to invisible eavesdropping in group calls (CVSS 5.0, matrix-org matrix-js-sdk · matrix-js-sdk)
- [CVE-2023-29013](https://cve.now/CVE-2023-29013.md): HTTP header parsing could cause a deny of service (CVSS 7.5, traefik · github.com/traefik/traefik/v2)
- [CVE-2023-2033](https://cve.now/CVE-2023-2033.md): Type confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to potentially exploit heap corruption via a crafted (CVSS 8.8, KEV, Google Chrome)
- [CVE-2022-47501](https://cve.now/CVE-2022-47501.md): Apache OFBiz: Arbitrary file reading vulnerability (CVSS 7.5, Apache Software Foundation Apache OFBiz)
- [CVE-2023-28085](https://cve.now/CVE-2023-28085.md): An HPE OneView Global Dashboard (OVGD) appliance dump may expose OVGD user account credentials (CVSS 5.5, Hewlett Packard Enterprise (HPE) HPE OneView Global Dashboa…)
- [CVE-2022-3748](https://cve.now/CVE-2022-3748.md): Improper authorization that can lead to account impersonation (CVSS 9.8, ForgeRock Access Management)
- [CVE-2023-28091](https://cve.now/CVE-2023-28091.md): HPE OneView virtual appliance "Migrate server hardware" option may expose sensitive information in an HPE OneView support dump (CVSS 5.5, Hewlett Packard Enterprise (HPE) HPE OneView)
- [CVE-2023-2059](https://cve.now/CVE-2023-2059.md): DedeCMS select\_templets.php path traversal (CVSS 4.3, DedeCMS)
- [CVE-2023-2058](https://cve.now/CVE-2023-2058.md): EyouCms HTTP POST Request cross site scripting (CVSS 2.4, EyouCms)
- [CVE-2023-1833](https://cve.now/CVE-2023-1833.md): Authentication Bypass in Redline Router (CVSS 9.8, DTS Electronics Redline Router)
- [CVE-2023-1803](https://cve.now/CVE-2023-1803.md): Authentication Bypass in Redline Router (CVSS 9.8, DTS Electronics Redline Router)
- [CVE-2023-2057](https://cve.now/CVE-2023-2057.md): EyouCms New Picture cross site scripting (CVSS 2.4, EyouCms)
- [CVE-2023-2056](https://cve.now/CVE-2023-2056.md): DedeCMS module\_main.php GetSystemFile code injection (CVSS 6.3, DedeCMS)
- [CVE-2023-2055](https://cve.now/CVE-2023-2055.md): Campcodes Advanced Online Voting System config\_save.php cross site scripting (CVSS 3.5, Campcodes Advanced Online Voting System)
- [CVE-2023-2054](https://cve.now/CVE-2023-2054.md): Campcodes Advanced Online Voting System positions\_delete.php sql injection (CVSS 6.3, Campcodes Advanced Online Voting System)
- [CVE-2023-2053](https://cve.now/CVE-2023-2053.md): Campcodes Advanced Online Voting System candidates\_row.php sql injection (CVSS 6.3, Campcodes Advanced Online Voting System)
- [CVE-2023-2052](https://cve.now/CVE-2023-2052.md): Campcodes Advanced Online Voting System ballot\_down.php sql injection (CVSS 6.3, Campcodes Advanced Online Voting System)
- [CVE-2023-1617](https://cve.now/CVE-2023-1617.md): Improper Authentication Mechanism in B&R VC4 Visualization (CVSS 9.8, B&R Industrial Automation B&R VC4)
- [CVE-2023-2051](https://cve.now/CVE-2023-2051.md): Campcodes Advanced Online Voting System positions\_row.php sql injection (CVSS 6.3, Campcodes Advanced Online Voting System)
- [CVE-2023-2050](https://cve.now/CVE-2023-2050.md): Campcodes Advanced Online Voting System positions\_add.php sql injection (CVSS 6.3, Campcodes Advanced Online Voting System)
- [CVE-2023-2049](https://cve.now/CVE-2023-2049.md): Campcodes Advanced Online Voting System ballot\_up.php sql injection (CVSS 6.3, Campcodes Advanced Online Voting System)
- [CVE-2023-2048](https://cve.now/CVE-2023-2048.md): Campcodes Advanced Online Voting System voters\_row.php sql injection (CVSS 6.3, Campcodes Advanced Online Voting System)
- [CVE-2023-2047](https://cve.now/CVE-2023-2047.md): Campcodes Advanced Online Voting System login.php sql injection (CVSS 6.3, Campcodes Advanced Online Voting System)
- [CVE-2023-2044](https://cve.now/CVE-2023-2044.md): Control iD iDSecure Dispositivos Page cross site scripting (CVSS 3.5, Control iD iDSecure)
- [CVE-2023-2043](https://cve.now/CVE-2023-2043.md): Control iD RHiD Edit a sql injection (CVSS 6.3, Control iD RHiD)
- [CVE-2023-2042](https://cve.now/CVE-2023-2042.md): DataGear JDBC Server deserialization (CVSS 5.3, DataGear)
- [CVE-2023-2041](https://cve.now/CVE-2023-2041.md): novel-plus sql injection (CVSS 6.3, novel-plus)
- [CVE-2023-2040](https://cve.now/CVE-2023-2040.md): novel-plus sql injection (CVSS 6.3, novel-plus)
- [CVE-2023-1863](https://cve.now/CVE-2023-1863.md): SQLi in Eskom Computer Water Metering Software (CVSS 9.8, Eskom Water Metering Software)
- [CVE-2023-2039](https://cve.now/CVE-2023-2039.md): novel-plus sql injection (CVSS 6.3, novel-plus)
- [CVE-2023-2038](https://cve.now/CVE-2023-2038.md): Campcodes Video Sharing Website admin\_class.php sql injection (CVSS 6.3, Campcodes Video Sharing Website)
- [CVE-2023-2037](https://cve.now/CVE-2023-2037.md): Campcodes Video Sharing Website watch.php sql injection (CVSS 6.3, Campcodes Video Sharing Website)
- [CVE-2023-2036](https://cve.now/CVE-2023-2036.md): Campcodes Video Sharing Website upload.php sql injection (CVSS 6.3, Campcodes Video Sharing Website)
- [CVE-2023-2035](https://cve.now/CVE-2023-2035.md): Campcodes Video Sharing Website signup.php sql injection (CVSS 6.3, Campcodes Video Sharing Website)
- [CVE-2023-26123](https://cve.now/CVE-2023-26123.md): Versions of the package raysan5/raylib before 4.5.0 are vulnerable to Cross-site Scripting (XSS) such that the SetClipboardText API does not (CVSS 6.1, raysan5/raylib)
- [CVE-2023-1285](https://cve.now/CVE-2023-1285.md): Signal Handler Race Condition vulnerability in Mitsubishi Electric India GC-ENET-COM whose first 2 digits of 11-digit serial number of unit (CVSS 7.5, Mitsubishi Electric India GC-ENET-COM)
- [CVE-2021-46880](https://cve.now/CVE-2021-46880.md): x509/x509\_verify.c in LibreSSL before 3.4.2, and OpenBSD before 7.0 errata 006, allows authentication bypass because an error for an unverif (CVSS 9.8)
- [CVE-2022-45170](https://cve.now/CVE-2022-45170.md): An issue was discovered in LIVEBOX Collaboration vDesk through v018. (CVSS 6.5)
- [CVE-2022-45173](https://cve.now/CVE-2022-45173.md): An issue was discovered in LIVEBOX Collaboration vDesk through v018. (CVSS 9.8)
- [CVE-2022-45174](https://cve.now/CVE-2022-45174.md): An issue was discovered in LIVEBOX Collaboration vDesk through v018. (CVSS 9.8)
- [CVE-2022-45175](https://cve.now/CVE-2022-45175.md): An issue was discovered in LIVEBOX Collaboration vDesk through v018. (CVSS 6.5)
- [CVE-2022-45178](https://cve.now/CVE-2022-45178.md): An issue was discovered in LIVEBOX Collaboration vDesk through v018. (CVSS 8.8)
- [CVE-2022-45180](https://cve.now/CVE-2022-45180.md): An issue was discovered in LIVEBOX Collaboration vDesk through v018. (CVSS 6.5)
- [CVE-2022-46886](https://cve.now/CVE-2022-46886.md): There exists an open redirect within the response list update functionality of ServiceNow. (CVSS 5.5, ServiceNow)
- [CVE-2022-47027](https://cve.now/CVE-2022-47027.md): Timmystudios Fast Typing Keyboard v1.275.1.162 allows unauthorized apps to overwrite arbitrary files in its internal storage via a dictionar (CVSS 9.8)
- [CVE-2023-2008](https://cve.now/CVE-2023-2008.md): Kernel: udmabuf: improper validation of array index leading to local privilege escalation (CVSS 8.2, Linux kernel · Red Hat Enterprise Linux)
- [CVE-2023-2034](https://cve.now/CVE-2023-2034.md): Unrestricted Upload of File with Dangerous Type in froxlor/froxlor (CVSS 9.1, froxlor/froxlor)
- [CVE-2023-22949](https://cve.now/CVE-2023-22949.md): An issue was discovered in TigerGraph Enterprise Free Edition 3.x. (CVSS 4.9)
- [CVE-2023-25597](https://cve.now/CVE-2023-25597.md): A vulnerability in the web conferencing component of Mitel MiCollab through 9.6.2.9 could allow an unauthenticated attacker to download a sh (CVSS 5.9)
- [CVE-2023-26463](https://cve.now/CVE-2023-26463.md): strongSwan 5.9.8 and 5.9.9 potentially allows remote code execution because it uses a variable named "public" for two different purposes wit (CVSS 9.8)
- [CVE-2023-26559](https://cve.now/CVE-2023-26559.md): A directory traversal vulnerability in Oxygen XML Web Author before 25.0.0.3 build 2023021715 and Oxygen Content Fusion before 5.0.3 build 2 (CVSS 5.3)
- [CVE-2023-26756](https://cve.now/CVE-2023-26756.md): The login page of Revive Adserver v5.4.1 is vulnerable to brute force attacks. (no CVSS)
- [CVE-2023-26969](https://cve.now/CVE-2023-26969.md): Atropim 1.5.26 is vulnerable to Directory Traversal. (CVSS 7.5)
- [CVE-2023-26980](https://cve.now/CVE-2023-26980.md): PAX Technology PAX A920 Pro PayDroid 8.1suffers from a Race Condition vulnerability, which allows attackers to bypass the payment software a (no CVSS)
- [CVE-2023-27193](https://cve.now/CVE-2023-27193.md): An issue found in DUALSPACE v.1.1.3 allows a local attacker to gain privileges via the key\_ad\_new\_user\_avoid\_time field. (CVSS 7.8)
- [CVE-2023-27571](https://cve.now/CVE-2023-27571.md): An issue was discovered in DG3450 Cable Gateway AR01.02.056.18\_041520\_711.NCS.10. (CVSS 5.3)
- [CVE-2023-27572](https://cve.now/CVE-2023-27572.md): An issue was discovered in CommScope Arris DG3450 Cable Gateway AR01.02.056.18\_041520\_711.NCS.10. (CVSS 6.1)
- [CVE-2023-27643](https://cve.now/CVE-2023-27643.md): An issue found in POWERAMP 925-bundle-play and Poweramp 954-uni allows a remote attacker to cause a denial of service via the Rescan button (CVSS 7.5)
- [CVE-2023-27647](https://cve.now/CVE-2023-27647.md): An issue found in DUALSPACE Lock Master v.2.2.4 allows a local attacker to cause a denial of service or gain sensitive information via the c (CVSS 7.1)
- [CVE-2023-27648](https://cve.now/CVE-2023-27648.md): Directory Traversal vulnerability found in T-ME Studios Change Color of Keypad v.1.275.1.277 allows a remote attacker to execute arbitrary c (CVSS 9.8)
- [CVE-2023-27649](https://cve.now/CVE-2023-27649.md): SQL injection vulnerability found in Trusted Tools Free Music v.2.1.0.47, v.2.0.0.46, v.1.9.1.45, v.1.8.2.43 allows a remote attacker to cau (CVSS 7.5)
- [CVE-2023-27651](https://cve.now/CVE-2023-27651.md): An issue found in Ego Studio SuperClean v.1.1.9 and v.1.1.5 allows an attacker to gain privileges via the update\_info field of the \_default\_ (CVSS 7.8)
- [CVE-2023-27653](https://cve.now/CVE-2023-27653.md): An issue found in WHOv.1.0.28, v.1.0.30, v.1.0.32 allows an attacker to cause a denial of service via the SharedPreference files. (CVSS 7.5)
- [CVE-2023-27654](https://cve.now/CVE-2023-27654.md): An issue found in WHOv.1.0.28, v.1.0.30, v.1.0.32 allows an attacker to cause a escalation of privileges via the TTMultiProvider component. (CVSS 9.8)
- [CVE-2023-27666](https://cve.now/CVE-2023-27666.md): Auto Dealer Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the name parameter at /classes/S (CVSS 6.1)
- [CVE-2023-27890](https://cve.now/CVE-2023-27890.md): The Export User plugin through 2.0 for MyBB allows XSS during the process of an admin generating DSGVO data for a user, via the Custom User (no CVSS)
- [CVE-2023-27912](https://cve.now/CVE-2023-27912.md): A maliciously crafted X\_B file when parsed through Autodesk® AutoCAD® 2023 can force an Out-of-Bound Read. (CVSS 7.8, Autodesk AutoCAD)
- [CVE-2023-27913](https://cve.now/CVE-2023-27913.md): A maliciously crafted X\_B file when parsed through Autodesk® AutoCAD® 2023 can be used to cause an Integer Overflow. (CVSS 7.8, Autodesk AutoCAD)
- [CVE-2023-27914](https://cve.now/CVE-2023-27914.md): A maliciously crafted X\_B file when parsed through Autodesk® AutoCAD® 2023 can be used to write beyond the allocated buffer causing a Stack (CVSS 7.8, Autodesk AutoCAD)
- [CVE-2023-27915](https://cve.now/CVE-2023-27915.md): A maliciously crafted X\_B file when parsed through Autodesk® AutoCAD® 2023 could lead to memory corruption vulnerability by read access viol (CVSS 7.8, Autodesk AutoCAD)
- [CVE-2023-29067](https://cve.now/CVE-2023-29067.md): A maliciously crafted X\_B file when parsed through Autodesk® AutoCAD® 2023 could lead to memory corruption vulnerability by write access vio (CVSS 7.8, Autodesk AutoCAD)
- [CVE-2023-29085](https://cve.now/CVE-2023-29085.md): An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos (CVSS 6.8)
- [CVE-2023-29086](https://cve.now/CVE-2023-29086.md): An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos (CVSS 6.8)
- [CVE-2023-29087](https://cve.now/CVE-2023-29087.md): An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos (CVSS 6.8)
- [CVE-2023-29088](https://cve.now/CVE-2023-29088.md): An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos (CVSS 6.8)
- [CVE-2023-29089](https://cve.now/CVE-2023-29089.md): An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos (CVSS 6.8)
- [CVE-2023-29090](https://cve.now/CVE-2023-29090.md): An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos (CVSS 6.8)
- [CVE-2023-29091](https://cve.now/CVE-2023-29091.md): An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos (CVSS 6.8)
- [CVE-2023-29132](https://cve.now/CVE-2023-29132.md): Irssi 1.3.x and 1.4.x before 1.4.4 has a use-after-free because of use of a stale special collector reference. (CVSS 5.3)
- [CVE-2023-29383](https://cve.now/CVE-2023-29383.md): In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger). (no CVSS)
- [CVE-2023-29491](https://cve.now/CVE-2023-29491.md): ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malfor (no CVSS)
- [CVE-2023-29569](https://cve.now/CVE-2023-29569.md): Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via ffi\_cb\_impl\_wpwwwww at src/mjs\_ffi.c. (CVSS 5.5)
- [CVE-2023-29584](https://cve.now/CVE-2023-29584.md): mp4v2 v2.0.0 was discovered to contain a heap buffer overflow via the MP4GetVideoProfileLevel function at /src/mp4.cpp. (CVSS 8.8)
- [CVE-2023-29621](https://cve.now/CVE-2023-29621.md): Purchase Order Management v1.0 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute arbitrary (CVSS 8.8)
- [CVE-2023-29622](https://cve.now/CVE-2023-29622.md): Purchase Order Management v1.0 was discovered to contain a SQL injection vulnerability via the password parameter at /purchase\_order/admin/l (CVSS 9.8)
- [CVE-2023-29623](https://cve.now/CVE-2023-29623.md): Purchase Order Management v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the password parameter at (CVSS 6.1)
- [CVE-2023-29625](https://cve.now/CVE-2023-29625.md): Employee Performance Evaluation System v1.0 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execu (CVSS 8.8)
- [CVE-2023-29626](https://cve.now/CVE-2023-29626.md): Yoga Class Registration System 1.0 was discovered to contain a SQL injection vulnerability via the cid parameter at /admin/login.php. (CVSS 7.5)
- [CVE-2023-29627](https://cve.now/CVE-2023-29627.md): Online Pizza Ordering v1.0 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute arbitrary code (CVSS 8.8)
- [CVE-2023-29798](https://cve.now/CVE-2023-29798.md): TOTOLINK X18 V9.1.0cu.2024\_B20220329 was discovered to contain a command injection vulnerability via the command parameter in the setTracero (CVSS 9.8)
- [CVE-2023-29799](https://cve.now/CVE-2023-29799.md): TOTOLINK X18 V9.1.0cu.2024\_B20220329 was discovered to contain a command injection vulnerability via the hostname parameter in the setOpMode (no CVSS)
- [CVE-2023-29800](https://cve.now/CVE-2023-29800.md): TOTOLINK X18 V9.1.0cu.2024\_B20220329 was discovered to contain a command injection vulnerability via the FileName parameter in the UploadFir (CVSS 9.8)
- [CVE-2023-29801](https://cve.now/CVE-2023-29801.md): TOTOLINK X18 V9.1.0cu.2024\_B20220329 was discovered to contain multiple command injection vulnerabilities via the rtLogEnabled and rtLogServ (CVSS 9.8)
- [CVE-2023-29802](https://cve.now/CVE-2023-29802.md): TOTOLINK X18 V9.1.0cu.2024\_B20220329 was discovered to contain a command injection vulnerability via the ip parameter in the setDiagnosisCfg (CVSS 9.8)
- [CVE-2023-29803](https://cve.now/CVE-2023-29803.md): TOTOLINK X18 V9.1.0cu.2024\_B20220329 was discovered to contain a command injection vulnerability via the pid parameter in the disconnectVPN (CVSS 9.8)
- [CVE-2023-29804](https://cve.now/CVE-2023-29804.md): WFS-SR03 v1.0.3 was discovered to contain a command injection vulnerability via the sys\_smb\_pwdmod function. (CVSS 8.8)
- [CVE-2023-29805](https://cve.now/CVE-2023-29805.md): WFS-SR03 v1.0.3 was discovered to contain a command injection vulnerability via the pro\_stor\_canceltrans\_handler\_part\_19 function. (CVSS 9.8)
- [CVE-2023-29847](https://cve.now/CVE-2023-29847.md): AeroCMS v0.0.1 was discovered to contain multiple stored cross-site scripting (XSS) vulnerabilities via the comment\_author and comment\_conte (CVSS 5.4)
- [CVE-2023-29850](https://cve.now/CVE-2023-29850.md): SENAYAN Library Management System (SLiMS) Bulian v9.5.2 does not strip exif data from uploaded images. (CVSS 7.5)
- [CVE-2023-30459](https://cve.now/CVE-2023-30459.md): SmartPTT SCADA 1.1.0.0 allows remote code execution (when the attacker has administrator privileges) by writing a malicious C# script and ex (CVSS 7.2)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-04-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.