# CVEs published 2023-04-17

85 CVEs were published on April 17, 2023: 11 critical, 29 high. Days are UTC.

- [CVE-2023-30547](https://cve.now/CVE-2023-30547.md): Sandbox Escape in vm2 (CVSS 9.8, patriksimek vm2 · vm2)
- [CVE-2023-30541](https://cve.now/CVE-2023-30541.md): TransparentUpgradeableProxy clashing selector calls may not be delegated in @openzeppelin/contracts (CVSS 5.3, openzeppelin-contracts · @openzeppelin/contracts +1)
- [CVE-2023-30540](https://cve.now/CVE-2023-30540.md): Chat poll data can still be queried from API after purging history in Nextcloud talk (CVSS 3.5, nextcloud security-advisories)
- [CVE-2023-30539](https://cve.now/CVE-2023-30539.md): Users can set up workflows using restricted and invisible system tags in Nextcloud (CVSS 6.5, nextcloud security-advisories)
- [CVE-2023-29213](https://cve.now/CVE-2023-29213.md): org.xwiki.platform:xwiki-platform-logging-ui Injection vulnerability (CVSS 9.1, xwiki-platform · org.xwiki.platform:xwiki-platform-logging-…)
- [CVE-2023-30536](https://cve.now/CVE-2023-30536.md): Insecure header validation in slim/psr7 (CVSS 6.5, slimphp Slim-Psr7 · slim/psr7)
- [CVE-2023-29197](https://cve.now/CVE-2023-29197.md): Improper header name validation in guzzlehttp/psr7 (CVSS 5.3, guzzle psr7 · guzzlehttp/psr7)
- [CVE-2023-30543](https://cve.now/CVE-2023-30543.md): \`chainId\` may be outdated if user changes chains as part of connection in @web3-react (CVSS 5.2, Uniswap web3-react · @web3-react/coinbase-wallet +3)
- [CVE-2023-30548](https://cve.now/CVE-2023-30548.md): Path traversal vulnerability in gatsby-plugin-sharp (CVSS 4.3, gatsbyjs gatsby · gatsby-plugin-sharp)
- [CVE-2023-2130](https://cve.now/CVE-2023-2130.md): SourceCodester Purchase Order Management System GET Parameter view\_details.php sql injection (CVSS 6.3, SourceCodester Purchase Order Management System)
- [CVE-2015-10103](https://cve.now/CVE-2015-10103.md): InternalError503 Forget It settings.js infinite loop (CVSS 2.8, InternalError503 Forget It)
- [CVE-2023-29004](https://cve.now/CVE-2023-29004.md): Path Traversal Vulnerability in hap-wi/roxy-wi (CVSS 6.5, hap-wi roxy-wi)
- [CVE-2015-10102](https://cve.now/CVE-2015-10102.md): Freshdesk Plugin redirect (CVSS 6.3, Freshdesk Plugin)
- [CVE-2023-25504](https://cve.now/CVE-2023-25504.md): Apache Superset: Possible SSRF on import datasets (CVSS 4.9, Apache Software Foundation Apache Superset · apache-superset)
- [CVE-2023-27525](https://cve.now/CVE-2023-27525.md): Apache Superset: Incorrect default permissions for Gamma role (CVSS 3.1, Apache Software Foundation Apache Superset · apache-superset)
- [CVE-2023-1831](https://cve.now/CVE-2023-1831.md): User password logged in audit logs (CVSS 7.2, Mattermost)
- [CVE-2023-1873](https://cve.now/CVE-2023-1873.md): SQLi in Bircard (CVSS 9.8, Faturamatik Bircard)
- [CVE-2023-1473](https://cve.now/CVE-2023-1473.md): Responsive WordPress Slideshows 3.29.0 - Reflected XSS (CVSS 6.1, Slider, Gallery, and Carousel by MetaSlider)
- [CVE-2023-1371](https://cve.now/CVE-2023-1371.md): W4 Post List \< 2.4.6 - Subscriber+ Password Protected Post Content Disclosure (CVSS 6.5, W4 Post List)
- [CVE-2023-1413](https://cve.now/CVE-2023-1413.md): WP VR \< 8.2.9 - Reflected XSS (CVSS 6.1, WP VR)
- [CVE-2023-1274](https://cve.now/CVE-2023-1274.md): Pricing Tables For WPBakery Page Builder \< 3.0 - Subscriber+ LFI (no CVSS, Pricing Tables For WPBakery Page Builder)
- [CVE-2023-1331](https://cve.now/CVE-2023-1331.md): Redirection \< 1.1.5 - Plugin Reset via CSRF (CVSS 6.5, Redirection)
- [CVE-2023-0367](https://cve.now/CVE-2023-0367.md): Pricing Tables For WPBakery Page Builder \< 3.0 - Contributor+ Stored XSS (CVSS 5.4, Pricing Tables For WPBakery Page Builder)
- [CVE-2023-1373](https://cve.now/CVE-2023-1373.md): W4 Post List \< 2.4.6 - Reflected XSS (CVSS 6.1, W4 Post List)
- [CVE-2023-0889](https://cve.now/CVE-2023-0889.md): TF Random Numbers \< 2.0.1 - Subscriber+ Arbitrary Option Update (CVSS 6.5, Themeflection Numbers)
- [CVE-2023-1282](https://cve.now/CVE-2023-1282.md): Drag and Drop Multiple File Upload PRO - Reflected Cross-Site Scripting (CVSS 6.1, Drag and Drop Multiple File Upload PRO - Contact Form 7 Sta…)
- [CVE-2023-1427](https://cve.now/CVE-2023-1427.md): Photo Gallery by 10Web \< 1.8.15 - Admin+ Path Traversal (CVSS 4.9, Photo Gallery by 10Web)
- [CVE-2023-0277](https://cve.now/CVE-2023-0277.md): WC Fields Factory \<= 4.1.5 - ShopManager+ SQLi (CVSS 7.2, WC Fields Factory)
- [CVE-2023-1325](https://cve.now/CVE-2023-1325.md): Easy Forms for MailChimp \< 6.8.7 - Contributor+ Stored XSS (CVSS 5.4, Easy Forms for Mailchimp)
- [CVE-2023-0765](https://cve.now/CVE-2023-0765.md): Gallery by BestWebSoft \< 4.7.0 - Author+ SQL Injection (CVSS 8.8, Gallery by BestWebSoft)
- [CVE-2023-0374](https://cve.now/CVE-2023-0374.md): W4 Post List \< 2.4.6 - Contributor+ Stored XSS (CVSS 5.4, W4 Post List)
- [CVE-2023-0764](https://cve.now/CVE-2023-0764.md): Gallery by BestWebSoft \< 4.7.0 - Author+ Stored Cross-Site Scripting (CVSS 5.4, Gallery by BestWebSoft)
- [CVE-2023-1723](https://cve.now/CVE-2023-1723.md): SQLi in Veragroup Mobile Assistant (CVSS 9.8, Veragroup Mobile Assistant)
- [CVE-2023-2017](https://cve.now/CVE-2023-2017.md): Improper Control of Generation of Code in Twig Rendered Views in Shopware (CVSS 8.8, Shopware AG Shopware · shopware/platform +1)
- [CVE-2023-1109](https://cve.now/CVE-2023-1109.md): PHOENIX CONTACT: Directory Traversal Vulnerability in ENERGY AXC PU Web service (CVSS 8.8, PHOENIX CONTACT ENERGY AXC PU · PHOENIX CONTACT SMARTRTU… +2)
- [CVE-2023-22946](https://cve.now/CVE-2023-22946.md): Apache Spark proxy-user privilege escalation from malicious configuration class (CVSS 6.4, Apache Software Foundation Apache Spark · pyspark +2)
- [CVE-2023-30771](https://cve.now/CVE-2023-30771.md): Apache IoTDB Workbench: apache/iotdb-web-workbench: forge the JWTToken to access workbench (CVSS 9.8, Apache Software Foundation Apache IoTDB Workbench · apache-…)
- [CVE-2023-24831](https://cve.now/CVE-2023-24831.md): Apache IoTDB grafana-connector Login Bypass Vulnerability (CVSS 9.8, Apache Software Foundation Apache IoTDB · org.apache.iot… +1)
- [CVE-2023-30770](https://cve.now/CVE-2023-30770.md): A stack-based buffer overflow vulnerability was found in the ADM (CVSS 7.1, ASUSTOR ADM)
- [CVE-2021-33797](https://cve.now/CVE-2021-33797.md): Buffer-overflow in jsdtoa.c in Artifex MuJS in versions 1.0.1 to 1.1.1. (CVSS 9.8, mujs)
- [CVE-2022-44726](https://cve.now/CVE-2022-44726.md): The TouchDown Timesheet tracking component 4.1.4 for Jira allows XSS in the calendar view. (CVSS 5.4)
- [CVE-2022-46389](https://cve.now/CVE-2022-46389.md): Cross-Site Scripting (XSS) vulnerability found on logout functionality (CVSS 6.1, ServiceNow Now Platform)
- [CVE-2023-1697](https://cve.now/CVE-2023-1697.md): Junos OS: QFX10000 Series, PTX1000 Series: The dcpfe process will crash when a malformed ethernet frame is received (CVSS 6.5, Juniper Networks Junos OS)
- [CVE-2023-2109](https://cve.now/CVE-2023-2109.md): Cross-site Scripting (XSS) - DOM in chatwoot/chatwoot (CVSS 5.3, chatwoot/chatwoot)
- [CVE-2023-24500](https://cve.now/CVE-2023-24500.md): Electra Central AC unit – Adjacent attacker may cause the unit to load unauthorized FW (CVSS 7.5, Electra Central AC unit)
- [CVE-2023-24501](https://cve.now/CVE-2023-24501.md): Electra Central AC unit – Hardcoded Credentials (CVSS 9.8, Electra Central AC unit)
- [CVE-2023-24502](https://cve.now/CVE-2023-24502.md): Electra Central AC unit – Easily calculated password (CVSS 7.5, Electra Central AC unit)
- [CVE-2023-24503](https://cve.now/CVE-2023-24503.md): Electra Smart Kit for Split AC – Adjacent attacker may cause the unit to load unauthorized FW (CVSS 7.5, Electra OSK201)
- [CVE-2023-24504](https://cve.now/CVE-2023-24504.md): Electra Central AC unit – Adjacent attacker may cause the unit to connect to unauthorized update server (CVSS 7.5, Electra Central AC unit)
- [CVE-2023-25010](https://cve.now/CVE-2023-25010.md): A malicious actor may convince a victim to open a malicious USD file that may trigger an uninitialized variable which may result in code exe (CVSS 7.8, Autodesk Maya USD Plugin)
- [CVE-2023-27705](https://cve.now/CVE-2023-27705.md): APNG\_Optimizer v1.4 was discovered to contain a buffer overflow via the component /apngopt/ubuntu.png. (CVSS 7.5)
- [CVE-2023-27733](https://cve.now/CVE-2023-27733.md): DedeCMS v5.7.106 was discovered to contain a SQL injection vulnerability via the component /dede/sys\_sql\_query.php. (CVSS 7.2)
- [CVE-2023-27755](https://cve.now/CVE-2023-27755.md): go-bbs v1 was discovered to contain an arbitrary file download vulnerability via the component /api/v1/download. (CVSS 8.8)
- [CVE-2023-27844](https://cve.now/CVE-2023-27844.md): SQL injection vulnerability found in PrestaShopleurlrewrite v.1.0 and before allow a remote attacker to gain privileges via the Dispatcher:: (CVSS 9.8)
- [CVE-2023-27906](https://cve.now/CVE-2023-27906.md): A malicious actor may convince a victim to open a malicious USD file that may trigger an out-of-bounds read vulnerability which may result i (CVSS 7.8, Autodesk Maya USD Plugin)
- [CVE-2023-27907](https://cve.now/CVE-2023-27907.md): A malicious actor may convince a victim to open a malicious USD file that may trigger an out-of-bounds write vulnerability which may result (CVSS 7.8, Autodesk Maya USD Plugin)
- [CVE-2023-27909](https://cve.now/CVE-2023-27909.md): An Out-Of-Bounds Write Vulnerability in Autodesk® FBX® SDK version 2020 or prior may lead to code execution through maliciously crafted FBX (CVSS 7.8, Autodesk FBX SDK)
- [CVE-2023-27910](https://cve.now/CVE-2023-27910.md): A user may be tricked into opening a malicious FBX file that may exploit a stack buffer overflow vulnerability in Autodesk® FBX® SDK 2020 or (CVSS 7.8, Autodesk FBX SDK)
- [CVE-2023-27911](https://cve.now/CVE-2023-27911.md): A user may be tricked into opening a malicious FBX file that may exploit a heap buffer overflow vulnerability in Autodesk® FBX® SDK 2020 or (CVSS 7.8, Autodesk FBX SDK)
- [CVE-2023-28959](https://cve.now/CVE-2023-28959.md): Junos OS: QFX10002: PFE wedges and restarts upon receipt of specific malformed packets (CVSS 6.5, Juniper Networks Junos OS)
- [CVE-2023-28960](https://cve.now/CVE-2023-28960.md): Junos OS Evolved: Docker repository is world-writeable, allowing low-privileged local user to inject files into Docker containers (CVSS 8.2, Juniper Networks Junos OS Evolved)
- [CVE-2023-28961](https://cve.now/CVE-2023-28961.md): Junos OS: ACX Series: IPv6 firewall filter is not installed in PFE when "from next-header ah" is used (CVSS 5.8, Juniper Networks Junos OS)
- [CVE-2023-28962](https://cve.now/CVE-2023-28962.md): Junos OS: Unauthenticated access vulnerability in J-Web (CVSS 5.3, Juniper Networks Junos OS)
- [CVE-2023-28963](https://cve.now/CVE-2023-28963.md): Junos OS: User-controlled input vulnerability in J-Web (CVSS 5.3, Juniper Networks Junos OS)
- [CVE-2023-28964](https://cve.now/CVE-2023-28964.md): Junos OS and Junos OS Evolved: Malformed BGP flowspec update causes RPD crash (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2023-28965](https://cve.now/CVE-2023-28965.md): Junos OS: QFX10002: Failure of storm control feature may lead to Denial of Service (CVSS 6.5, Juniper Networks Junos OS)
- [CVE-2023-28966](https://cve.now/CVE-2023-28966.md): Junos OS Evolved: Local low-privileged user with shell access can execute CLI commands as root (CVSS 7.8, Juniper Networks Junos OS Evolved)
- [CVE-2023-28967](https://cve.now/CVE-2023-28967.md): Junos OS and Junos OS Evolved: An attacker sending genuine BGP packets causes an RPD crash (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2023-28968](https://cve.now/CVE-2023-28968.md): Junos OS: SRX Series: Policies that rely on JDPI-Decoder actions may fail open (CVSS 5.3, Juniper Networks Junos OS · Juniper Networks AppID Servi… +1)
- [CVE-2023-28970](https://cve.now/CVE-2023-28970.md): Junos OS: JRR200: Kernel crash upon receipt of a specific packet (CVSS 6.5, Juniper Networks Junos OS)
- [CVE-2023-28971](https://cve.now/CVE-2023-28971.md): Paragon Active Assurance: Enabling the timescaledb enables IP forwarding (CVSS 7.2, Juniper Networks Paragon Active Assurance)
- [CVE-2023-28972](https://cve.now/CVE-2023-28972.md): Junos OS: NFX Series: 'set system ports console insecure' allows root password recovery (CVSS 6.8, Juniper Networks Junos OS)
- [CVE-2023-28973](https://cve.now/CVE-2023-28973.md): Junos OS Evolved: The 'sysmanctl' shell command allows a local user to gain access to some administrative actions (CVSS 7.1, Juniper Networks Junos OS Evolved)
- [CVE-2023-28974](https://cve.now/CVE-2023-28974.md): Junos OS: MX Series: In a BBE scenario upon receipt of specific malformed packets from subscribers the process bbe-smgd will crash (CVSS 7.4, Juniper Networks Junos OS)
- [CVE-2023-28975](https://cve.now/CVE-2023-28975.md): Junos OS: The kernel will crash when certain USB devices are inserted (CVSS 4.6, Juniper Networks Junos OS)
- [CVE-2023-28976](https://cve.now/CVE-2023-28976.md): Junos OS: MX Series: If a specific traffic rate goes above the DDoS threshold it will lead to an FPC crash (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2023-28978](https://cve.now/CVE-2023-28978.md): Junos OS Evolved: Read access to some confidential user information is possible (CVSS 5.3, Juniper Networks Junos OS Evolved)
- [CVE-2023-28979](https://cve.now/CVE-2023-28979.md): Junos OS: In a 6PE scenario upon receipt of a specific IPv6 packet an integrity check fails (CVSS 4.7, Juniper Networks Junos OS)
- [CVE-2023-28980](https://cve.now/CVE-2023-28980.md): Junos OS and Junos OS Evolved: In a BGP rib sharding scenario an rpd crash will happen shortly after a specific CLI command is issued (CVSS 5.5, Juniper Networks Junos OS)
- [CVE-2023-28981](https://cve.now/CVE-2023-28981.md): Junos OS and Junos OS Evolved: If malformed IPv6 router advertisements are received, memory corruption will occur which causes an rpd crash (CVSS 6.5, Juniper Networks Junos OS)
- [CVE-2023-28982](https://cve.now/CVE-2023-28982.md): Junos OS and Junos OS Evolved: In a BGP rib sharding scenario when a route is frequently updated an rpd memory leak will occur (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2023-28983](https://cve.now/CVE-2023-28983.md): Junos OS Evolved: Shell Injection vulnerability in the gNOI server (CVSS 8.8, Juniper Networks Junos OS Evolved)
- [CVE-2023-28984](https://cve.now/CVE-2023-28984.md): Junos OS: QFX Series: The PFE may crash when a lot of MAC addresses are being learned and aged (CVSS 5.3, Juniper Networks Junos OS)
- [CVE-2023-29665](https://cve.now/CVE-2023-29665.md): D-Link DIR823G\_V1.0.2B05 was discovered to contain a stack overflow via the NewPassword parameters in SetPasswdSettings. (CVSS 9.8)
- [CVE-2023-30769](https://cve.now/CVE-2023-30769.md): Rab13s Exploit (CVSS 9.1, Dogecoin Node)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-04-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.