# CVEs published 2023-05-02

80 CVEs were published on May 2, 2023: 8 critical, 27 high. Days are UTC.

- [CVE-2023-2468](https://cve.now/CVE-2023-2468.md): Inappropriate implementation in PictureInPicture in Google Chrome prior to 113.0.5672.63 allowed a remote attacker who had compromised the r (no CVSS, Google Chrome)
- [CVE-2023-2467](https://cve.now/CVE-2023-2467.md): Inappropriate implementation in Prompts in Google Chrome on Android prior to 113.0.5672.63 allowed a remote attacker to bypass permissions r (no CVSS, Google Chrome)
- [CVE-2023-2466](https://cve.now/CVE-2023-2466.md): Inappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to spoof the contents of the secur (no CVSS, Google Chrome)
- [CVE-2023-2465](https://cve.now/CVE-2023-2465.md): Inappropriate implementation in CORS in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to leak cross-origin data via a craft (no CVSS, Google Chrome)
- [CVE-2023-2464](https://cve.now/CVE-2023-2464.md): Inappropriate implementation in PictureInPicture in Google Chrome prior to 113.0.5672.63 allowed an attacker who convinced a user to install (no CVSS, Google Chrome)
- [CVE-2023-2463](https://cve.now/CVE-2023-2463.md): Inappropriate implementation in Full Screen Mode in Google Chrome on Android prior to 113.0.5672.63 allowed a remote attacker to hide the co (no CVSS, Google Chrome)
- [CVE-2023-2462](https://cve.now/CVE-2023-2462.md): Inappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to obfuscate main origin data via (no CVSS, Google Chrome)
- [CVE-2023-2461](https://cve.now/CVE-2023-2461.md): Use after free in OS Inputs in Google Chrome on ChromeOS prior to 113.0.5672.63 allowed a remote attacker who convinced a user to enage in s (CVSS 8.8, Google Chrome)
- [CVE-2023-2460](https://cve.now/CVE-2023-2460.md): Insufficient validation of untrusted input in Extensions in Google Chrome prior to 113.0.5672.63 allowed an attacker who convinced a user to (no CVSS, Google Chrome)
- [CVE-2023-2459](https://cve.now/CVE-2023-2459.md): Inappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to bypass permission restrictions (no CVSS, Google Chrome)
- [CVE-2023-26268](https://cve.now/CVE-2023-26268.md): Apache CouchDB, IBM Cloudant: Information sharing via couchjs processes (CVSS 4.4, Apache Software Foundation Apache CouchDB · Apache Software…)
- [CVE-2023-30861](https://cve.now/CVE-2023-30861.md): Flask vulnerable to possible disclosure of permanent session cookie due to missing Vary: Cookie header (CVSS 7.5, pallets flask · flask)
- [CVE-2023-2477](https://cve.now/CVE-2023-2477.md): Funadmin Cx.php tagLoad cross site scripting (CVSS 3.5, Funadmin)
- [CVE-2023-2476](https://cve.now/CVE-2023-2476.md): Dromara J2eeFAST Announcement cross site scripting (CVSS 3.5, Dromara J2eeFAST)
- [CVE-2023-2445](https://cve.now/CVE-2023-2445.md): Improper access control in Subscriptions Folder path filter in Devolutions Server 2023.1.1 and earlier allows attackers with administrator p (CVSS 4.9, Devolutions Server)
- [CVE-2023-2475](https://cve.now/CVE-2023-2475.md): Dromara J2eeFAST System Message cross site scripting (CVSS 3.5, Dromara J2eeFAST)
- [CVE-2023-2474](https://cve.now/CVE-2023-2474.md): Rebuild cross-site request forgery (CVSS 4.3, Rebuild)
- [CVE-2023-2473](https://cve.now/CVE-2023-2473.md): Dreamer CMS Password Hash Calculation UserController.java updatePwd algorithmic complexity (CVSS 4.3, Dreamer CMS)
- [CVE-2023-23723](https://cve.now/CVE-2023-23723.md): WordPress WordPress Email Marketing Plugin – WP Email Capture Plugin \<= 3.9.3 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Winwar Media WP Email Capture)
- [CVE-2023-30869](https://cve.now/CVE-2023-30869.md): WordPress Easy Digital Downloads Plugin 3.1-3.1.1.4.1 is vulnerable to Privilege Escalation (CVSS 9.8, Easy Digital Downloads)
- [CVE-2023-2000](https://cve.now/CVE-2023-2000.md): Unrestricted navigation due to unvalidated mattermost server redirection (CVSS 5.4, Mattermost)
- [CVE-2023-31207](https://cve.now/CVE-2023-31207.md): Automation user secret logged to Apache access log (CVSS 4.4, Tribe29 Checkmk)
- [CVE-2023-1196](https://cve.now/CVE-2023-1196.md): Advanced Custom Fields - Contributor+ PHP Object Injection (CVSS 8.8, Advanced Custom Fields)
- [CVE-2023-32007](https://cve.now/CVE-2023-32007.md): Apache Spark: Shell command injection via Spark UI (CVSS 8.8, Apache Software Foundation Apache Spark · pyspark +1)
- [CVE-2022-40504](https://cve.now/CVE-2022-40504.md): Reachable assertion in Modem (CVSS 7.5, Qualcomm Snapdragon)
- [CVE-2022-33273](https://cve.now/CVE-2022-33273.md): Buffer over-read in Trusted Execution Environment (CVSS 7.3, Qualcomm Snapdragon)
- [CVE-2023-1730](https://cve.now/CVE-2023-1730.md): SupportCandy \< 3.1.5 - Unauthenticated SQLi (CVSS 9.8, SupportCandy)
- [CVE-2023-1546](https://cve.now/CVE-2023-1546.md): MyCryptoCheckout \< 2.124 - Reflected XSS (CVSS 6.1, MyCryptoCheckout)
- [CVE-2023-1911](https://cve.now/CVE-2023-1911.md): Blocksy Companion \< 1.8.82 - Subscriber+ Draft Post Access (CVSS 4.3, Blocksy Companion)
- [CVE-2023-1090](https://cve.now/CVE-2023-1090.md): WP SMTP Mailing Queue \< 2.0.1 - Admin+ Stored XSS (CVSS 4.8, SMTP Mailing Queue)
- [CVE-2023-1614](https://cve.now/CVE-2023-1614.md): WP Custom Author URL \< 1.0.5 - Admin+ Stored XSS (CVSS 4.8, WP Custom Author URL)
- [CVE-2023-1804](https://cve.now/CVE-2023-1804.md): Product Catalog Feed by PixelYourSite \< 2.1.1 - Reflected XSS (CVSS 6.1, Product Catalog Feed by PixelYourSite)
- [CVE-2023-0891](https://cve.now/CVE-2023-0891.md): Stagtools \< 2.3.7 - Contributor+ Stored XSS (CVSS 5.4, StagTools)
- [CVE-2023-1669](https://cve.now/CVE-2023-1669.md): SEOPress \< 6.5.0.3 - Admin+ PHP Object Injection (CVSS 7.2, SEOPress)
- [CVE-2023-1805](https://cve.now/CVE-2023-1805.md): Product Catalog Feed by PixelYourSite \< 2.1.1 - Reflected XSS (CVSS 6.1, Product Catalog Feed by PixelYourSite)
- [CVE-2023-1809](https://cve.now/CVE-2023-1809.md): Download Manager Pro \< 6.3.0 - Unauthenticated Sensitive Information Disclosure (CVSS 7.5, Download Manager)
- [CVE-2023-1125](https://cve.now/CVE-2023-1125.md): Ruby Help Desk \< 1.3.4 - Subscriber+ Ticket Update via IDOR (CVSS 6.5, Ruby Help Desk)
- [CVE-2023-1021](https://cve.now/CVE-2023-1021.md): Amr Ical Events Lists \<= 6.6 - Admin+ Stored XSS (CVSS 4.8, amr ical events lists)
- [CVE-2023-1554](https://cve.now/CVE-2023-1554.md): Quick Paypal Payments \< 5.7.26.4 - Admin+ Stored XSS (CVSS 4.8, Quick Paypal Payments)
- [CVE-2023-1861](https://cve.now/CVE-2023-1861.md): Limit Login Attempts \< 1.7.2 - Subscriber+ Stored XSS (CVSS 5.4, Limit Login Attempts)
- [CVE-2023-1525](https://cve.now/CVE-2023-1525.md): Site Reviews \< 6.7.1 - Admin+ Stored XSS (CVSS 4.8, Site Reviews)
- [CVE-2023-0924](https://cve.now/CVE-2023-0924.md): Zyrex Popup \<= 1.0 - Admin+ Arbitrary File Upload (CVSS 7.2, ZYREX POPUP)
- [CVE-2023-21666](https://cve.now/CVE-2023-21666.md): Improper Release of Memory Before Removing Last Reference (\`Memory Leak\`) in Graphics (CVSS 8.4, Qualcomm Snapdragon)
- [CVE-2023-21665](https://cve.now/CVE-2023-21665.md): Incorrect Type Conversion or Cast in Graphics (CVSS 8.4, Qualcomm Snapdragon)
- [CVE-2023-21642](https://cve.now/CVE-2023-21642.md): Improper Access Control in HAB Memory Management (CVSS 8.4, Qualcomm Snapdragon)
- [CVE-2022-40508](https://cve.now/CVE-2022-40508.md): Reachable assertion in Modem (CVSS 7.5, Qualcomm Snapdragon)
- [CVE-2022-40505](https://cve.now/CVE-2022-40505.md): Buffer over-read in Modem (CVSS 8.2, Qualcomm Snapdragon)
- [CVE-2022-34144](https://cve.now/CVE-2022-34144.md): Reachable assertion in Modem (CVSS 7.5, Qualcomm Snapdragon)
- [CVE-2022-33305](https://cve.now/CVE-2022-33305.md): Null pointer dereference in Modem (CVSS 7.5, Qualcomm Snapdragon)
- [CVE-2022-33304](https://cve.now/CVE-2022-33304.md): NULL pointers dereference in Modem (CVSS 7.5, Qualcomm Snapdragon)
- [CVE-2022-33292](https://cve.now/CVE-2022-33292.md): Use after free in Qualcomm IPC (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2022-33281](https://cve.now/CVE-2022-33281.md): Improper validation of array index in computer vision. (CVSS 6.7, Qualcomm Snapdragon)
- [CVE-2022-25713](https://cve.now/CVE-2022-25713.md): Improper Restriction of Operations within the Bounds of a Memory Buffer in Automotive (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2014-125100](https://cve.now/CVE-2014-125100.md): BestWebSoft Job Board Plugin cross site scripting (CVSS 3.5, BestWebSoft Job Board Plugin)
- [CVE-2013-10026](https://cve.now/CVE-2013-10026.md): Mail Subscribe List Plugin index.php cross site scripting (CVSS 3.5, Mail Subscribe List Plugin)
- [CVE-2022-30759](https://cve.now/CVE-2022-30759.md): In Nokia One-NDS (aka Network Directory Server) through 20.9, some Sudo permissions can be exploited by some users to escalate to root privi (CVSS 8.8)
- [CVE-2022-47874](https://cve.now/CVE-2022-47874.md): Improper Access Control in /tc/rpc in Jedox GmbH Jedox 2020.2.5 allows remote authenticated users to view details of database connections vi (CVSS 6.5)
- [CVE-2022-47875](https://cve.now/CVE-2022-47875.md): A Directory Traversal vulnerability in /be/erpc.php in Jedox GmbH Jedox 2020.2.5 allows remote authenticated users to execute arbitrary code (CVSS 8.8)
- [CVE-2022-47876](https://cve.now/CVE-2022-47876.md): The integrator in Jedox GmbH Jedox 2020.2.5 allows remote authenticated users to create Jobs to execute arbitrary code via Groovy-scripts. (CVSS 9.1)
- [CVE-2022-47877](https://cve.now/CVE-2022-47877.md): A Stored cross-site scripting vulnerability in Jedox 2020.2.5 allows remote, authenticated users to inject arbitrary web script or HTML in t (CVSS 9.6)
- [CVE-2022-47878](https://cve.now/CVE-2022-47878.md): Incorrect input validation for the default-storage-path in the settings page in Jedox 2020.2.5 allows remote, authenticated users to specify (CVSS 9.1)
- [CVE-2022-48482](https://cve.now/CVE-2022-48482.md): 3CX before 18 Update 2 Security Hotfix build 18.0.2.315 on Windows allows unauthenticated remote attackers to read certain files via /Electr (CVSS 7.5)
- [CVE-2022-48483](https://cve.now/CVE-2022-48483.md): 3CX before 18 Hotfix 1 build 18.0.3.461 on Windows allows unauthenticated remote attackers to read %WINDIR%\\system32 files via /Electron/dow (CVSS 7.5)
- [CVE-2023-2247](https://cve.now/CVE-2023-2247.md): In affected versions of Octopus Deploy it is possible to unmask variable secrets using the variable preview function (no CVSS, Octopus Deploy Octopus Server)
- [CVE-2023-2479](https://cve.now/CVE-2023-2479.md): OS Command Injection in appium/appium-desktop (CVSS 9.8, appium/appium-desktop · appium-desktop)
- [CVE-2023-26089](https://cve.now/CVE-2023-26089.md): European Chemicals Agency IUCLID 6.x before 6.27.6 allows authentication bypass because a weak hard-coded secret is used for JWT signing. (CVSS 9.8)
- [CVE-2023-26546](https://cve.now/CVE-2023-26546.md): European Chemicals Agency IUCLID before 6.27.6 allows remote authenticated users to execute arbitrary code via Server Side Template Injectio (CVSS 8.8)
- [CVE-2023-27892](https://cve.now/CVE-2023-27892.md): Insufficient length checks in the ShapeShift KeepKey hardware wallet firmware before 7.7.0 allow a global buffer overflow via crafted messag (CVSS 3.8)
- [CVE-2023-29772](https://cve.now/CVE-2023-29772.md): A Cross-site scripting (XSS) vulnerability in the System Log/General Log page of the administrator web UI in ASUS RT-AC51U wireless router f (CVSS 5.2)
- [CVE-2023-29778](https://cve.now/CVE-2023-29778.md): GL.iNET MT3000 4.1.0 Release 2 is vulnerable to OS Command Injection via /usr/lib/oui-httpd/rpc/logread. (CVSS 9.8)
- [CVE-2023-29856](https://cve.now/CVE-2023-29856.md): D-Link DIR-868L Hardware version A1, firmware version 1.12 is vulnerable to Buffer Overflow. (no CVSS)
- [CVE-2023-29867](https://cve.now/CVE-2023-29867.md): Zammad 5.3.x (Fixed 5.4.0) is vulnerable to Incorrect Access Control. (CVSS 6.5)
- [CVE-2023-29868](https://cve.now/CVE-2023-29868.md): Zammad 5.3.x (Fixed in 5.4.0) is vulnerable to Incorrect Access Control. (CVSS 6.5)
- [CVE-2023-29918](https://cve.now/CVE-2023-29918.md): RosarioSIS 10.8.4 is vulnerable to CSV injection via the Periods Module. (CVSS 5.4, francoisjacquet/rosariosis)
- [CVE-2023-30403](https://cve.now/CVE-2023-30403.md): An issue in the time-based authentication mechanism of Aigital Aigital Wireless-N Repeater Mini\_Router v0.131229 allows attackers to bypass (CVSS 7.5)
- [CVE-2023-30943](https://cve.now/CVE-2023-30943.md): Moodle: tinymce loaders susceptible to arbitrary folder creation (CVSS 6.5, moodle · moodle/moodle)
- [CVE-2023-30944](https://cve.now/CVE-2023-30944.md): Moodle: minor sql injection risk in external wiki method for listing pages (CVSS 5.6, moodle · moodle/moodle)
- [CVE-2023-31433](https://cve.now/CVE-2023-31433.md): A SQL injection issue in Logbuch in evasys before 8.2 Build 2286 and 9.x before 9.0 Build 2401 allows authenticated attackers to execute SQL (CVSS 8.8)
- [CVE-2023-31434](https://cve.now/CVE-2023-31434.md): The parameters nutzer\_titel, nutzer\_vn, and nutzer\_nn in the user profile, and langID and ONLINEID in direct links, in evasys before 8.2 Bui (CVSS 5.4)
- [CVE-2023-31435](https://cve.now/CVE-2023-31435.md): Multiple components (such as Onlinetemplate-Verwaltung, Liste aller Teilbereiche, Umfragen anzeigen, and questionnaire previews) in evasys b (CVSS 8.1)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-05-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.