# CVEs published 2023-05-04

87 CVEs were published on May 4, 2023: 11 critical, 24 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2023-1894](https://cve.now/CVE-2023-1894.md): A Regular Expression Denial of Service (ReDoS) issue was discovered in Puppet Server 7.9.2 certificate validation. (CVSS 5.3, Puppet Enterprise · Puppet Server)
- [CVE-2022-47434](https://cve.now/CVE-2022-47434.md): WordPress PB SEO Friendly Images Plugin \<= 4.0.5 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, PB SEO Friendly Images)
- [CVE-2022-47449](https://cve.now/CVE-2022-47449.md): WordPress Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD Plugin \<= 3.1.5 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, RexTheme Cart Lift – Abandoned Cart Recovery for WooCommerc…)
- [CVE-2023-25961](https://cve.now/CVE-2023-25961.md): WordPress Darcie Theme \<= 1.1.5 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Catch Themes Darcie)
- [CVE-2023-25982](https://cve.now/CVE-2023-25982.md): WordPress Simple YouTube Responsive Plugin \<= 2.5 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Eirudo Simple YouTube Responsive)
- [CVE-2023-25977](https://cve.now/CVE-2023-25977.md): WordPress CPT – Speakers Plugin \<= 1.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, 9seeds.com CPT – Speakers)
- [CVE-2023-25458](https://cve.now/CVE-2023-25458.md): WordPress TypeSquare Webfonts for ConoHa Plugin \<= 2.0.3 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, GMO Internet Group TypeSquare Webfonts for ConoHa)
- [CVE-2023-2524](https://cve.now/CVE-2023-2524.md): Control iD RHiD direct request (CVSS 6.3, Control iD RHiD)
- [CVE-2023-2523](https://cve.now/CVE-2023-2523.md): Weaver E-Office unrestricted upload (CVSS 7.3, Weaver E-Office)
- [CVE-2023-2522](https://cve.now/CVE-2023-2522.md): Chengdu VEC40G Network Detection os command injection (CVSS 4.7, Chengdu VEC40G)
- [CVE-2023-30550](https://cve.now/CVE-2023-30550.md): IDOR vulnerability exists in metersphere (CVSS 6.8, metersphere)
- [CVE-2023-2521](https://cve.now/CVE-2023-2521.md): NEXTU NEXT-7004N POST Request formFilter cross site scripting (CVSS 3.5, NEXTU NEXT-7004N)
- [CVE-2023-2520](https://cve.now/CVE-2023-2520.md): Caton Prime Ping command injection (CVSS 8.8, Caton Prime)
- [CVE-2023-2519](https://cve.now/CVE-2023-2519.md): Caton CTP Relay Server API login sql injection (CVSS 7.3, Caton CTP Relay Server)
- [CVE-2023-24958](https://cve.now/CVE-2023-24958.md): IBM TS7700 Management Interface command injection (CVSS 8.8, IBM Virtualization Engine TS7700)
- [CVE-2023-30619](https://cve.now/CVE-2023-30619.md): XSS in the tooltip via an artifact title (CVSS 5.4, Enalean tuleap)
- [CVE-2023-23470](https://cve.now/CVE-2023-23470.md): IBM i privilege escalation (CVSS 6.4, IBM i)
- [CVE-2023-26010](https://cve.now/CVE-2023-26010.md): WordPress WPMobile.App Plugin \<= 11.18 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, WPMobile.App)
- [CVE-2023-26012](https://cve.now/CVE-2023-26012.md): WordPress Custom Login Page Plugin \<= 2.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Denzel Chia | Phire Design Custom Login Page)
- [CVE-2023-26016](https://cve.now/CVE-2023-26016.md): WordPress Simple Portfolio Gallery Plugin \<= 0.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Tauhidul Alam Simple Portfolio Gallery)
- [CVE-2022-45818](https://cve.now/CVE-2022-45818.md): WordPress Hero Banner Ultimate Plugin \<= 1.3.4 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, WP OnlineSupport, Essential Plugin Hero Banner Ultimate)
- [CVE-2023-25962](https://cve.now/CVE-2023-25962.md): WordPress Accordions Plugin \<= 2.3.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Biplob Adhikari Accordion – Multiple Accordion or FAQs Buil…)
- [CVE-2022-4259](https://cve.now/CVE-2022-4259.md): Authenticated SQL Injection on Alerts in Guardian/CMC before 22.5.2 (CVSS 8.8, Nozomi Networks CMC · Nozomi Networks Guardian)
- [CVE-2017-20184](https://cve.now/CVE-2017-20184.md): Carlo Gavazzi Powersoft prone to Path Traversal (CVSS 7.5, Carlo Gavazzi Powersoft)
- [CVE-2023-22651](https://cve.now/CVE-2023-22651.md): Improper Privilege Management vulnerability in SUSE Rancher allows Privilege Escalation. (CVSS 9.9, SUSE Rancher · github.com/rancher/rancher)
- [CVE-2023-25934](https://cve.now/CVE-2023-25934.md): DELL ECS prior to 3.8.0.2 contains an improper verification of cryptographic signature vulnerability. (CVSS 5.9, Dell ECS)
- [CVE-2023-26125](https://cve.now/CVE-2023-26125.md): Versions of the package github.com/gin-gonic/gin before 1.9.0 are vulnerable to Improper Input Validation by allowing an attacker to use a s (CVSS 5.6, github.com/gin-gonic/gin)
- [CVE-2022-47757](https://cve.now/CVE-2022-47757.md): In imo.im 2022.11.1051, a path traversal vulnerability delivered via an unsanitized deeplink can force the application to write a file into (no CVSS)
- [CVE-2023-20126](https://cve.now/CVE-2023-20126.md): Cisco SPA112 2-Port Phone Adapters Remote Command Execution Vulnerability (CVSS 9.8, Cisco Small Business IP Phones)
- [CVE-2023-21484](https://cve.now/CVE-2023-21484.md): Improper access control vulnerability in AppLock prior to SMR May-2023 Release 1 allows local attackers without proper permission to execute (CVSS 5.1, Samsung Mobile Devices)
- [CVE-2023-21485](https://cve.now/CVE-2023-21485.md): Improper export of android application components vulnerability in VideoPreviewActivity in Call Settings to SMR May-2023 Release 1 allows ph (CVSS 5.3, Samsung Mobile Devices)
- [CVE-2023-21486](https://cve.now/CVE-2023-21486.md): Improper export of android application components vulnerability in ImagePreviewActivity in Call Settings to SMR May-2023 Release 1 allows ph (CVSS 5.3, Samsung Mobile Devices)
- [CVE-2023-21487](https://cve.now/CVE-2023-21487.md): Improper access control vulnerability in Telephony framework prior to SMR May-2023 Release 1 allows local attackers to change a call setting (CVSS 5.1, Samsung Mobile Devices)
- [CVE-2023-21488](https://cve.now/CVE-2023-21488.md): Improper access control vulnerablility in Tips prior to SMR May-2023 Release 1 allows local attackers to launch arbitrary activity in Tips. (CVSS 4.4, Samsung Mobile Devices)
- [CVE-2023-21489](https://cve.now/CVE-2023-21489.md): Heap out-of-bounds write vulnerability in bootloader prior to SMR May-2023 Release 1 allows a physical attacker to execute arbitrary code. (CVSS 7.1, Samsung Mobile Devices)
- [CVE-2023-21490](https://cve.now/CVE-2023-21490.md): Improper access control in GearManagerStub prior to SMR May-2023 Release 1 allows a local attacker to delete applications installed by watch (CVSS 4.7, Samsung Mobile Devices)
- [CVE-2023-21491](https://cve.now/CVE-2023-21491.md): Improper access control vulnerability in ThemeManager prior to SMR May-2023 Release 1 allows local attackers to write arbitrary files with s (CVSS 8.5, Samsung Mobile Devices)
- [CVE-2023-21492](https://cve.now/CVE-2023-21492.md): Kernel pointers are printed in the log file prior to SMR May-2023 Release 1 allows a privileged local attacker to bypass ASLR. (CVSS 4.4, KEV, Samsung Mobile Devices)
- [CVE-2023-21493](https://cve.now/CVE-2023-21493.md): Improper access control vulnerability in SemShareFileProvider prior to SMR May-2023 Release 1 allows local attackers to access protected dat (CVSS 6.8, Samsung Mobile Devices)
- [CVE-2023-21494](https://cve.now/CVE-2023-21494.md): Potential buffer overflow vulnerability in auth api in mm\_Authentication.c in Shannon baseband prior to SMR May-2023 Release 1 allows remote (CVSS 5.6, Samsung Mobile Devices)
- [CVE-2023-21495](https://cve.now/CVE-2023-21495.md): Improper access control vulnerability in Knox Enrollment Service prior to SMR May-2023 Release 1 allow attacker install KSP app when device (CVSS 4.0, Samsung Mobile Devices)
- [CVE-2023-21496](https://cve.now/CVE-2023-21496.md): Active Debug Code vulnerability in ActivityManagerService prior to SMR May-2023 Release 1 allows attacker to use debug function via setting (CVSS 6.1, Samsung Mobile Devices)
- [CVE-2023-21497](https://cve.now/CVE-2023-21497.md): Use of externally-controlled format string vulnerability in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local attackers to acce (CVSS 4.4, Samsung Mobile Devices)
- [CVE-2023-21498](https://cve.now/CVE-2023-21498.md): Improper input validation vulnerability in setPartnerTAInfo in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local attackers to o (CVSS 6.0, Samsung Mobile Devices)
- [CVE-2023-21499](https://cve.now/CVE-2023-21499.md): Out-of-bounds write vulnerability in TA\_Communication\_mpos\_encrypt\_pin in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local att (CVSS 8.2, Samsung Mobile Devices)
- [CVE-2023-21500](https://cve.now/CVE-2023-21500.md): Double free validation vulnerability in setPinPadImages in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local attackers to acces (CVSS 6.0, Samsung Mobile Devices)
- [CVE-2023-21501](https://cve.now/CVE-2023-21501.md): Improper input validation vulnerability in mPOS fiserve trustlet prior to SMR May-2023 Release 1 allows local attackers to execute arbitrary (CVSS 8.2, Samsung Mobile Devices)
- [CVE-2023-21502](https://cve.now/CVE-2023-21502.md): Improper input validation vulnerability in FactoryTest application prior to SMR May-2023 Release 1 allows local attackers to get privilege e (CVSS 5.7, Samsung Mobile Devices)
- [CVE-2023-21503](https://cve.now/CVE-2023-21503.md): Potential buffer overflow vulnerability in mm\_LteInterRatManagement.c in Shannon baseband prior to SMR May-2023 Release 1 allows remote atta (CVSS 5.6, Samsung Mobile Devices)
- [CVE-2023-21504](https://cve.now/CVE-2023-21504.md): Potential buffer overflow vulnerability in mm\_Plmncoordination.c in Shannon baseband prior to SMR May-2023 Release 1 allows remote attackers (CVSS 5.6, Samsung Mobile Devices)
- [CVE-2023-21505](https://cve.now/CVE-2023-21505.md): Improper access control in Samsung Core Service prior to version 2.1.00.36 allows attacker to write arbitrary file in sandbox. (CVSS 4.0, Samsung Mobile Samsung Core Service)
- [CVE-2023-21506](https://cve.now/CVE-2023-21506.md): Out-of-bounds Write vulnerability while processing BC\_TUI\_CMD\_SEND\_RESOURCE\_DATA\_ARRAY command in bc\_tui trustlet from Samsung Blockchain Ke (CVSS 6.7, Samsung Mobile Samsung Blockchain Keystore)
- [CVE-2023-21507](https://cve.now/CVE-2023-21507.md): Out-of-bounds Read vulnerability while processing BC\_TUI\_CMD\_SEND\_RESOURCE\_DATA\_ARRAY command in bc\_tui trustlet from Samsung Blockchain Key (CVSS 4.4, Samsung Mobile Samsung Blockchain Keystore)
- [CVE-2023-21508](https://cve.now/CVE-2023-21508.md): Out-of-bounds Write vulnerability while processing BC\_TUI\_CMD\_SEND\_RESOURCE\_DATA command in bc\_tui trustlet from Samsung Blockchain Keystore (CVSS 6.7, Samsung Mobile Samsung Blockchain Keystore)
- [CVE-2023-21509](https://cve.now/CVE-2023-21509.md): Out-of-bounds Write vulnerability while processing BC\_TUI\_CMD\_UPDATE\_SCREEN in bc\_tui trustlet from Samsung Blockchain Keystore prior to ver (CVSS 6.7, Samsung Mobile Samsung Blockchain Keystore)
- [CVE-2023-21510](https://cve.now/CVE-2023-21510.md): Out-of-bounds Read vulnerability while processing BC\_TUI\_CMD\_UPDATE\_SCREEN in bc\_tui trustlet from Samsung Blockchain Keystore prior to vers (CVSS 4.4, Samsung Mobile Samsung Blockchain Keystore)
- [CVE-2023-21511](https://cve.now/CVE-2023-21511.md): Out-of-bounds Read vulnerability while processing CMD\_COLDWALLET\_BTC\_SET\_PRV\_UTXO in bc\_core trustlet from Samsung Blockchain Keystore prior (CVSS 4.4, Samsung Mobile Samsung Blockchain Keystore)
- [CVE-2023-23059](https://cve.now/CVE-2023-23059.md): An issue was discovered in GeoVision GV-Edge Recording Manager 2.2.3.0 for windows, which contains improper permissions within the default i (CVSS 9.8)
- [CVE-2023-25289](https://cve.now/CVE-2023-25289.md): Directory Traversal vulnerability in virtualreception Digital Receptie version win7sp1\_rtm.101119-1850 6.1.7601.1.0.65792 in embedded web se (CVSS 7.5)
- [CVE-2023-25438](https://cve.now/CVE-2023-25438.md): An issue was discovered in Genomedics MilleGP5 5.9.2, allows remote attackers to execute arbitrary code and gain escalated privileges via mo (CVSS 7.8)
- [CVE-2023-27075](https://cve.now/CVE-2023-27075.md): A cross-site scripting vulnerability (XSS) in the component microbin/src/pasta.rs of Microbin v1.2.0 allows attackers to execute arbitrary w (CVSS 5.4, microbin)
- [CVE-2023-27568](https://cve.now/CVE-2023-27568.md): SQL injection vulnerability inSpryker Commerce OS 0.9 that allows for access to sensitive data via customer/order?orderSearchForm\[searchText (CVSS 8.8)
- [CVE-2023-29827](https://cve.now/CVE-2023-29827.md): ejs v3.1.9 is vulnerable to server-side template injection. (CVSS 9.8)
- [CVE-2023-29842](https://cve.now/CVE-2023-29842.md): ChurchCRM 4.5.4 endpoint /EditEventTypes.php is vulnerable to Blind SQL Injection (Time-based) via the EN\_tyid POST parameter. (CVSS 8.8)
- [CVE-2023-29994](https://cve.now/CVE-2023-29994.md): In NanoMQ v0.15.0-0, Heap overflow occurs in read\_byte function of mqtt\_code.c. (CVSS 7.5)
- [CVE-2023-29995](https://cve.now/CVE-2023-29995.md): In NanoMQ v0.15.0-0, a Heap overflow occurs in copyn\_utf8\_str function of mqtt\_parser.c (CVSS 7.5)
- [CVE-2023-29996](https://cve.now/CVE-2023-29996.md): In NanoMQ v0.15.0-0, segment fault with Null Pointer Dereference occurs in the process of decoding subinfo\_decode and unsubinfo\_decode. (CVSS 7.5)
- [CVE-2023-30077](https://cve.now/CVE-2023-30077.md): Judging Management System v1.0 by oretnom23 was discovered to vulnerable to SQL injection via /php-jms/review\_result.php?mainevent\_id=, main (CVSS 9.8)
- [CVE-2023-30093](https://cve.now/CVE-2023-30093.md): A cross-site scripting (XSS) vulnerability in Open Networking Foundation ONOS from version v1.9.0 to v2.7.0 allows attackers to execute arbi (CVSS 6.1, org.onosproject:onos-archetypes)
- [CVE-2023-30094](https://cve.now/CVE-2023-30094.md): A stored cross-site scripting (XSS) vulnerability in TotalJS Flow v10 allows attackers to execute arbitrary web scripts or HTML via a crafte (CVSS 5.4, total4)
- [CVE-2023-30095](https://cve.now/CVE-2023-30095.md): A stored cross-site scripting (XSS) vulnerability in TotalJS messenger commit b6cf1c9 allows attackers to execute arbitrary web scripts or H (CVSS 5.4)
- [CVE-2023-30096](https://cve.now/CVE-2023-30096.md): A stored cross-site scripting (XSS) vulnerability in TotalJS messenger commit b6cf1c9 allows attackers to execute arbitrary web scripts or H (CVSS 5.4)
- [CVE-2023-30097](https://cve.now/CVE-2023-30097.md): A stored cross-site scripting (XSS) vulnerability in TotalJS messenger commit b6cf1c9 allows attackers to execute arbitrary web scripts or H (CVSS 5.4)
- [CVE-2023-30184](https://cve.now/CVE-2023-30184.md): A stored cross-site scripting (XSS) vulnerability in Typecho v1.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted (CVSS 5.4)
- [CVE-2023-30203](https://cve.now/CVE-2023-30203.md): Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the event\_id parameter at /php-jms/result\_sheet.p (CVSS 9.8)
- [CVE-2023-30216](https://cve.now/CVE-2023-30216.md): Insecure permissions in the updateUserInfo function of newbee-mall before commit 1f2c2dfy allows attackers to obtain user account informatio (CVSS 5.4)
- [CVE-2023-30264](https://cve.now/CVE-2023-30264.md): CLTPHP \<=6.0 is vulnerable to Unrestricted Upload of File with Dangerous Type via application/admin/controller/Template.php:update. (CVSS 9.8)
- [CVE-2023-30268](https://cve.now/CVE-2023-30268.md): CLTPHP \<=6.0 is vulnerable to Improper Input Validation. (CVSS 9.8)
- [CVE-2023-30282](https://cve.now/CVE-2023-30282.md): PrestaShop scexportcustomers \<= 3.6.1 is vulnerable to Incorrect Access Control. (CVSS 7.5)
- [CVE-2023-30328](https://cve.now/CVE-2023-30328.md): An issue in the helper tool of Mailbutler GmbH Shimo VPN Client for macOS v5.0.4 allows attackers to bypass authentication via PID re-use. (CVSS 9.8)
- [CVE-2023-30331](https://cve.now/CVE-2023-30331.md): An issue in the render function of beetl v3.15.0 allows attackers to execute server-side template injection (SSTI) via a crafted payload. (CVSS 9.8, com.ibeetl:beetl)
- [CVE-2023-30399](https://cve.now/CVE-2023-30399.md): Insecure permissions in the settings page of GARO Wallbox GLB/GTB/GTC before v189 allows attackers to redirect users to a crafted update pac (CVSS 8.1)
- [CVE-2023-31099](https://cve.now/CVE-2023-31099.md): Zoho ManageEngine OPManager through 126323 allows an authenticated user to achieve remote code execution via probe servers. (CVSS 8.8)
- [CVE-2023-31284](https://cve.now/CVE-2023-31284.md): illumos illumos-gate before 676abcb has a stack buffer overflow in /dev/net, leading to privilege escalation via a stat on a long file name (CVSS 7.8)
- [CVE-2023-31413](https://cve.now/CVE-2023-31413.md): Filebeat versions through 7.17.9 and 8.6.2 have a flaw in httpjson input that allows the http request Authorization or Proxy-Authorization h (CVSS 5.5, Elastic Filebeat)
- [CVE-2023-31414](https://cve.now/CVE-2023-31414.md): Kibana versions 8.0.0 through 8.7.0 contain an arbitrary code execution flaw. (CVSS 8.2, Elastic Kibana)
- [CVE-2023-31415](https://cve.now/CVE-2023-31415.md): Kibana version 8.7.0 contains an arbitrary code execution flaw. (CVSS 9.9, Elastic Kibana)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-05-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.