# CVEs published 2023-06-16

78 CVEs were published on June 16, 2023: 7 critical, 18 high. Days are UTC.

- [CVE-2023-34459](https://cve.now/CVE-2023-34459.md): OpenZeppelin Contracts's MerkleProof multiproofs may allow proving arbitrary leaves for specific trees (CVSS 5.3, openzeppelin-contracts · @openzeppelin/contracts +1)
- [CVE-2023-30905](https://cve.now/CVE-2023-30905.md): The MC990 X and UV300 RMC component has and inadequate default configuration that could be exploited to obtain enhanced privilege. (no CVSS, Hewlett Packard Enterprise (HPE) HPE MC990 X RMC firmware)
- [CVE-2023-30904](https://cve.now/CVE-2023-30904.md): A security vulnerability in HPE Insight Remote Support may result in the local disclosure of privileged LDAP information. (no CVSS, Hewlett Packard Enterprise (HPE) HPE Insight Remote Support)
- [CVE-2023-30903](https://cve.now/CVE-2023-30903.md): HP-UX could be exploited locally to create a Denial of Service (DoS) when any physical interface is configured with IPv6/inet6. (no CVSS, Hewlett Packard Enterprise (HPE) HP-UX)
- [CVE-2023-30625](https://cve.now/CVE-2023-30625.md): rudder-server vulnerable to SQL Injection (CVSS 8.8, rudderlabs rudder-server · github.com/rudderlabs/rudder-ser…)
- [CVE-2022-48469](https://cve.now/CVE-2022-48469.md): There is a traffic hijacking vulnerability in Huawei routers. (no CVSS, Huawei B535-232a)
- [CVE-2022-48473](https://cve.now/CVE-2022-48473.md): There is a misinterpretation of input vulnerability in Huawei Printer. (no CVSS, Huawei BiSheng-WNM)
- [CVE-2022-48471](https://cve.now/CVE-2022-48471.md): There is a misinterpretation of input vulnerability in Huawei Printer. (CVSS 7.5, Huawei BiSheng-WNM)
- [CVE-2022-48472](https://cve.now/CVE-2022-48472.md): A Huawei printer has a system command injection vulnerability. (CVSS 9.8, Huawei BiSheng-WNM)
- [CVE-2022-48330](https://cve.now/CVE-2022-48330.md): A Huawei sound box product has an out-of-bounds write vulnerability. (CVSS 8.0, Huawei FLMG-10)
- [CVE-2023-20885](https://cve.now/CVE-2023-20885.md): CF workflows leak credentials in system audit logs (CVSS 6.5, Cloud Foundry Notifications · Cloud Foundry SMB-volume r… +1)
- [CVE-2023-26537](https://cve.now/CVE-2023-26537.md): WordPress WP No External Links Plugin \<= 1.0.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, nicolly WP No External Links)
- [CVE-2023-25974](https://cve.now/CVE-2023-25974.md): WordPress wp2syslog Plugin \<= 1.0.5 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, psicosi448 wp2syslog)
- [CVE-2023-26527](https://cve.now/CVE-2023-26527.md): WordPress Debug Assistant Plugin \<= 1.4 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, WPIndeed Debug Assistant)
- [CVE-2023-27420](https://cve.now/CVE-2023-27420.md): WordPress Arya Multipurpose Theme \<= 1.0.5 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Everest Themes Arya Multipurpose)
- [CVE-2023-26515](https://cve.now/CVE-2023-26515.md): WordPress Simple Slug Translate Plugin \<= 2.7.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Ko Takagi Simple Slug Translate)
- [CVE-2023-33307](https://cve.now/CVE-2023-33307.md): A null pointer dereference in Fortinet FortiOS before 7.2.5 and before 7.0.11, FortiProxy before 7.2.3 and before 7.0.9 allows attacker to d (CVSS 6.4, Fortinet FortiOS · Fortinet FortiProxy)
- [CVE-2023-33306](https://cve.now/CVE-2023-33306.md): A null pointer dereference in Fortinet FortiOS before 7.2.5, before 7.0.11 and before 6.4.13, FortiProxy before 7.2.4 and before 7.0.10 all (CVSS 6.2, Fortinet FortiOS · Fortinet FortiProxy)
- [CVE-2023-2785](https://cve.now/CVE-2023-2785.md): Specially crafted search query can cause large log entries in postgres (CVSS 4.3, Mattermost)
- [CVE-2023-2831](https://cve.now/CVE-2023-2831.md): Denial of Service while unescaping a Markdown string (CVSS 4.3, Mattermost)
- [CVE-2023-2797](https://cve.now/CVE-2023-2797.md): Path traversal in GitHub plugin's code preview feature (CVSS 3.1, Mattermost Github Plugin)
- [CVE-2023-2793](https://cve.now/CVE-2023-2793.md): Stack exhaustion in PreparePostForClientWithEmbedsAndImages (CVSS 6.5, Mattermost)
- [CVE-2023-2792](https://cve.now/CVE-2023-2792.md): Ephemeral messages return private channel contents in permalink previews (CVSS 6.5, Mattermost)
- [CVE-2023-2791](https://cve.now/CVE-2023-2791.md): Playbooks lets you edit arbitrary posts (CVSS 4.3, Mattermost)
- [CVE-2023-2788](https://cve.now/CVE-2023-2788.md): Deactivated user can retain access using oauth2 api (CVSS 6.2, Mattermost)
- [CVE-2023-26541](https://cve.now/CVE-2023-26541.md): WordPress asMember Plugin \<= 1.5.4 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Alexander Suess asMember)
- [CVE-2023-2787](https://cve.now/CVE-2023-2787.md): Collapsed Reply Threads APIs leak message contents from private channels (CVSS 6.5, Mattermost)
- [CVE-2023-2786](https://cve.now/CVE-2023-2786.md): Channel commands execution doesn't properly verify permissions (CVSS 4.3, Mattermost)
- [CVE-2023-2784](https://cve.now/CVE-2023-2784.md): Apps Framework allows install requests from regular members via an internal path (CVSS 4.2, Mattermost App Framework)
- [CVE-2023-25963](https://cve.now/CVE-2023-25963.md): WordPress JS Job Manager Plugin \<= 2.0.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, JoomSky JS Job Manager)
- [CVE-2023-2783](https://cve.now/CVE-2023-2783.md): App Framework does not checks for the secret provided in the incoming webhook request (CVSS 4.3, Mattermost App Framework · github.com/mattermost/mattermost…)
- [CVE-2023-26013](https://cve.now/CVE-2023-26013.md): WordPress Strong Testimonials Plugin \<= 3.0.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, WPChill Strong Testimonials)
- [CVE-2023-2431](https://cve.now/CVE-2023-2431.md): Bypass of seccomp profile enforcement (CVSS 3.4, Kubernetes · k8s.io/kubernetes)
- [CVE-2023-34157](https://cve.now/CVE-2023-34157.md): Vulnerability of HwWatchHealth being hijacked.Successful exploitation of this vulnerability may cause repeated pop-up windows of the app. (CVSS 10.0, Huawei HarmonyOS)
- [CVE-2023-34165](https://cve.now/CVE-2023-34165.md): Unauthorized access vulnerability in the Save for later feature provided by AI Touch.Successful exploitation of this vulnerability may cause (no CVSS, Huawei HarmonyOS)
- [CVE-2023-34154](https://cve.now/CVE-2023-34154.md): Vulnerability of undefined permissions in HUAWEI VR screen projection.Successful exploitation of this vulnerability will cause third-party a (no CVSS, Huawei HarmonyOS)
- [CVE-2023-29349](https://cve.now/CVE-2023-29349.md): Microsoft ODBC and OLE DB Remote Code Execution Vulnerability (CVSS 7.8, Microsoft OLE DB Driver 18 for SQL Server · Microsoft OL… +7)
- [CVE-2023-32028](https://cve.now/CVE-2023-32028.md): Microsoft SQL OLE DB Remote Code Execution Vulnerability (CVSS 7.8, Microsoft OLE DB Driver 19 for SQL Server · Microsoft OL… +1)
- [CVE-2023-32027](https://cve.now/CVE-2023-32027.md): Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability (CVSS 7.8, Microsoft ODBC Driver 17 for SQL Server on Linux · Micro… +5)
- [CVE-2023-32026](https://cve.now/CVE-2023-32026.md): Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability (CVSS 7.8, Microsoft ODBC Driver 17 for SQL Server on MacOS · Micro… +5)
- [CVE-2023-32025](https://cve.now/CVE-2023-32025.md): Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability (CVSS 7.8, Microsoft ODBC Driver 17 for SQL Server on Linux · Micro… +5)
- [CVE-2023-29356](https://cve.now/CVE-2023-29356.md): Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability (CVSS 7.8, Microsoft ODBC Driver 17 for SQL Server on Linux · Micro… +5)
- [CVE-2023-24243](https://cve.now/CVE-2023-24243.md): CData RSB Connect v22.0.8336 was discovered to contain a Server-Side Request Forgery (SSRF). (CVSS 7.5)
- [CVE-2023-25185](https://cve.now/CVE-2023-25185.md): An issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. (CVSS 3.8)
- [CVE-2023-25186](https://cve.now/CVE-2023-25186.md): An issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. (CVSS 5.1)
- [CVE-2023-25187](https://cve.now/CVE-2023-25187.md): An issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. (CVSS 6.3)
- [CVE-2023-25188](https://cve.now/CVE-2023-25188.md): An issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. (CVSS 5.1)
- [CVE-2023-25366](https://cve.now/CVE-2023-25366.md): In Siglent SDS 1104X-E SDS1xx4X-E\_V6.1.37R9.ADS, insecure SCPI interface discloses web password. (CVSS 9.8)
- [CVE-2023-25645](https://cve.now/CVE-2023-25645.md): There is a permission and access control vulnerability in some ZTE AndroidTV STBs. (CVSS 7.7, UP T2 4K, ZXV10 B866V2-H, ZXV10 B866V2, ZXV10 B860H V5D0,…)
- [CVE-2023-30222](https://cve.now/CVE-2023-30222.md): An information disclosure vulnerability in 4D SAS 4D Server Application v17, v18, v19 R7 and earlier allows attackers to retrieve password h (no CVSS)
- [CVE-2023-30223](https://cve.now/CVE-2023-30223.md): A broken authentication vulnerability in 4D SAS 4D Server software v17, v18, v19 R7, and earlier allows attackers to send crafted TCP packet (no CVSS)
- [CVE-2023-30453](https://cve.now/CVE-2023-30453.md): The Teamlead Reminder plugin through 2.6.5 for Jira allows persistent XSS via the message parameter. (CVSS 5.4)
- [CVE-2023-3195](https://cve.now/CVE-2023-3195.md): A stack-based buffer overflow issue was found in ImageMagick's coders/tiff.c. (no CVSS, ImageMagick)
- [CVE-2023-3268](https://cve.now/CVE-2023-3268.md): An out of bounds (OOB) memory access flaw was found in the Linux kernel in relay\_file\_read\_start\_pos in kernel/relay.c in the relayfs. (CVSS 7.1, Linux kernel)
- [CVE-2023-32752](https://cve.now/CVE-2023-32752.md): L7 Networks InstantScan & InstantQoS - Arbitrary File Upload (CVSS 9.8, L7 Networks InstantScan · L7 Networks InstantQoS)
- [CVE-2023-32753](https://cve.now/CVE-2023-32753.md): ITPison OMICARD EDM - Arbitrary File Upload (CVSS 9.8, Contact ITPison)
- [CVE-2023-32754](https://cve.now/CVE-2023-32754.md): Thinking Software Efence - SQL injection (CVSS 9.8, Thinking Software Efence)
- [CVE-2023-3291](https://cve.now/CVE-2023-3291.md): Heap-based Buffer Overflow in gpac/gpac (CVSS 5.1, gpac/gpac)
- [CVE-2023-3293](https://cve.now/CVE-2023-3293.md): Cross-site Scripting (XSS) - Stored in salesagility/suitecrm-core (CVSS 7.6, salesagility/suitecrm-core)
- [CVE-2023-3294](https://cve.now/CVE-2023-3294.md): Cross-site Scripting (XSS) - DOM in saleor/react-storefront (CVSS 7.6, saleor/react-storefront)
- [CVE-2023-33438](https://cve.now/CVE-2023-33438.md): A stored Cross-site scripting (XSS) vulnerability in Wolters Kluwer TeamMate+ 35.0.11.0 allows remote attackers to inject arbitrary web scri (CVSS 5.4)
- [CVE-2023-34474](https://cve.now/CVE-2023-34474.md): A heap-based buffer overflow issue was discovered in ImageMagick's ReadTIM2ImageData() function in coders/tim2.c. (no CVSS, ImageMagick)
- [CVE-2023-34475](https://cve.now/CVE-2023-34475.md): A heap use after free issue was discovered in ImageMagick's ReplaceXmpValue() function in MagickCore/profile.c. (no CVSS, ImageMagick)
- [CVE-2023-34548](https://cve.now/CVE-2023-34548.md): Simple Customer Relationship Management 1.0 is vulnerable to SQL Injection via the email parameter. (CVSS 9.8)
- [CVE-2023-34645](https://cve.now/CVE-2023-34645.md): jfinal CMS 5.1.0 has an arbitrary file read vulnerability. (CVSS 7.5)
- [CVE-2023-34659](https://cve.now/CVE-2023-34659.md): jeecg-boot 3.5.0 and 3.5.1 have a SQL injection vulnerability the id parameter of the /jeecg-boot/jmreport/show interface. (no CVSS, org.jeecgframework.boot:jeecg-boot-parent)
- [CVE-2023-34660](https://cve.now/CVE-2023-34660.md): jjeecg-boot V3.5.0 has an unauthorized arbitrary file upload in /jeecg-boot/jmreport/upload interface. (no CVSS, org.jeecgframework.boot:jeecg-boot-parent)
- [CVE-2023-34733](https://cve.now/CVE-2023-34733.md): A lack of exception handling in the Volkswagen Discover Media Infotainment System Software Version 0876 allows attackers to cause a Denial o (no CVSS)
- [CVE-2023-34795](https://cve.now/CVE-2023-34795.md): xlsxio v0.1.2 to v0.2.34 was discovered to contain a free of uninitialized pointer in the xlsxioread\_sheetlist\_close() function. (no CVSS)
- [CVE-2023-34832](https://cve.now/CVE-2023-34832.md): TP-Link Archer AX10(EU)\_V1.2\_230220 was discovered to contain a buffer overflow via the function FUN\_131e8 - 0x132B4. (no CVSS)
- [CVE-2023-34845](https://cve.now/CVE-2023-34845.md): Bludit v3.14.1 was discovered to contain an arbitrary file upload vulnerability in the component /admin/new-content. (no CVSS)
- [CVE-2023-35708](https://cve.now/CVE-2023-35708.md): In Progress MOVEit Transfer before 2021.0.8 (13.0.8), 2021.1.6 (13.1.6), 2022.0.6 (14.0.6), 2022.1.7 (14.1.7), and 2023.0.3 (15.0.3), a SQL (no CVSS)
- [CVE-2023-35782](https://cve.now/CVE-2023-35782.md): The ipandlanguageredirect extension before 5.1.2 for TYPO3 allows SQL Injection. (CVSS 8.2, in2code/ipandlanguageredirect)
- [CVE-2023-35783](https://cve.now/CVE-2023-35783.md): The ke\_search (aka Faceted Search) extension before 4.0.3, 4.1.x through 4.6.x before 4.6.6, and 5.x before 5.0.2 for TYPO3 allows XSS via i (CVSS 6.3, tpwd/ke\_search)
- [CVE-2023-35784](https://cve.now/CVE-2023-35784.md): A double free or use after free could occur after SSL\_clear in OpenBSD 7.2 before errata 026 and 7.3 before errata 004, and in LibreSSL befo (no CVSS)
- [CVE-2023-35788](https://cve.now/CVE-2023-35788.md): An issue was discovered in fl\_set\_geneve\_opt in net/sched/cls\_flower.c in the Linux kernel before 6.3.7. (CVSS 7.8)
- [CVE-2023-35789](https://cve.now/CVE-2023-35789.md): An issue was discovered in the C AMQP client library (aka rabbitmq-c) through 0.13.0 for RabbitMQ. (no CVSS)
- [CVE-2023-35790](https://cve.now/CVE-2023-35790.md): An issue was discovered in dec\_patch\_dictionary.cc in libjxl before 0.8.2. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-06-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.