# CVEs published 2023-07-04

59 CVEs were published on July 4, 2023: 0 critical, 9 high. Days are UTC.

- [CVE-2023-31999](https://cve.now/CVE-2023-31999.md): All versions of @fastify/oauth2 used a statically generated state parameter at startup time and were used across all requests for all users. (no CVSS, npm @fastify/oauth2 · @fastify/oauth2)
- [CVE-2023-3506](https://cve.now/CVE-2023-3506.md): Active It Zone Active eCommerce CMS Create Ticket Page support\_ticket cross site scripting (CVSS 3.5, Active It Zone Active eCommerce CMS)
- [CVE-2023-3505](https://cve.now/CVE-2023-3505.md): Onest CRM Project List 2 cross site scripting (CVSS 3.5, Onest CRM)
- [CVE-2023-3504](https://cve.now/CVE-2023-3504.md): SmartWeb Infotech Job Board My Profile Page account unrestricted upload (CVSS 6.3, SmartWeb Infotech Job Board)
- [CVE-2023-3503](https://cve.now/CVE-2023-3503.md): SourceCodester Shopping Website insert-product.php unrestricted upload (CVSS 6.3, SourceCodester Shopping Website)
- [CVE-2023-3502](https://cve.now/CVE-2023-3502.md): SourceCodester Shopping Website search-result.php sql injection (CVSS 6.3, SourceCodester Shopping Website)
- [CVE-2023-2974](https://cve.now/CVE-2023-2974.md): Quarkus-core: tls protocol configured with quarkus.http.ssl.protocols is not enforced, client can enforce weaker supported tls protocol (CVSS 6.5, Red Hat build of Quarkus 2.13.8.Final · io.quarkus:quarkus-…)
- [CVE-2023-1273](https://cve.now/CVE-2023-1273.md): ND Shortcodes \< 7.0 - Subscriber+ LFI (no CVSS, ND Shortcodes)
- [CVE-2023-2320](https://cve.now/CVE-2023-2320.md): CF7 Google Sheets Connector \< 5.0.2 - Reflected XSS (no CVSS, CF7 Google Sheets Connector · cf7-google-sheets-connector-p…)
- [CVE-2023-2321](https://cve.now/CVE-2023-2321.md): WPForms Google Sheet Connector \< 3.4.6 - Reflected XSS (no CVSS, WPForms Google Sheet Connector · gsheetconnector-wpforms-pro)
- [CVE-2023-3460](https://cve.now/CVE-2023-3460.md): Ultimate Member \< 2.6.7 - Unauthenticated Privilege Escalation (no CVSS, Ultimate Member)
- [CVE-2022-4623](https://cve.now/CVE-2022-4623.md): ND Shortcodes \< 7.0 - Contributor+ Stored XSS via Shortcodes (no CVSS, ND Shortcodes)
- [CVE-2023-3139](https://cve.now/CVE-2023-3139.md): Protect WP Admin \< 4.0 - Unauthenticated Protection Bypass (no CVSS, Protect WP Admin)
- [CVE-2023-2010](https://cve.now/CVE-2023-2010.md): Forminator \< 1.24.1 - Unauthenticated Race Condition on poll vote (no CVSS, Forminator)
- [CVE-2023-2324](https://cve.now/CVE-2023-2324.md): Elementor Forms Google Sheet Connector \< 1.0.7 - Reflected XSS (no CVSS, Elementor Forms Google Sheet Connector · gsheetconnector-fo…)
- [CVE-2023-3133](https://cve.now/CVE-2023-3133.md): Tutor LMS \< 2.2.1 - Unauthenticated Access to Tutor LMS Lesson Resources via REST API (no CVSS, Tutor LMS)
- [CVE-2023-2333](https://cve.now/CVE-2023-2333.md): Ninja Forms Google Sheet Connector \< 1.2.7 - Reflected XSS (no CVSS, Ninja Forms Google Sheet Connector · gsheetconnector-ninja-…)
- [CVE-2023-28542](https://cve.now/CVE-2023-28542.md): Buffer Over-read in WLAN HOST (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2023-28541](https://cve.now/CVE-2023-28541.md): Buffer Over-read in WLAN Host (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2023-24854](https://cve.now/CVE-2023-24854.md): Stack-based Buffer Overflow in WLAN HOST (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2023-24851](https://cve.now/CVE-2023-24851.md): Buffer Copy Without Checking Size of Input in WLAN HOST (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2023-22667](https://cve.now/CVE-2023-22667.md): Integer Overflow or Wraparound in Audio (CVSS 8.4, Qualcomm Snapdragon)
- [CVE-2023-22387](https://cve.now/CVE-2023-22387.md): Use of Out-of-range Pointer Offset in Qualcomm IPC (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2023-22386](https://cve.now/CVE-2023-22386.md): Buffer Copy Without Checking Size of Input in WLAN HOST (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2023-21672](https://cve.now/CVE-2023-21672.md): Use After Free in Audio (CVSS 8.4, Qualcomm Snapdragon)
- [CVE-2023-21641](https://cve.now/CVE-2023-21641.md): Permissions, Privileges, and Access Controls in Display (CVSS 6.6, Qualcomm Snapdragon)
- [CVE-2023-21640](https://cve.now/CVE-2023-21640.md): Buffer Copy Without Checking Size of Input in Linux (CVSS 6.7, Qualcomm Snapdragon)
- [CVE-2023-21639](https://cve.now/CVE-2023-21639.md): Buffer Copy Without Checking the Size of Input in Audio (CVSS 6.7, Qualcomm Snapdragon)
- [CVE-2023-21638](https://cve.now/CVE-2023-21638.md): Incorrect Type Conversion or Cast in Video (CVSS 6.7, Qualcomm Snapdragon)
- [CVE-2023-21637](https://cve.now/CVE-2023-21637.md): Improper Restrictions of Operations within the Bounds of a Memory Buffer in Linux (CVSS 6.7, Qualcomm Snapdragon)
- [CVE-2023-21635](https://cve.now/CVE-2023-21635.md): Buffer Copy without Checking Size of Input in Data Network Stack & Connectivity (CVSS 6.7, Qualcomm Snapdragon)
- [CVE-2023-21633](https://cve.now/CVE-2023-21633.md): Improper Restriction of Operations within the Bounds of a Memory Buffer in Linux (CVSS 6.7, Qualcomm Snapdragon)
- [CVE-2023-21631](https://cve.now/CVE-2023-21631.md): Improper Input Validation in Modem (CVSS 7.5, Qualcomm Snapdragon)
- [CVE-2023-21629](https://cve.now/CVE-2023-21629.md): Double Free in Modem (CVSS 6.8, Qualcomm Snapdragon)
- [CVE-2023-21624](https://cve.now/CVE-2023-21624.md): Information Exposure in DSP Services (CVSS 6.2, Qualcomm Snapdragon)
- [CVE-2023-20748](https://cve.now/CVE-2023-20748.md): In display, there is a possible out of bounds read due to a missing bounds check. (no CVSS, MediaTek MT6879, MT6886, MT6895, MT6983, MT6985, MT8673, MT…)
- [CVE-2022-32666](https://cve.now/CVE-2022-32666.md): In Wi-Fi, there is a possible low throughput due to misrepresentation of critical information. (no CVSS, MediaTek MT7603, MT7613, MT7615, MT7622, MT7628, MT7629, MT…)
- [CVE-2023-20693](https://cve.now/CVE-2023-20693.md): In wlan firmware, there is possible system crash due to an uncaught exception. (no CVSS, MediaTek MT6739, MT6895, MT6983, MT8167, MT8168, MT8195, MT…)
- [CVE-2023-20692](https://cve.now/CVE-2023-20692.md): In wlan firmware, there is possible system crash due to an uncaught exception. (no CVSS, MediaTek MT6739, MT8167, MT8168, MT8321, MT8365, MT8385, MT…)
- [CVE-2023-20691](https://cve.now/CVE-2023-20691.md): In wlan firmware, there is possible system crash due to an integer overflow. (no CVSS, MediaTek MT6739, MT8167, MT8321, MT8365, MT8385, MT8666, MT…)
- [CVE-2023-20690](https://cve.now/CVE-2023-20690.md): In wlan firmware, there is possible system crash due to an integer overflow. (no CVSS, MediaTek MT6739, MT8167, MT8168, MT8321, MT8365, MT8385, MT…)
- [CVE-2023-20689](https://cve.now/CVE-2023-20689.md): In wlan firmware, there is possible system crash due to an integer overflow. (no CVSS, MediaTek MT6739, MT8167, MT8321, MT8365, MT8385, MT8666, MT…)
- [CVE-2023-20775](https://cve.now/CVE-2023-20775.md): In display, there is a possible out of bounds write due to a missing bounds check. (no CVSS, MediaTek MT6739, MT6757, MT6757C, MT6757CD, MT6757CH, MT676…)
- [CVE-2023-20774](https://cve.now/CVE-2023-20774.md): In display, there is a possible out of bounds read due to a missing bounds check. (no CVSS, MediaTek MT6789, MT6835, MT6855, MT6886, MT6895, MT6983, MT…)
- [CVE-2023-20773](https://cve.now/CVE-2023-20773.md): In vow, there is a possible escalation of privilege due to a missing permission check. (no CVSS, MediaTek MT6580, MT6735, MT6737, MT6739, MT6753, MT6761, MT…)
- [CVE-2023-20772](https://cve.now/CVE-2023-20772.md): In vow, there is a possible escalation of privilege due to a missing permission check. (no CVSS, MediaTek MT6580, MT6735, MT6737, MT6739, MT6753, MT6761, MT…)
- [CVE-2023-20771](https://cve.now/CVE-2023-20771.md): In display, there is a possible memory corruption due to a race condition. (no CVSS, MediaTek MT6580, MT6739, MT6761, MT6765, MT6768, MT6771, MT…)
- [CVE-2023-20768](https://cve.now/CVE-2023-20768.md): In ion, there is a possible out of bounds read due to type confusion. (no CVSS, MediaTek MT6580, MT6735, MT6737, MT6739, MT6753, MT6757, MT…)
- [CVE-2023-20767](https://cve.now/CVE-2023-20767.md): In pqframework, there is a possible out of bounds write due to a missing bounds check. (no CVSS, MediaTek MT6879, MT6886, MT6895, MT6983, MT6985, MT8167, MT…)
- [CVE-2023-20766](https://cve.now/CVE-2023-20766.md): In gps, there is a possible out of bounds write due to a missing bounds check. (no CVSS, MediaTek MT6580, MT6735, MT6739, MT6753, MT6757, MT6761, MT…)
- [CVE-2023-20761](https://cve.now/CVE-2023-20761.md): In ril, there is a possible out of bounds write due to a missing bounds check. (no CVSS, MediaTek MT6739, MT6761, MT6762, MT6763, MT6765, MT6768, MT…)
- [CVE-2023-20760](https://cve.now/CVE-2023-20760.md): In apu, there is a possible out of bounds write due to a missing bounds check. (no CVSS, MediaTek MT6879, MT6895, MT6983, MT8195)
- [CVE-2023-20759](https://cve.now/CVE-2023-20759.md): In cmdq, there is a possible memory corruption due to a missing bounds check. (no CVSS, MediaTek MT6739, MT6768, MT6771, MT6781, MT6785, MT6833, MT…)
- [CVE-2023-20758](https://cve.now/CVE-2023-20758.md): In cmdq, there is a possible memory corruption due to a missing bounds check. (no CVSS, MediaTek MT6739, MT6768, MT6771, MT6781, MT6785, MT6833, MT…)
- [CVE-2023-20757](https://cve.now/CVE-2023-20757.md): In cmdq, there is a possible out of bounds write due to a missing bounds check. (no CVSS, MediaTek MT6739, MT6768, MT6771, MT6785, MT6833, MT6853, MT…)
- [CVE-2023-20756](https://cve.now/CVE-2023-20756.md): In keyinstall, there is a possible out of bounds write due to an integer overflow. (no CVSS, MediaTek MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT…)
- [CVE-2023-20753](https://cve.now/CVE-2023-20753.md): In rpmb, there is a possible out of bounds write due to a logic error. (no CVSS, MediaTek MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT…)
- [CVE-2023-20755](https://cve.now/CVE-2023-20755.md): In keyinstall, there is a possible out of bounds write due to an integer overflow. (no CVSS, MediaTek MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT…)
- [CVE-2023-20754](https://cve.now/CVE-2023-20754.md): In keyinstall, there is a possible out of bounds write due to an integer overflow. (no CVSS, MediaTek MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT…)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-07-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.