# CVEs published 2023-07-11

275 CVEs were published on July 11, 2023: 17 critical, 121 high. 5 are now in CISA KEV. Days are UTC.

- [CVE-2023-24492](https://cve.now/CVE-2023-24492.md): A vulnerability has been discovered in the Citrix Secure Access client for Ubuntu which, if exploited, could allow an attacker to remotely (CVSS 9.6, Citrix Secure Access client for Ubuntu)
- [CVE-2023-24491](https://cve.now/CVE-2023-24491.md): A vulnerability has been discovered in the Citrix Secure Access client for Windows which, if exploited, could allow an attacker with acc (CVSS 7.8, Citrix Secure Access client for Windows)
- [CVE-2023-3127](https://cve.now/CVE-2023-3127.md): Improper Authentication in iSTAR (CVSS 7.5, Sensormatic Electronics, a subsidiary of Johnson Controls i…)
- [CVE-2023-23756](https://cve.now/CVE-2023-23756.md): Extension - advcomsys.com - XSS in oneVote component for Joomla \<= 1.7.0 (no CVSS, advcomsys.com oneVote component for Joomla)
- [CVE-2023-29406](https://cve.now/CVE-2023-29406.md): Insufficient sanitization of Host header in net/http (no CVSS, Go standard library net/http · stdlib)
- [CVE-2023-20575](https://cve.now/CVE-2023-20575.md): A potential power side-channel vulnerability in some AMD processors may allow an authenticated attacker to use the power reporting function (CVSS 6.5, 1st Gen AMD EPYC™ Processors · 2nd Gen AMD EPYC™ Process… +2)
- [CVE-2023-37280](https://cve.now/CVE-2023-37280.md): Pimcore admin UI vulnerable to Cross-site Scripting in two factor authentication setup page (CVSS 5.0, pimcore admin-ui-classic-bundle · pimcore/admin-ui-classic-…)
- [CVE-2023-36884](https://cve.now/CVE-2023-36884.md): Windows Search Remote Code Execution Vulnerability (CVSS 7.5, KEV, Microsoft Windows)
- [CVE-2023-3626](https://cve.now/CVE-2023-3626.md): Suncreate Mountain Flood Disaster Prevention Monitoring and Early Warning System UpLoadFloodPlanFile UpLoadFloodPlanFile.ashx unrestricted upload (CVSS 6.3, Suncreate Mountain Flood Disaster Prevention Monitoring and…)
- [CVE-2023-35333](https://cve.now/CVE-2023-35333.md): MediaWiki PandocUpload Extension Remote Code Execution Vulnerability (CVSS 8.8, Microsoft PandocUpload)
- [CVE-2023-36825](https://cve.now/CVE-2023-36825.md): Orchid Deserialization of Untrusted Data vulnerability leads to Remote Code Execution (CVSS 9.7, orchidsoftware platform · orchid/platform)
- [CVE-2023-34089](https://cve.now/CVE-2023-34089.md): Decidim Cross-site Scripting vulnerability in the processes filter (CVSS 8.1, decidim · decidim-core)
- [CVE-2023-3625](https://cve.now/CVE-2023-3625.md): Suncreate Mountain Flood Disaster Prevention Monitoring and Early Warning System Duty Write-UploadFile UploadFile.ashx unrestricted upload (CVSS 6.3, Suncreate Mountain Flood Disaster Prevention Monitoring and…)
- [CVE-2023-34090](https://cve.now/CVE-2023-34090.md): Decidim vulnerable to sensitive data disclosure (CVSS 7.5, decidim · decidim-meetings)
- [CVE-2023-32693](https://cve.now/CVE-2023-32693.md): Decidim Cross-site Scripting vulnerability in the external link redirections (CVSS 8.1, decidim · decidim-core)
- [CVE-2023-37271](https://cve.now/CVE-2023-37271.md): RestrictedPython vulnerable to arbitrary code execution via stack frame sandbox escape (CVSS 8.4, zopefoundation RestrictedPython · restrictedpython)
- [CVE-2023-36538](https://cve.now/CVE-2023-36538.md): Improper access control in Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege (CVSS 8.4, Zoom Video Communications Zoom Rooms for Windows)
- [CVE-2023-36537](https://cve.now/CVE-2023-36537.md): Improper privilege management in Zoom Rooms for Windows before version 5.14.5 may allow an authenticated user to enable an escalation of pri (CVSS 7.3, Zoom Video Communications Zoom Rooms for Windows)
- [CVE-2023-36536](https://cve.now/CVE-2023-36536.md): Untrusted search path in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escala (CVSS 8.2, Zoom Video Communications Zoom Rooms for Windows)
- [CVE-2023-34119](https://cve.now/CVE-2023-34119.md): Insecure temporary file in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escal (CVSS 8.2, Zoom Video Communications Zoom Rooms for Windows)
- [CVE-2023-36871](https://cve.now/CVE-2023-36871.md): Azure Active Directory Security Feature Bypass Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2023-36868](https://cve.now/CVE-2023-36868.md): Azure Service Fabric on Windows Information Disclosure Vulnerability (CVSS 6.5, Microsoft Azure Service Fabric 9.0 for Windows · Microsoft…)
- [CVE-2023-36867](https://cve.now/CVE-2023-36867.md): Visual Studio Code GitHub Pull Requests and Issues Extension Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Visual Studio Code - GitHub Pull Requests and Iss…)
- [CVE-2023-35374](https://cve.now/CVE-2023-35374.md): Paint 3D Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Paint)
- [CVE-2023-35373](https://cve.now/CVE-2023-35373.md): Mono Authenticode Validation Spoofing Vulnerability (CVSS 5.3, Microsoft Mono)
- [CVE-2023-35335](https://cve.now/CVE-2023-35335.md): Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability (CVSS 8.2, Microsoft Dynamics 365 (on-premises))
- [CVE-2023-35312](https://cve.now/CVE-2023-35312.md): Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2023-35311](https://cve.now/CVE-2023-35311.md): Microsoft Outlook Security Feature Bypass Vulnerability (CVSS 8.8, KEV, Microsoft 365 Apps for Enterprise · Microsoft Office LTSC +2)
- [CVE-2023-35310](https://cve.now/CVE-2023-35310.md): Windows DNS Server Remote Code Execution Vulnerability (CVSS 6.6, Microsoft Windows Server)
- [CVE-2023-35309](https://cve.now/CVE-2023-35309.md): Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2023-35308](https://cve.now/CVE-2023-35308.md): Windows MSHTML Platform Security Feature Bypass Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2023-35306](https://cve.now/CVE-2023-35306.md): Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2023-35305](https://cve.now/CVE-2023-35305.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2023-35304](https://cve.now/CVE-2023-35304.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2023-35303](https://cve.now/CVE-2023-35303.md): USB Audio Class System Driver Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2023-35302](https://cve.now/CVE-2023-35302.md): Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2023-35300](https://cve.now/CVE-2023-35300.md): Remote Procedure Call Runtime Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2023-35299](https://cve.now/CVE-2023-35299.md): Windows Common Log File System Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2023-35298](https://cve.now/CVE-2023-35298.md): HTTP.sys Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows Server · Microsoft Windows)
- [CVE-2023-35297](https://cve.now/CVE-2023-35297.md): Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability (CVSS 8.1, Microsoft Windows)
- [CVE-2023-35296](https://cve.now/CVE-2023-35296.md): Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2023-32085](https://cve.now/CVE-2023-32085.md): Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2023-32084](https://cve.now/CVE-2023-32084.md): HTTP.sys Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2023-32083](https://cve.now/CVE-2023-32083.md): Microsoft Failover Cluster Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows Server)
- [CVE-2023-32057](https://cve.now/CVE-2023-32057.md): Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2023-32056](https://cve.now/CVE-2023-32056.md): Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2023-32055](https://cve.now/CVE-2023-32055.md): Active Template Library Elevation of Privilege Vulnerability (CVSS 6.7, Microsoft Windows)
- [CVE-2023-32054](https://cve.now/CVE-2023-32054.md): Volume Shadow Copy Elevation of Privilege Vulnerability (CVSS 7.3, Microsoft Windows)
- [CVE-2023-32053](https://cve.now/CVE-2023-32053.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2023-32052](https://cve.now/CVE-2023-32052.md): Microsoft Power Apps (online) Spoofing Vulnerability (CVSS 5.4, Microsoft Power Apps)
- [CVE-2023-33171](https://cve.now/CVE-2023-33171.md): Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability (CVSS 8.2, Microsoft Dynamics 365 (on-premises))
- [CVE-2023-33170](https://cve.now/CVE-2023-33170.md): ASP.NET and Visual Studio Security Feature Bypass Vulnerability (CVSS 8.1, Microsoft Visual Studio · Microsoft .NET +14)
- [CVE-2023-33164](https://cve.now/CVE-2023-33164.md): Remote Procedure Call Runtime Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2023-33163](https://cve.now/CVE-2023-33163.md): Windows Network Load Balancing Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Windows Server)
- [CVE-2023-33162](https://cve.now/CVE-2023-33162.md): Microsoft Excel Information Disclosure Vulnerability (CVSS 5.5, Microsoft Office · Microsoft 365 Apps for Enterprise +1)
- [CVE-2023-33161](https://cve.now/CVE-2023-33161.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Office 2019 for Mac · Microsoft 365 Apps for E… +1)
- [CVE-2023-33160](https://cve.now/CVE-2023-33160.md): Microsoft SharePoint Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2023-33159](https://cve.now/CVE-2023-33159.md): Microsoft SharePoint Server Spoofing Vulnerability (CVSS 8.8, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2023-33158](https://cve.now/CVE-2023-33158.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Office 2019 for Mac · Microsoft 365 Apps for E… +3)
- [CVE-2023-33157](https://cve.now/CVE-2023-33157.md): Microsoft SharePoint Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2023-33156](https://cve.now/CVE-2023-33156.md): Microsoft Defender Elevation of Privilege Vulnerability (CVSS 6.3, Microsoft Malware Protection Engine)
- [CVE-2023-33155](https://cve.now/CVE-2023-33155.md): Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2023-33154](https://cve.now/CVE-2023-33154.md): Windows Partition Management Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2023-33134](https://cve.now/CVE-2023-33134.md): Microsoft SharePoint Server Remote Code Execution Vulnerability (CVSS 8.8, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2023-33127](https://cve.now/CVE-2023-33127.md): .NET and Visual Studio Elevation of Privilege Vulnerability (CVSS 8.1, Microsoft .NET · Microsoft Visual Studio +4)
- [CVE-2023-29347](https://cve.now/CVE-2023-29347.md): Windows Admin Center Spoofing Vulnerability (CVSS 8.7, Microsoft Windows Admin Center)
- [CVE-2023-21526](https://cve.now/CVE-2023-21526.md): Windows Netlogon Information Disclosure Vulnerability (CVSS 7.4, Microsoft Windows)
- [CVE-2023-36874](https://cve.now/CVE-2023-36874.md): Windows Error Reporting Service Elevation of Privilege Vulnerability (CVSS 7.8, KEV, Microsoft Windows)
- [CVE-2023-36872](https://cve.now/CVE-2023-36872.md): VP9 Video Extensions Information Disclosure Vulnerability (CVSS 5.5, Microsoft VP9 Video Extensions)
- [CVE-2023-35367](https://cve.now/CVE-2023-35367.md): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2023-35366](https://cve.now/CVE-2023-35366.md): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2023-35365](https://cve.now/CVE-2023-35365.md): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (CVSS 9.8, Microsoft Windows)
- [CVE-2023-35364](https://cve.now/CVE-2023-35364.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2023-35363](https://cve.now/CVE-2023-35363.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2023-35362](https://cve.now/CVE-2023-35362.md): Windows Clip Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2023-35361](https://cve.now/CVE-2023-35361.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2023-35360](https://cve.now/CVE-2023-35360.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2023-35358](https://cve.now/CVE-2023-35358.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2023-35357](https://cve.now/CVE-2023-35357.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2023-35356](https://cve.now/CVE-2023-35356.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2023-35353](https://cve.now/CVE-2023-35353.md): Connected User Experiences and Telemetry Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2023-35352](https://cve.now/CVE-2023-35352.md): Windows Remote Desktop Security Feature Bypass Vulnerability (CVSS 7.5, Microsoft Windows Server)
- [CVE-2023-35351](https://cve.now/CVE-2023-35351.md): Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability (CVSS 6.6, Microsoft Windows Server)
- [CVE-2023-35350](https://cve.now/CVE-2023-35350.md): Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability (CVSS 7.2, Microsoft Windows Server)
- [CVE-2023-35348](https://cve.now/CVE-2023-35348.md): Active Directory Federation Service Security Feature Bypass Vulnerability (CVSS 6.5, Microsoft Windows Server)
- [CVE-2023-35347](https://cve.now/CVE-2023-35347.md): Microsoft Install Service Elevation of Privilege Vulnerability (CVSS 7.1, Microsoft Windows Server · Microsoft Windows)
- [CVE-2023-35346](https://cve.now/CVE-2023-35346.md): Windows DNS Server Remote Code Execution Vulnerability (CVSS 6.6, Microsoft Windows Server)
- [CVE-2023-35345](https://cve.now/CVE-2023-35345.md): Windows DNS Server Remote Code Execution Vulnerability (CVSS 6.6, Microsoft Windows Server)
- [CVE-2023-35344](https://cve.now/CVE-2023-35344.md): Windows DNS Server Remote Code Execution Vulnerability (CVSS 6.6, Microsoft Windows Server)
- [CVE-2023-35343](https://cve.now/CVE-2023-35343.md): Windows Geolocation Service Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2023-35342](https://cve.now/CVE-2023-35342.md): Windows Image Acquisition Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2023-35341](https://cve.now/CVE-2023-35341.md): Microsoft DirectMusic Information Disclosure Vulnerability (CVSS 6.2, Microsoft Windows)
- [CVE-2023-35340](https://cve.now/CVE-2023-35340.md): Windows CNG Key Isolation Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2023-35339](https://cve.now/CVE-2023-35339.md): Windows CryptoAPI Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2023-35338](https://cve.now/CVE-2023-35338.md): Windows Peer Name Resolution Protocol Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2023-35337](https://cve.now/CVE-2023-35337.md): Win32k Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows Server · Microsoft Windows)
- [CVE-2023-35336](https://cve.now/CVE-2023-35336.md): Windows MSHTML Platform Security Feature Bypass Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2023-35332](https://cve.now/CVE-2023-35332.md): Windows Remote Desktop Protocol Security Feature Bypass (CVSS 6.8, Microsoft Windows)
- [CVE-2023-35331](https://cve.now/CVE-2023-35331.md): Windows Local Security Authority (LSA) Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows Server)
- [CVE-2023-35330](https://cve.now/CVE-2023-35330.md): Windows Extended Negotiation Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2023-35329](https://cve.now/CVE-2023-35329.md): Windows Authentication Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2023-35328](https://cve.now/CVE-2023-35328.md): Windows Transaction Manager Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2023-35326](https://cve.now/CVE-2023-35326.md): Windows CDP User Components Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2023-35325](https://cve.now/CVE-2023-35325.md): Windows Print Spooler Information Disclosure Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2023-35324](https://cve.now/CVE-2023-35324.md): Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2023-35323](https://cve.now/CVE-2023-35323.md): Windows OLE Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows Server · Microsoft Windows)
- [CVE-2023-35322](https://cve.now/CVE-2023-35322.md): Windows Deployment Services Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows Server)
- [CVE-2023-35321](https://cve.now/CVE-2023-35321.md): Windows Deployment Services Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows Server)
- [CVE-2023-35320](https://cve.now/CVE-2023-35320.md): Connected User Experiences and Telemetry Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2023-35319](https://cve.now/CVE-2023-35319.md): Remote Procedure Call Runtime Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2023-35318](https://cve.now/CVE-2023-35318.md): Remote Procedure Call Runtime Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2023-35317](https://cve.now/CVE-2023-35317.md): Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows Server)
- [CVE-2023-35316](https://cve.now/CVE-2023-35316.md): Remote Procedure Call Runtime Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2023-35315](https://cve.now/CVE-2023-35315.md): Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2023-35314](https://cve.now/CVE-2023-35314.md): Remote Procedure Call Runtime Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2023-35313](https://cve.now/CVE-2023-35313.md): Windows Online Certificate Status Protocol (OCSP) SnapIn Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2023-32051](https://cve.now/CVE-2023-32051.md): Raw Image Extension Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Raw Image Extension)
- [CVE-2023-32050](https://cve.now/CVE-2023-32050.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows Server 2008 Service Pack · Microsoft W… +1)
- [CVE-2023-32049](https://cve.now/CVE-2023-32049.md): Windows SmartScreen Security Feature Bypass Vulnerability (CVSS 8.8, KEV, Microsoft Windows)
- [CVE-2023-32047](https://cve.now/CVE-2023-32047.md): Paint 3D Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Paint)
- [CVE-2023-32046](https://cve.now/CVE-2023-32046.md): Windows MSHTML Platform Elevation of Privilege Vulnerability (CVSS 7.8, KEV, Microsoft Windows)
- [CVE-2023-32045](https://cve.now/CVE-2023-32045.md): Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2023-32044](https://cve.now/CVE-2023-32044.md): Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2023-32043](https://cve.now/CVE-2023-32043.md): Windows Remote Desktop Security Feature Bypass Vulnerability (CVSS 6.8, Microsoft Windows)
- [CVE-2023-32042](https://cve.now/CVE-2023-32042.md): OLE Automation Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2023-32041](https://cve.now/CVE-2023-32041.md): Windows Update Orchestrator Service Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2023-32040](https://cve.now/CVE-2023-32040.md): Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2023-32039](https://cve.now/CVE-2023-32039.md): Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2023-32038](https://cve.now/CVE-2023-32038.md): Microsoft ODBC Driver Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2023-32037](https://cve.now/CVE-2023-32037.md): Windows Layer-2 Bridge Network Driver Information Disclosure Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2023-32035](https://cve.now/CVE-2023-32035.md): Remote Procedure Call Runtime Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2023-32034](https://cve.now/CVE-2023-32034.md): Remote Procedure Call Runtime Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2023-32033](https://cve.now/CVE-2023-32033.md): Microsoft Failover Cluster Remote Code Execution Vulnerability (CVSS 6.6, Microsoft Windows Server)
- [CVE-2023-33174](https://cve.now/CVE-2023-33174.md): Windows Cryptographic Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2023-33173](https://cve.now/CVE-2023-33173.md): Remote Procedure Call Runtime Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2023-33172](https://cve.now/CVE-2023-33172.md): Remote Procedure Call Runtime Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2023-33169](https://cve.now/CVE-2023-33169.md): Remote Procedure Call Runtime Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2023-33168](https://cve.now/CVE-2023-33168.md): Remote Procedure Call Runtime Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2023-33167](https://cve.now/CVE-2023-33167.md): Remote Procedure Call Runtime Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2023-33166](https://cve.now/CVE-2023-33166.md): Remote Procedure Call Runtime Denial of Service Vulnerability (CVSS 6.5, Microsoft Windows)
- [CVE-2023-33165](https://cve.now/CVE-2023-33165.md): Microsoft SharePoint Server Security Feature Bypass Vulnerability (CVSS 4.3, Microsoft SharePoint Server)
- [CVE-2023-33153](https://cve.now/CVE-2023-33153.md): Microsoft Outlook Remote Code Execution Vulnerability (CVSS 6.8, Microsoft Office · Microsoft 365 Apps for Enterprise)
- [CVE-2023-33152](https://cve.now/CVE-2023-33152.md): Microsoft ActiveX Remote Code Execution Vulnerability (CVSS 7.0, Microsoft Office · Microsoft 365 Apps for Enterprise)
- [CVE-2023-33151](https://cve.now/CVE-2023-33151.md): Microsoft Outlook Spoofing Vulnerability (CVSS 6.5, Microsoft Office LTSC · Microsoft 365 Apps for Enterprise +2)
- [CVE-2023-33150](https://cve.now/CVE-2023-33150.md): Microsoft Office Security Feature Bypass Vulnerability (CVSS 9.6, Microsoft Office · Microsoft 365 Apps for Enterprise +1)
- [CVE-2023-33149](https://cve.now/CVE-2023-33149.md): Microsoft Office Graphics Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Office · Microsoft 365 Apps for Enterprise)
- [CVE-2023-33148](https://cve.now/CVE-2023-33148.md): Microsoft Office Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Office 2013 Click-to-Run · Microsoft Office +1)
- [CVE-2023-21756](https://cve.now/CVE-2023-21756.md): Windows Win32k Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2023-34118](https://cve.now/CVE-2023-34118.md): Improper privilege management in Zoom Rooms for Windows before version 5.14.5 may allow an authenticated user to enable an escalation of pri (CVSS 7.3, Zoom Video Communications Zoom Rooms for Windows)
- [CVE-2023-3624](https://cve.now/CVE-2023-3624.md): Nesote Inout Blockchain FiatExchanger POST Parameter update\_marketboxslider sql injection (CVSS 6.3, Nesote Inout Blockchain FiatExchanger)
- [CVE-2023-34117](https://cve.now/CVE-2023-34117.md): Relative path traversal in the Zoom Client SDK before version 5.15.0 may allow an unauthorized user to enable information disclosure via loc (CVSS 3.3, Zoom Video Communications Zoom Client SDK)
- [CVE-2023-34116](https://cve.now/CVE-2023-34116.md): Improper input validation in the Zoom Desktop Client for Windows before version 5.15.0 may allow an unauthorized user to enable an escalatio (CVSS 8.2, Zoom Video Communications Zoom Desktop Client for Windows)
- [CVE-2023-25606](https://cve.now/CVE-2023-25606.md): An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability \[CWE-23\] in FortiAnalyzer and FortiManager m (CVSS 6.2, Fortinet FortiManager · Fortinet FortiAnalyzer)
- [CVE-2023-28001](https://cve.now/CVE-2023-28001.md): An insufficient session expiration in Fortinet FortiOS 7.0.0 - 7.0.12 and 7.2.0 - 7.2.4 allows an attacker to execute unauthorized code or c (CVSS 4.1, Fortinet FortiOS)
- [CVE-2022-23447](https://cve.now/CVE-2022-23447.md): An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability \[CWE-22\] in FortiExtender management interfa (CVSS 7.3, Fortinet FortiExtender)
- [CVE-2023-24881](https://cve.now/CVE-2023-24881.md): Microsoft Teams Information Disclosure Vulnerability (CVSS 6.5, Microsoft Teams)
- [CVE-2023-3623](https://cve.now/CVE-2023-3623.md): Suncreate Mountain Flood Disaster Prevention Monitoring and Early Warning System Duty Module UploadHandler.ashx unrestricted upload (CVSS 6.3, Suncreate Mountain Flood Disaster Prevention Monitoring and…)
- [CVE-2023-3354](https://cve.now/CVE-2023-3354.md): Improper i/o watch removal in tls handshake can lead to remote unauthenticated denial of service (CVSS 7.5, qemu · Red Hat Enterprise Linux +2)
- [CVE-2023-36824](https://cve.now/CVE-2023-36824.md): Heap overflow in COMMAND GETKEYS and ACL evaluation in Redis (CVSS 7.4, redis)
- [CVE-2023-3627](https://cve.now/CVE-2023-3627.md): Cross-Site Request Forgery (CSRF) in salesagility/suitecrm-core (CVSS 8.1, salesagility/suitecrm-core)
- [CVE-2023-3621](https://cve.now/CVE-2023-3621.md): IBOS OA Delete Packet delete createDeleteCommand sql injection (CVSS 6.3, IBOS OA)
- [CVE-2023-3108](https://cve.now/CVE-2023-3108.md): Kernel: a race condition in crypto module in the function skcipher\_recvmsg (CVSS 6.2, Red Hat Enterprise Linux)
- [CVE-2023-3619](https://cve.now/CVE-2023-3619.md): SourceCodester AC Repair and Services System HTTP POST Request sql injection (CVSS 6.3, SourceCodester AC Repair and Services System)
- [CVE-2023-3617](https://cve.now/CVE-2023-3617.md): SourceCodester Best POS Management System Login Page admin\_class.php sql injection (CVSS 7.3, SourceCodester Best POS Management System)
- [CVE-2023-3620](https://cve.now/CVE-2023-3620.md): Cross-site Scripting (XSS) - Stored in amauric/tarteaucitron.js (CVSS 4.6, amauric/tarteaucitron.js · tarteaucitronjs)
- [CVE-2023-2746](https://cve.now/CVE-2023-2746.md): Rockwell Automation Enhanced HIM Vulnerable to Cross-Site Request Forgery Attack (CVSS 9.6, Rockwell Automation Enhanced HIM)
- [CVE-2023-2072](https://cve.now/CVE-2023-2072.md): Rockwell Automation PowerMonitor 1000 Cross-Site Scripting Vulnerability (CVSS 8.8, Rockwell Automation PowerMonitor)
- [CVE-2023-32104](https://cve.now/CVE-2023-32104.md): WordPress MyCurator Content Curation Plugin \<= 3.74 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Mark Tilly MyCurator Content Curation)
- [CVE-2023-35091](https://cve.now/CVE-2023-35091.md): WordPress WooCommerce Stock Manager Plugin \<= 2.10.0 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, StoreApps Stock Manager for WooCommerce)
- [CVE-2023-35773](https://cve.now/CVE-2023-35773.md): WordPress Template Debugger Plugin \<= 3.1.2 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Danny Hearnah - ChubbyNinjaa Template Debugger)
- [CVE-2023-24417](https://cve.now/CVE-2023-24417.md): WordPress Worthy – VG WORT Integration für WordPress Plugin \<= 1.6.5-6497609 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, tiggersWelt.net Worthy)
- [CVE-2023-36522](https://cve.now/CVE-2023-36522.md): WordPress Quiz Expert – Easy Quiz Maker, Exam and Test Manager Plugin \<= 1.5.0 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, WePupil Quiz Expert)
- [CVE-2023-25443](https://cve.now/CVE-2023-25443.md): WordPress Button Generator – easily Button Builder Plugin \<= 2.3.5 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Wow-Company Button Generator – easily Button Builder)
- [CVE-2023-34029](https://cve.now/CVE-2023-34029.md): WordPress Disable WordPress Update Notifications Plugin \<= 2.3.3 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Prem Tiwari Disable WordPress Update Notifications and auto…)
- [CVE-2023-25706](https://cve.now/CVE-2023-25706.md): WordPress Robots.txt optimization plugin \<= 1.4.5 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, Pagup WordPress Robots.txt optimization)
- [CVE-2023-35044](https://cve.now/CVE-2023-35044.md): WordPress Securimage-WP Plugin \<= 3.6.16 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Drew Phillips Securimage-WP)
- [CVE-2023-36690](https://cve.now/CVE-2023-36690.md): WordPress WPLMS Theme \< 4.900 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 8.1, VibeThemes WPLMS)
- [CVE-2023-1672](https://cve.now/CVE-2023-1672.md): Race condition exists in the key generation and rotation functionality (CVSS 5.3, tang · Red Hat Enterprise Linux +1)
- [CVE-2023-3269](https://cve.now/CVE-2023-3269.md): Distros-\[dirtyvma\] privilege escalation via non-rcu-protected vma traversal (CVSS 7.8, kernel · Red Hat Enterprise Linux +1)
- [CVE-2023-23671](https://cve.now/CVE-2023-23671.md): WordPress Layer Slider Plugin \<= 1.1.9.7 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 7.1, Muneeb Layer Slider)
- [CVE-2023-34185](https://cve.now/CVE-2023-34185.md): WordPress NextGen GalleryView Plugin \<= 0.5.5 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, John Brien WordPress NextGen GalleryView)
- [CVE-2023-35047](https://cve.now/CVE-2023-35047.md): WordPress All Bootstrap Blocks Plugin \<= 1.3.6 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, AREOI All Bootstrap Blocks)
- [CVE-2023-35778](https://cve.now/CVE-2023-35778.md): WordPress Recent Posts Slider Plugin \<= 1.1 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Neha Goel Recent Posts Slider)
- [CVE-2023-35780](https://cve.now/CVE-2023-35780.md): WordPress Galleria Plugin \<= 1.0.3 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Andy Whalen Galleria)
- [CVE-2023-36687](https://cve.now/CVE-2023-36687.md): WordPress Menubar Plugin \<= 5.8.2 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, Andrea Tarantini Menubar)
- [CVE-2023-36693](https://cve.now/CVE-2023-36693.md): WordPress WP RSS Images Plugin \<= 1.1 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Alain Gonzalez WP RSS Images)
- [CVE-2023-37391](https://cve.now/CVE-2023-37391.md): WordPress WordPress Mobile Pack Plugin \<= 3.4.1 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, WPMobilePack.com WordPress Mobile Pack – Mobile Plugin for…)
- [CVE-2023-37376](https://cve.now/CVE-2023-37376.md): A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions \< V2201.0008), Tecnomatix Plant Simulation V2302 (All (CVSS 7.8, Siemens Tecnomatix Plant Simulation)
- [CVE-2023-37375](https://cve.now/CVE-2023-37375.md): A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions \< V2201.0008), Tecnomatix Plant Simulation V2302 (All (CVSS 7.8, Siemens Tecnomatix Plant Simulation)
- [CVE-2023-37374](https://cve.now/CVE-2023-37374.md): A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions \< V2201.0008), Tecnomatix Plant Simulation V2302 (All (CVSS 7.8, Siemens Tecnomatix Plant Simulation)
- [CVE-2023-37248](https://cve.now/CVE-2023-37248.md): A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions \< V2201.0008), Tecnomatix Plant Simulation V2302 (All (CVSS 7.8, Siemens Tecnomatix Plant Simulation)
- [CVE-2023-37247](https://cve.now/CVE-2023-37247.md): A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions \< V2201.0008), Tecnomatix Plant Simulation V2302 (All (CVSS 7.8, Siemens Tecnomatix Plant Simulation)
- [CVE-2023-37246](https://cve.now/CVE-2023-37246.md): A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions \< V2201.0008), Tecnomatix Plant Simulation V2302 (All (CVSS 7.8, Siemens Tecnomatix Plant Simulation)
- [CVE-2023-36755](https://cve.now/CVE-2023-36755.md): A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions \< V2.16.0), RUGGEDCOM ROX MX5000RE (All versions \< V2.16.0), RUGGE (CVSS 9.1, Siemens RUGGEDCOM ROX MX5000 · Siemens RUGGEDCOM ROX MX5… +9)
- [CVE-2023-36754](https://cve.now/CVE-2023-36754.md): A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions \< V2.16.0), RUGGEDCOM ROX MX5000RE (All versions \< V2.16.0), RUGGE (CVSS 9.1, Siemens RUGGEDCOM ROX MX5000 · Siemens RUGGEDCOM ROX MX5… +9)
- [CVE-2023-36753](https://cve.now/CVE-2023-36753.md): A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions \< V2.16.0), RUGGEDCOM ROX MX5000RE (All versions \< V2.16.0), RUGGE (CVSS 9.1, Siemens RUGGEDCOM ROX MX5000 · Siemens RUGGEDCOM ROX MX5… +9)
- [CVE-2023-36752](https://cve.now/CVE-2023-36752.md): A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions \< V2.16.0), RUGGEDCOM ROX MX5000RE (All versions \< V2.16.0), RUGGE (CVSS 9.1, Siemens RUGGEDCOM ROX MX5000 · Siemens RUGGEDCOM ROX MX5… +9)
- [CVE-2023-36751](https://cve.now/CVE-2023-36751.md): A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions \< V2.16.0), RUGGEDCOM ROX MX5000RE (All versions \< V2.16.0), RUGGE (CVSS 9.1, Siemens RUGGEDCOM ROX MX5000 · Siemens RUGGEDCOM ROX MX5… +9)
- [CVE-2023-36750](https://cve.now/CVE-2023-36750.md): A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions \< V2.16.0), RUGGEDCOM ROX MX5000RE (All versions \< V2.16.0), RUGGE (CVSS 9.1, Siemens RUGGEDCOM ROX MX5000 · Siemens RUGGEDCOM ROX MX5… +9)
- [CVE-2023-36749](https://cve.now/CVE-2023-36749.md): A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions \< V2.16.0), RUGGEDCOM ROX MX5000RE (All versions \< V2.16.0), RUGGE (CVSS 7.4, Siemens RUGGEDCOM ROX MX5000 · Siemens RUGGEDCOM ROX MX5… +9)
- [CVE-2023-36748](https://cve.now/CVE-2023-36748.md): A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions \< V2.16.0), RUGGEDCOM ROX MX5000RE (All versions \< V2.16.0), RUGGE (CVSS 5.9, Siemens RUGGEDCOM ROX MX5000 · Siemens RUGGEDCOM ROX MX5… +9)
- [CVE-2023-36521](https://cve.now/CVE-2023-36521.md): A vulnerability has been identified in SIMATIC MV540 H (All versions \< V3.3.4), SIMATIC MV540 S (All versions \< V3.3.4), SIMATIC MV550 H (Al (CVSS 8.6, Siemens SIMATIC MV540 H · Siemens SIMATIC MV540 S +4)
- [CVE-2023-36390](https://cve.now/CVE-2023-36390.md): A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions \< V2.16.0), RUGGEDCOM ROX MX5000RE (All versions \< V2.16.0), RUGGE (CVSS 8.8, Siemens RUGGEDCOM ROX MX5000 · Siemens RUGGEDCOM ROX MX5… +9)
- [CVE-2023-36389](https://cve.now/CVE-2023-36389.md): A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions \< V2.16.0), RUGGEDCOM ROX MX5000RE (All versions \< V2.16.0), RUGGE (CVSS 8.8, Siemens RUGGEDCOM ROX MX5000 · Siemens RUGGEDCOM ROX MX5… +9)
- [CVE-2023-36386](https://cve.now/CVE-2023-36386.md): A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions \< V2.16.0), RUGGEDCOM ROX MX5000RE (All versions \< V2.16.0), RUGGE (CVSS 8.8, Siemens RUGGEDCOM ROX MX5000 · Siemens RUGGEDCOM ROX MX5… +9)
- [CVE-2023-35921](https://cve.now/CVE-2023-35921.md): A vulnerability has been identified in SIMATIC MV540 H (All versions \< V3.3.4), SIMATIC MV540 S (All versions \< V3.3.4), SIMATIC MV550 H (Al (CVSS 7.5, Siemens SIMATIC MV540 H · Siemens SIMATIC MV540 S +4)
- [CVE-2023-35920](https://cve.now/CVE-2023-35920.md): A vulnerability has been identified in SIMATIC MV540 H (All versions \< V3.3.4), SIMATIC MV540 S (All versions \< V3.3.4), SIMATIC MV550 H (Al (CVSS 7.5, Siemens SIMATIC MV540 H · Siemens SIMATIC MV540 S +4)
- [CVE-2023-29131](https://cve.now/CVE-2023-29131.md): A vulnerability has been identified in SIMATIC CN 4100 (All versions \< V2.5). (CVSS 7.4, Siemens SIMATIC CN)
- [CVE-2023-29130](https://cve.now/CVE-2023-29130.md): A vulnerability has been identified in SIMATIC CN 4100 (All versions \< V2.5). (CVSS 9.9, Siemens SIMATIC CN)
- [CVE-2022-31810](https://cve.now/CVE-2022-31810.md): A vulnerability has been identified in SiPass integrated (All versions \< V2.90.3.8). (CVSS 7.5, Siemens SiPass integrated)
- [CVE-2022-29562](https://cve.now/CVE-2022-29562.md): A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions \< V2.16.0), RUGGEDCOM ROX MX5000RE (All versions \< V2.16.0), RUGGE (CVSS 3.7, Siemens RUGGEDCOM ROX MX5000 · Siemens RUGGEDCOM ROX MX5… +9)
- [CVE-2022-29561](https://cve.now/CVE-2022-29561.md): A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions \< V2.16.0), RUGGEDCOM ROX MX5000RE (All versions \< V2.16.0), RUGGE (CVSS 7.5, Siemens RUGGEDCOM ROX MX5000 · Siemens RUGGEDCOM ROX MX5… +9)
- [CVE-2022-22302](https://cve.now/CVE-2022-22302.md): A clear text storage of sensitive information (CWE-312) vulnerability in both FortiGate version 6.4.0 through 6.4.1, 6.2.0 through 6.2.9 and (CVSS 5.3, Fortinet FortiAuthenticator · Fortinet FortiOS)
- [CVE-2023-23777](https://cve.now/CVE-2023-23777.md): An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability \[CWE-78\] in FortiWeb version 7.0 (CVSS 7.2, Fortinet FortiWeb)
- [CVE-2023-31191](https://cve.now/CVE-2023-31191.md): Denial of Service due to loss of information in DroneScout ds230 Remote ID receiver from BlueMark Innovations (CVSS 9.3, bluemark ds230)
- [CVE-2023-31190](https://cve.now/CVE-2023-31190.md): Missing TLS (HTTPS) certificate validation during firmware update in DroneScout ds230 Remote ID receiver from BlueMark Innovations (CVSS 8.1, bluemark ds230)
- [CVE-2023-29156](https://cve.now/CVE-2023-29156.md): Denial of Service due to loss of information in DroneScout ds230 Remote ID receiver from BlueMark Innovations (CVSS 4.7, bluemark ds230)
- [CVE-2023-34015](https://cve.now/CVE-2023-34015.md): WordPress Advanced Flat rate shipping Woocommerce Plugin \<= 1.6.4.4 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, PI Websolution Conditional shipping & Advanced Flat rate sh…)
- [CVE-2023-35913](https://cve.now/CVE-2023-35913.md): WordPress OOPSpam Anti-Spam Plugin \<= 1.1.44 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, OOPSpam Anti-Spam)
- [CVE-2023-35774](https://cve.now/CVE-2023-35774.md): WordPress LWS Tools Plugin \<= 2.4.1 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, LWS Tools)
- [CVE-2023-36517](https://cve.now/CVE-2023-36517.md): WordPress WP Abstracts Plugin \<= 2.6.2 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Kevon Adonis WP Abstracts)
- [CVE-2023-1936](https://cve.now/CVE-2023-1936.md): Exposure of Private Personal Information to an Unauthorized Actor in GitLab (CVSS 3.5, GitLab)
- [CVE-2023-35781](https://cve.now/CVE-2023-35781.md): WordPress LWS Cleaner Plugin \<= 2.3.0 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, LWS Cleaner)
- [CVE-2022-45823](https://cve.now/CVE-2022-45823.md): WordPress Video Contest WordPress Plugin Plugin \<= 3.2 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, GalleryPlugins Video Contest WordPress Plugin)
- [CVE-2023-25468](https://cve.now/CVE-2023-25468.md): WordPress Reservation.Studio widget Plugin \<= 1.0.11 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Reservation.Studio widget)
- [CVE-2023-23997](https://cve.now/CVE-2023-23997.md): WordPress Database Collation Fix Plugin \<= 1.2.7 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Dave Jesch Database Collation Fix)
- [CVE-2023-23704](https://cve.now/CVE-2023-23704.md): WordPress Comments Ratings Plugin \<= 1.1.6 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Pixelgrade Comments Ratings)
- [CVE-2023-25487](https://cve.now/CVE-2023-25487.md): WordPress PixTypes Plugin \<= 1.4.14 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Pixelgrade PixTypes)
- [CVE-2023-24421](https://cve.now/CVE-2023-24421.md): WordPress PHP Compatibility Checker Plugin \<= 1.5.2 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, WP Engine PHP Compatibility Checker)
- [CVE-2023-25051](https://cve.now/CVE-2023-25051.md): WordPress Comment Reply Notification Plugin \<= 1.4 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Denishua Comment Reply Notification)
- [CVE-2023-23731](https://cve.now/CVE-2023-23731.md): WordPress WishSuite Plugin \<= 1.3.3 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, HasTheme WishSuite)
- [CVE-2023-23791](https://cve.now/CVE-2023-23791.md): WordPress HT Menu Plugin \<= 1.2.1 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, HasThemes HT Menu)
- [CVE-2023-23803](https://cve.now/CVE-2023-23803.md): WordPress JustTables – WooCommerce Product Table Plugin \<= 1.4.9 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, HasThemes JustTables)
- [CVE-2023-23792](https://cve.now/CVE-2023-23792.md): WordPress Swatchly – WooCommerce Variation Swatches for Products Plugin \<= 1.2.0 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, HasThemes Swatchly)
- [CVE-2023-36925](https://cve.now/CVE-2023-36925.md): Unauthenticated blind SSRF in SAP Solution Manager (Diagnostics agent) (CVSS 7.2, SAP\_SE SAP Solution Manager)
- [CVE-2023-36924](https://cve.now/CVE-2023-36924.md): Log Injection vulnerability in SAP ERP Defense Forces and Public Security (CVSS 4.9, SAP\_SE SAP ERP Defense Forces and Public Security)
- [CVE-2023-36922](https://cve.now/CVE-2023-36922.md): OS command injection vulnerability in SAP ECC and SAP S/4HANA (IS-OIL) (CVSS 9.1, SAP\_SE SAP ECC and SAP S/4HANA)
- [CVE-2023-36921](https://cve.now/CVE-2023-36921.md): Header Injection in SAP Solution Manager (Diagnostic Agent) (CVSS 7.2, SAP\_SE SAP Solution Manager)
- [CVE-2023-36919](https://cve.now/CVE-2023-36919.md): Information Disclosure in SAP Enable Now (CVSS 5.3, SAP\_SE SAP Enable Now)
- [CVE-2023-36918](https://cve.now/CVE-2023-36918.md): Cross-Site Scripting vulnerability in SAP Enable Now (CVSS 6.1, SAP\_SE SAP Enable Now)
- [CVE-2023-36917](https://cve.now/CVE-2023-36917.md): Password Change rate limit bypass in SAP BusinessObjects Business Intelligence Platform (CVSS 5.9, SAP\_SE SAP BusinessObjects Business Intelligence Platform)
- [CVE-2023-35874](https://cve.now/CVE-2023-35874.md): Improper authentication vulnerability in SAP NetWeaver AS ABAP and ABAP Platform (CVSS 6.0, SAP\_SE SAP NetWeaver AS ABAP and ABAP Platform)
- [CVE-2023-35873](https://cve.now/CVE-2023-35873.md): Missing Authentication check in SAP NetWeaver Process Integration (Runtime Workbench) (CVSS 6.5, SAP\_SE SAP NetWeaver Process Integration)
- [CVE-2023-35872](https://cve.now/CVE-2023-35872.md): Missing Authentication check in SAP NetWeaver Process Integration (Message Display Tool) (CVSS 6.5, SAP\_SE SAP NetWeaver Process Integration)
- [CVE-2023-35871](https://cve.now/CVE-2023-35871.md): Memory Corruption vulnerability in SAP Web Dispatcher (CVSS 7.7, SAP\_SE SAP Web Dispatcher)
- [CVE-2023-35870](https://cve.now/CVE-2023-35870.md): Improper Access Control in SAP S/4HANA (Manage Journal Entry Template) (CVSS 6.3, SAP\_SE SAP S/4HANA)
- [CVE-2023-33992](https://cve.now/CVE-2023-33992.md): Missing Authorization Check in SAP Business Warehouse and SAP BW/4HANA (CVSS 4.5, SAP\_SE SAP Business Warehouse and SAP BW/4HANA)
- [CVE-2023-33990](https://cve.now/CVE-2023-33990.md): Denial of Service (DoS) vulnerability in SAP SQL Anywhere (CVSS 7.8, SAP\_SE SAP SQL Anywhere)
- [CVE-2023-33989](https://cve.now/CVE-2023-33989.md): Directory Traversal vulnerability in SAP NetWeaver (BI CONT ADD ON) (CVSS 8.7, SAP\_SE SAP NetWeaver)
- [CVE-2023-33988](https://cve.now/CVE-2023-33988.md): Cross-Site Scripting vulnerability in SAP Enable Now (CVSS 6.1, SAP\_SE SAP Enable Now)
- [CVE-2023-33987](https://cve.now/CVE-2023-33987.md): Request smuggling and request concatenation in SAP Web Dispatcher (CVSS 8.6, SAP\_SE SAP Web Dispatcher)
- [CVE-2023-31405](https://cve.now/CVE-2023-31405.md): Log Injection vulnerability in SAP NetWeaver AS for Java (Log Viewer) (CVSS 5.3, SAP\_SE SAP NetWeaver AS for Java)
- [CVE-2023-2078](https://cve.now/CVE-2023-2078.md): Buy Me a Coffee – Button and Widget Plugin \<= 3.7 - Missing Authorization (CVSS 7.3, buymeacoffee Buy Me a Coffee – Button and Widget Plugin)
- [CVE-2023-2079](https://cve.now/CVE-2023-2079.md): Buy Me a Coffee – Button and Widget Plugin \<= 3.7 - Cross-Site Request Forgery (CVSS 7.1, buymeacoffee Buy Me a Coffee – Button and Widget Plugin)
- [CVE-2020-20118](https://cve.now/CVE-2020-20118.md): Buffer Overflow vulnerability in Avast AntiVirus before v.19.7 allows a local attacker to cause a denial of service via a crafted request to (no CVSS)
- [CVE-2022-48521](https://cve.now/CVE-2022-48521.md): An issue was discovered in OpenDKIM through 2.10.3, and 2.11.x through 2.11.0-Beta2. (no CVSS)
- [CVE-2023-26861](https://cve.now/CVE-2023-26861.md): SQL injection vulnerability found in PrestaShop vivawallet v.1.7.10 and before allows a remote attacker to gain privileges via the vivawalle (no CVSS)
- [CVE-2023-29984](https://cve.now/CVE-2023-29984.md): Null pointer dereference vulnerability exists in multiple vendors MFPs and printers which implement Debut web server 1.2 or 1.3. (no CVSS)
- [CVE-2023-31818](https://cve.now/CVE-2023-31818.md): An issue found in Marukyu Line v.13.4.1 allows a remote attacker to gain access to sensitive information via the channel access token in the (no CVSS)
- [CVE-2023-34561](https://cve.now/CVE-2023-34561.md): A buffer overflow in the level parsing code of RobTop Games AB Geometry Dash v2.113 allows attackers to execute arbitrary code via entering (no CVSS)
- [CVE-2023-36163](https://cve.now/CVE-2023-36163.md): Cross Site Scripting vulnerability in IP-DOT BuildaGate v.BuildaGate5 allows a remote attacker to execute arbitrary code via a crafted scrip (no CVSS)
- [CVE-2023-36293](https://cve.now/CVE-2023-36293.md): SQL injection vulnerability in wmanager v.1.0.7 and before allows a remote attacker to obtain sensitive information via a crafted script to (no CVSS)
- [CVE-2023-37174](https://cve.now/CVE-2023-37174.md): GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the dump\_isom\_scene function at /mp4box/filedum (no CVSS)
- [CVE-2023-37189](https://cve.now/CVE-2023-37189.md): A stored cross site scripting (XSS) vulnerability in index.php?menu=billing\_rates of Issabel PBX version 4 allows attackers to execute arbit (no CVSS)
- [CVE-2023-37190](https://cve.now/CVE-2023-37190.md): A stored cross-site scripting (XSS) vulnerability in Issabel issabel-pbx v.4.0.0-6 allows attackers to execute arbitrary web scripts or HTML (no CVSS)
- [CVE-2023-37191](https://cve.now/CVE-2023-37191.md): A stored cross-site scripting (XSS) vulnerability in Issabel issabel-pbx v.4.0.0-6 allows attackers to execute arbitrary web scripts or HTML (no CVSS)
- [CVE-2023-37596](https://cve.now/CVE-2023-37596.md): Cross Site Request Forgery (CSRF) vulnerability in issabel-pbx v.4.0.0-6 allows a remote attacker to cause a denial of service via a crafted (no CVSS)
- [CVE-2023-37597](https://cve.now/CVE-2023-37597.md): Cross Site Request Forgery (CSRF) vulnerability in issabel-pbx v.4.0.0-6 allows a remote attacker to cause a denial of service via the delet (no CVSS)
- [CVE-2023-37656](https://cve.now/CVE-2023-37656.md): WebsiteGuide v0.2 is vulnerable to Remote Command Execution (RCE) via image upload. (no CVSS)
- [CVE-2023-37657](https://cve.now/CVE-2023-37657.md): TwoNav v2.0.28-20230624 is vulnerable to Cross Site Scripting (XSS). (no CVSS)
- [CVE-2023-37658](https://cve.now/CVE-2023-37658.md): fast-poster v2.15.0 is vulnerable to Cross Site Scripting (XSS). (no CVSS)
- [CVE-2023-37659](https://cve.now/CVE-2023-37659.md): xalpha v0.11.4 is vulnerable to Remote Command Execution (RCE). (no CVSS, xalpha)
- [CVE-2023-37765](https://cve.now/CVE-2023-37765.md): GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the gf\_dump\_vrml\_sffield function at /lib/libgp (no CVSS)
- [CVE-2023-37766](https://cve.now/CVE-2023-37766.md): GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the gf\_isom\_remove\_user\_data function at /lib/l (no CVSS)
- [CVE-2023-37767](https://cve.now/CVE-2023-37767.md): GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the BM\_ParseIndexValueReplace function at /lib/ (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-07-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.