CVEs published July 13, 2023
113 CVEs were published on July 13, 2023: 12 critical, 19 high.
- Published
- 113
- Critical
- 12
- High
- 19
- Medium
- 28
- Low
- 5
- Unrated
- 49
- Now in CISA KEV
- 0
- Fix available
- 32
Most affected products
- SonicWall GMS · SonicWall Analytics
- 14
- Zabbix
- 9
- GitLab
- 8
- Honeywell Experion Server · Honeywell Experion Station +2
- 5
- Honeywell C300
- 4
- SourceCodester AC Repair and Services System
- 4
- Significant-Gravitas Auto-GPT
- 3
- Becton Dickinson & BD Alarisâ„¢ Point-of-Care Unit (PCU) Mo…
- 2
- Becton Dickinson & BD Alarisâ„¢ Systems Manager
- 2
- ELECOM CO. WRC-1167GHBK-S · ELECOM CO. WRC-1167GEBK-S +3
- 2
Critical 12
- CVE-2023-37466vm2 Sandbox Escape vulnerabilitypatriksimek vm2 · vm2
- CVE-2023-35070SQL in VegaGroup Web CollectionVegaGroup Web Collection
- CVE-2023-2003Embedded malicious code vulnerability in Unitronics Vision1210Unitronics Vision1210
- CVE-2023-25770Controller stack overflow on decoding messages from the serverHoneywell C300
- CVE-2023-25178Controller design flaw - unsigned firmwareHoneywell C300
- CVE-2023-25078DoS due to heap overflowHoneywell Experion Server · Honeywell Experion Station +2
- CVE-2023-24480Controller stack overflow when decoding messages from the serverHoneywell C300
- CVE-2023-23585Server DoS due to heap overflowHoneywell Experion Server · Honeywell Experion Station +2
- CVE-2023-2957SQLi in Lisa Softwares Florist SiteLisa Software Florist Site
- CVE-2023-1547SQLi in Elra Computers ParkmatikElra Parkmatik
- CVE-2023-3342User Registration <= 3.0.2 - Authenticated (Subscriber+) Arbitrary File Uploadwpeverest User Registration & Membership – Free & Paid Memb…
- CVE-2023-34124The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks, allowing authentication bypass.SonicWall GMS · SonicWall Analytics
High 19
- CVE-2023-37274Python code execution sandbox escape in non-docker version in Auto-GPTSignificant-Gravitas Auto-GPT
- CVE-2023-37273Docker escape in Auto-GPT when running from docker-compose.yml included in git repoSignificant-Gravitas Auto-GPT
- CVE-2023-35945Envoy vulnerable to HTTP/2 memory leak in nghttp2 codecenvoyproxy envoy · envoy
- CVE-2023-30563Stored Cross-Site Scripting on User Import Functionality Becton Dickinson & BD Alarisâ„¢ Systems Manager
- CVE-2023-34458mx-chain-go's relayed transactions always increment noncemultiversx mx-chain-go · github.com/multiversx/mx-chain-go
- CVE-2022-24834Heap overflow issue with the Lua cjson library used by Redisredis
- CVE-2023-37267Umbraco allows possible Admin-level access to backoffice without Auth under rare conditionsUmbraco-CMS · Umbraco.Cms.Infrastructure +1
- CVE-2023-25948Server Data type confusion - info leak Honeywell Experion Server · Honeywell Experion Station +2
- CVE-2023-26597Controller DOS on sending error responseHoneywell C300
- CVE-2023-24474Server deserialization missing boundary checks - heap overflow in communication between server and controllerHoneywell Experion Server · Honeywell Experion Station +2
- CVE-2023-22435 Server bad parsing implementation - stack overflow in server::get_db_path_for_driverHoneywell Experion Server · Honeywell Experion Station +2
- CVE-2023-29450Unauthorized limited filesystem access from preprocessingZabbix
- CVE-2023-35069Path Traversal in BullwarkBullwark
- CVE-2023-37415Apache Airflow Apache Hive Provider: Improper Input Validation in Hive Provider with proxy_userApache Software Foundation Apache Airflow Apache Hive Provi…
- CVE-2023-34133Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SonicWall GMS and Analytics allows an SonicWall GMS · SonicWall Analytics
- CVE-2023-3424Inefficient Regular Expression Complexity in GitLabGitLab
- CVE-2023-3343User Registration <= 3.0.1 - Authenticated (Subscriber+) PHP Object Injectionwpeverest User Registration & Membership – Free & Paid Memb…
- CVE-2023-34127Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in SonicWall GMS, SonicWall AnalytiSonicWall GMS · SonicWall Analytics
- CVE-2023-38197An issue was discovered in Qt before 5.15.15, 6.x before 6.2.10, and 6.3.x through 6.5.x before 6.5.3.
Medium, low and unrated 82
- CVE-2023-37278GLPI vulnerable to SQL injection via dashboard administrationglpi-project glpi
- CVE-2023-37275System logs spoofable in Auto-GPT via ANSI control sequencesSignificant-Gravitas Auto-GPT
- CVE-2023-37272XSS vulnerability in JOC Cockpit branch 1.13sos-berlin joc-cockpit
- CVE-2023-36473CSP nonce reuse vulnerability in Discoursediscourse
- CVE-2023-37468Storing unencrypted LDAP passwords in feedbacksystemthm-mni-ii feedbacksystem
- CVE-2023-37463Quadratic complexity bugs may lead to a denial of servicegithub cmark-gfm
- CVE-2023-30565 CQI Data Sniffing Becton Dickinson & CQI Reporter
- CVE-2023-30564Stored Cross-Site Scripting on Device Import FunctionalityBecton Dickinson & BD Alarisâ„¢ Systems Manager
- CVE-2023-30562Lack of Dataset Integrity Checking Becton Dickinson & BD Alarisâ„¢ Guardrailsâ„¢ Editor
- CVE-2023-30561Lack of Cryptographic Security of IUI Bus Becton Dickinson & BD Alarisâ„¢ Point-of-Care Unit (PCU) Mo…
- CVE-2023-30560 PCU Configuration Lacks AuthenticationBecton Dickinson & BD Alarisâ„¢ Point-of-Care Unit (PCU) Mo…
- CVE-2023-30559Wireless Card Firmware Improperly SignedBecton Dickinson & BD Alaris™ Point-of-Care Unit (PCU) Model
- CVE-2023-3661SourceCodester AC Repair and Services System sql injectionSourceCodester AC Repair and Services System
- CVE-2023-3660Campcodes Retro Cellphone Online Store add_user_modal.php cross site scriptingCampcodes Retro Cellphone Online Store
- CVE-2023-3659SourceCodester AC Repair and Services System cross site scriptingSourceCodester AC Repair and Services System
- CVE-2023-3658SourceCodester AC Repair and Services System HTTP POST Request sql injectionSourceCodester AC Repair and Services System
- CVE-2023-3657SourceCodester AC Repair and Services System HTTP POST Request sql injectionSourceCodester AC Repair and Services System
- CVE-2023-29457Insufficient validation of Action form input fieldsZabbix
- CVE-2023-29458Duktape 2.6 bug crashes JavaScript putting too many values in valstack.Zabbix
- CVE-2023-29456Inefficient URL schema validationZabbix
- CVE-2023-29455Reflected XSS in several fields of graph formZabbix
- CVE-2023-29454Persistent XSS in the user formZabbix
- CVE-2023-29452Remove possibility to add html into Geomap attribution fieldZabbix
- CVE-2023-29451Denial of service caused by a bug in the JSON parserZabbix
- CVE-2023-29449Limited control of resource utilization in JS preprocessingZabbix
- CVE-2023-3319XSS in iDisplays PlatPlay DSiDisplay PlatPlay DS
- CVE-2023-37565Code injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent authenticated attacker to execute arbitrary code by seELECOM CO. WRC-1167GHBK-S · ELECOM CO. WRC-1167GEBK-S +3
- CVE-2023-37564OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent authenticated attacker to execute an arbitrary OELECOM CO. WRC-1167GHBK-S · ELECOM CO. WRC-1167GEBK-S +3
- CVE-2023-37563ELECOM wireless LAN routers are vulnerable to sensitive information exposure, which allows a network-adjacent unauthorized attacker to obtaiELECOM CO. WRC-1167GHBK-S · ELECOM CO. WRC-1167GEBK-S +10
- CVE-2023-37562Cross-site request forgery (CSRF) vulnerability in exists in WTC-C1167GC-B v1.17 and earlier, and WTC-C1167GC-W v1.17 and earlier.ELECOM CO. WTC-C1167GC-B · ELECOM CO. WTC-C1167GC-W
- CVE-2023-34137SonicWall GMS and Analytics CAS Web Services application use static values for authentication without proper checks leading to authenticatioSonicWall GMS · SonicWall Analytics
- CVE-2023-34136Vulnerability in SonicWall GMS and Analytics allows unauthenticated attacker to upload files to a restricted location not controlled by the SonicWall GMS · SonicWall Analytics
- CVE-2023-34135Path Traversal vulnerability in SonicWall GMS and Analytics allows a remote authenticated attacker to read arbitrary files from the underlyiSonicWall GMS · SonicWall Analytics
- CVE-2023-34134Exposure of sensitive information to an unauthorized actor vulnerability in SonicWall GMS and Analytics allows authenticated attacker to reaSonicWall GMS · SonicWall Analytics
- CVE-2023-34132Use of password hash instead of password for authentication vulnerability in SonicWall GMS and Analytics allows Pass-the-Hash attacks.SonicWall GMS · SonicWall Analytics
- CVE-2023-34131Exposure of sensitive information to an unauthorized actor vulnerability in SonicWall GMS and Analytics enables an unauthenticated attacker SonicWall GMS · SonicWall Analytics
- CVE-2023-2620Insertion of Sensitive Information Into Sent Data in GitLabGitLab
- CVE-2023-2576Incorrect Authorization in GitLabGitLab
- CVE-2023-3362Generation of Error Message Containing Sensitive Information in GitLabGitLab
- CVE-2023-3363Insertion of Sensitive Information into Log File in GitLabGitLab
- CVE-2023-3444Incorrect Authorization in GitLabGitLab
- CVE-2023-2200Improper Encoding or Escaping of Output in GitLabGitLab
- CVE-2023-2190Authorization Bypass Through User-Controlled Key in GitLabGitLab
- CVE-2023-37568ELECOM wireless LAN routers WRC-1167GHBK-S v1.03 and earlier, and WRC-1167GEBK-S v1.03 and earlier allow a network-adjacent authenticated atELECOM CO. WRC-1167GHBK-S · ELECOM CO. WRC-1167GEBK-S
- CVE-2023-37567Command injection vulnerability in ELECOM and LOGITEC wireless LAN routers allows a remote unauthenticated attacker to execute an arbitrary ELECOM CO. WRC-1167GHBK3-A · ELECOM CO. WRC-F1167ACF2 +5
- CVE-2023-37566Command injection vulnerability in ELECOM and LOGITEC wireless LAN routers allows a network-adjacent authenticated attacker to execute an arELECOM CO. WRC-1167GHBK3-A · ELECOM CO. WRC-1167FEBK-A +6
- CVE-2023-37561Open redirect vulnerability in ELECOM wireless LAN routers and ELECOM wireless LAN repeaters allows a remote unauthenticated attacker to redELECOM CO. WRH-300WH-H · ELECOM CO. WTC-300HWH +2
- CVE-2023-37560Cross-site scripting vulnerability in WRH-300WH-H v2.12 and earlier, and WTC-300HWH v1.09 and earlier allows a remote unauthenticated attackELECOM CO. WRH-300WH-H · ELECOM CO. WTC-300HWH
- CVE-2023-34130SonicWall GMS and Analytics use outdated Tiny Encryption Algorithm (TEA) with a hardcoded key to encrypt sensitive data.SonicWall GMS · SonicWall Analytics
- CVE-2023-34129Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in SonicWall GMS and Analytics allows an authenSonicWall GMS · SonicWall Analytics
- CVE-2023-34128Tomcat application credentials are hardcoded in SonicWall GMS and Analytics configuration file.SonicWall GMS · SonicWall Analytics
- CVE-2023-34126Vulnerability in SonicWall GMS and Analytics allows an authenticated attacker to upload files on the underlying filesystem with root privileSonicWall GMS · SonicWall Analytics
- CVE-2023-34125Path Traversal vulnerability in GMS and Analytics allows an authenticated attacker to read arbitrary files from the underlying filesystem wiSonicWall GMS · SonicWall Analytics
- CVE-2023-21260In notification access permission dialog box, malicious application can embedded a very long service label that overflow the original user pGoogle Android
- CVE-2022-42045Certain Zemana products are vulnerable to Arbitrary code injection.
- CVE-2023-30151A SQL injection vulnerability in the Boxtal (envoimoinscher) module for PrestaShop, after version 3.1.10, allows remote attackers to execute
- CVE-2023-31704Sourcecodester Online Computer and Laptop Store 1.0 is vulnerable to Incorrect Access Control, which allows remote attackers to elevate priv
- CVE-2023-31705A Reflected Cross-site scripting (XSS) vulnerability in Sourcecodester Task Reminder System 1.0 allows an authenticated user to inject malic
- CVE-2023-31819An issue found in KEISEI STORE Co, Ltd.
- CVE-2023-31820An issue found in Shizutetsu Store v.13.6.1 allows a remote attacker to gain access to sensitive information via the channel access token in
- CVE-2023-31821An issue found in ALBIS Co.
- CVE-2023-31822An issue found in Entetsu Store v.13.4.1 allows a remote attacker to gain access to sensitive information via the channel access token in th
- CVE-2023-31823An issue found in Marui Co Marui Official app v.13.6.1 allows a remote attacker to gain access to sensitive information via the channel acce
- CVE-2023-31824An issue found in DERICIA Co.
- CVE-2023-31825An issue found in Inageya v.13.4.1 allows a remote attacker to gain access to sensitive information via the channel access token in the mini
- CVE-2023-33768Incorrect signature verification of the firmware during the Device Firmware Update process of Belkin Wemo Smart Plug WSP080 v1.2 allows atta
- CVE-2023-35833An issue was discovered in YSoft SAFEQ 6 Server before 6.0.82.
- CVE-2023-37598A Cross Site Request Forgery (CSRF) vulnerability in issabel-pbx v.4.0.0-6 allows a remote attacker to cause a denial of service via the del
- CVE-2023-37599An issue in issabel-pbx v.4.0.0-6 allows a remote attacker to obtain sensitive information via the modules directory
- CVE-2023-37743A cross-site scripting (XSS) vulnerability in Teacher Subject Allocation System v1.0 allows attackers to execute arbitrary web scripts or HT
- CVE-2023-37744Maid Hiring Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /admin/search-book
- CVE-2023-37745A cross-site scripting (XSS) vulnerability in Maid Hiring Management System v1.0 allows attackers to execute arbitrary web scripts or HTML v
- CVE-2023-37746A cross-site scripting (XSS) vulnerability in Maid Hiring Management System v1.0 allows attackers to execute arbitrary web scripts or HTML v
- CVE-2023-37785A cross-site scripting (XSS) vulnerability in ImpressCMS v1.4.5 and before allows attackers to execute arbitrary web scripts or HTML via a cimpresscms/impresscms
- CVE-2023-37786Multiple cross-site scripting (XSS) vulnerabilities in Geeklog v2.2.2 allow attackers to execute arbitrary web scripts or HTML via a crafted
- CVE-2023-37787Multiple cross-site scripting (XSS) vulnerabilities in Geeklog v2.2.2 allow attackers to execute arbitrary web scripts or HTML via a crafted
- CVE-2023-37836libjpeg commit db33a6e was discovered to contain a reachable assertion via BitMapHook::BitMapHook at bitmaphook.cpp.
- CVE-2023-37837libjpeg commit db33a6e was discovered to contain a heap buffer overflow via LineBitmapRequester::EncodeRegion at linebitmaprequester.cpp.
- CVE-2023-37839An arbitrary file upload vulnerability in /dede/file_manage_control.php of DedeCMS v5.7.109 allows attackers to execute arbitrary code via u
- CVE-2023-37849A DLL hijacking vulnerability in Panda Security VPN for Windows prior to version v15.14.8 allows attackers to execute arbitrary code via pla
- CVE-2023-38198acme.sh before 3.0.6 runs arbitrary commands from a remote server via eval, as exploited in the wild in June 2023.
- CVE-2023-38199coreruleset (aka OWASP ModSecurity Core Rule Set) through 3.3.4 does not detect multiple Content-Type request headers on some platforms.