# CVEs published 2023-07-13

113 CVEs were published on July 13, 2023: 12 critical, 19 high. Days are UTC.

- [CVE-2023-37466](https://cve.now/CVE-2023-37466.md): vm2 Sandbox Escape vulnerability (CVSS 9.8, patriksimek vm2 · vm2)
- [CVE-2023-37278](https://cve.now/CVE-2023-37278.md): GLPI vulnerable to SQL injection via dashboard administration (CVSS 6.8, glpi-project glpi)
- [CVE-2023-37275](https://cve.now/CVE-2023-37275.md): System logs spoofable in Auto-GPT via ANSI control sequences (CVSS 3.1, Significant-Gravitas Auto-GPT)
- [CVE-2023-37274](https://cve.now/CVE-2023-37274.md): Python code execution sandbox escape in non-docker version in Auto-GPT (CVSS 7.6, Significant-Gravitas Auto-GPT)
- [CVE-2023-37273](https://cve.now/CVE-2023-37273.md): Docker escape in Auto-GPT when running from docker-compose.yml included in git repo (CVSS 8.1, Significant-Gravitas Auto-GPT)
- [CVE-2023-37272](https://cve.now/CVE-2023-37272.md): XSS vulnerability in JOC Cockpit branch 1.13 (CVSS 6.3, sos-berlin joc-cockpit)
- [CVE-2023-36473](https://cve.now/CVE-2023-36473.md): CSP nonce reuse vulnerability in Discourse (CVSS 6.8, discourse)
- [CVE-2023-35945](https://cve.now/CVE-2023-35945.md): Envoy vulnerable to HTTP/2 memory leak in nghttp2 codec (CVSS 7.5, envoyproxy envoy · envoy)
- [CVE-2023-37468](https://cve.now/CVE-2023-37468.md): Storing unencrypted LDAP passwords in feedbacksystem (CVSS 6.0, thm-mni-ii feedbacksystem)
- [CVE-2023-37463](https://cve.now/CVE-2023-37463.md): Quadratic complexity bugs may lead to a denial of service (CVSS 6.4, github cmark-gfm)
- [CVE-2023-30565](https://cve.now/CVE-2023-30565.md): CQI Data Sniffing (CVSS 3.5, Becton Dickinson & CQI Reporter)
- [CVE-2023-30564](https://cve.now/CVE-2023-30564.md): Stored Cross-Site Scripting on Device Import Functionality (CVSS 6.9, Becton Dickinson & BD Alarisâ„¢ Systems Manager)
- [CVE-2023-30563](https://cve.now/CVE-2023-30563.md): Stored Cross-Site Scripting on User Import Functionality (CVSS 8.2, Becton Dickinson & BD Alarisâ„¢ Systems Manager)
- [CVE-2023-30562](https://cve.now/CVE-2023-30562.md): Lack of Dataset Integrity Checking (CVSS 6.7, Becton Dickinson & BD Alarisâ„¢ Guardrailsâ„¢ Editor)
- [CVE-2023-30561](https://cve.now/CVE-2023-30561.md): Lack of Cryptographic Security of IUI Bus (CVSS 6.1, Becton Dickinson & BD Alarisâ„¢ Point-of-Care Unit (PCU) Mo…)
- [CVE-2023-30560](https://cve.now/CVE-2023-30560.md): PCU Configuration Lacks Authentication (CVSS 6.8, Becton Dickinson & BD Alarisâ„¢ Point-of-Care Unit (PCU) Mo…)
- [CVE-2023-34458](https://cve.now/CVE-2023-34458.md): mx-chain-go's relayed transactions always increment nonce (CVSS 7.1, multiversx mx-chain-go · github.com/multiversx/mx-chain-go)
- [CVE-2023-30559](https://cve.now/CVE-2023-30559.md): Wireless Card Firmware Improperly Signed (CVSS 5.2, Becton Dickinson & BD Alaris™ Point-of-Care Unit (PCU) Model)
- [CVE-2022-24834](https://cve.now/CVE-2022-24834.md): Heap overflow issue with the Lua cjson library used by Redis (CVSS 7.0, redis)
- [CVE-2023-37267](https://cve.now/CVE-2023-37267.md): Umbraco allows possible Admin-level access to backoffice without Auth under rare conditions (CVSS 7.5, Umbraco-CMS · Umbraco.Cms.Infrastructure +1)
- [CVE-2023-35070](https://cve.now/CVE-2023-35070.md): SQL in VegaGroup Web Collection (CVSS 9.8, VegaGroup Web Collection)
- [CVE-2023-3661](https://cve.now/CVE-2023-3661.md): SourceCodester AC Repair and Services System sql injection (CVSS 6.3, SourceCodester AC Repair and Services System)
- [CVE-2023-3660](https://cve.now/CVE-2023-3660.md): Campcodes Retro Cellphone Online Store add\_user\_modal.php cross site scripting (CVSS 2.4, Campcodes Retro Cellphone Online Store)
- [CVE-2023-2003](https://cve.now/CVE-2023-2003.md): Embedded malicious code vulnerability in Unitronics Vision1210 (CVSS 9.1, Unitronics Vision1210)
- [CVE-2023-25948](https://cve.now/CVE-2023-25948.md): Server Data type confusion - info leak (CVSS 7.5, Honeywell Experion Server · Honeywell Experion Station +2)
- [CVE-2023-26597](https://cve.now/CVE-2023-26597.md): Controller DOS on sending error response (CVSS 7.5, Honeywell C300)
- [CVE-2023-3659](https://cve.now/CVE-2023-3659.md): SourceCodester AC Repair and Services System cross site scripting (CVSS 3.5, SourceCodester AC Repair and Services System)
- [CVE-2023-25770](https://cve.now/CVE-2023-25770.md): Controller stack overflow on decoding messages from the server (CVSS 9.8, Honeywell C300)
- [CVE-2023-25178](https://cve.now/CVE-2023-25178.md): Controller design flaw - unsigned firmware (CVSS 9.8, Honeywell C300)
- [CVE-2023-25078](https://cve.now/CVE-2023-25078.md): DoS due to heap overflow (CVSS 9.8, Honeywell Experion Server · Honeywell Experion Station +2)
- [CVE-2023-24480](https://cve.now/CVE-2023-24480.md): Controller stack overflow when decoding messages from the server (CVSS 9.8, Honeywell C300)
- [CVE-2023-24474](https://cve.now/CVE-2023-24474.md): Server deserialization missing boundary checks - heap overflow in communication between server and controller (CVSS 7.5, Honeywell Experion Server · Honeywell Experion Station +2)
- [CVE-2023-23585](https://cve.now/CVE-2023-23585.md): Server DoS due to heap overflow (CVSS 9.8, Honeywell Experion Server · Honeywell Experion Station +2)
- [CVE-2023-22435](https://cve.now/CVE-2023-22435.md): Server bad parsing implementation - stack overflow in server::get\_db\_path\_for\_driver (CVSS 7.5, Honeywell Experion Server · Honeywell Experion Station +2)
- [CVE-2023-3658](https://cve.now/CVE-2023-3658.md): SourceCodester AC Repair and Services System HTTP POST Request sql injection (CVSS 6.3, SourceCodester AC Repair and Services System)
- [CVE-2023-3657](https://cve.now/CVE-2023-3657.md): SourceCodester AC Repair and Services System HTTP POST Request sql injection (CVSS 6.3, SourceCodester AC Repair and Services System)
- [CVE-2023-29457](https://cve.now/CVE-2023-29457.md): Insufficient validation of Action form input fields (CVSS 6.3, Zabbix)
- [CVE-2023-29458](https://cve.now/CVE-2023-29458.md): Duktape 2.6 bug crashes JavaScript putting too many values in valstack. (CVSS 5.9, Zabbix)
- [CVE-2023-29456](https://cve.now/CVE-2023-29456.md): Inefficient URL schema validation (CVSS 5.7, Zabbix)
- [CVE-2023-29455](https://cve.now/CVE-2023-29455.md): Reflected XSS in several fields of graph form (CVSS 5.4, Zabbix)
- [CVE-2023-29454](https://cve.now/CVE-2023-29454.md): Persistent XSS in the user form (CVSS 5.4, Zabbix)
- [CVE-2023-29452](https://cve.now/CVE-2023-29452.md): Remove possibility to add html into Geomap attribution field (CVSS 5.5, Zabbix)
- [CVE-2023-29451](https://cve.now/CVE-2023-29451.md): Denial of service caused by a bug in the JSON parser (CVSS 4.7, Zabbix)
- [CVE-2023-29450](https://cve.now/CVE-2023-29450.md): Unauthorized limited filesystem access from preprocessing (CVSS 8.5, Zabbix)
- [CVE-2023-29449](https://cve.now/CVE-2023-29449.md): Limited control of resource utilization in JS preprocessing (CVSS 5.9, Zabbix)
- [CVE-2023-35069](https://cve.now/CVE-2023-35069.md): Path Traversal in Bullwark (CVSS 7.5, Bullwark)
- [CVE-2023-3319](https://cve.now/CVE-2023-3319.md): XSS in iDisplays PlatPlay DS (CVSS 5.4, iDisplay PlatPlay DS)
- [CVE-2023-2957](https://cve.now/CVE-2023-2957.md): SQLi in Lisa Softwares Florist Site (CVSS 9.8, Lisa Software Florist Site)
- [CVE-2023-1547](https://cve.now/CVE-2023-1547.md): SQLi in Elra Computers Parkmatik (CVSS 9.8, Elra Parkmatik)
- [CVE-2023-37415](https://cve.now/CVE-2023-37415.md): Apache Airflow Apache Hive Provider: Improper Input Validation in Hive Provider with proxy\_user (CVSS 8.8, Apache Software Foundation Apache Airflow Apache Hive Provi…)
- [CVE-2023-37565](https://cve.now/CVE-2023-37565.md): Code injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent authenticated attacker to execute arbitrary code by se (no CVSS, ELECOM CO. WRC-1167GHBK-S · ELECOM CO. WRC-1167GEBK-S +3)
- [CVE-2023-37564](https://cve.now/CVE-2023-37564.md): OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent authenticated attacker to execute an arbitrary O (no CVSS, ELECOM CO. WRC-1167GHBK-S · ELECOM CO. WRC-1167GEBK-S +3)
- [CVE-2023-37563](https://cve.now/CVE-2023-37563.md): ELECOM wireless LAN routers are vulnerable to sensitive information exposure, which allows a network-adjacent unauthorized attacker to obtai (no CVSS, ELECOM CO. WRC-1167GHBK-S · ELECOM CO. WRC-1167GEBK-S +10)
- [CVE-2023-37562](https://cve.now/CVE-2023-37562.md): Cross-site request forgery (CSRF) vulnerability in exists in WTC-C1167GC-B v1.17 and earlier, and WTC-C1167GC-W v1.17 and earlier. (no CVSS, ELECOM CO. WTC-C1167GC-B · ELECOM CO. WTC-C1167GC-W)
- [CVE-2023-34137](https://cve.now/CVE-2023-34137.md): SonicWall GMS and Analytics CAS Web Services application use static values for authentication without proper checks leading to authenticatio (no CVSS, SonicWall GMS · SonicWall Analytics)
- [CVE-2023-34136](https://cve.now/CVE-2023-34136.md): Vulnerability in SonicWall GMS and Analytics allows unauthenticated attacker to upload files to a restricted location not controlled by the (no CVSS, SonicWall GMS · SonicWall Analytics)
- [CVE-2023-34135](https://cve.now/CVE-2023-34135.md): Path Traversal vulnerability in SonicWall GMS and Analytics allows a remote authenticated attacker to read arbitrary files from the underlyi (no CVSS, SonicWall GMS · SonicWall Analytics)
- [CVE-2023-34134](https://cve.now/CVE-2023-34134.md): Exposure of sensitive information to an unauthorized actor vulnerability in SonicWall GMS and Analytics allows authenticated attacker to rea (no CVSS, SonicWall GMS · SonicWall Analytics)
- [CVE-2023-34133](https://cve.now/CVE-2023-34133.md): Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SonicWall GMS and Analytics allows an (CVSS 7.5, SonicWall GMS · SonicWall Analytics)
- [CVE-2023-34132](https://cve.now/CVE-2023-34132.md): Use of password hash instead of password for authentication vulnerability in SonicWall GMS and Analytics allows Pass-the-Hash attacks. (no CVSS, SonicWall GMS · SonicWall Analytics)
- [CVE-2023-34131](https://cve.now/CVE-2023-34131.md): Exposure of sensitive information to an unauthorized actor vulnerability in SonicWall GMS and Analytics enables an unauthenticated attacker (no CVSS, SonicWall GMS · SonicWall Analytics)
- [CVE-2023-2620](https://cve.now/CVE-2023-2620.md): Insertion of Sensitive Information Into Sent Data in GitLab (CVSS 5.5, GitLab)
- [CVE-2023-2576](https://cve.now/CVE-2023-2576.md): Incorrect Authorization in GitLab (CVSS 4.3, GitLab)
- [CVE-2023-3362](https://cve.now/CVE-2023-3362.md): Generation of Error Message Containing Sensitive Information in GitLab (CVSS 5.3, GitLab)
- [CVE-2023-3363](https://cve.now/CVE-2023-3363.md): Insertion of Sensitive Information into Log File in GitLab (CVSS 3.9, GitLab)
- [CVE-2023-3444](https://cve.now/CVE-2023-3444.md): Incorrect Authorization in GitLab (CVSS 5.7, GitLab)
- [CVE-2023-3424](https://cve.now/CVE-2023-3424.md): Inefficient Regular Expression Complexity in GitLab (CVSS 7.5, GitLab)
- [CVE-2023-3342](https://cve.now/CVE-2023-3342.md): User Registration \<= 3.0.2 - Authenticated (Subscriber+) Arbitrary File Upload (CVSS 9.9, wpeverest User Registration & Membership – Free & Paid Memb…)
- [CVE-2023-3343](https://cve.now/CVE-2023-3343.md): User Registration \<= 3.0.1 - Authenticated (Subscriber+) PHP Object Injection (CVSS 8.8, wpeverest User Registration & Membership – Free & Paid Memb…)
- [CVE-2023-2200](https://cve.now/CVE-2023-2200.md): Improper Encoding or Escaping of Output in GitLab (CVSS 4.1, GitLab)
- [CVE-2023-2190](https://cve.now/CVE-2023-2190.md): Authorization Bypass Through User-Controlled Key in GitLab (CVSS 6.5, GitLab)
- [CVE-2023-37568](https://cve.now/CVE-2023-37568.md): ELECOM wireless LAN routers WRC-1167GHBK-S v1.03 and earlier, and WRC-1167GEBK-S v1.03 and earlier allow a network-adjacent authenticated at (no CVSS, ELECOM CO. WRC-1167GHBK-S · ELECOM CO. WRC-1167GEBK-S)
- [CVE-2023-37567](https://cve.now/CVE-2023-37567.md): Command injection vulnerability in ELECOM and LOGITEC wireless LAN routers allows a remote unauthenticated attacker to execute an arbitrary (no CVSS, ELECOM CO. WRC-1167GHBK3-A · ELECOM CO. WRC-F1167ACF2 +5)
- [CVE-2023-37566](https://cve.now/CVE-2023-37566.md): Command injection vulnerability in ELECOM and LOGITEC wireless LAN routers allows a network-adjacent authenticated attacker to execute an ar (no CVSS, ELECOM CO. WRC-1167GHBK3-A · ELECOM CO. WRC-1167FEBK-A +6)
- [CVE-2023-37561](https://cve.now/CVE-2023-37561.md): Open redirect vulnerability in ELECOM wireless LAN routers and ELECOM wireless LAN repeaters allows a remote unauthenticated attacker to red (no CVSS, ELECOM CO. WRH-300WH-H · ELECOM CO. WTC-300HWH +2)
- [CVE-2023-37560](https://cve.now/CVE-2023-37560.md): Cross-site scripting vulnerability in WRH-300WH-H v2.12 and earlier, and WTC-300HWH v1.09 and earlier allows a remote unauthenticated attack (no CVSS, ELECOM CO. WRH-300WH-H · ELECOM CO. WTC-300HWH)
- [CVE-2023-34130](https://cve.now/CVE-2023-34130.md): SonicWall GMS and Analytics use outdated Tiny Encryption Algorithm (TEA) with a hardcoded key to encrypt sensitive data. (no CVSS, SonicWall GMS · SonicWall Analytics)
- [CVE-2023-34129](https://cve.now/CVE-2023-34129.md): Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in SonicWall GMS and Analytics allows an authen (no CVSS, SonicWall GMS · SonicWall Analytics)
- [CVE-2023-34128](https://cve.now/CVE-2023-34128.md): Tomcat application credentials are hardcoded in SonicWall GMS and Analytics configuration file. (no CVSS, SonicWall GMS · SonicWall Analytics)
- [CVE-2023-34127](https://cve.now/CVE-2023-34127.md): Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in SonicWall GMS, SonicWall Analyti (CVSS 8.8, SonicWall GMS · SonicWall Analytics)
- [CVE-2023-34126](https://cve.now/CVE-2023-34126.md): Vulnerability in SonicWall GMS and Analytics allows an authenticated attacker to upload files on the underlying filesystem with root privile (no CVSS, SonicWall GMS · SonicWall Analytics)
- [CVE-2023-34125](https://cve.now/CVE-2023-34125.md): Path Traversal vulnerability in GMS and Analytics allows an authenticated attacker to read arbitrary files from the underlying filesystem wi (no CVSS, SonicWall GMS · SonicWall Analytics)
- [CVE-2023-34124](https://cve.now/CVE-2023-34124.md): The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks, allowing authentication bypass. (CVSS 9.8, SonicWall GMS · SonicWall Analytics)
- [CVE-2023-21260](https://cve.now/CVE-2023-21260.md): In notification access permission dialog box, malicious application can embedded a very long service label that overflow the original user p (no CVSS, Google Android)
- [CVE-2022-42045](https://cve.now/CVE-2022-42045.md): Certain Zemana products are vulnerable to Arbitrary code injection. (no CVSS)
- [CVE-2023-30151](https://cve.now/CVE-2023-30151.md): A SQL injection vulnerability in the Boxtal (envoimoinscher) module for PrestaShop, after version 3.1.10, allows remote attackers to execute (no CVSS)
- [CVE-2023-31704](https://cve.now/CVE-2023-31704.md): Sourcecodester Online Computer and Laptop Store 1.0 is vulnerable to Incorrect Access Control, which allows remote attackers to elevate priv (no CVSS)
- [CVE-2023-31705](https://cve.now/CVE-2023-31705.md): A Reflected Cross-site scripting (XSS) vulnerability in Sourcecodester Task Reminder System 1.0 allows an authenticated user to inject malic (no CVSS)
- [CVE-2023-31819](https://cve.now/CVE-2023-31819.md): An issue found in KEISEI STORE Co, Ltd. (no CVSS)
- [CVE-2023-31820](https://cve.now/CVE-2023-31820.md): An issue found in Shizutetsu Store v.13.6.1 allows a remote attacker to gain access to sensitive information via the channel access token in (no CVSS)
- [CVE-2023-31821](https://cve.now/CVE-2023-31821.md): An issue found in ALBIS Co. (no CVSS)
- [CVE-2023-31822](https://cve.now/CVE-2023-31822.md): An issue found in Entetsu Store v.13.4.1 allows a remote attacker to gain access to sensitive information via the channel access token in th (no CVSS)
- [CVE-2023-31823](https://cve.now/CVE-2023-31823.md): An issue found in Marui Co Marui Official app v.13.6.1 allows a remote attacker to gain access to sensitive information via the channel acce (no CVSS)
- [CVE-2023-31824](https://cve.now/CVE-2023-31824.md): An issue found in DERICIA Co. (no CVSS)
- [CVE-2023-31825](https://cve.now/CVE-2023-31825.md): An issue found in Inageya v.13.4.1 allows a remote attacker to gain access to sensitive information via the channel access token in the mini (no CVSS)
- [CVE-2023-33768](https://cve.now/CVE-2023-33768.md): Incorrect signature verification of the firmware during the Device Firmware Update process of Belkin Wemo Smart Plug WSP080 v1.2 allows atta (no CVSS)
- [CVE-2023-35833](https://cve.now/CVE-2023-35833.md): An issue was discovered in YSoft SAFEQ 6 Server before 6.0.82. (no CVSS)
- [CVE-2023-37598](https://cve.now/CVE-2023-37598.md): A Cross Site Request Forgery (CSRF) vulnerability in issabel-pbx v.4.0.0-6 allows a remote attacker to cause a denial of service via the del (no CVSS)
- [CVE-2023-37599](https://cve.now/CVE-2023-37599.md): An issue in issabel-pbx v.4.0.0-6 allows a remote attacker to obtain sensitive information via the modules directory (no CVSS)
- [CVE-2023-37743](https://cve.now/CVE-2023-37743.md): A cross-site scripting (XSS) vulnerability in Teacher Subject Allocation System v1.0 allows attackers to execute arbitrary web scripts or HT (no CVSS)
- [CVE-2023-37744](https://cve.now/CVE-2023-37744.md): Maid Hiring Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /admin/search-book (no CVSS)
- [CVE-2023-37745](https://cve.now/CVE-2023-37745.md): A cross-site scripting (XSS) vulnerability in Maid Hiring Management System v1.0 allows attackers to execute arbitrary web scripts or HTML v (no CVSS)
- [CVE-2023-37746](https://cve.now/CVE-2023-37746.md): A cross-site scripting (XSS) vulnerability in Maid Hiring Management System v1.0 allows attackers to execute arbitrary web scripts or HTML v (no CVSS)
- [CVE-2023-37785](https://cve.now/CVE-2023-37785.md): A cross-site scripting (XSS) vulnerability in ImpressCMS v1.4.5 and before allows attackers to execute arbitrary web scripts or HTML via a c (no CVSS, impresscms/impresscms)
- [CVE-2023-37786](https://cve.now/CVE-2023-37786.md): Multiple cross-site scripting (XSS) vulnerabilities in Geeklog v2.2.2 allow attackers to execute arbitrary web scripts or HTML via a crafted (no CVSS)
- [CVE-2023-37787](https://cve.now/CVE-2023-37787.md): Multiple cross-site scripting (XSS) vulnerabilities in Geeklog v2.2.2 allow attackers to execute arbitrary web scripts or HTML via a crafted (no CVSS)
- [CVE-2023-37836](https://cve.now/CVE-2023-37836.md): libjpeg commit db33a6e was discovered to contain a reachable assertion via BitMapHook::BitMapHook at bitmaphook.cpp. (no CVSS)
- [CVE-2023-37837](https://cve.now/CVE-2023-37837.md): libjpeg commit db33a6e was discovered to contain a heap buffer overflow via LineBitmapRequester::EncodeRegion at linebitmaprequester.cpp. (no CVSS)
- [CVE-2023-37839](https://cve.now/CVE-2023-37839.md): An arbitrary file upload vulnerability in /dede/file\_manage\_control.php of DedeCMS v5.7.109 allows attackers to execute arbitrary code via u (no CVSS)
- [CVE-2023-37849](https://cve.now/CVE-2023-37849.md): A DLL hijacking vulnerability in Panda Security VPN for Windows prior to version v15.14.8 allows attackers to execute arbitrary code via pla (no CVSS)
- [CVE-2023-38197](https://cve.now/CVE-2023-38197.md): An issue was discovered in Qt before 5.15.15, 6.x before 6.2.10, and 6.3.x through 6.5.x before 6.5.3. (CVSS 7.5)
- [CVE-2023-38198](https://cve.now/CVE-2023-38198.md): acme.sh before 3.0.6 runs arbitrary commands from a remote server via eval, as exploited in the wild in June 2023. (no CVSS)
- [CVE-2023-38199](https://cve.now/CVE-2023-38199.md): coreruleset (aka OWASP ModSecurity Core Rule Set) through 3.3.4 does not detect multiple Content-Type request headers on some platforms. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-07-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.