# CVEs published 2023-07-14

60 CVEs were published on July 14, 2023: 2 critical, 18 high. Days are UTC.

- [CVE-2023-36818](https://cve.now/CVE-2023-36818.md): Denial of service via User Custom Sidebar Section Unlimited Link Creation in discourse (CVSS 6.5, discourse)
- [CVE-2023-36466](https://cve.now/CVE-2023-36466.md): Topic Title Validation Skipped When Changing Category in Discourse (CVSS 3.5, discourse)
- [CVE-2023-34236](https://cve.now/CVE-2023-34236.md): Information Disclosure Vulnerability in Weave GitOps Terraform Controller (CVSS 8.5, weaveworks tf-controller · github.com/weaveworks/tf-control…)
- [CVE-2023-37268](https://cve.now/CVE-2023-37268.md): User login confusion with SSO in warpgate (CVSS 6.4, warp-tech warpgate)
- [CVE-2023-37462](https://cve.now/CVE-2023-37462.md): Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in org.xwiki.platform:xwiki-platform-skin-ui (CVSS 10.0, xwiki-platform · org.xwiki.platform:xwiki-platform-skin-ui)
- [CVE-2023-37464](https://cve.now/CVE-2023-37464.md): Incorrect Authentication Tag length usage in AES GCM decryption in OpenIDC/cjose (CVSS 8.6, OpenIDC cjose)
- [CVE-2023-37472](https://cve.now/CVE-2023-37472.md): Query injection in Knowage server (CVSS 7.7, KnowageLabs Knowage-Server)
- [CVE-2023-37473](https://cve.now/CVE-2023-37473.md): Limited code execution in zenstruck/collections (CVSS 8.6, zenstruck collection · zenstruck/collection)
- [CVE-2023-37474](https://cve.now/CVE-2023-37474.md): Path traversal in copyparty (CVSS 7.5, 9001 copyparty · copyparty)
- [CVE-2023-3633](https://cve.now/CVE-2023-3633.md): Out of Bounds Memory Corruption Issue in CEVA Engine (CVSS 8.1, Bitdefender Engines)
- [CVE-2023-36850](https://cve.now/CVE-2023-36850.md): Junos OS: MX Series: An MPC will crash upon receipt of a malformed CFM packet. (CVSS 6.5, Juniper Networks Junos OS)
- [CVE-2023-36849](https://cve.now/CVE-2023-36849.md): Junos OS and Junos OS Evolved: The l2cpd will crash when a malformed LLDP packet is received (CVSS 6.5, Juniper Networks Junos OS)
- [CVE-2023-36888](https://cve.now/CVE-2023-36888.md): Microsoft Edge for Android (Chromium-based) Tampering Vulnerability (CVSS 6.3, Microsoft Edge for Android)
- [CVE-2023-36887](https://cve.now/CVE-2023-36887.md): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Edge)
- [CVE-2023-36883](https://cve.now/CVE-2023-36883.md): Microsoft Edge for iOS Spoofing Vulnerability (CVSS 4.3, Microsoft Edge for iOS)
- [CVE-2023-36848](https://cve.now/CVE-2023-36848.md): Junos OS: MX Series: The FPC will crash on receiving a malformed CFM packet (CVSS 6.5, Juniper Networks Junos OS)
- [CVE-2023-36840](https://cve.now/CVE-2023-36840.md): Junos OS and Junos OS Evolved: An rpd crash occurs when a specific L2VPN command is run (CVSS 5.5, Juniper Networks Junos OS)
- [CVE-2023-36836](https://cve.now/CVE-2023-36836.md): Junos OS and Junos OS Evolved: In a MoFRR scenario an rpd core may be observed when a low privileged CLI command is executed (CVSS 4.7, Juniper Networks Junos OS)
- [CVE-2023-24896](https://cve.now/CVE-2023-24896.md): Dynamics 365 Finance Spoofing Vulnerability (CVSS 5.4, Microsoft Dynamics 365 for Finance and Operations)
- [CVE-2023-36835](https://cve.now/CVE-2023-36835.md): Junos OS: QFX10000 Series: All traffic will be dropped after a specific valid IP packet has been received which needs to be routed over a VXLAN tunnel (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2023-38253](https://cve.now/CVE-2023-38253.md): W3m: out of bounds read in growbuf\_to\_str() at w3m/indep.c (CVSS 4.7, w3m · Red Hat Enterprise Linux +2)
- [CVE-2023-38252](https://cve.now/CVE-2023-38252.md): W3m: out of bounds read in strnew\_size() at w3m/str.c (CVSS 4.7, Red Hat Enterprise Linux)
- [CVE-2023-36834](https://cve.now/CVE-2023-36834.md): Junos OS: SRX 4600 and SRX 5000 Series: The receipt of specific genuine packets by SRXes configured for L2 transparency will cause a DoS (CVSS 6.5, Juniper Networks Junos OS)
- [CVE-2023-36833](https://cve.now/CVE-2023-36833.md): Junos OS Evolved: PTX10001-36MR, and PTX10004, PTX10008, PTX10016 with LC1201/1202: The aftman-bt process will crash in a MoFRR scenario after multiple link flaps (CVSS 6.5, Juniper Networks Junos OS Evolved)
- [CVE-2023-28985](https://cve.now/CVE-2023-28985.md): SRX Series and MX Series: An FPC core is observed when IDP is enabled on the device and a specific malformed SSL packet is received (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2023-36838](https://cve.now/CVE-2023-36838.md): Junos OS: SRX Series: A flowd core occurs when running a low privileged CLI command (CVSS 5.5, Juniper Networks Junos OS)
- [CVE-2023-35692](https://cve.now/CVE-2023-35692.md): In getLocationCache of GeoLocation.java, there is a possible way to send a mock location during an emergency call due to improper input vali (no CVSS, Google Android)
- [CVE-2023-36832](https://cve.now/CVE-2023-36832.md): Junos OS: MX Series: PFE crash upon receipt of specific packet destined to an AMS interface (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2023-36831](https://cve.now/CVE-2023-36831.md): Junos OS: SRX Series: jbuf memory leak when SSL Proxy and UTM Web-Filtering is applied (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2023-3434](https://cve.now/CVE-2023-3434.md): QRC Handler without Input Validation in Jami (CVSS 4.4, Savoir-faire Linux Jami)
- [CVE-2023-3433](https://cve.now/CVE-2023-3433.md): Local Denial of Service in Jami (CVSS 5.5, Savoir-faire Linux Jami)
- [CVE-2023-3673](https://cve.now/CVE-2023-3673.md): SQL Injection in pimcore/pimcore (CVSS 7.2, pimcore/pimcore)
- [CVE-2023-2975](https://cve.now/CVE-2023-2975.md): AES-SIV implementation ignores empty associated data entries (CVSS 5.3, OpenSSL)
- [CVE-2023-3672](https://cve.now/CVE-2023-3672.md): Cross-site Scripting (XSS) - DOM in plaidweb/webmention.js (CVSS 7.3, plaidweb/webmention.js · webmention.js)
- [CVE-2023-3649](https://cve.now/CVE-2023-3649.md): Buffer Over-read in Wireshark (CVSS 5.3, Wireshark Foundation Wireshark)
- [CVE-2023-3648](https://cve.now/CVE-2023-3648.md): Mismatched Memory Management Routines in Wireshark (CVSS 5.3, Wireshark Foundation Wireshark)
- [CVE-2023-3514](https://cve.now/CVE-2023-3514.md): RazerCentralSerivce Unsafe Named Pipe Permission Escalation of Privilege Vulnerability (CVSS 7.8, Razer Central)
- [CVE-2023-3513](https://cve.now/CVE-2023-3513.md): RazerCentralService Unsafe Deserialization Escalation of Privilege (CVSS 7.8, Razer Central)
- [CVE-2023-2082](https://cve.now/CVE-2023-2082.md): Buy Me a Coffee – Button and Widget Plugin \<= 3.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting (CVSS 6.4, buymeacoffee Buy Me a Coffee – Button and Widget Plugin)
- [CVE-2023-3668](https://cve.now/CVE-2023-3668.md): Improper Encoding or Escaping of Output in froxlor/froxlor (CVSS 9.1, froxlor/froxlor)
- [CVE-2023-32759](https://cve.now/CVE-2023-32759.md): An issue in Archer Platform before v.6.13 and fixed in 6.12.0.6 and 6.13.0 allows an authenticated attacker to obtain sensitive information (CVSS 7.5)
- [CVE-2023-32760](https://cve.now/CVE-2023-32760.md): An issue in Archer Platform before v.6.13 fixed in v.6.12.0.6 and v.6.13.0 allows an authenticated attacker to obtain sensitive information (CVSS 7.7)
- [CVE-2023-32761](https://cve.now/CVE-2023-32761.md): Cross Site Request Forgery (CSRF) vulnerability in Archer Platform before v.6.13 and fixed in v.6.12.0.6 and v.6.13.0 allows an authenticate (CVSS 8.1)
- [CVE-2023-37223](https://cve.now/CVE-2023-37223.md): Cross Site Scripting (XSS) vulnerability in Archer Platform before v.6.13 and fixed in v.6.12.0.6 and v.6.13.0 allows a remote authenticated (CVSS 5.4)
- [CVE-2023-37224](https://cve.now/CVE-2023-37224.md): An issue in Archer Platform before v.6.13 fixed in v.6.12.0.6 and v.6.13.0 allows an authenticated attacker to obtain sensitive information (CVSS 6.0)
- [CVE-2023-37714](https://cve.now/CVE-2023-37714.md): Tenda F1202 V1.0BR\_V1.2.0.20(408), FH1202\_V1.2.0.19\_EN were discovered to contain a stack overflow in the page parameter in the function fro (no CVSS)
- [CVE-2023-37715](https://cve.now/CVE-2023-37715.md): Tenda F1202 V1.0BR\_V1.2.0.20(408), FH1202\_V1.2.0.19\_EN were discovered to contain a stack overflow in the page parameter in the function frm (no CVSS)
- [CVE-2023-37716](https://cve.now/CVE-2023-37716.md): Tenda F1202 V1.0BR\_V1.2.0.20(408) and FH1202\_V1.2.0.19\_EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 were discovered to conta (no CVSS)
- [CVE-2023-37717](https://cve.now/CVE-2023-37717.md): Tenda F1202 V1.0BR\_V1.2.0.20(408) and FH1202\_V1.2.0.19\_EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 were discovered to conta (no CVSS)
- [CVE-2023-37718](https://cve.now/CVE-2023-37718.md): Tenda F1202 V1.0BR\_V1.2.0.20(408), FH1202\_V1.2.0.19\_EN were discovered to contain a stack overflow in the page parameter in the function fro (no CVSS)
- [CVE-2023-37719](https://cve.now/CVE-2023-37719.md): Tenda F1202 V1.0BR\_V1.2.0.20(408), FH1202\_V1.2.0.19\_EN were discovered to contain a stack overflow in the page parameter in the function fro (no CVSS)
- [CVE-2023-37721](https://cve.now/CVE-2023-37721.md): Tenda F1202 V1.0BR\_V1.2.0.20(408), FH1202\_V1.2.0.19\_EN were discovered to contain a stack overflow in the page parameter in the function fro (no CVSS)
- [CVE-2023-37722](https://cve.now/CVE-2023-37722.md): Tenda F1202 V1.0BR\_V1.2.0.20(408), FH1202\_V1.2.0.19\_EN were discovered to contain a stack overflow in the page parameter in the function fro (no CVSS)
- [CVE-2023-37723](https://cve.now/CVE-2023-37723.md): Tenda F1202 V1.0BR\_V1.2.0.20(408), FH1202\_V1.2.0.19\_EN were discovered to contain a stack overflow in the page parameter in the function fro (no CVSS)
- [CVE-2023-37793](https://cve.now/CVE-2023-37793.md): WAYOS FBM-291W 19.09.11V was discovered to contain a buffer overflow via the component /upgrade\_filter.asp. (no CVSS)
- [CVE-2023-37794](https://cve.now/CVE-2023-37794.md): WAYOS FBM-291W 19.09.11V was discovered to contain a command injection vulnerability via the component /upgrade\_filter.asp. (no CVSS)
- [CVE-2023-38286](https://cve.now/CVE-2023-38286.md): Thymeleaf through 3.1.1.RELEASE, as used in spring-boot-admin (aka Spring Boot Admin) through 3.1.1 and other products, allows sandbox bypas (no CVSS, de.codecentric:spring-boot-admin-server)
- [CVE-2023-38325](https://cve.now/CVE-2023-38325.md): The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options. (no CVSS, cryptography)
- [CVE-2023-38336](https://cve.now/CVE-2023-38336.md): netkit-rcp in rsh-client 0.17-24 allows command injection via filenames because /bin/sh is used by susystem, a related issue to CVE-2006-022 (no CVSS)
- [CVE-2023-38337](https://cve.now/CVE-2023-38337.md): rswag before 2.10.1 allows remote attackers to read arbitrary JSON and YAML files via directory traversal, because rswag-api can expose a fi (no CVSS, rswag)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-07-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.