# CVEs published 2023-07-16

18 CVEs were published on July 16, 2023: 0 critical, 3 high. Days are UTC.

- [CVE-2023-33857](https://cve.now/CVE-2023-33857.md): IBM InfoSphere Information Server information disclosure (CVSS 5.3, IBM InfoSphere Information Server)
- [CVE-2023-35901](https://cve.now/CVE-2023-35901.md): IBM Robotic Process Automation security bypass (CVSS 2.7, IBM Robotic Process Automation)
- [CVE-2023-3694](https://cve.now/CVE-2023-3694.md): SourceCodester/projectworlds House Rental and Property Listing index.php sql injection (CVSS 5.3, SourceCodester House Rental and Property Listing · projectw…)
- [CVE-2023-30989](https://cve.now/CVE-2023-30989.md): IBM i privilege escalation (CVSS 8.4, IBM i)
- [CVE-2023-30988](https://cve.now/CVE-2023-30988.md): IBM i privilege escalation (CVSS 8.4, IBM i)
- [CVE-2023-3693](https://cve.now/CVE-2023-3693.md): SourceCodester Life Insurance Management System login.php sql injection (CVSS 7.3, SourceCodester Life Insurance Management System)
- [CVE-2023-3691](https://cve.now/CVE-2023-3691.md): layui HTML Attribute cross site scripting (CVSS 3.5, layui)
- [CVE-2023-3690](https://cve.now/CVE-2023-3690.md): Bylancer QuickOrder GET Parameter blog sql injection (CVSS 6.3, Bylancer QuickOrder)
- [CVE-2023-3689](https://cve.now/CVE-2023-3689.md): Bylancer QuickQR GET Parameter blog sql injection (CVSS 6.3, Bylancer QuickQR)
- [CVE-2023-3688](https://cve.now/CVE-2023-3688.md): Bylancer QuickJob GET Parameter sql injection (CVSS 6.3, Bylancer QuickJob)
- [CVE-2023-3687](https://cve.now/CVE-2023-3687.md): Bylancer QuickVCard GET Parameter blog sql injection (CVSS 6.3, Bylancer QuickVCard)
- [CVE-2023-3686](https://cve.now/CVE-2023-3686.md): Bylancer QuickAI OpenAI GET Parameter blog sql injection (CVSS 6.3, Bylancer QuickAI OpenAI)
- [CVE-2023-3685](https://cve.now/CVE-2023-3685.md): Nesote Inout Search Engine AI Edition index.php cross site scripting (CVSS 3.5, Nesote Inout Search Engine AI Edition)
- [CVE-2023-3684](https://cve.now/CVE-2023-3684.md): LivelyWorks Articart Base64 Encoding de\_DE redirect (CVSS 3.5, LivelyWorks Articart)
- [CVE-2023-3683](https://cve.now/CVE-2023-3683.md): LivelyWorks Articart search cross site scripting (CVSS 3.5, LivelyWorks Articart)
- [CVE-2023-3692](https://cve.now/CVE-2023-3692.md): Unrestricted Upload of File with Dangerous Type in admidio/admidio (CVSS 6.7, admidio/admidio)
- [CVE-2023-38378](https://cve.now/CVE-2023-38378.md): The web interface on the RIGOL MSO5000 digital oscilloscope with firmware 00.01.03.00.03 allows remote attackers to execute arbitrary code v (no CVSS)
- [CVE-2023-38379](https://cve.now/CVE-2023-38379.md): The web interface on the RIGOL MSO5000 digital oscilloscope with firmware 00.01.03.00.03 allows remote attackers to change the admin passwor (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-07-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.