# CVEs published 2023-07-17

101 CVEs were published on July 17, 2023: 11 critical, 13 high. Days are UTC.

- [CVE-2023-37479](https://cve.now/CVE-2023-37479.md): Improper sanitization of MXCSR and RFLAGS in OpenEnclave (CVSS 5.3, openenclave)
- [CVE-2023-3724](https://cve.now/CVE-2023-3724.md): TLS 1.3 client issue handling malicious server when not including a KSE and PSK extension (CVSS 9.1, wolfSSL)
- [CVE-2023-37476](https://cve.now/CVE-2023-37476.md): Zip slip in OpenRefine (CVSS 5.5, OpenRefine · org.openrefine:main)
- [CVE-2023-37265](https://cve.now/CVE-2023-37265.md): Incorrect identification of source IP addresses in CasaOS (CVSS 9.8, IceWhaleTech CasaOS-Gateway · github.com/IceWhaleTech/CasaO…)
- [CVE-2023-37266](https://cve.now/CVE-2023-37266.md): Weak json web token (JWT) secrets in CasaOS (CVSS 9.8, IceWhaleTech CasaOS · github.com/IceWhaleTech/CasaOS)
- [CVE-2023-37461](https://cve.now/CVE-2023-37461.md): Path traversal in metersphere (CVSS 5.6, metersphere)
- [CVE-2023-34141](https://cve.now/CVE-2023-34141.md): A command injection vulnerability in the access point (AP) management feature of the Zyxel ATP series firmware versions 5.00 through 5.36 Pa (CVSS 8.0, Zyxel ATP series firmware · Zyxel USG FLEX series firmwa… +5)
- [CVE-2023-34140](https://cve.now/CVE-2023-34140.md): A buffer overflow vulnerability in the Zyxel ATP series firmware versions 4.32 through 5.36 Patch 2, USG FLEX series firmware versions 4.50 (CVSS 6.5, Zyxel ATP series firmware · Zyxel USG FLEX series firmwa… +5)
- [CVE-2023-34139](https://cve.now/CVE-2023-34139.md): A command injection vulnerability in the Free Time WiFi hotspot feature of the Zyxel USG FLEX series firmware versions 4.50 through 5.36 Pat (CVSS 8.8, Zyxel USG FLEX series firmware · Zyxel VPN series firmware)
- [CVE-2023-34138](https://cve.now/CVE-2023-34138.md): A command injection vulnerability in the hotspot management feature of the Zyxel ATP series firmware versions 4.60 through 5.36 Patch 2, USG (CVSS 8.0, Zyxel ATP series firmware · Zyxel USG FLEX series firmwa… +3)
- [CVE-2023-33012](https://cve.now/CVE-2023-33012.md): A command injection vulnerability in the configuration parser of the Zyxel ATP series firmware versions 5.10 through 5.36 Patch 2, USG FLEX (CVSS 8.8, Zyxel ATP series firmware · Zyxel USG FLEX series firmwa… +3)
- [CVE-2023-33011](https://cve.now/CVE-2023-33011.md): A format string vulnerability in the Zyxel ATP series firmware versions 5.10 through 5.36 Patch 2, USG FLEX series firmware versions 5.00 th (CVSS 8.8, Zyxel ATP series firmware · Zyxel USG FLEX series firmwa… +3)
- [CVE-2023-28767](https://cve.now/CVE-2023-28767.md): The configuration parser fails to sanitize user-controlled input in the Zyxel ATP series firmware versions 5.10 through 5.36, USG FLEX serie (CVSS 8.8, Zyxel ATP series firmware · Zyxel USG FLEX series firmwa… +3)
- [CVE-2023-37475](https://cve.now/CVE-2023-37475.md): Attacker-controlled parameter can cause denial of service in hamba avro (CVSS 7.5, hamba avro · github.com/hamba/avro/v2 +1)
- [CVE-2023-3593](https://cve.now/CVE-2023-3593.md): Server crash via a specially crafted markdown input (CVSS 4.3, Mattermost)
- [CVE-2023-3615](https://cve.now/CVE-2023-3615.md): Lack of server certificate validation in websockets connection (CVSS 8.1, Mattermost iOS app)
- [CVE-2023-3614](https://cve.now/CVE-2023-3614.md): Denial of Service via specially crafted gif image (CVSS 4.3, Mattermost)
- [CVE-2023-3613](https://cve.now/CVE-2023-3613.md): Guest accounts invited and added to channels by Welcomebot plugin (CVSS 3.5, Mattermost Plugins)
- [CVE-2023-3591](https://cve.now/CVE-2023-3591.md): Lack of previous password reset tokens on new token creation (CVSS 4.8, Mattermost)
- [CVE-2023-3590](https://cve.now/CVE-2023-3590.md): Deleted attachments in Boards remain accessible (CVSS 3.1, Mattermost)
- [CVE-2023-3587](https://cve.now/CVE-2023-3587.md): Inconsistent state in UI after boards permission change by system admin (CVSS 2.7, Mattermost)
- [CVE-2023-3586](https://cve.now/CVE-2023-3586.md): Disabling publicly-shared boards does not disable existing publicly available board links (CVSS 4.2, Mattermost)
- [CVE-2023-3585](https://cve.now/CVE-2023-3585.md): channel DoS by sharing a boards link (CVSS 4.3, Mattermost)
- [CVE-2023-3584](https://cve.now/CVE-2023-3584.md): Member can create team with team override scheme (CVSS 3.1, Mattermost)
- [CVE-2023-3582](https://cve.now/CVE-2023-3582.md): Lack of channel membership check when linking a board to a channel (CVSS 4.3, Mattermost)
- [CVE-2022-38062](https://cve.now/CVE-2022-38062.md): WordPress Download Theme Plugin \<= 1.0.9 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Metagauss Download Theme)
- [CVE-2023-3581](https://cve.now/CVE-2023-3581.md): WebSockets accept connections from HTTPS origin (CVSS 6.2, Mattermost)
- [CVE-2023-3577](https://cve.now/CVE-2023-3577.md): Limited blind SSRF to localhost/intranet in interactive dialog implementation (CVSS 3.5, Mattermost)
- [CVE-2022-36424](https://cve.now/CVE-2022-36424.md): WordPress Easy Appointments Plugin \<= 3.11.9 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Nikola Loncar Easy Appointments)
- [CVE-2023-37985](https://cve.now/CVE-2023-37985.md): WordPress Five Star Restaurant Menu Plugin \<= 2.4.6 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, FiveStarPlugins Restaurant Menu and Food Ordering by Five S…)
- [CVE-2023-37974](https://cve.now/CVE-2023-37974.md): WordPress WP-FB-AutoConnect Plugin \<= 4.6.1 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, Justin Klein WP Social AutoConnect)
- [CVE-2023-37968](https://cve.now/CVE-2023-37968.md): WordPress Falang multilanguage Plugin \<= 1.3.39 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, Faboba Falang multilanguage for WordPress)
- [CVE-2023-34005](https://cve.now/CVE-2023-34005.md): WordPress Front End Users Plugin \<= 3.2.24 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 6.5, Etoile Web Design Front End Users)
- [CVE-2022-47172](https://cve.now/CVE-2022-47172.md): WordPress WooLentor Plugin \<= 2.6.2 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, HasThemes ShopLentor)
- [CVE-2023-36514](https://cve.now/CVE-2023-36514.md): WordPress WooCommerce Ship to Multiple Addresses Plugin \<= 3.8.5 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 6.5, WooCommerce Shipping Multiple Addresses)
- [CVE-2023-36513](https://cve.now/CVE-2023-36513.md): WordPress AutomateWoo Plugin \<= 5.7.5 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, WooCommerce AutomateWoo)
- [CVE-2023-36511](https://cve.now/CVE-2023-36511.md): WordPress WooCommerce Order Barcodes Plugin \<= 1.6.4 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, WooCommerce Order Barcodes)
- [CVE-2023-2958](https://cve.now/CVE-2023-2958.md): IDOR in ATS Pro (CVSS 9.8, Origin Software ATS Pro)
- [CVE-2023-31216](https://cve.now/CVE-2023-31216.md): WordPress Ultimate Member Plugin \<= 2.6.0 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Ultimate Member)
- [CVE-2023-35880](https://cve.now/CVE-2023-35880.md): WordPress WooCommerce Brands Plugin \<= 1.6.49 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, WooCommerce Brands)
- [CVE-2023-35096](https://cve.now/CVE-2023-35096.md): WordPress myCred Plugin \<= 2.5 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, myCred)
- [CVE-2023-2963](https://cve.now/CVE-2023-2963.md): SQLi in Oliva Expertise (CVSS 9.8, Oliva Expertise EKS)
- [CVE-2023-35089](https://cve.now/CVE-2023-35089.md): WordPress Recipe Maker For Your Food Blog from Zip Recipes Plugin \<= 8.0.7 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Really Simple Plugins Recipe Maker For Your Food Blog from…)
- [CVE-2023-2960](https://cve.now/CVE-2023-2960.md): XSS in Oliva Expertise (CVSS 6.1, Oliva Expertise EKS)
- [CVE-2023-2701](https://cve.now/CVE-2023-2701.md): Gravity Forms \< 2.7.5 - Reflected XSS (no CVSS, gravityforms)
- [CVE-2023-0439](https://cve.now/CVE-2023-0439.md): NEX-Forms \< 8.4.4 - Authenticated Stored XSS (no CVSS, NEX-Forms)
- [CVE-2023-2330](https://cve.now/CVE-2023-2330.md): Caldera Forms Google Sheets Connector \< 1.3 - Access Code Update via CSRF (no CVSS, Caldera Forms Google Sheets Connector)
- [CVE-2023-3182](https://cve.now/CVE-2023-3182.md): Membership Plugin - Restrict Content \< 3.2.3 - Reflected XSS (no CVSS, Membership Plugin)
- [CVE-2023-3245](https://cve.now/CVE-2023-3245.md): Floating Chat Widget \< 3.1.2 - Admin+ Stored Cross-Site Scripting (CVSS 4.8, Floating Chat Widget: Contact Chat Icons, Telegram Chat, Li…)
- [CVE-2023-3179](https://cve.now/CVE-2023-3179.md): POST SMTP Mailer \< 2.5.7 - Account Takeover via CSRF (no CVSS, POST SMTP Mailer)
- [CVE-2023-1893](https://cve.now/CVE-2023-1893.md): Login Configurator \<= 2.1 - Reflected Cross-Site Scripting (no CVSS, Login Configurator)
- [CVE-2023-2143](https://cve.now/CVE-2023-2143.md): Enable SVG, WebP & ICO Upload \<= 1.0.3 - Author+ Stored XSS (no CVSS, Enable SVG, WebP & ICO Upload)
- [CVE-2023-2636](https://cve.now/CVE-2023-2636.md): AN\_GradeBook \<= 5.0.1 - Subscriber+ SQLi (no CVSS, AN\_GradeBook)
- [CVE-2023-3186](https://cve.now/CVE-2023-3186.md): Supsystic Popup \< 1.10.19 - Prototype Pollution (no CVSS, Popup by Supsystic)
- [CVE-2023-3041](https://cve.now/CVE-2023-3041.md): Autochat \<= 1.1.7- Unauthenticated Stored XSS (CVSS 6.1, Autochat Automatic Conversation)
- [CVE-2023-2579](https://cve.now/CVE-2023-2579.md): InventoryPress \<= 1.7 - Author+ Stored XSS (no CVSS, InventoryPress)
- [CVE-2023-2329](https://cve.now/CVE-2023-2329.md): WooCommerce Google Sheet Connector \< 1.3.6 - Access Code Update via CSRF (no CVSS, WooCommerce Google Sheet Connector)
- [CVE-2022-4023](https://cve.now/CVE-2022-4023.md): 3DPrint \< 3.5.6.9 - CSRF to arbitrary file downlad (no CVSS, 3dprint)
- [CVE-2023-35038](https://cve.now/CVE-2023-35038.md): WordPress WP PDF Generator Plugin \<= 1.2.2 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, wpexperts.io WP PDF Generator)
- [CVE-2023-2959](https://cve.now/CVE-2023-2959.md): Authentication Bypass by Primary Weakness in Oliva Expertise (CVSS 7.5, Oliva Expertise EKS)
- [CVE-2023-3376](https://cve.now/CVE-2023-3376.md): SQLi in Digital Strategys Zekiweb (CVSS 9.8, Digital Strategy Zekiweb)
- [CVE-2023-2912](https://cve.now/CVE-2023-2912.md): SiteManager Embedded service disruption (CVSS 5.9, Secomea SiteManager Embedded)
- [CVE-2023-27424](https://cve.now/CVE-2023-27424.md): WordPress Inactive User Deleter Plugin \<= 1.59 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, Korol Yuriy aka Shra Inactive User Deleter)
- [CVE-2023-23719](https://cve.now/CVE-2023-23719.md): WordPress Premmerce Plugin \<= 1.3.17 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, Premmerce)
- [CVE-2023-23646](https://cve.now/CVE-2023-23646.md): WordPress Album Gallery – WordPress Gallery Plugin \<= 1.4.9 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, A WP Life Album Gallery – WordPress Gallery)
- [CVE-2023-22672](https://cve.now/CVE-2023-22672.md): WordPress vSlider Multi Image Slider for WordPress Plugin \<= 4.1.2 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Mr.Vibe vSlider Multi Image Slider for WordPress)
- [CVE-2023-27606](https://cve.now/CVE-2023-27606.md): WordPress WP Reroute Email Plugin \<= 1.4.6 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, Sajjad Hossain WP Reroute Email)
- [CVE-2023-34036](https://cve.now/CVE-2023-34036.md): Forwarded header exploit with Spring HATEOAS on WebFlux (CVSS 5.3, Spring HATEOAS · org.springframework.hateoas:spring-hateoas)
- [CVE-2023-26512](https://cve.now/CVE-2023-26512.md): Apache EventMesh RabbitMQ-Connector plugin allows RCE through deserialization of untrusted data (CVSS 9.8, Apache Software Foundation Apache EventMesh (incubating) Ra…)
- [CVE-2023-3700](https://cve.now/CVE-2023-3700.md): Authorization Bypass Through User-Controlled Key in alextselegidis/easyappointments (CVSS 6.3, alextselegidis/easyappointments)
- [CVE-2023-2760](https://cve.now/CVE-2023-2760.md): TAPHOME SQL Injection in Core Platform (CVSS 7.6, TAPHOME Core Platform)
- [CVE-2023-2759](https://cve.now/CVE-2023-2759.md): TAPHOME Improper Authentication in Core Platform (CVSS 8.8, TAPHOME Core Platform)
- [CVE-2022-4952](https://cve.now/CVE-2022-4952.md): OmniSharp csharp-language-server-protocol JSON Serializer SerializerBase.cs CreateSerializerSettings resource consumption (CVSS 3.5, OmniSharp csharp-language-server-protocol)
- [CVE-2023-3695](https://cve.now/CVE-2023-3695.md): Campcodes Beauty Salon Management System add-product.php sql injection (CVSS 6.3, Campcodes Beauty Salon Management System)
- [CVE-2023-35012](https://cve.now/CVE-2023-35012.md): IBM Db2 code execution (CVSS 6.7, IBM Db2 for Linux, UNIX and Windows)
- [CVE-2023-3696](https://cve.now/CVE-2023-3696.md): Prototype Pollution in automattic/mongoose (CVSS 10.0, automattic/mongoose · mongoose)
- [CVE-2021-37384](https://cve.now/CVE-2021-37384.md): RCE (Remote Code Execution) vulnerability was found in some Furukawa ONU models, this vulnerability allows remote unauthenticated users to s (CVSS 9.8)
- [CVE-2021-37386](https://cve.now/CVE-2021-37386.md): Furukawa Electric LatAm 423-41W/AC before v1.1.4 and LD421-21W before v1.3.3 were discovered to contain an HTML injection vulnerability via (CVSS 7.5)
- [CVE-2022-30858](https://cve.now/CVE-2022-30858.md): An issue was discovered in ngiflib 0.4. (no CVSS)
- [CVE-2023-28864](https://cve.now/CVE-2023-28864.md): Progress Chef Infra Server before 15.7 allows a local attacker to exploit a /var/opt/opscode/local-mode-cache/backup world-readable temporar (no CVSS)
- [CVE-2023-31851](https://cve.now/CVE-2023-31851.md): Cudy LT400 1.13.4 is has a cross-site scripting (XSS) vulnerability in /cgi-bin/luci/admin/network/wireless/status via the iface parameter. (no CVSS)
- [CVE-2023-31852](https://cve.now/CVE-2023-31852.md): Cudy LT400 1.13.4 is vulnerable to Cross Site Scripting (XSS) in cgi-bin/luci/admin/network/wireless/config via the iface parameter. (no CVSS)
- [CVE-2023-31853](https://cve.now/CVE-2023-31853.md): Cudy LT400 1.13.4 is vulnerable Cross Site Scripting (XSS) in /cgi-bin/luci/admin/network/bandwidth via the icon parameter. (no CVSS)
- [CVE-2023-34669](https://cve.now/CVE-2023-34669.md): TOTOLINK CP300+ V5.2cu.7594 contains a Denial of Service vulnerability in function RebootSystem of the file lib/cste\_modules/system which ca (no CVSS)
- [CVE-2023-35818](https://cve.now/CVE-2023-35818.md): An issue was discovered on Espressif ESP32 3.0 (ESP32\_rev300 ROM) devices. (no CVSS)
- [CVE-2023-36656](https://cve.now/CVE-2023-36656.md): Cross Site Scripting (XSS) vulnerability in Jaegertracing Jaeger UI before v.1.31.0 allows a remote attacker to execute arbitrary code via t (no CVSS)
- [CVE-2023-37769](https://cve.now/CVE-2023-37769.md): stress-test master commit e4c878 was discovered to contain a FPE vulnerability via the component combine\_inner at /pixman-combine-float.c. (no CVSS)
- [CVE-2023-37770](https://cve.now/CVE-2023-37770.md): faust commit ee39a19 was discovered to contain a stack overflow via the component boxppShared::print() at /boxes/ppbox.cpp. (no CVSS)
- [CVE-2023-37781](https://cve.now/CVE-2023-37781.md): An issue in the emqx\_sn plugin of EMQX v4.3.8 allows attackers to execute a directory traversal via uploading a crafted .txt file. (no CVSS)
- [CVE-2023-37791](https://cve.now/CVE-2023-37791.md): D-Link DIR-619L v2.04(TW) was discovered to contain a stack overflow via the curTime parameter at /goform/formLogin. (no CVSS)
- [CVE-2023-38403](https://cve.now/CVE-2023-38403.md): iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field. (no CVSS)
- [CVE-2023-38404](https://cve.now/CVE-2023-38404.md): The XPRTLD web application in Veritas InfoScale Operations Manager (VIOM) before 8.0.0.410 allows an authenticated attacker to upload all ty (CVSS 7.2)
- [CVE-2023-38405](https://cve.now/CVE-2023-38405.md): On Crestron 3-Series Control Systems before 1.8001.0187, crafting and sending a specific BACnet packet can cause a crash. (no CVSS)
- [CVE-2023-38409](https://cve.now/CVE-2023-38409.md): An issue was discovered in set\_con2fb\_map in drivers/video/fbdev/core/fbcon.c in the Linux kernel before 6.2.12. (no CVSS)
- [CVE-2023-38426](https://cve.now/CVE-2023-38426.md): An issue was discovered in the Linux kernel before 6.3.4. (no CVSS)
- [CVE-2023-38427](https://cve.now/CVE-2023-38427.md): An issue was discovered in the Linux kernel before 6.3.8. (CVSS 9.8)
- [CVE-2023-38428](https://cve.now/CVE-2023-38428.md): An issue was discovered in the Linux kernel before 6.3.4. (CVSS 9.1)
- [CVE-2023-38429](https://cve.now/CVE-2023-38429.md): An issue was discovered in the Linux kernel before 6.3.4. (no CVSS)
- [CVE-2023-38430](https://cve.now/CVE-2023-38430.md): An issue was discovered in the Linux kernel before 6.3.9. (no CVSS)
- [CVE-2023-38431](https://cve.now/CVE-2023-38431.md): An issue was discovered in the Linux kernel before 6.3.8. (no CVSS)
- [CVE-2023-38432](https://cve.now/CVE-2023-38432.md): An issue was discovered in the Linux kernel before 6.3.10. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-07-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.