# CVEs published 2023-07-22

17 CVEs were published on July 22, 2023: 0 critical, 0 high. Days are UTC.

- [CVE-2023-3837](https://cve.now/CVE-2023-3837.md): DedeBIZ sys\_sql\_query.php cross site scripting (CVSS 2.4, DedeBIZ)
- [CVE-2023-3836](https://cve.now/CVE-2023-3836.md): Dahua Smart Park Management unrestricted upload (CVSS 6.3, Dahua Smart Park Management)
- [CVE-2023-3835](https://cve.now/CVE-2023-3835.md): Bug Finder MineStack Ticket create cross site scripting (CVSS 3.5, Bug Finder MineStack)
- [CVE-2023-3834](https://cve.now/CVE-2023-3834.md): Bug Finder EX-RATE Ticket create cross site scripting (CVSS 3.5, Bug Finder EX-RATE)
- [CVE-2023-3833](https://cve.now/CVE-2023-3833.md): Bug Finder Montage Ticket create cross site scripting (CVSS 3.5, Bug Finder Montage)
- [CVE-2023-3832](https://cve.now/CVE-2023-3832.md): Bug Finder Wedding Wonders Ticket create cross site scripting (CVSS 3.5, Bug Finder Wedding Wonders)
- [CVE-2023-3831](https://cve.now/CVE-2023-3831.md): Bug Finder Finounce Ticket create cross site scripting (CVSS 3.5, Bug Finder Finounce)
- [CVE-2023-3830](https://cve.now/CVE-2023-3830.md): Bug Finder SASS BILLER store cross site scripting (CVSS 3.5, Bug Finder SASS BILLER)
- [CVE-2023-3829](https://cve.now/CVE-2023-3829.md): Bug Finder ICOGenie Support Ticket create cross site scripting (CVSS 3.5, Bug Finder ICOGenie)
- [CVE-2023-3828](https://cve.now/CVE-2023-3828.md): Bug Finder Listplace Directory Listing Platform Photo coverPhotoUpdate cross site scripting (CVSS 3.5, Bug Finder Listplace Directory Listing Platform)
- [CVE-2023-3827](https://cve.now/CVE-2023-3827.md): Bug Finder Listplace Directory Listing Platform HTTP POST Request create cross site scripting (CVSS 3.5, Bug Finder Listplace Directory Listing Platform)
- [CVE-2023-3826](https://cve.now/CVE-2023-3826.md): IBOS OA Interview edit&op=status sql injection (CVSS 6.3, IBOS OA)
- [CVE-2023-3247](https://cve.now/CVE-2023-3247.md): Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP (CVSS 2.6, PHP Group PHP)
- [CVE-2023-28530](https://cve.now/CVE-2023-28530.md): IBM Cognos Analytics cross-site scripting (CVSS 5.4, IBM Cognos Analytics)
- [CVE-2023-25929](https://cve.now/CVE-2023-25929.md): IBM Cognos Analytics cross-site scripting (CVSS 4.6, IBM Cognos Analytics)
- [CVE-2023-38195](https://cve.now/CVE-2023-38195.md): Datalust Seq before 2023.2.9489 allows insertion of sensitive information into an externally accessible file or directory. (no CVSS)
- [CVE-2023-38633](https://cve.now/CVE-2023-38633.md): A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on t (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-07-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.