# CVEs published 2023-07-23

19 CVEs were published on July 23, 2023: 0 critical, 1 high. Days are UTC.

- [CVE-2023-3855](https://cve.now/CVE-2023-3855.md): phpscriptpoint JobSeeker search-result.php cross site scripting (CVSS 3.5, phpscriptpoint JobSeeker)
- [CVE-2023-3854](https://cve.now/CVE-2023-3854.md): phpscriptpoint BloodBank POST Parameter search sql injection (CVSS 6.3, phpscriptpoint BloodBank)
- [CVE-2023-3853](https://cve.now/CVE-2023-3853.md): phpscriptpoint BloodBank page.php cross site scripting (CVSS 3.5, phpscriptpoint BloodBank)
- [CVE-2023-3852](https://cve.now/CVE-2023-3852.md): OpenRapid RapidCMS upload.php unrestricted upload (CVSS 4.7, OpenRapid RapidCMS)
- [CVE-2023-3850](https://cve.now/CVE-2023-3850.md): SourceCodester Lost and Found Information System HTTP POST Request sql injection (CVSS 6.3, SourceCodester Lost and Found Information System)
- [CVE-2023-28133](https://cve.now/CVE-2023-28133.md): Local privilege escalation in Check Point Endpoint Security Client (version E87.30) via crafted OpenSSL configuration file (no CVSS, Harmony Endpoint.)
- [CVE-2023-3849](https://cve.now/CVE-2023-3849.md): mooSocial mooDating URL find-a-match cross site scripting (CVSS 3.5, mooSocial mooDating)
- [CVE-2023-3848](https://cve.now/CVE-2023-3848.md): mooSocial mooDating URL view cross site scripting (CVSS 3.5, mooSocial mooDating)
- [CVE-2023-3847](https://cve.now/CVE-2023-3847.md): mooSocial mooDating URL users cross site scripting (CVSS 3.5, mooSocial mooDating)
- [CVE-2023-3846](https://cve.now/CVE-2023-3846.md): mooSocial mooDating URL pages cross site scripting (CVSS 3.5, mooSocial mooDating)
- [CVE-2023-3845](https://cve.now/CVE-2023-3845.md): mooSocial mooDating URL ajax\_invite cross site scripting (CVSS 3.5, mooSocial mooDating)
- [CVE-2023-3844](https://cve.now/CVE-2023-3844.md): mooSocial mooDating URL friends cross site scripting (CVSS 3.5, mooSocial mooDating)
- [CVE-2023-3843](https://cve.now/CVE-2023-3843.md): mooSocial mooDating URL question cross site scripting (CVSS 3.5, mooSocial mooDating)
- [CVE-2023-3842](https://cve.now/CVE-2023-3842.md): Pointware EasyInventory Easy2W.exe unquoted search path (CVSS 7.8, Pointware EasyInventory)
- [CVE-2023-3841](https://cve.now/CVE-2023-3841.md): NxFilter user.jsp cross-site request forgery (CVSS 4.3, NxFilter)
- [CVE-2023-3840](https://cve.now/CVE-2023-3840.md): NxFilter cross site scripting (CVSS 3.5, NxFilter)
- [CVE-2023-3839](https://cve.now/CVE-2023-3839.md): DedeBIZ sys\_sql\_query.php sql injection (CVSS 4.1, DedeBIZ)
- [CVE-2023-3838](https://cve.now/CVE-2023-3838.md): DedeBIZ vote\_edit.php cross site scripting (CVSS 2.4, DedeBIZ)
- [CVE-2023-2430](https://cve.now/CVE-2023-2430.md): A vulnerability was found due to missing lock for IOPOLL flaw in io\_cqring\_event\_overflow() in io\_uring.c in Linux Kernel. (CVSS 5.5, kernel)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-07-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.