# CVEs published 2023-07-25

97 CVEs were published on July 25, 2023: 8 critical, 22 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2023-38503](https://cve.now/CVE-2023-38503.md): Directus has Incorrect Permission Checking for GraphQL Subscriptions (CVSS 5.7, directus)
- [CVE-2023-3945](https://cve.now/CVE-2023-3945.md): phpscriptpoint Lawyer search.php cross site scripting (CVSS 3.5, phpscriptpoint Lawyer)
- [CVE-2023-38502](https://cve.now/CVE-2023-38502.md): TDengine Database Denial-of-Service (CVSS 6.5, taosdata TDengine)
- [CVE-2023-38501](https://cve.now/CVE-2023-38501.md): copyparty vulnerable to reflected cross-site scripting via k304 parameter (CVSS 6.3, 9001 copyparty · copyparty)
- [CVE-2023-38496](https://cve.now/CVE-2023-38496.md): Apptainer's ineffective privileges drop when requesting container network (CVSS 6.1, apptainer · github.com/apptainer/apptainer)
- [CVE-2023-38500](https://cve.now/CVE-2023-38500.md): By-passing Cross-Site Scripting Protection in HTML Sanitizer (CVSS 4.7, TYPO3 html-sanitizer · typo3/html-sanitizer)
- [CVE-2023-38499](https://cve.now/CVE-2023-38499.md): typo3/cms-core Information Disclosure due to Out-of-scope Site Resolution (CVSS 3.7, typo3 · typo3/cms-core)
- [CVE-2023-38493](https://cve.now/CVE-2023-38493.md): Paths contain matrix variables bypass decorators (CVSS 7.5, line armeria · com.linecorp.armeria:armeria)
- [CVE-2023-37920](https://cve.now/CVE-2023-37920.md): Certifi's removal of e-Tugra root certificate (CVSS 7.5, python-certifi · certifi)
- [CVE-2023-37919](https://cve.now/CVE-2023-37919.md): Cal.com not expiring old sessions after enabling 2FA (CVSS 6.5, calcom cal.com)
- [CVE-2023-37907](https://cve.now/CVE-2023-37907.md): Cryptomator's MSI installer allows local privilege escalation (CVSS 7.0, cryptomator)
- [CVE-2023-37902](https://cve.now/CVE-2023-37902.md): Vyper's ecrecover can return undefined data if signature does not verify (CVSS 5.3, vyperlang vyper · vyper)
- [CVE-2023-37460](https://cve.now/CVE-2023-37460.md): Plexus Archiver vulnerable to Arbitrary File Creation in AbstractUnArchiver (CVSS 8.1, codehaus-plexus plexus-archiver · org.codehaus.plexus:plexu…)
- [CVE-2023-37258](https://cve.now/CVE-2023-37258.md): DataEase has a SQL injection vulnerability that can bypass blacklists (CVSS 8.8, dataease)
- [CVE-2023-3944](https://cve.now/CVE-2023-3944.md): phpscriptpoint Lawyer page.php cross site scripting (CVSS 3.5, phpscriptpoint Lawyer)
- [CVE-2023-37257](https://cve.now/CVE-2023-37257.md): The DataEase panel and dataset have a stored XSS vulnerability (CVSS 5.4, dataease)
- [CVE-2023-36826](https://cve.now/CVE-2023-36826.md): Sentry vulnerable to improper authorization on debug and artifact file downloads (CVSS 7.7, getsentry sentry · sentry)
- [CVE-2023-36806](https://cve.now/CVE-2023-36806.md): Contao cross site scripting vulnerability via input unit widget (CVSS 6.5, contao · contao/core-bundle)
- [CVE-2023-35944](https://cve.now/CVE-2023-35944.md): Envoy vulnerable to incorrect handling of HTTP requests and responses with mixed case schemes (CVSS 8.2, envoyproxy envoy)
- [CVE-2023-35982](https://cve.now/CVE-2023-35982.md): Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol (CVSS 9.8, Hewlett Packard Enterprise (HPE) Aruba Access Points runnin…)
- [CVE-2023-35981](https://cve.now/CVE-2023-35981.md): Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol (CVSS 9.8, Hewlett Packard Enterprise (HPE) Aruba Access Points runnin…)
- [CVE-2023-35980](https://cve.now/CVE-2023-35980.md): Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol (CVSS 9.8, Hewlett Packard Enterprise (HPE) Aruba Access Points runnin…)
- [CVE-2023-35943](https://cve.now/CVE-2023-35943.md): Envoy vulnerable to CORS filter segfault when origin header is removed (CVSS 6.3, envoyproxy envoy)
- [CVE-2023-35942](https://cve.now/CVE-2023-35942.md): Envoy's gRPC access log crash caused by the listener draining (CVSS 6.5, envoyproxy envoy)
- [CVE-2023-35941](https://cve.now/CVE-2023-35941.md): Envoy vulnerable to OAuth2 credentials exploit with permanent validity (CVSS 8.6, envoyproxy envoy)
- [CVE-2023-35929](https://cve.now/CVE-2023-35929.md): Tuleap Cross-site Scripting vulnerability in the card field of the agile dashboard apps (CVSS 5.4, Enalean tuleap)
- [CVE-2023-34235](https://cve.now/CVE-2023-34235.md): Leaking sensitive user information still possible by filtering on private with prefix fields (CVSS 8.6, strapi · @strapi/database +1)
- [CVE-2023-2626](https://cve.now/CVE-2023-2626.md): Authentication Bypass in OpenThread Boarder Router devices (CVSS 7.5, Google Nest Hub Max · Google Nest Hub (2nd. gen) w/ Slee… +2)
- [CVE-2023-3773](https://cve.now/CVE-2023-3773.md): Kernel: xfrm: out-of-bounds read of xfrma\_mtimer\_thresh nlattr (CVSS 5.5, Red Hat Enterprise Linux)
- [CVE-2023-3772](https://cve.now/CVE-2023-3772.md): Kernel: xfrm: null pointer dereference in xfrm\_update\_ae\_params() (CVSS 5.5, Red Hat Enterprise Linux · Red Hat Virtualization 4 for Red…)
- [CVE-2023-38435](https://cve.now/CVE-2023-38435.md): Apache Felix Healthcheck Webconsole Plugin: XSS in healthcheck webconsole plugin (no CVSS, Apache Software Foundation Apache Felix Healthcheck Webcons…)
- [CVE-2023-34093](https://cve.now/CVE-2023-34093.md): Strapi allows actors to make all attributes on a content-type public without noticing it (CVSS 4.8, strapi · @strapi/strapi +2)
- [CVE-2023-39175](https://cve.now/CVE-2023-39175.md): In JetBrains TeamCity before 2023.05.2 reflected XSS via GitHub integration was possible (CVSS 4.6, JetBrains TeamCity)
- [CVE-2023-39174](https://cve.now/CVE-2023-39174.md): In JetBrains TeamCity before 2023.05.2 a ReDoS attack was possible via integration with issue trackers (CVSS 4.3, JetBrains TeamCity)
- [CVE-2023-39173](https://cve.now/CVE-2023-39173.md): In JetBrains TeamCity before 2023.05.2 a token with limited permissions could be used to gain full account access (CVSS 5.4, JetBrains TeamCity)
- [CVE-2023-37895](https://cve.now/CVE-2023-37895.md): Apache Jackrabbit RMI access can lead to RCE (CVSS 9.8, Apache Software Foundation Apache Jackrabbit Webapp · Ap… +3)
- [CVE-2023-36503](https://cve.now/CVE-2023-36503.md): WordPress MaxButtons Plugin \<= 9.5.3 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Max Foundry WordPress Button Plugin MaxButtons)
- [CVE-2023-36385](https://cve.now/CVE-2023-36385.md): WordPress PostX – Gutenberg Blocks for Post Grid Plugin \<= 2.9.9 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, wpxpo PostX – Gutenberg Post Grid Blocks)
- [CVE-2023-34017](https://cve.now/CVE-2023-34017.md): WordPress Five Star Restaurant Reservations Plugin \<= 2.6.7 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, FiveStarPlugins Five Star Restaurant Reservations)
- [CVE-2023-36502](https://cve.now/CVE-2023-36502.md): WordPress Balkon Theme \<= 1.3.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, cththemes Balkon)
- [CVE-2023-36501](https://cve.now/CVE-2023-36501.md): WordPress teachPress Plugin \<= 9.0.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Michael Winkler teachPress)
- [CVE-2023-34369](https://cve.now/CVE-2023-34369.md): WordPress Login Configurator Plugin \<= 2.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, GrandSlambert Login Configurator)
- [CVE-2023-3548](https://cve.now/CVE-2023-3548.md): IQ Wifi 6 (CVSS 8.3, Johnson Controls IQ Wifi)
- [CVE-2023-35043](https://cve.now/CVE-2023-35043.md): WordPress Recent Posts Slider Plugin \<= 1.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Neha Goel Recent Posts Slider)
- [CVE-2023-23833](https://cve.now/CVE-2023-23833.md): WordPress Drop Shadow Boxes Plugin \<= 1.7.10 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Steven Henty Drop Shadow Boxes)
- [CVE-2023-3486](https://cve.now/CVE-2023-3486.md): PaperCut NG Unauthenticated File Upload (CVSS 8.2, PaperCut NG)
- [CVE-2023-3637](https://cve.now/CVE-2023-3637.md): Openstack-neutron: unrestricted creation of security groups (fix for cve-2022-3277) (CVSS 4.3, Red Hat OpenStack Platform · neutron)
- [CVE-2023-33925](https://cve.now/CVE-2023-33925.md): WordPress WooCommerce Product Categories Selection Widget Plugin \<= 2.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, PluginForage WooCommerce Product Categories Selection Widget)
- [CVE-2023-2850](https://cve.now/CVE-2023-2850.md): NodeBB is affected by a Cross-Site WebSocket Hijacking vulnerability due to missing validation of the request origin. (CVSS 4.7, NodeBB)
- [CVE-2023-3897](https://cve.now/CVE-2023-3897.md): Bypassing CAPTCHA & Enumerating Usernames via Password Reset Page (CVSS 4.8, Onpremise SureMDM Solution SureMDM Onpremise)
- [CVE-2023-3890](https://cve.now/CVE-2023-3890.md): Campcodes Beauty Salon Management System edit-accepted-appointment.php cross site scripting (CVSS 3.5, Campcodes Beauty Salon Management System)
- [CVE-2023-3888](https://cve.now/CVE-2023-3888.md): Campcodes Beauty Salon Management System admin-profile.php cross site scripting (CVSS 3.5, Campcodes Beauty Salon Management System)
- [CVE-2023-21406](https://cve.now/CVE-2023-21406.md): Heap-based buffer overflow in Axis A1001 Network Door Controller's OSDP communication (CVSS 7.1, Axis Communications AB AXIS A1001 Network Door Controller)
- [CVE-2023-21405](https://cve.now/CVE-2023-21405.md): Denial-of-Service vulnerability in Axis Network Door Controller's and Axis Network Intercom's OSDP communication (CVSS 6.5, Axis Communications AB AXIS A1001 Network Door Controlle… +4)
- [CVE-2023-3887](https://cve.now/CVE-2023-3887.md): Campcodes Beauty Salon Management System search-appointment.php cross site scripting (CVSS 3.5, Campcodes Beauty Salon Management System)
- [CVE-2023-35088](https://cve.now/CVE-2023-35088.md): Apache InLong: SQL injection in audit endpoint (CVSS 9.8, Apache Software Foundation Apache InLong · org.apache.inlon…)
- [CVE-2023-34434](https://cve.now/CVE-2023-34434.md): Apache InLong: JDBC URL bypassing by allowLoadLocalInfileInPath param (CVSS 7.5, Apache Software Foundation Apache InLong · org.apache.inlon…)
- [CVE-2023-34189](https://cve.now/CVE-2023-34189.md): Apache InLong: General user can delete and update process (no CVSS, Apache Software Foundation Apache InLong · org.apache.inlon…)
- [CVE-2023-3886](https://cve.now/CVE-2023-3886.md): Campcodes Beauty Salon Management System invoice.php cross site scripting (CVSS 3.5, Campcodes Beauty Salon Management System)
- [CVE-2023-3885](https://cve.now/CVE-2023-3885.md): Campcodes Beauty Salon Management System edit\_category.php cross site scripting (CVSS 3.5, Campcodes Beauty Salon Management System)
- [CVE-2023-35066](https://cve.now/CVE-2023-35066.md): SQLi in Infodrom Sofwares E-Invoice Approval System (CVSS 9.8, Infodrom Software E-Invoice Approval System)
- [CVE-2023-35078](https://cve.now/CVE-2023-35078.md): An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or resources of the appli (CVSS 10.0, KEV, Ivanti Endpoint Manager Mobile)
- [CVE-2023-35067](https://cve.now/CVE-2023-35067.md): Plaintext Storage of a Password in Infodrom Sofwares E-Invoice Approval System (CVSS 7.5, Infodrom Software E-Invoice Approval System)
- [CVE-2023-3884](https://cve.now/CVE-2023-3884.md): Campcodes Beauty Salon Management System edit\_product.php cross site scripting (CVSS 3.5, Campcodes Beauty Salon Management System)
- [CVE-2023-3046](https://cve.now/CVE-2023-3046.md): SQLi in Biltay Technlogys Scienta (CVSS 9.8, Biltay Technology Scienta)
- [CVE-2023-3883](https://cve.now/CVE-2023-3883.md): Campcodes Beauty Salon Management System add-category.php cross site scripting (CVSS 3.5, Campcodes Beauty Salon Management System)
- [CVE-2023-32637](https://cve.now/CVE-2023-32637.md): GBrowse accepts files with any formats uploaded and places them in the area accessible through unauthenticated web requests. (no CVSS, Generic Model Organism Database Project GBrowse)
- [CVE-2023-3882](https://cve.now/CVE-2023-3882.md): Campcodes Beauty Salon Management System edit-accepted-appointment.php sql injection (CVSS 6.3, Campcodes Beauty Salon Management System)
- [CVE-2023-3881](https://cve.now/CVE-2023-3881.md): Campcodes Beauty Salon Management System forgot-password.php sql injection (CVSS 6.3, Campcodes Beauty Salon Management System)
- [CVE-2023-3880](https://cve.now/CVE-2023-3880.md): Campcodes Beauty Salon Management System del\_service.php sql injection (CVSS 6.3, Campcodes Beauty Salon Management System)
- [CVE-2023-32639](https://cve.now/CVE-2023-32639.md): Applicant Programme Ver.7.06 and earlier improperly restricts XML external entity references (XXE). (no CVSS, The Ministry of Justice Applicant Programme)
- [CVE-2023-3879](https://cve.now/CVE-2023-3879.md): Campcodes Beauty Salon Management System del\_category.php sql injection (CVSS 6.3, Campcodes Beauty Salon Management System)
- [CVE-2023-3878](https://cve.now/CVE-2023-3878.md): Campcodes Beauty Salon Management System about-us.php sql injection (CVSS 6.3, Campcodes Beauty Salon Management System)
- [CVE-2023-3877](https://cve.now/CVE-2023-3877.md): Campcodes Beauty Salon Management System add-services.php sql injection (CVSS 6.3, Campcodes Beauty Salon Management System)
- [CVE-2023-3876](https://cve.now/CVE-2023-3876.md): Campcodes Beauty Salon Management System search-appointment.php sql injection (CVSS 6.3, Campcodes Beauty Salon Management System)
- [CVE-2023-23568](https://cve.now/CVE-2023-23568.md): Improper privilege validation in Command Centre Server allows authenticated unprivileged operators to modify and view Personal Data Fields. (CVSS 4.3, Gallagher Command Centre)
- [CVE-2023-3875](https://cve.now/CVE-2023-3875.md): Campcodes Beauty Salon Management System del\_feedback.php sql injection (CVSS 6.3, Campcodes Beauty Salon Management System)
- [CVE-2023-3874](https://cve.now/CVE-2023-3874.md): Campcodes Beauty Salon Management System admin-profile.php sql injection (CVSS 6.3, Campcodes Beauty Salon Management System)
- [CVE-2023-3873](https://cve.now/CVE-2023-3873.md): Campcodes Beauty Salon Management System index.php sql injection (CVSS 7.3, Campcodes Beauty Salon Management System)
- [CVE-2020-35698](https://cve.now/CVE-2020-35698.md): Thinkific Thinkific Online Course Creation Platform 1.0 is affected by: Cross Site Scripting (XSS). (CVSS 6.1)
- [CVE-2022-31457](https://cve.now/CVE-2022-31457.md): RTX TRAP v1.0 allows attackers to perform a directory traversal via a crafted request sent to the endpoint /data/. (no CVSS)
- [CVE-2022-31458](https://cve.now/CVE-2022-31458.md): RTX TRAP v1.0 was discovered to be vulnerable to host header poisoning. (no CVSS)
- [CVE-2022-46898](https://cve.now/CVE-2022-46898.md): An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. (no CVSS)
- [CVE-2022-46899](https://cve.now/CVE-2022-46899.md): An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. (no CVSS)
- [CVE-2022-46900](https://cve.now/CVE-2022-46900.md): An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. (CVSS 6.5)
- [CVE-2022-46901](https://cve.now/CVE-2022-46901.md): An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. (no CVSS)
- [CVE-2022-46902](https://cve.now/CVE-2022-46902.md): An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. (CVSS 6.3)
- [CVE-2023-32231](https://cve.now/CVE-2023-32231.md): An issue was discovered in Vasion PrinterLogic Client for Windows before 25.0.0.818. (no CVSS)
- [CVE-2023-32232](https://cve.now/CVE-2023-32232.md): An issue was discovered in Vasion PrinterLogic Client for Windows before 25.0.0.836. (no CVSS)
- [CVE-2023-33777](https://cve.now/CVE-2023-33777.md): An issue in /functions/fbaorder.php of Prestashop amazon before v5.2.24 allows attackers to execute a directory traversal attack. (no CVSS)
- [CVE-2023-34798](https://cve.now/CVE-2023-34798.md): An arbitrary file upload vulnerability in eoffice before v9.5 allows attackers to execute arbitrary code via uploading a crafted file. (no CVSS)
- [CVE-2023-37361](https://cve.now/CVE-2023-37361.md): REDCap 12.0.26 LTS and 12.3.2 Standard allows SQL Injection via scheduling, repeatforms, purpose, app\_title, or randomization. (no CVSS)
- [CVE-2023-37677](https://cve.now/CVE-2023-37677.md): Pligg CMS v2.0.2 (also known as Kliqqi) was discovered to contain a remote code execution (RCE) vulnerability in the component admin\_editor. (no CVSS)
- [CVE-2023-38745](https://cve.now/CVE-2023-38745.md): Pandoc before 3.1.6 allows arbitrary file write: this can be triggered by providing a crafted image element in the input when generating fil (no CVSS)
- [CVE-2023-39128](https://cve.now/CVE-2023-39128.md): GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a stack overflow via the function ada\_decode at /gdb/ada-lang.c. (no CVSS)
- [CVE-2023-39129](https://cve.now/CVE-2023-39129.md): GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap use after free via the function add\_pe\_exported\_sym() at /gdb/coff-pe-re (no CVSS)
- [CVE-2023-39130](https://cve.now/CVE-2023-39130.md): GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a heap buffer overflow via the function pe\_as16() at /gdb/coff-pe-read.c. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-07-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.