# CVEs published 2023-07-30

10 CVEs were published on July 30, 2023: 3 critical, 5 high. Days are UTC.

- [CVE-2023-37219](https://cve.now/CVE-2023-37219.md): Tadiran Telecom Composit - CWE-1236: Improper Neutralization of Formula Elements in a CSV File (CVSS 7.3, Tadiran Telecom Composit)
- [CVE-2023-37218](https://cve.now/CVE-2023-37218.md): Tadiran Telecom Aeonix - CWE-22: Improper Limitation of a Pathname to a Restricted Directory (CVSS 7.5, Tadiran Telecom Aeonix)
- [CVE-2023-37217](https://cve.now/CVE-2023-37217.md): Tadiran Telecom Aeonix - CWE-204: Observable Response Discrepancy (CVSS 5.3, Tadiran Telecom Aeonix)
- [CVE-2023-37216](https://cve.now/CVE-2023-37216.md): AnaSystem SensMini M4 – an authenticated user can cause Denial of Service (CVSS 7.5, AnaSystem SensMini M4)
- [CVE-2023-37215](https://cve.now/CVE-2023-37215.md): JBL soundbar multibeam 5.1 - CWE-798: Use of Hard-coded Credentials (CVSS 6.2, JBL soundbar multibeam)
- [CVE-2023-37214](https://cve.now/CVE-2023-37214.md): Heights Telecom ERO1xS-Pro Dual-Band WiFi command injection (CVSS 9.8, Heights Telecom ERO1xS-Pro Dual-Band WiFi)
- [CVE-2023-37213](https://cve.now/CVE-2023-37213.md): Synel SYnergy Fingerprint Terminals - CWE-78: 'OS Command Injection' (CVSS 8.8, Synel SYnergy Fingerprint Terminals)
- [CVE-2023-32227](https://cve.now/CVE-2023-32227.md): Synel SYnergy Fingerprint Terminals - CWE-798: Use of Hard-coded Credentials (CVSS 9.8, Synel SYnergy Fingerprint Terminals)
- [CVE-2023-32226](https://cve.now/CVE-2023-32226.md): Sysaid - CWE-552: Files or Directories Accessible to External Parties (CVSS 8.3, Sysaid)
- [CVE-2023-32225](https://cve.now/CVE-2023-32225.md): Sysaid - CWE-434: Unrestricted Upload of File with Dangerous Type (CVSS 9.8, Sysaid)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-07-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.