# CVEs published 2023-08-04

57 CVEs were published on August 4, 2023: 9 critical, 8 high. Days are UTC.

- [CVE-2020-26064](https://cve.now/CVE-2020-26064.md): A vulnerability in the web UI of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gain read and write access t (CVSS 6.5, Cisco SD-WAN vManage)
- [CVE-2020-26065](https://cve.now/CVE-2020-26065.md): A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to cond (CVSS 6.5, Cisco SD-WAN vManage)
- [CVE-2020-26082](https://cve.now/CVE-2020-26082.md): A vulnerability in the zip decompression engine of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenti (CVSS 5.8, Cisco Secure Email)
- [CVE-2023-39346](https://cve.now/CVE-2023-39346.md): bjrjk/LinuxASMCallGraph before commit 20dba06 allows attackers to cause a RCE on the server side via uploading a crafted ZIP file due to incorrect filtering rules of uploaded file (CVSS 8.8, bjrjk LinuxASMCallGraph)
- [CVE-2023-39344](https://cve.now/CVE-2023-39344.md): social-media-skeleton vulnerable to Pre-Auth SQLi leading to RCE (CVSS 10.0, fobybus social-media-skeleton)
- [CVE-2022-4955](https://cve.now/CVE-2022-4955.md): Inappropriate implementation in DevTools in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malic (no CVSS, Google Chrome)
- [CVE-2023-38702](https://cve.now/CVE-2023-38702.md): Knowage Server vulnerable to path traversal via upload functionality (CVSS 10.0, KnowageLabs Knowage-Server)
- [CVE-2023-38700](https://cve.now/CVE-2023-38700.md): matrix-appservice-irc events can be crafted to leak parts of targeted messages from other bridged rooms (CVSS 3.5, matrix-org matrix-appservice-irc · matrix-appservice-irc)
- [CVE-2023-38699](https://cve.now/CVE-2023-38699.md): MindsDB 'Call to requests with verify=False disabling SSL certificate checks, security issue.' issue (CVSS 9.1, mindsdb)
- [CVE-2023-38698](https://cve.now/CVE-2023-38698.md): .eth registrar controller can shorten the duration of registered names (CVSS 4.9, ensdomains ens-contracts · @ensdomains/ens-contracts)
- [CVE-2023-38697](https://cve.now/CVE-2023-38697.md): protocol-http1 HTTP Request/Response Smuggling vulnerability (CVSS 5.8, socketry protocol-http1 · protocol-http1)
- [CVE-2023-38695](https://cve.now/CVE-2023-38695.md): cypress-image-snapshot vulnerable to insecure snapshot file names (CVSS 6.5, simonsmith cypress-image-snapshot · @simonsmith/cypress-ima…)
- [CVE-2023-38692](https://cve.now/CVE-2023-38692.md): Command injection vulnerability in module management function in CloudExplorer Lite (CVSS 9.8, CloudExplorer-Dev CloudExplorer-Lite)
- [CVE-2023-4159](https://cve.now/CVE-2023-4159.md): Unrestricted Upload of File with Dangerous Type in omeka/omeka-s (CVSS 9.9, omeka/omeka-s)
- [CVE-2023-4158](https://cve.now/CVE-2023-4158.md): Cross-site Scripting (XSS) - Stored in omeka/omeka-s (CVSS 6.4, omeka/omeka-s)
- [CVE-2023-4157](https://cve.now/CVE-2023-4157.md): Improper Neutralization of Special Elements in Output Used by a Downstream Component in omeka/omeka-s (CVSS 5.2, omeka/omeka-s)
- [CVE-2023-0264](https://cve.now/CVE-2023-0264.md): A flaw was found in Keycloaks OpenID Connect user authentication, which may incorrectly authenticate requests. (no CVSS, redhat.com Keycloak · org.keycloak:keycloak-services)
- [CVE-2023-38691](https://cve.now/CVE-2023-38691.md): matrix-appservice-bridge doesn't verify the sub parameter of an openId token exhange, allowing unauthorized access to provisioning APIs (CVSS 5.0, matrix-org matrix-appservice-bridge · matrix-appservice-bri…)
- [CVE-2023-38690](https://cve.now/CVE-2023-38690.md): matrix-appservice-irc IRC command injection via admin commands containing newlines (CVSS 5.8, matrix-org matrix-appservice-irc · matrix-appservice-irc)
- [CVE-2023-38689](https://cve.now/CVE-2023-38689.md): Deserialization of Untrusted Data in network IO (CVSS 8.1, RS485 LogisticsPipes)
- [CVE-2023-38688](https://cve.now/CVE-2023-38688.md): twitch-tui's connection is not encrypted (CVSS 7.5, Xithrius twitch-tui · twitch-tui)
- [CVE-2023-38686](https://cve.now/CVE-2023-38686.md): Sydent does not verify email server certificates (CVSS 9.3, matrix-org sydent · matrix-sydent)
- [CVE-2023-38497](https://cve.now/CVE-2023-38497.md): Cargo not respecting umask when extracting crate archives (CVSS 7.8, rust-lang cargo · cargo)
- [CVE-2023-38494](https://cve.now/CVE-2023-38494.md): The cloud version of the MeterSphere interface leaks some sensitive data without authentication (CVSS 5.9, metersphere)
- [CVE-2023-38487](https://cve.now/CVE-2023-38487.md): HedgeDoc API allows to hide existing notes (CVSS 6.5, hedgedoc)
- [CVE-2023-37896](https://cve.now/CVE-2023-37896.md): Nuclei Path Traversal vulnerability (CVSS 7.5, projectdiscovery nuclei · github.com/projectdiscovery/nu… +1)
- [CVE-2023-37470](https://cve.now/CVE-2023-37470.md): Metabase vulnerable to remote code execution via POST /api/setup/validate API endpoint (CVSS 10.0, metabase)
- [CVE-2023-36480](https://cve.now/CVE-2023-36480.md): Aerospike Java Client vulnerable to unsafe deserialization of server responses (CVSS 9.8, aerospike-client-java · com.aerospike:aerospike-client)
- [CVE-2023-4135](https://cve.now/CVE-2023-4135.md): Out-of-bounds read information disclosure vulnerability (CVSS 6.0, qemu-kvm · Red Hat Enterprise Linux +1)
- [CVE-2023-34038](https://cve.now/CVE-2023-34038.md): VMware Horizon Server contains an information disclosure vulnerability. (CVSS 5.3, VMware Horizon Server)
- [CVE-2023-34037](https://cve.now/CVE-2023-34037.md): VMware Horizon Server contains a HTTP request smuggling vulnerability. (CVSS 5.3, VMware Horizon Server)
- [CVE-2023-39379](https://cve.now/CVE-2023-39379.md): Fujitsu Software Infrastructure Manager (ISM) stores sensitive information at the product's maintenance data (ismsnap) in cleartext form. (no CVSS, Fujitsu Limited Fujitsu Software Infrastructure Manager Adv…)
- [CVE-2023-4142](https://cve.now/CVE-2023-4142.md): WP Ultimate CSV Importer \<= 7.9.8 - Authenticated (Author+) Remote Code Execution (CVSS 8.0, smackcoders WP Ultimate CSV Importer – Import CSV, XML & Ex…)
- [CVE-2023-4141](https://cve.now/CVE-2023-4141.md): WP Ultimate CSV Importer \<= 7.9.8 - Authenticated (Author+) PHP File Creation to Remote Code Execution (CVSS 8.0, smackcoders WP Ultimate CSV Importer – Import CSV, XML & Ex…)
- [CVE-2023-4139](https://cve.now/CVE-2023-4139.md): WP Ultimate CSV Importer \<= 7.9.8 - Sensitive Information Exposure via Directory Listing (CVSS 7.5, smackcoders WP Ultimate CSV Importer – Import CSV, XML & Ex…)
- [CVE-2023-4140](https://cve.now/CVE-2023-4140.md): WP Ultimate CSV Importer \<= 7.9.8 - Arbitrary Usermeta Update to Authenticated (Author+) Privilege Escalation (CVSS 6.6, smackcoders WP Ultimate CSV Importer – Import CSV, XML & Ex…)
- [CVE-2023-4002](https://cve.now/CVE-2023-4002.md): Insertion of Sensitive Information Into Sent Data in GitLab (CVSS 5.3, GitLab)
- [CVE-2023-38708](https://cve.now/CVE-2023-38708.md): Pimcore Path Traversal Vulnerability in AssetController:importServerFilesAction (CVSS 6.3, pimcore · pimcore/pimcore)
- [CVE-2023-39343](https://cve.now/CVE-2023-39343.md): Sulu Observable Response Discrepancy on Admin Login (CVSS 4.3, sulu · sulu/sulu)
- [CVE-2022-41401](https://cve.now/CVE-2022-41401.md): OpenRefine \<= v3.5.2 contains a Server-Side Request Forgery (SSRF) vulnerability, which permits unauthorized users to exploit the system, po (no CVSS, org.openrefine:main)
- [CVE-2023-29505](https://cve.now/CVE-2023-29505.md): An issue was discovered in Zoho ManageEngine Network Configuration Manager 12.6.165. (CVSS 4.3)
- [CVE-2023-29689](https://cve.now/CVE-2023-29689.md): PyroCMS 3.9 contains a remote code execution (RCE) vulnerability that can be exploited through a server-side template injection (SSTI) flaw. (no CVSS, pyrocms/pyrocms)
- [CVE-2023-30146](https://cve.now/CVE-2023-30146.md): Assmann Digitus Plug&View IP Camera HT-IP211HDP, version 2.000.022 allows unauthenticated attackers to download a copy of the camera's setti (no CVSS)
- [CVE-2023-33372](https://cve.now/CVE-2023-33372.md): Connected IO v2.1.0 and prior uses a hard-coded username/password pair embedded in their device's firmware used for device communication usi (no CVSS)
- [CVE-2023-33373](https://cve.now/CVE-2023-33373.md): Connected IO v2.1.0 and prior keeps passwords and credentials in clear-text format, allowing attackers to exfiltrate the credentials and use (no CVSS)
- [CVE-2023-33374](https://cve.now/CVE-2023-33374.md): Connected IO v2.1.0 and prior has a command as part of its communication protocol allowing the management platform to specify arbitrary OS c (no CVSS)
- [CVE-2023-33375](https://cve.now/CVE-2023-33375.md): Connected IO v2.1.0 and prior has a stack-based buffer overflow vulnerability in its communication protocol, enabling attackers to take cont (no CVSS)
- [CVE-2023-33376](https://cve.now/CVE-2023-33376.md): Connected IO v2.1.0 and prior has an argument injection vulnerability in its iptables command message in its communication protocol, enablin (no CVSS)
- [CVE-2023-33377](https://cve.now/CVE-2023-33377.md): Connected IO v2.1.0 and prior has an OS command injection vulnerability in the set firewall command in part of its communication protocol, e (no CVSS)
- [CVE-2023-33378](https://cve.now/CVE-2023-33378.md): Connected IO v2.1.0 and prior has an argument injection vulnerability in its AT command message in its communication protocol, enabling atta (no CVSS)
- [CVE-2023-33379](https://cve.now/CVE-2023-33379.md): Connected IO v2.1.0 and prior has a misconfiguration in their MQTT broker used for management and device communication, which allows devices (no CVSS)
- [CVE-2023-38332](https://cve.now/CVE-2023-38332.md): Zoho ManageEngine ADManager Plus through 7201 allow authenticated users to take over another user's account via sensitive information disclo (no CVSS)
- [CVE-2023-38964](https://cve.now/CVE-2023-38964.md): Creative Item Academy LMS 6.0 was discovered to contain a cross-site scripting (XSS) vulnerability. (no CVSS)
- [CVE-2023-39107](https://cve.now/CVE-2023-39107.md): An arbitrary file overwrite vulnerability in NoMachine Free Edition and Enterprise Client for macOS before v8.8.1 allows attackers to overwr (no CVSS)
- [CVE-2023-39112](https://cve.now/CVE-2023-39112.md): ECShop v4.1.16 contains an arbitrary file deletion vulnerability in the Admin Panel. (no CVSS)
- [CVE-2023-39143](https://cve.now/CVE-2023-39143.md): PaperCut NG and PaperCut MF before 22.1.3 on Windows allow path traversal, enabling attackers to upload, read, or delete arbitrary files. (CVSS 9.8)
- [CVE-2023-39551](https://cve.now/CVE-2023-39551.md): PHPGurukul Online Security Guards Hiring System v.1.0 is vulnerable to SQL Injection via osghs/admin/search.php. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-08-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.