# CVEs published 2023-08-14

135 CVEs were published on August 14, 2023: 9 critical, 19 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2023-27948](https://cve.now/CVE-2023-27948.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple macOS)
- [CVE-2022-48503](https://cve.now/CVE-2022-48503.md): The issue was addressed with improved bounds checks. (CVSS 8.8, KEV, Apple macOS · Apple tvOS +3)
- [CVE-2020-36615](https://cve.now/CVE-2020-36615.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2022-22646](https://cve.now/CVE-2022-22646.md): This issue was addressed by removing the vulnerable code. (no CVSS, Apple macOS)
- [CVE-2022-46706](https://cve.now/CVE-2022-46706.md): A type confusion issue was addressed with improved state handling. (no CVSS, Apple macOS · Apple Security Update - Catalina)
- [CVE-2022-32876](https://cve.now/CVE-2022-32876.md): A logic issue was addressed with improved restrictions. (no CVSS, Apple macOS)
- [CVE-2023-27939](https://cve.now/CVE-2023-27939.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple macOS)
- [CVE-2023-28199](https://cve.now/CVE-2023-28199.md): An out-of-bounds read issue existed that led to the disclosure of kernel memory. (no CVSS, Apple macOS)
- [CVE-2023-28198](https://cve.now/CVE-2023-28198.md): A use-after-free issue was addressed with improved memory management. (no CVSS, Apple macOS · Apple iOS and iPadOS)
- [CVE-2022-22655](https://cve.now/CVE-2022-22655.md): An access issue was addressed with improvements to the sandbox. (no CVSS, Apple macOS · Apple iOS and iPadOS)
- [CVE-2022-42828](https://cve.now/CVE-2022-42828.md): The issue was addressed with improved memory handling. (no CVSS, Apple macOS)
- [CVE-2022-26699](https://cve.now/CVE-2022-26699.md): A logic issue was addressed with improved state management. (CVSS 5.5, Apple macOS)
- [CVE-2022-46722](https://cve.now/CVE-2022-46722.md): A logic issue was addressed with improved checks. (CVSS 5.5, Apple macOS)
- [CVE-2023-28179](https://cve.now/CVE-2023-28179.md): The issue was addressed with improved memory handling. (no CVSS, Apple macOS)
- [CVE-2022-46725](https://cve.now/CVE-2022-46725.md): A spoofing issue existed in the handling of URLs. (no CVSS, Apple iOS and iPadOS)
- [CVE-2023-32358](https://cve.now/CVE-2023-32358.md): A type confusion issue was addressed with improved checks. (no CVSS, Apple macOS · Apple iOS and iPadOS)
- [CVE-2022-46724](https://cve.now/CVE-2022-46724.md): This issue was addressed by restricting options offered on a locked device. (CVSS 2.4, Apple iOS and iPadOS)
- [CVE-2023-27947](https://cve.now/CVE-2023-27947.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple macOS)
- [CVE-2023-21229](https://cve.now/CVE-2023-21229.md): In registerServiceLocked of ManagedServices.java, there is a possible bypass of background activity launch restrictions due to an unsafe Pen (no CVSS, Google Android)
- [CVE-2023-21230](https://cve.now/CVE-2023-21230.md): In onAccessPointChanged of AccessPointPreference.java, there is a possible way for unprivileged apps to receive a broadcast about WiFi acces (no CVSS, Google Android)
- [CVE-2023-21231](https://cve.now/CVE-2023-21231.md): In getIntentForButton of ButtonManager.java, there is a possible way for an unprivileged application to start a non-exported or permission-p (no CVSS, Google Android)
- [CVE-2023-21232](https://cve.now/CVE-2023-21232.md): In multiple locations, there is a possible way to retrieve sensor data without permissions due to a permissions bypass. (no CVSS, Google Android)
- [CVE-2023-21233](https://cve.now/CVE-2023-21233.md): In multiple locations of avrc, there is a possible leak of heap data due to uninitialized data. (no CVSS, Google Android)
- [CVE-2023-21234](https://cve.now/CVE-2023-21234.md): In launchConfirmationActivity of ChooseLockSettingsHelper.java, there is a possible way to enable developer options without the lockscreen P (no CVSS, Google Android)
- [CVE-2023-21235](https://cve.now/CVE-2023-21235.md): In onCreate of LockSettingsActivity.java, there is a possible way set a new lockscreen PIN without entering the existing PIN due to a permis (no CVSS, Google Android)
- [CVE-2023-35689](https://cve.now/CVE-2023-35689.md): In checkDebuggingDisallowed of DeviceVersionFragment.java, there is a possible way to access adb before SUW completion due to an insecure de (no CVSS, Google Android)
- [CVE-2023-21292](https://cve.now/CVE-2023-21292.md): In openContentUri of ActivityManagerService.java, there is a possible way for a third party app to obtain restricted files due to a confused (no CVSS, Google Android)
- [CVE-2023-21290](https://cve.now/CVE-2023-21290.md): In update of MmsProvider.java, there is a possible way to bypass file permission checks due to a race condition. (no CVSS, Google Android)
- [CVE-2023-21289](https://cve.now/CVE-2023-21289.md): In multiple locations, there is a possible bypass of a multi user security boundary due to a confused deputy. (no CVSS, Google Android)
- [CVE-2023-21288](https://cve.now/CVE-2023-21288.md): In visitUris of Notification.java, there is a possible way to reveal images across users due to a missing permission check. (no CVSS, Google Android)
- [CVE-2023-21287](https://cve.now/CVE-2023-21287.md): In multiple locations, there is a possible code execution due to type confusion. (no CVSS, Google Android)
- [CVE-2023-21286](https://cve.now/CVE-2023-21286.md): In visitUris of RemoteViews.java, there is a possible way to reveal images across users due to a missing permission check. (no CVSS, Google Android)
- [CVE-2023-21285](https://cve.now/CVE-2023-21285.md): In setMetadata of MediaSessionRecord.java, there is a possible way to view another user's images due to a confused deputy. (no CVSS, Google Android)
- [CVE-2023-21284](https://cve.now/CVE-2023-21284.md): In multiple functions of DevicePolicyManager.java, there is a possible way to prevent enabling the Find my Device feature due to improper in (no CVSS, Google Android)
- [CVE-2023-21283](https://cve.now/CVE-2023-21283.md): In multiple functions of StatusHints.java, there is a possible way to reveal images across users due to a confused deputy. (no CVSS, Google Android)
- [CVE-2023-21282](https://cve.now/CVE-2023-21282.md): In TRANSPOSER\_SETTINGS of lpp\_tran.h, there is a possible out of bounds write due to an incorrect bounds check. (no CVSS, Google Android)
- [CVE-2023-21281](https://cve.now/CVE-2023-21281.md): In multiple functions of KeyguardViewMediator.java, there is a possible failure to lock after screen timeout due to a logic error in the cod (no CVSS, Google Android)
- [CVE-2023-21280](https://cve.now/CVE-2023-21280.md): In setMediaButtonBroadcastReceiver of MediaSessionRecord.java, there is a possible permanent DoS due to resource exhaustion. (no CVSS, Google Android)
- [CVE-2023-21279](https://cve.now/CVE-2023-21279.md): In visitUris of RemoteViews.java, there is a possible cross-user media read due to a confused deputy. (no CVSS, Google Android)
- [CVE-2023-21278](https://cve.now/CVE-2023-21278.md): In multiple locations, there is a possible way to obscure the microphone privacy indicator due to a logic error in the code. (no CVSS, Google Android)
- [CVE-2023-21277](https://cve.now/CVE-2023-21277.md): In visitUris of RemoteViews.java, there is a possible way to reveal images across users due to a missing permission check. (no CVSS, Google Android)
- [CVE-2023-21276](https://cve.now/CVE-2023-21276.md): In writeToParcel of CursorWindow.cpp, there is a possible information disclosure due to uninitialized data. (no CVSS, Google Android)
- [CVE-2023-21275](https://cve.now/CVE-2023-21275.md): In decideCancelProvisioningDialog of AdminIntegratedFlowPrepareActivity.java, there is a possible way to bypass factory reset protections du (no CVSS, Google Android)
- [CVE-2023-21274](https://cve.now/CVE-2023-21274.md): In convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2023-21273](https://cve.now/CVE-2023-21273.md): In SDP\_AddAttribute of sdp\_db.cc, there is a possible out of bounds write due to an incorrect bounds check. (no CVSS, Google Android)
- [CVE-2023-21272](https://cve.now/CVE-2023-21272.md): In readFrom of Uri.java, there is a possible bad URI permission grant due to improper input validation. (no CVSS, Google Android)
- [CVE-2023-21271](https://cve.now/CVE-2023-21271.md): In parseInputs of ShimPreparedModel.cpp, there is a possible out of bounds read due to improper input validation. (no CVSS, Google Android)
- [CVE-2023-21269](https://cve.now/CVE-2023-21269.md): In startActivityInner of ActivityStarter.java, there is a possible way to launch an activity into PiP mode from the background due to BAL by (no CVSS, Google Android)
- [CVE-2023-21268](https://cve.now/CVE-2023-21268.md): In update of MmsProvider.java, there is a possible way to change directory permissions due to a path traversal error. (no CVSS, Google Android)
- [CVE-2023-21267](https://cve.now/CVE-2023-21267.md): In multiple functions of KeyguardViewMediator.java, there is a possible way to bypass lockdown mode with screen pinning due to a logic error (no CVSS, Google Android)
- [CVE-2023-21265](https://cve.now/CVE-2023-21265.md): In multiple locations, there are root CA certificates which need to be disabled. (CVSS 7.5, Google Android)
- [CVE-2023-21264](https://cve.now/CVE-2023-21264.md): In multiple functions of mem\_protect.c, there is a possible way to access hypervisor memory due to a memory access check in the wrong place. (no CVSS, Google Android)
- [CVE-2023-21242](https://cve.now/CVE-2023-21242.md): In isServerCertChainValid of InsecureEapNetworkHandler.java, there is a possible way to trust an imposter server due to a logic error in the (no CVSS, Google Android)
- [CVE-2023-21140](https://cve.now/CVE-2023-21140.md): In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a missing permission check (CVSS 6.8, Google Android)
- [CVE-2023-21134](https://cve.now/CVE-2023-21134.md): In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a missing permission check (CVSS 6.8, Google Android)
- [CVE-2023-21133](https://cve.now/CVE-2023-21133.md): In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a missing permission check (CVSS 6.8, Google Android)
- [CVE-2023-21132](https://cve.now/CVE-2023-21132.md): In onCreate of ManagePermissionsActivity.java, there is a possible way to bypass factory reset protections due to a missing permission check (CVSS 6.8, Google Android)
- [CVE-2023-20965](https://cve.now/CVE-2023-20965.md): In processMessageImpl of ClientModeImpl.java, there is a possible credential disclosure in the TOFU flow due to a logic error in the code. (CVSS 9.8, Google Android)
- [CVE-2023-38687](https://cve.now/CVE-2023-38687.md): Execution of arbitrary JavaScript from Svelecte item names (CVSS 5.4, mskocik svelecte · svelecte)
- [CVE-2023-39950](https://cve.now/CVE-2023-39950.md): Insufficient input validation in efibootguard (CVSS 6.1, siemens efibootguard)
- [CVE-2023-40013](https://cve.now/CVE-2023-40013.md): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in external-svg-loader (CVSS 7.1, shubhamjain svg-loader · external-svg-loader)
- [CVE-2023-40020](https://cve.now/CVE-2023-40020.md): Improper Authentication in PrivateUploader (CVSS 9.9, PrivateUploader)
- [CVE-2023-40023](https://cve.now/CVE-2023-40023.md): Yaklang Plugin's Fuzztag Component Allows Unauthorized Local File Reading (CVSS 6.5, yaklang · github.com/yaklang/yaklang)
- [CVE-2023-40024](https://cve.now/CVE-2023-40024.md): Reflected Cross-Site Scripting (XSS) in scancode.io license endpoint (CVSS 5.4, nexB scancode.io · scancodeio)
- [CVE-2023-2606](https://cve.now/CVE-2023-2606.md): WP Brutal AI \< 2.06 - Admin+ Stored XSS (no CVSS, WP Brutal AI)
- [CVE-2023-3328](https://cve.now/CVE-2023-3328.md): Custom Field For WP Job Manager \< 1.2 - Admin+ Stored XSS (no CVSS, Custom Field For WP Job Manager)
- [CVE-2023-3601](https://cve.now/CVE-2023-3601.md): Simple Author Box \< 2.52 - Contributor+ Arbitrary User Information Disclosure via IDOR (CVSS 4.3, Simple Author Box)
- [CVE-2023-2802](https://cve.now/CVE-2023-2802.md): Ultimate Addons for Contact Form 7 \< 3.1.29 - Admin+ Stored XSS (no CVSS, Ultimate Addons for Contact Form)
- [CVE-2023-3435](https://cve.now/CVE-2023-3435.md): User Activity Log \< 1.6.5 - Unauthenticated SQLi (no CVSS, User Activity Log)
- [CVE-2022-4953](https://cve.now/CVE-2022-4953.md): Elementor \< 3.5.5 - Iframe Injection (no CVSS, Elementor Website Builder)
- [CVE-2023-2803](https://cve.now/CVE-2023-2803.md): Ultimate Addons for Contact Form 7 \< 3.1.29 - Reflected XSS (no CVSS, Ultimate Addons for Contact Form)
- [CVE-2023-3645](https://cve.now/CVE-2023-3645.md): Contact Form Builder by Bit Form \< 2.2.0 - Admin+ Stored XSS (no CVSS, Contact Form Builder by Bit Form)
- [CVE-2023-3721](https://cve.now/CVE-2023-3721.md): WP-EMail \< 2.69.1 - Admin+ Stored Cross-Site Scripting (CVSS 4.8, WP-EMail)
- [CVE-2023-40312](https://cve.now/CVE-2023-40312.md): Reflected XSS in multiple JSP files in opennms/opennms (CVSS 6.7, The OpenNMS Group Horizon · The OpenNMS Group Meridian +1)
- [CVE-2023-40311](https://cve.now/CVE-2023-40311.md): Stored XSS in multiple JSP files in opennms/opennms (CVSS 6.7, The OpenNMS Group Horizon · The OpenNMS Group Meridian +1)
- [CVE-2023-38721](https://cve.now/CVE-2023-38721.md): IBM i privilege escalation (CVSS 8.4, IBM i)
- [CVE-2023-0872](https://cve.now/CVE-2023-0872.md): ROLE\_REST can be used to escalate to ROLE\_ADMIN via /rest/users (CVSS 8.2, The OpenNMS Group Horizon · The OpenNMS Group Meridian +1)
- [CVE-2023-38741](https://cve.now/CVE-2023-38741.md): IBM TXSeries for Multiplatforms denial of service (CVSS 7.5, IBM TXSeries for Multiplatforms)
- [CVE-2023-33013](https://cve.now/CVE-2023-33013.md): A post-authentication command injection vulnerability in the NTP feature of Zyxel NBG6604 firmware version V1.01(ABIR.1)C0 could allow an au (CVSS 8.8, Zyxel NBG6604 firmware)
- [CVE-2023-28768](https://cve.now/CVE-2023-28768.md): Improper frame handling in the Zyxel XGS2220-30 firmware version V4.80(ABXN.1), XMG1930-30 firmware version V4.80(ACAR.1), and XS1930-10 fir (CVSS 6.5, Zyxel XGS2220-30 firmware · Zyxel XMG1930-30 firmware +1)
- [CVE-2023-4322](https://cve.now/CVE-2023-4322.md): Heap-based Buffer Overflow in radareorg/radare2 (CVSS 7.3, radareorg/radare2)
- [CVE-2023-30752](https://cve.now/CVE-2023-30752.md): WordPress External Videos Plugin \<= 2.0.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Silvia Pfeiffer and Andrew Nimmo External Videos)
- [CVE-2023-30751](https://cve.now/CVE-2023-30751.md): WordPress Article Directory Redux Plugin \<= 1.0.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, iControlWP Article Directory Redux)
- [CVE-2023-28535](https://cve.now/CVE-2023-28535.md): WordPress Paytm Payment Donation Plugin \<= 2.2.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Paytm Payment Donation)
- [CVE-2023-30749](https://cve.now/CVE-2023-30749.md): WordPress Optima Express + MarketBoost IDX Plugin Plugin \<= 7.3.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, ihomefinder Optima Express + MarketBoost IDX Plugin)
- [CVE-2023-30754](https://cve.now/CVE-2023-30754.md): WordPress AdFoxly – Ad Manager, AdSense Ads & Ads.txt Plugin \<= 1.8.5 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, AdFoxly – Ad Manager, AdSense Ads & Ads.txt)
- [CVE-2023-30489](https://cve.now/CVE-2023-30489.md): WordPress Email Subscription Popup Plugin \<= 1.2.16 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, I Thirteen Web Solution Email Subscription Popup)
- [CVE-2023-30477](https://cve.now/CVE-2023-30477.md): WordPress AFFILIATE Solution Plugin \<= 1.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Essitco AFFILIATE Solution)
- [CVE-2023-30475](https://cve.now/CVE-2023-30475.md): WordPress Coupon Affiliates Plugin \<= 5.4.5 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Elliot Sowersby, RelyWP WooCommerce Affiliate Plugin – Coup…)
- [CVE-2023-29097](https://cve.now/CVE-2023-29097.md): WordPress a3 Portfolio Plugin \<= 3.1.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, a3rev Software a3 Portfolio)
- [CVE-2023-30483](https://cve.now/CVE-2023-30483.md): WordPress Watu Quiz Plugin \<= 3.3.9.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Kiboko Labs Watu Quiz)
- [CVE-2023-4321](https://cve.now/CVE-2023-4321.md): Cross-site Scripting (XSS) - Stored in cockpit-hq/cockpit (CVSS 8.3, cockpit-hq/cockpit)
- [CVE-2023-3160](https://cve.now/CVE-2023-3160.md): Local privilege escalation in security products for Windows (CVSS 7.8, ESET, spol. s r.o. ESET NOD32 Antivirus · ESET, spol. s… +7)
- [CVE-2023-3267](https://cve.now/CVE-2023-3267.md): When adding a remote backup location, an authenticated user can pass arbitrary OS commands through the username field. (CVSS 9.1, CyberPower PowerPanel Enterprise)
- [CVE-2023-3266](https://cve.now/CVE-2023-3266.md): A non-feature complete authentication mechanism exists in the production application allowing an attacker to bypass all authentication check (CVSS 9.8, CyberPower PowerPanel Enterprise)
- [CVE-2023-3265](https://cve.now/CVE-2023-3265.md): An authentication bypass exists on CyberPower PowerPanel Enterprise by failing to sanitize meta-characters from the username, allowing an at (CVSS 9.8, CyberPower PowerPanel Enterprise)
- [CVE-2023-3264](https://cve.now/CVE-2023-3264.md): The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier uses hard-coded credentials for all interactions with the internal (CVSS 6.7, Dataprobe iBoot PDU)
- [CVE-2023-3263](https://cve.now/CVE-2023-3263.md): The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to authentication bypass in the REST API due to the (CVSS 7.5, Dataprobe iBoot PDU)
- [CVE-2023-3262](https://cve.now/CVE-2023-3262.md): The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier uses hard-coded credentials for all interactions with the internal (CVSS 6.7, Dataprobe iBoot PDU)
- [CVE-2023-3261](https://cve.now/CVE-2023-3261.md): The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier contains a buffer overflow vulnerability in the librta.so.0.0.0 li (CVSS 7.5, Dataprobe iBoot PDU)
- [CVE-2023-3260](https://cve.now/CVE-2023-3260.md): The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to command injection via the \`user-name\` URL paramet (CVSS 7.2, Dataprobe iBoot PDU)
- [CVE-2023-3259](https://cve.now/CVE-2023-3259.md): The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to authentication bypass. (CVSS 9.8, Dataprobe iBoot PDU)
- [CVE-2023-28480](https://cve.now/CVE-2023-28480.md): An issue was discovered in Tigergraph Enterprise 3.7.0. (no CVSS)
- [CVE-2023-28481](https://cve.now/CVE-2023-28481.md): An issue was discovered in Tigergraph Enterprise 3.7.0. (no CVSS)
- [CVE-2023-28482](https://cve.now/CVE-2023-28482.md): An issue was discovered in Tigergraph Enterprise 3.7.0. (no CVSS)
- [CVE-2023-28483](https://cve.now/CVE-2023-28483.md): An issue was discovered in Tigergraph Enterprise 3.7.0. (no CVSS)
- [CVE-2023-29468](https://cve.now/CVE-2023-29468.md): The Texas Instruments (TI) WiLink WL18xx MCP driver does not limit the number of information elements (IEs) of type XCC\_EXT\_1\_IE\_ID or XCC\_E (CVSS 9.8)
- [CVE-2023-30186](https://cve.now/CVE-2023-30186.md): A use after free issue discovered in ONLYOFFICE DocumentServer 4.0.3 through 7.3.2 allows remote attackers to run arbitrary code via crafted (no CVSS)
- [CVE-2023-30187](https://cve.now/CVE-2023-30187.md): An out of bounds memory access vulnerability in ONLYOFFICE DocumentServer 4.0.3 through 7.3.2 allows remote attackers to run arbitrary code (no CVSS)
- [CVE-2023-30188](https://cve.now/CVE-2023-30188.md): Memory Exhaustion vulnerability in ONLYOFFICE Document Server 4.0.3 through 7.3.2 allows remote attackers to cause a denial of service via c (no CVSS)
- [CVE-2023-31041](https://cve.now/CVE-2023-31041.md): An issue was discovered in SysPasswordDxe in Insyde InsydeH2O with kernel 5.0 through 5.5. (no CVSS)
- [CVE-2023-32748](https://cve.now/CVE-2023-32748.md): The Linux DVS server component of Mitel MiVoice Connect through 19.3 SP2 (22.24.1500.0) could allow an unauthenticated attacker with interna (no CVSS)
- [CVE-2023-37070](https://cve.now/CVE-2023-37070.md): Code Projects Hospital Information System 1.0 is vulnerable to Cross Site Scripting (XSS) (no CVSS)
- [CVE-2023-37847](https://cve.now/CVE-2023-37847.md): novel-plus v3.6.2 was discovered to contain a SQL injection vulnerability. (no CVSS)
- [CVE-2023-39292](https://cve.now/CVE-2023-39292.md): A SQL Injection vulnerability has been identified in the MiVoice Office 400 SMB Controller through 1.2.5.23 which could allow a malicious ac (CVSS 9.8)
- [CVE-2023-39293](https://cve.now/CVE-2023-39293.md): A Command Injection vulnerability has been identified in the MiVoice Office 400 SMB Controller through 1.2.5.23 which could allow a maliciou (CVSS 9.8)
- [CVE-2023-39827](https://cve.now/CVE-2023-39827.md): Tenda A18 V15.13.07.09 was discovered to contain a stack overflow via the rule\_info parameter in the formAddMacfilterRule function. (no CVSS)
- [CVE-2023-39828](https://cve.now/CVE-2023-39828.md): Tenda A18 V15.13.07.09 was discovered to contain a stack overflow via the security parameter in the formWifiBasicSet function. (no CVSS)
- [CVE-2023-39829](https://cve.now/CVE-2023-39829.md): Tenda A18 V15.13.07.09 was discovered to contain a stack overflow via the wpapsk\_crypto2\_4g parameter in the fromSetWirelessRepeat function. (no CVSS)
- [CVE-2023-39908](https://cve.now/CVE-2023-39908.md): The PKCS11 module of the YubiHSM 2 SDK through 2023.01 does not properly validate the length of specific read operations on object metadata. (no CVSS)
- [CVE-2023-40274](https://cve.now/CVE-2023-40274.md): An issue was discovered in zola 0.13.0 through 0.17.2. (no CVSS, zola)
- [CVE-2023-40283](https://cve.now/CVE-2023-40283.md): An issue was discovered in l2cap\_sock\_release in net/bluetooth/l2cap\_sock.c in the Linux kernel before 6.4.10. (CVSS 7.8)
- [CVE-2023-40291](https://cve.now/CVE-2023-40291.md): Harman Infotainment 20190525031613 allows root access via SSH over a USB-to-Ethernet dongle with a password that is an internal project name (no CVSS)
- [CVE-2023-40292](https://cve.now/CVE-2023-40292.md): Harman Infotainment 20190525031613 and later discloses the IP address via CarPlay CTRL packets. (no CVSS)
- [CVE-2023-40293](https://cve.now/CVE-2023-40293.md): Harman Infotainment 20190525031613 and later allows command injection via unauthenticated RPC with a D-Bus connection object. (no CVSS)
- [CVE-2023-40294](https://cve.now/CVE-2023-40294.md): libboron in Boron 2.0.8 has a heap-based buffer overflow in ur\_parseBlockI at i\_parse\_blk.c. (no CVSS)
- [CVE-2023-40295](https://cve.now/CVE-2023-40295.md): libboron in Boron 2.0.8 has a heap-based buffer overflow in ur\_strInitUtf8 at string.c. (no CVSS)
- [CVE-2023-40296](https://cve.now/CVE-2023-40296.md): async-sockets-cpp through 0.3.1 has a stack-based buffer overflow in ReceiveFrom and Receive in udpsocket.hpp when processing malformed UDP (no CVSS)
- [CVE-2023-40303](https://cve.now/CVE-2023-40303.md): GNU inetutils before 2.5 may allow privilege escalation because of unchecked return values of set\*id() family functions in ftpd, rcp, rlogin (no CVSS)
- [CVE-2023-40305](https://cve.now/CVE-2023-40305.md): GNU indent 2.2.13 has a heap-based buffer overflow in search\_brace in indent.c via a crafted file. (no CVSS)
- [CVE-2023-40354](https://cve.now/CVE-2023-40354.md): An issue was discovered in MariaDB MaxScale before 23.02.3. (no CVSS)
- [CVE-2023-40359](https://cve.now/CVE-2023-40359.md): xterm before 380 supports ReGIS reporting for character-set names even if they have unexpected characters (i.e., neither alphanumeric nor un (no CVSS)
- [CVE-2023-40360](https://cve.now/CVE-2023-40360.md): QEMU through 8.0.4 accesses a NULL pointer in nvme\_directive\_receive in hw/nvme/ctrl.c because there is no check for whether an endurance gr (no CVSS)
- [CVE-2023-40453](https://cve.now/CVE-2023-40453.md): Docker Machine through 0.16.2 allows an attacker, who has control of a worker node, to provide crafted version data, which might potentially (no CVSS)
- [CVE-2023-40518](https://cve.now/CVE-2023-40518.md): LiteSpeed OpenLiteSpeed before 1.7.18 does not strictly validate HTTP request headers. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-08-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.