# CVEs published 2023-08-25

85 CVEs were published on August 25, 2023: 3 critical, 13 high. Days are UTC.

- [CVE-2023-4543](https://cve.now/CVE-2023-4543.md): IBOS OA export&contactids=x sql injection (CVSS 6.3, IBOS OA)
- [CVE-2023-4542](https://cve.now/CVE-2023-4542.md): D-Link DAR-8000-10 sys1.php os command injection (CVSS 6.3, D-Link DAR-8000-10)
- [CVE-2023-40587](https://cve.now/CVE-2023-40587.md): Pyramid static view path traversal up one directory (CVSS 4.3, Pylons pyramid · pyramid)
- [CVE-2023-2906](https://cve.now/CVE-2023-2906.md): Wireshark CP2179 divide by zero (no CVSS, Wireshark Foundation Wireshark)
- [CVE-2023-41080](https://cve.now/CVE-2023-41080.md): Apache Tomcat: Open redirect with FORM authentication (no CVSS, Apache Software Foundation Apache Tomcat · org.apache.to… +2)
- [CVE-2023-40586](https://cve.now/CVE-2023-40586.md): go package github.com/corazawaf/coraza is vulnerable to denial of service (CVSS 7.5, corazawaf coraza · github.com/corazawaf/coraza/v2 +1)
- [CVE-2023-40585](https://cve.now/CVE-2023-40585.md): Unauthenticated access to Ironic API (CVSS 7.3, metal3-io ironic-image)
- [CVE-2023-40571](https://cve.now/CVE-2023-40571.md): weblogic-framework Deserialization of Untrusted Data vulnerability (CVSS 9.8, dream0x01 weblogic-framework)
- [CVE-2023-40583](https://cve.now/CVE-2023-40583.md): libp2p nodes vulnerable to OOM attack (CVSS 7.5, go-libp2p · github.com/libp2p/go-libp2p)
- [CVE-2023-40166](https://cve.now/CVE-2023-40166.md): Notepad++ heap buffer read overflow in FileManager::detectLanguageFromTextBegining (CVSS 5.5, notepad-plus-plus)
- [CVE-2023-40164](https://cve.now/CVE-2023-40164.md): Notepad++ global buffer read overflow in nsCodingStateMachine::NextState (CVSS 5.5, notepad-plus-plus)
- [CVE-2023-32678](https://cve.now/CVE-2023-32678.md): Zulip vulnerable to insufficient authorization check for edition/deletion of messages and topics in private streams by former subscribers (CVSS 6.5, zulip)
- [CVE-2023-40036](https://cve.now/CVE-2023-40036.md): Notepad++ global buffer read overflow in CharDistributionAnalysis::HandleOneChar (CVSS 5.5, notepad-plus-plus)
- [CVE-2023-40580](https://cve.now/CVE-2023-40580.md): Freighter mnemonic phrase may be accessed by Javascript through a private API (CVSS 8.1, stellar freighter)
- [CVE-2023-40031](https://cve.now/CVE-2023-40031.md): Notepad++ vulnerable to heap buffer write overflow in Utf8\_16\_Read::convert (CVSS 7.8, notepad-plus-plus)
- [CVE-2023-40579](https://cve.now/CVE-2023-40579.md): OpenFGA Authorization Bypass (CVSS 6.5, openfga · github.com/openfga/openfga)
- [CVE-2023-25848](https://cve.now/CVE-2023-25848.md): BUG-000158039 - There is an information disclosure issue in ArcGIS Server. (CVSS 5.3, Esri ArcGIS Enterprise Server)
- [CVE-2019-13689](https://cve.now/CVE-2019-13689.md): Inappropriate implementation in OS in Google Chrome on ChromeOS prior to 75.0.3770.80 allowed a remote attacker to perform arbitrary read/wr (CVSS 7.8, Google Chrome)
- [CVE-2019-13690](https://cve.now/CVE-2019-13690.md): Inappropriate implementation in OS in Google Chrome on ChromeOS prior to 75.0.3770.80 allowed a remote attacker to perform OS-level privileg (CVSS 9.6, Google Chrome)
- [CVE-2023-38201](https://cve.now/CVE-2023-38201.md): Keylime: challenge-response protocol bypass during agent registration (CVSS 6.5, Red Hat Enterprise Linux · keylime)
- [CVE-2022-4452](https://cve.now/CVE-2022-4452.md): Insufficient data validation in crosvm in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially exploit object corru (no CVSS, Google Chrome)
- [CVE-2023-4534](https://cve.now/CVE-2023-4534.md): NeoMind Fusion Platform Link cross site scripting (CVSS 3.5, NeoMind Fusion Platform)
- [CVE-2023-41250](https://cve.now/CVE-2023-41250.md): In JetBrains TeamCity before 2023.05.3 reflected XSS was possible during user registration (CVSS 3.5, JetBrains TeamCity)
- [CVE-2023-41249](https://cve.now/CVE-2023-41249.md): In JetBrains TeamCity before 2023.05.3 reflected XSS was possible during copying Build Step (CVSS 4.6, JetBrains TeamCity)
- [CVE-2023-41248](https://cve.now/CVE-2023-41248.md): In JetBrains TeamCity before 2023.05.3 stored XSS was possible during Cloud Profiles configuration (CVSS 4.6, JetBrains TeamCity)
- [CVE-2023-32797](https://cve.now/CVE-2023-32797.md): WordPress video carousel slider with lightbox Plugin \<= 1.0.22 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, I Thirteen Web Solution video carousel slider with lightbox)
- [CVE-2023-32603](https://cve.now/CVE-2023-32603.md): WordPress Donations Made Easy – Smart Donations Plugin \<= 4.0.12 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, RedNao Donations Made Easy – Smart Donations)
- [CVE-2023-32598](https://cve.now/CVE-2023-32598.md): WordPress Featured Image Pro Post Grid Plugin \<= 5.14 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, A. R. Jones Featured Image Pro Post Grid)
- [CVE-2023-32575](https://cve.now/CVE-2023-32575.md): WordPress Product page shipping calculator for WooCommerce Plugin \<= 1.3.25 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, PI Websolution Product page shipping calculator for WooComm…)
- [CVE-2023-24394](https://cve.now/CVE-2023-24394.md): WordPress iframe popup Plugin \<= 3.3 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Gopi Ramasamy iframe popup)
- [CVE-2023-32596](https://cve.now/CVE-2023-32596.md): WordPress weebotLite Plugin \<= 1.0.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Wolfgang Ertl weebotLite)
- [CVE-2023-32595](https://cve.now/CVE-2023-32595.md): WordPress Sunny Search Plugin \<= 1.0.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Palasthotel by Edward Bock, Katharina Rompf Sunny Search)
- [CVE-2023-25981](https://cve.now/CVE-2023-25981.md): WordPress BuddyForms Plugin \<= 2.8.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, ThemeKraft Post Form)
- [CVE-2023-25649](https://cve.now/CVE-2023-25649.md): OS Command Injection Vulnerability in a Mobile Internet Product of ZTE (CVSS 6.8, ZTE MF286R)
- [CVE-2023-4478](https://cve.now/CVE-2023-4478.md): Parameter tampering in the registration resulting in blocked accounts to be created (CVSS 4.3, Mattermost)
- [CVE-2023-32591](https://cve.now/CVE-2023-32591.md): WordPress DBargain Plugin \<= 3.0.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Cloud Primero B.V DBargain)
- [CVE-2023-32584](https://cve.now/CVE-2023-32584.md): WordPress eBecas Plugin \<= 3.1.3 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, John Newcombe eBecas)
- [CVE-2023-32577](https://cve.now/CVE-2023-32577.md): WordPress DevBuddy Twitter Feed Plugin \<= 4.0.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Eji Osigwe DevBuddy Twitter Feed)
- [CVE-2023-32576](https://cve.now/CVE-2023-32576.md): WordPress Locatoraid Store Locator Plugin \<= 3.9.18 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Plainware Locatoraid Store Locator)
- [CVE-2023-32518](https://cve.now/CVE-2023-32518.md): WordPress WP Chinese Conversion Plugin \<= 1.1.16 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Ono Oogami WP Chinese Conversion)
- [CVE-2023-3406](https://cve.now/CVE-2023-3406.md): Path traversal issue in M-Files Classic Web (CVSS 7.7, M-Files Web)
- [CVE-2023-3425](https://cve.now/CVE-2023-3425.md): CVE-2023-3425: Out-of-Bounds memory read (CVSS 6.5, M-Files Server)
- [CVE-2023-32757](https://cve.now/CVE-2023-32757.md): e-Excellence U-Office Force - Arbitrary File Upload (CVSS 9.8, e-Excellence U-Office Force)
- [CVE-2023-32756](https://cve.now/CVE-2023-32756.md): e-Excellence U-Office Force - Path Traversal (CVSS 7.5, e-Excellence U-Office Force)
- [CVE-2023-32755](https://cve.now/CVE-2023-32755.md): e-Excellence U-Office Force - Error Message Leakage (CVSS 5.3, e-Excellence U-Office Force)
- [CVE-2023-40530](https://cve.now/CVE-2023-40530.md): Improper authorization in handler for custom URL scheme issue in 'Skylark' App for Android 6.2.13 and earlier and 'Skylark' App for iOS 6.2 (no CVSS, SKYLARK HOLDINGS CO. 'Skylark' App for Android · SKYLARK HO…)
- [CVE-2023-4520](https://cve.now/CVE-2023-4520.md): FV Flowplayer Video Player \<= 7.5.37.7212 - Insufficient Input Validation to Unauthenticated Stored Cross-Site Scripting and Arbitrary Usermeta Update (CVSS 5.4, foliovision FV Flowplayer Video Player)
- [CVE-2023-40599](https://cve.now/CVE-2023-40599.md): Regular expression Denial-of-Service (ReDoS) exists in multiple add-ons for Mailform Pro CGI 4.3.1.3 and earlier, which allows a remote unau (no CVSS, SYNCK GRAPHICA Mailform Pro CGI)
- [CVE-2023-40179](https://cve.now/CVE-2023-40179.md): Silverware Games vulnerable to account enumeration via inconsistent responses (CVSS 5.3, mesosoi silverwaregames-io-issue-tracker)
- [CVE-2023-40182](https://cve.now/CVE-2023-40182.md): silverware-io-issue-tracker server responds in a noticeably different amount of time depending if a given email address exists or not (CVSS 3.7, mesosoi silverwaregames-io-issue-tracker)
- [CVE-2023-40570](https://cve.now/CVE-2023-40570.md): Datasette 1.0 alpha series leaks names of databases and tables to unauthenticated users (CVSS 5.3, simonw datasette · datasette)
- [CVE-2023-40577](https://cve.now/CVE-2023-40577.md): Alertmanager UI is vulnerable to stored XSS via the /api/v1/alerts endpoint (CVSS 7.5, prometheus alertmanager · github.com/prometheus/alertmanager)
- [CVE-2020-11711](https://cve.now/CVE-2020-11711.md): An issue was discovered in Stormshield SNS 3.8.0. (no CVSS)
- [CVE-2021-27932](https://cve.now/CVE-2021-27932.md): Stormshield Network Security (SNS) VPN SSL Client 2.1.0 through 2.8.0 has Insecure Permissions. (no CVSS)
- [CVE-2023-24620](https://cve.now/CVE-2023-24620.md): An issue was discovered in Esoteric YamlBeans through 1.15. (no CVSS, com.esotericsoftware.yamlbeans:yamlbeans)
- [CVE-2023-24621](https://cve.now/CVE-2023-24621.md): An issue was discovered in Esoteric YamlBeans through 1.15. (no CVSS, com.esotericsoftware.yamlbeans:yamlbeans)
- [CVE-2023-34723](https://cve.now/CVE-2023-34723.md): An issue was discovered in TechView LA-5570 Wireless Gateway 1.0.19\_T53, allows attackers to gain sensitive information via /config/system.c (no CVSS)
- [CVE-2023-36198](https://cve.now/CVE-2023-36198.md): Buffer Overflow vulnerability in skalenetwork sgxwallet v.1.9.0 allows an attacker to cause a denial of service via the trustedBlsSignMessag (no CVSS)
- [CVE-2023-36199](https://cve.now/CVE-2023-36199.md): An issue in skalenetwork sgxwallet v.1.9.0 and below allows an attacker to cause a denial of service via the trustedGenerateEcdsaKey compone (no CVSS)
- [CVE-2023-37249](https://cve.now/CVE-2023-37249.md): Infoblox NIOS through 8.5.1 has a faulty component that accepts malicious input without sanitization, resulting in shell access. (no CVSS)
- [CVE-2023-38710](https://cve.now/CVE-2023-38710.md): An issue was discovered in Libreswan before 4.12. (no CVSS)
- [CVE-2023-38711](https://cve.now/CVE-2023-38711.md): An issue was discovered in Libreswan before 4.12. (no CVSS)
- [CVE-2023-38712](https://cve.now/CVE-2023-38712.md): An issue was discovered in Libreswan 3.x and 4.x before 4.12. (no CVSS)
- [CVE-2023-38973](https://cve.now/CVE-2023-38973.md): A stored cross-site scripting (XSS) vulnerability in the Add Tag function of Badaso v2.9.7 allows attackers to execute arbitrary web scripts (no CVSS)
- [CVE-2023-38974](https://cve.now/CVE-2023-38974.md): A stored cross-site scripting (XSS) vulnerability in the Edit Category function of Badaso v2.9.7 allows attackers to execute arbitrary web s (no CVSS)
- [CVE-2023-39287](https://cve.now/CVE-2023-39287.md): A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 SP3 (22.24.5800.0) could allow an authenticated attacker (no CVSS)
- [CVE-2023-39288](https://cve.now/CVE-2023-39288.md): A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2304.102 could allow an authenticated attacker (no CVSS)
- [CVE-2023-39289](https://cve.now/CVE-2023-39289.md): A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2208.101 could allow an unauthenticated attack (no CVSS)
- [CVE-2023-39290](https://cve.now/CVE-2023-39290.md): A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through R19.3 SP3 (22.24.5800.0) could allow an authenticated attacke (no CVSS)
- [CVE-2023-39291](https://cve.now/CVE-2023-39291.md): A vulnerability in the Connect Mobility Router component of MiVoice Connect through 9.6.2304.102 could allow an authenticated attacker with (no CVSS)
- [CVE-2023-39600](https://cve.now/CVE-2023-39600.md): IceWarp 11.4.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the color parameter. (no CVSS)
- [CVE-2023-39707](https://cve.now/CVE-2023-39707.md): A stored cross-site scripting (XSS) vulnerability in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbit (no CVSS)
- [CVE-2023-39742](https://cve.now/CVE-2023-39742.md): giflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c. (no CVSS)
- [CVE-2023-40217](https://cve.now/CVE-2023-40217.md): An issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and 3.11.x before 3.11.5. (no CVSS)
- [CVE-2023-40796](https://cve.now/CVE-2023-40796.md): Phicomm k2 v22.6.529.216 was discovered to contain a command injection vulnerability via the function luci.sys.call. (no CVSS)
- [CVE-2023-40797](https://cve.now/CVE-2023-40797.md): In Tenda AC23 v16.03.07.45\_cn, the sub\_4781A4 function does not validate the parameters entered by the user, resulting in a post-authenticat (no CVSS)
- [CVE-2023-40798](https://cve.now/CVE-2023-40798.md): In Tenda AC23 v16.03.07.45\_cn, the formSetIPv6status and formGetWanParameter functions do not authenticate user input parameters, resulting (no CVSS)
- [CVE-2023-40799](https://cve.now/CVE-2023-40799.md): Tenda AC23 Vv16.03.07.45\_cn is vulnerable to Buffer Overflow via sub\_450A4C function. (no CVSS)
- [CVE-2023-40800](https://cve.now/CVE-2023-40800.md): The compare\_parentcontrol\_time function does not authenticate user input parameters, resulting in a post-authentication stack overflow vulne (no CVSS)
- [CVE-2023-40801](https://cve.now/CVE-2023-40801.md): The sub\_451784 function does not validate the parameters entered by the user, resulting in a stack overflow vulnerability in Tenda AC23 v16. (no CVSS)
- [CVE-2023-40802](https://cve.now/CVE-2023-40802.md): The get\_parentControl\_list\_Info function does not verify the parameters entered by the user, causing a post-authentication heap overflow vul (no CVSS)
- [CVE-2023-40915](https://cve.now/CVE-2023-40915.md): Tenda AX3 v16.03.12.11 has a stack buffer overflow vulnerability detected at function form\_fast\_setting\_wifi\_set. (no CVSS)
- [CVE-2023-41121](https://cve.now/CVE-2023-41121.md): Array AG OS before 9.4.0.499 allows denial of service: remote attackers can cause system service processes to crash through abnormal HTTP op (no CVSS)
- [CVE-2023-41167](https://cve.now/CVE-2023-41167.md): @webiny/react-rich-text-renderer before 5.37.2 allows XSS attacks by content managers. (no CVSS, @webiny/react-rich-text-renderer)
- [CVE-2023-41173](https://cve.now/CVE-2023-41173.md): AdGuard DNS before 2.2 allows remote attackers to cause a denial of service via malformed UDP packets. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-08-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.