# CVEs published 2023-08-28

77 CVEs were published on August 28, 2023: 6 critical, 7 high. Days are UTC.

- [CVE-2023-4569](https://cve.now/CVE-2023-4569.md): Kernel: information leak in nft\_set\_catchall\_flush in net/netfilter/nf\_tables\_api.c (CVSS 5.5, Kernel · Red Hat Enterprise Linux +1)
- [CVE-2023-39968](https://cve.now/CVE-2023-39968.md): Open Redirect Vulnerability in jupyter-server (CVSS 4.3, jupyter-server jupyter\_server · jupyter-server)
- [CVE-2023-40170](https://cve.now/CVE-2023-40170.md): cross-site inclusion (XSSI) of files in jupyter-server (CVSS 4.6, jupyter-server jupyter\_server · jupyter-server)
- [CVE-2023-39348](https://cve.now/CVE-2023-39348.md): Improper log output when using GitHub Status Notifications in spinnaker (CVSS 4.0, spinnaker · github.com/spinnaker/spinnaker)
- [CVE-2023-40590](https://cve.now/CVE-2023-40590.md): Untrusted search path on Windows systems leading to arbitrary code execution (CVSS 7.8, gitpython-developers GitPython · gitpython)
- [CVE-2023-1997](https://cve.now/CVE-2023-1997.md): OS Command Injection vulnerability affecting SIMULIA 3DOrchestrate from Release 3DEXPERIENCE R2021x through Release 3DEXPERIENCE R2023x (CVSS 8.8, Dassault Systèmes SIMULIA 3DOrchestrate)
- [CVE-2018-25089](https://cve.now/CVE-2018-25089.md): glb Meetup Tag Extension Link Attribute reverse tabnabbing (CVSS 3.5, glb Meetup Tag Extension)
- [CVE-2017-20186](https://cve.now/CVE-2017-20186.md): nikooo777 ckSurf Spectator List Name misc.sp SpecListMenuDead denial of service (CVSS 3.5, nikooo777 ckSurf)
- [CVE-2023-40195](https://cve.now/CVE-2023-40195.md): Apache Airflow Spark Provider Deserialization Vulnerability RCE (CVSS 8.8, Apache Software Foundation Apache Airflow Spark Provider ·…)
- [CVE-2023-27604](https://cve.now/CVE-2023-27604.md): Apache Airflow Sqoop Provider: Airflow Sqoop Provider RCE Vulnerability (CVSS 8.8, Apache Software Foundation Apache Airflow Sqoop Provider ·…)
- [CVE-2023-38030](https://cve.now/CVE-2023-38030.md): Saho ADM100&ADM-100FP - Execute Code (CVSS 7.5, Saho ADM100 · Saho ADM-100FP)
- [CVE-2023-38029](https://cve.now/CVE-2023-38029.md): Saho ADM100&ADM-100FP - Arbitrary File Upload (CVSS 9.8, Saho ADM100 · Saho ADM-100FP)
- [CVE-2023-38028](https://cve.now/CVE-2023-38028.md): Saho ADM100&ADM-100FP - Broken Access Control (CVSS 9.1, Saho ADM100 · Saho ADM-100FP)
- [CVE-2023-38027](https://cve.now/CVE-2023-38027.md): SpotCam Co., Ltd. SpotCam Sense - Command Injection (CVSS 9.8, SPOTCAM CO. SpotCam Sense)
- [CVE-2016-15035](https://cve.now/CVE-2016-15035.md): Doc2k RE-Chat re\_chat.js cross site scripting (CVSS 3.5, Doc2k RE-Chat)
- [CVE-2023-38026](https://cve.now/CVE-2023-38026.md): SpotCam Co., Ltd. SpotCamFHD - Use of Hard-coded Cryptographic Key -2 (CVSS 9.8, SPOTCAM CO. SpotCam FHD)
- [CVE-2023-38025](https://cve.now/CVE-2023-38025.md): SpotCam Co., Ltd. SpotCamFHD - Command Injection -1 (CVSS 9.8, SPOTCAM CO. SpotCam FHD)
- [CVE-2023-38024](https://cve.now/CVE-2023-38024.md): SpotCam Co., Ltd. SpotCamFHD - Use of Hard-coded Cryptographic Key -1 (CVSS 9.8, SPOTCAM CO. SpotCam FHD)
- [CVE-2023-24959](https://cve.now/CVE-2023-24959.md): IBM InfoSphere Information Server information disclosure (CVSS 5.3, IBM InfoSphere Information Server)
- [CVE-2023-23473](https://cve.now/CVE-2023-23473.md): IBM InfoSphere Information Server cross-site request forgery (CVSS 5.3, IBM InfoSphere Information Server)
- [CVE-2023-22877](https://cve.now/CVE-2023-22877.md): IBM InfoSphere Information Server CSV injection (CVSS 7.0, IBM InfoSphere Information Server)
- [CVE-2023-26270](https://cve.now/CVE-2023-26270.md): IBM Security Guardium Data Encryption code execution (CVSS 6.5, IBM Guardium Cloud Key Manager)
- [CVE-2023-26271](https://cve.now/CVE-2023-26271.md): IBM Security Guardium Data Encryption information disclosure (CVSS 5.3, IBM Guardium Cloud Key Manager)
- [CVE-2023-26272](https://cve.now/CVE-2023-26272.md): IBM Security Guardium Data Encryption information disclosure (CVSS 5.3, IBM Guardium Cloud Key Manager)
- [CVE-2023-4560](https://cve.now/CVE-2023-4560.md): Improper Authorization of Index Containing Sensitive Information in omeka/omeka-s (CVSS 6.5, omeka/omeka-s)
- [CVE-2023-4561](https://cve.now/CVE-2023-4561.md): Cross-site Scripting (XSS) - Stored in omeka/omeka-s (CVSS 7.1, omeka/omeka-s)
- [CVE-2020-24165](https://cve.now/CVE-2020-24165.md): An issue was discovered in TCG Accelerator in QEMU 4.2.0, allows local attackers to execute arbitrary code, escalate privileges, and cause a (no CVSS)
- [CVE-2020-27366](https://cve.now/CVE-2020-27366.md): Cross Site Scripting (XSS) vulnerability in wlscanresults.html in Humax HGB10R-02 BRGCAB version 1.0.03, allows local attackers to execute a (no CVSS)
- [CVE-2022-46783](https://cve.now/CVE-2022-46783.md): An issue was discovered in Stormshield SSL VPN Client before 3.2.0. (no CVSS)
- [CVE-2023-26095](https://cve.now/CVE-2023-26095.md): ASQ in Stormshield Network Security (SNS) 4.3.15 before 4.3.16 and 4.6.x before 4.6.3 allows a crash when analysing a crafted SIP packet. (no CVSS)
- [CVE-2023-34724](https://cve.now/CVE-2023-34724.md): An issue was discovered in TECHView LA5570 Wireless Gateway 1.0.19\_T53, allows physical attackers to gain escalated privileges via the UART (no CVSS)
- [CVE-2023-34725](https://cve.now/CVE-2023-34725.md): An issue was discovered in TechView LA-5570 Wireless Gateway 1.0.19\_T53, allows physical attackers to gain escalated privileges via a telnet (no CVSS)
- [CVE-2023-34758](https://cve.now/CVE-2023-34758.md): Sliver from v1.5.x to v1.5.39 has an improper cryptographic implementation, which allows attackers to execute a man-in-the-middle attack via (no CVSS, github.com/bishopfox/sliver)
- [CVE-2023-35785](https://cve.now/CVE-2023-35785.md): Zoho ManageEngine Active Directory 360 versions 4315 and below, ADAudit Plus 7202 and below, ADManager Plus 7200 and below, Asset Explorer 6 (no CVSS)
- [CVE-2023-36481](https://cve.now/CVE-2023-36481.md): An issue was discovered in Samsung Exynos Mobile Processor and Wearable Processor 9810, 9610, 9820, 980, 850, 1080, 2100, 2200, 1280, 1380, (no CVSS)
- [CVE-2023-38969](https://cve.now/CVE-2023-38969.md): Cross Site Scripting vulnerabiltiy in Badaso v.2.9.7 allows a remote attacker to execute arbitrary code via a crafted payload to the title p (no CVSS)
- [CVE-2023-39059](https://cve.now/CVE-2023-39059.md): An issue in ansible semaphore v.2.8.90 allows a remote attacker to execute arbitrary code via a crafted payload to the extra variables param (no CVSS, github.com/ansible-semaphore/semaphore)
- [CVE-2023-39062](https://cve.now/CVE-2023-39062.md): Cross Site Scripting vulnerability in Spipu HTML2PDF before v.5.2.8 allows a remote attacker to execute arbitrary code via a crafted script (no CVSS, spipu/html2pdf)
- [CVE-2023-39560](https://cve.now/CVE-2023-39560.md): ECTouch v2 was discovered to contain a SQL injection vulnerability via the $arr\['id'\] parameter at \\default\\helpers\\insert.php. (no CVSS)
- [CVE-2023-39562](https://cve.now/CVE-2023-39562.md): GPAC v2.3-DEV-rev449-g5948e4f70-master was discovered to contain a heap-use-after-free via the gf\_bs\_align function at bitstream.c. (no CVSS)
- [CVE-2023-39578](https://cve.now/CVE-2023-39578.md): A stored cross-site scripting (XSS) vulnerability in the Create function of Zenario CMS v9.4 allows attackers to execute arbitrary web scrip (no CVSS)
- [CVE-2023-39650](https://cve.now/CVE-2023-39650.md): Theme Volty CMS Blog up to version v4.0.1 was discovered to contain a SQL injection vulnerability via the id parameter at /tvcmsblog/single. (no CVSS)
- [CVE-2023-39652](https://cve.now/CVE-2023-39652.md): theme volty tvcmsvideotab up to v4.0.0 was discovered to contain a SQL injection vulnerability via the component TvcmsVideoTabConfirmDeleteM (no CVSS)
- [CVE-2023-39708](https://cve.now/CVE-2023-39708.md): A stored cross-site scripting (XSS) vulnerability in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbit (no CVSS)
- [CVE-2023-39709](https://cve.now/CVE-2023-39709.md): Multiple cross-site scripting (XSS) vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arb (no CVSS)
- [CVE-2023-39810](https://cve.now/CVE-2023-39810.md): An issue in the CPIO command of Busybox v1.33.2 allows attackers to execute a directory traversal. (no CVSS)
- [CVE-2023-40748](https://cve.now/CVE-2023-40748.md): PHPJabbers Food Delivery Script 3.0 has a SQL injection (SQLi) vulnerability in the "q" parameter of index.php. (no CVSS)
- [CVE-2023-40749](https://cve.now/CVE-2023-40749.md): PHPJabbers Food Delivery Script v3.0 is vulnerable to SQL Injection in the "column" parameter of index.php. (no CVSS)
- [CVE-2023-40750](https://cve.now/CVE-2023-40750.md): There is a Cross Site Scripting (XSS) vulnerability in the "action" parameter of index.php in PHPJabbers Yacht Listing Script v1.0. (no CVSS)
- [CVE-2023-40751](https://cve.now/CVE-2023-40751.md): PHPJabbers Fundraising Script v1.0 is vulnerable to Cross Site Scripting (XSS) via the "action" parameter of index.php. (no CVSS)
- [CVE-2023-40752](https://cve.now/CVE-2023-40752.md): There is a Cross Site Scripting (XSS) vulnerability in the "action" parameter of index.php in PHPJabbers Make an Offer Widget v1.0. (no CVSS)
- [CVE-2023-40753](https://cve.now/CVE-2023-40753.md): There is a Cross Site Scripting (XSS) vulnerability in the message parameter of index.php in PHPJabbers Ticket Support Script v3.2. (no CVSS)
- [CVE-2023-40754](https://cve.now/CVE-2023-40754.md): In PHPJabbers Car Rental Script 3.0, lack of verification when changing an email address and/or password (on the Profile Page) allows remote (no CVSS)
- [CVE-2023-40755](https://cve.now/CVE-2023-40755.md): There is a Cross Site Scripting (XSS) vulnerability in the "theme" parameter of preview.php in PHPJabbers Callback Widget v1.0. (no CVSS)
- [CVE-2023-40756](https://cve.now/CVE-2023-40756.md): User enumeration is found in PHPJabbers Callback Widget v1.0. (no CVSS)
- [CVE-2023-40757](https://cve.now/CVE-2023-40757.md): User enumeration is found in PHPJabbers Food Delivery Script v3.1. (no CVSS)
- [CVE-2023-40758](https://cve.now/CVE-2023-40758.md): User enumeration is found in PHPJabbers Document Creator v1.0. (no CVSS)
- [CVE-2023-40759](https://cve.now/CVE-2023-40759.md): User enumeration is found in PHP Jabbers Restaurant Booking Script v3.0. (no CVSS)
- [CVE-2023-40760](https://cve.now/CVE-2023-40760.md): User enumeration is found in PHP Jabbers Hotel Booking System v4.0. (no CVSS)
- [CVE-2023-40761](https://cve.now/CVE-2023-40761.md): User enumeration is found in PHPJabbers Yacht Listing Script v2.0. (no CVSS)
- [CVE-2023-40762](https://cve.now/CVE-2023-40762.md): User enumeration is found in PHPJabbers Fundraising Script v1.0. (no CVSS)
- [CVE-2023-40763](https://cve.now/CVE-2023-40763.md): User enumeration is found in PHPJabbers Taxi Booking Script v2.0. (no CVSS)
- [CVE-2023-40764](https://cve.now/CVE-2023-40764.md): User enumeration is found in PHP Jabbers Car Rental Script v3.0. (no CVSS)
- [CVE-2023-40765](https://cve.now/CVE-2023-40765.md): User enumeration is found in PHPJabbers Event Booking Calendar v4.0. (no CVSS)
- [CVE-2023-40766](https://cve.now/CVE-2023-40766.md): User enumeration is found in in PHPJabbers Ticket Support Script v3.2. (no CVSS)
- [CVE-2023-40767](https://cve.now/CVE-2023-40767.md): User enumeration is found in in PHPJabbers Make an Offer Widget v1.0. (no CVSS)
- [CVE-2023-40781](https://cve.now/CVE-2023-40781.md): Buffer Overflow vulnerability in Libming Libming v.0.4.8 allows a remote attacker to cause a denial of service via a crafted .swf file to th (no CVSS)
- [CVE-2023-40825](https://cve.now/CVE-2023-40825.md): An issue in Perfree PerfreeBlog v.3.1.2 allows a remote attacker to execute arbitrary code via crafted plugin listed in admin/plugin/access/ (no CVSS)
- [CVE-2023-40826](https://cve.now/CVE-2023-40826.md): An issue in pf4j pf4j v.3.9.0 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the zipplug (no CVSS, org.pf4j:pf4j)
- [CVE-2023-40827](https://cve.now/CVE-2023-40827.md): An issue in pf4j pf4j v.3.9.0 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the loadplu (no CVSS, org.pf4j:pf4j)
- [CVE-2023-40828](https://cve.now/CVE-2023-40828.md): An issue in pf4j pf4j v.3.9.0 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the expandI (no CVSS, org.pf4j:pf4j)
- [CVE-2023-40846](https://cve.now/CVE-2023-40846.md): Tenda AC6 US\_AC6V1.0BR\_V15.03.05.16\_multi\_TD01.bin is vulnerable to Buffer Overflow via function sub\_90998. (no CVSS)
- [CVE-2023-40857](https://cve.now/CVE-2023-40857.md): Buffer Overflow vulnerability in VirusTotal yara v.4.3.2 allows a remote attacker to execute arbtirary code via the yr\_execute\_cod function (no CVSS)
- [CVE-2023-40997](https://cve.now/CVE-2023-40997.md): Buffer Overflow vulnerability in O-RAN Software Community ric-plt-lib-rmr v.4.9.0 allows a remote attacker to cause a denial of service via (no CVSS)
- [CVE-2023-40998](https://cve.now/CVE-2023-40998.md): Buffer Overflow vulnerability in O-RAN Software Community ric-plt-lib-rmr v.4.9.0 allows a remote attacker to cause a denial of service via (no CVSS)
- [CVE-2023-41005](https://cve.now/CVE-2023-41005.md): An issue in Pagekit pagekit v.1.0.18 alows a remote attacker to execute arbitrary code via thedownloadAction and updateAction functions in U (no CVSS, pagekit/pagekit)
- [CVE-2023-41109](https://cve.now/CVE-2023-41109.md): SmartNode SN200 (aka SN200) 3.21.2-23021 allows unauthenticated OS Command Injection. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-08-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.