# CVEs published 2023-08-31

104 CVEs were published on August 31, 2023: 3 critical, 21 high. Days are UTC.

- [CVE-2023-4481](https://cve.now/CVE-2023-4481.md): Junos OS and Junos OS Evolved: A crafted BGP UPDATE message allows a remote attacker to de-peer (reset) BGP sessions (CVE-2023-4481) (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2023-40567](https://cve.now/CVE-2023-40567.md): Out-Of-Bounds Write in FreeRDP (CVSS 6.5, FreeRDP)
- [CVE-2023-40569](https://cve.now/CVE-2023-40569.md): Out-Of-Bounds Write in FreeRDP (CVSS 6.5, FreeRDP)
- [CVE-2023-40574](https://cve.now/CVE-2023-40574.md): Out-Of-Bounds Write in FreeRDP (CVSS 6.5, FreeRDP)
- [CVE-2023-40576](https://cve.now/CVE-2023-40576.md): Out-Of-Bounds Read in FreeRDP (CVSS 5.3, FreeRDP)
- [CVE-2023-40575](https://cve.now/CVE-2023-40575.md): Out-Of-Bounds Read in FreeRDP (CVSS 5.3, FreeRDP)
- [CVE-2023-40188](https://cve.now/CVE-2023-40188.md): Out-Of-Bounds Read in FreeRDP (CVSS 5.3, FreeRDP)
- [CVE-2023-40187](https://cve.now/CVE-2023-40187.md): Use-After-Free in FreeRDP (CVSS 7.3, FreeRDP)
- [CVE-2023-40186](https://cve.now/CVE-2023-40186.md): IntegerOverflow leading to Out-Of-Bound Write Vulnerability in FreeRDP (CVSS 6.5, FreeRDP)
- [CVE-2023-40181](https://cve.now/CVE-2023-40181.md): Integer-Underflow leading to Out-Of-Bound Read in FreeRDP (CVSS 5.3, FreeRDP)
- [CVE-2023-39356](https://cve.now/CVE-2023-39356.md): Missing offset validation leading to Out-of-Bounds Read in FreeRDP (CVSS 5.3, FreeRDP)
- [CVE-2023-39352](https://cve.now/CVE-2023-39352.md): Invalid offset validation leading to Out Of Bound Write in FreeRDP (CVSS 5.3, FreeRDP)
- [CVE-2023-4299](https://cve.now/CVE-2023-4299.md): Digi RealPort Protocol Use of Password Hash Instead of Password for Authentication (CVSS 9.0, Digi International Digi RealPort · Digi International D… +16)
- [CVE-2023-4688](https://cve.now/CVE-2023-4688.md): Sensitive information leak through log files. (CVSS 4.4, Acronis Agent)
- [CVE-2023-41751](https://cve.now/CVE-2023-41751.md): Sensitive information disclosure due to improper token expiration validation. (CVSS 6.3, Acronis Agent)
- [CVE-2023-41750](https://cve.now/CVE-2023-41750.md): Sensitive information disclosure due to missing authorization. (CVSS 3.3, Acronis Agent)
- [CVE-2023-41749](https://cve.now/CVE-2023-41749.md): Sensitive information disclosure due to excessive collection of system information. (CVSS 4.4, Acronis Agent · Acronis Cyber Protect)
- [CVE-2023-39353](https://cve.now/CVE-2023-39353.md): Missing offset validation leading to Out Of Bound Read in FreeRDP (CVSS 5.3, FreeRDP)
- [CVE-2023-39351](https://cve.now/CVE-2023-39351.md): FreeRDP Null Pointer Dereference leading denial of service (CVSS 5.3, FreeRDP)
- [CVE-2023-39355](https://cve.now/CVE-2023-39355.md): FreeRDP Use-After-Free in RDPGFX\_CMDID\_RESETGRAPHICS (CVSS 7.0, FreeRDP)
- [CVE-2023-39354](https://cve.now/CVE-2023-39354.md): FreeRDP Out-Of-Bounds Read in nsc\_rle\_decompress\_data (CVSS 5.9, FreeRDP)
- [CVE-2023-39350](https://cve.now/CVE-2023-39350.md): Incorrect offset calculation leading to denial of service in FreeRDP (CVSS 5.9, FreeRDP)
- [CVE-2022-46869](https://cve.now/CVE-2022-46869.md): Local privilege escalation during installation due to improper soft link handling. (CVSS 7.3, Acronis Cyber Protect Home Office · Acronis True Image OEM)
- [CVE-2023-40589](https://cve.now/CVE-2023-40589.md): FreeRDP Global-Buffer-Overflow in ncrush\_decompress (CVSS 4.3, FreeRDP)
- [CVE-2023-41045](https://cve.now/CVE-2023-41045.md): Insecure source port usage for DNS queries in Graylog (CVSS 3.7, graylog2-server · org.graylog2:graylog2-server)
- [CVE-2023-41748](https://cve.now/CVE-2023-41748.md): Remote command execution due to improper input validation. (CVSS 8.0, Acronis Cloud Manager)
- [CVE-2023-41747](https://cve.now/CVE-2023-41747.md): Sensitive information disclosure due to unauthenticated path traversal. (CVSS 6.5, Acronis Cloud Manager)
- [CVE-2023-41746](https://cve.now/CVE-2023-41746.md): Remote command execution due to improper input validation. (CVSS 8.0, Acronis Cloud Manager)
- [CVE-2023-41745](https://cve.now/CVE-2023-41745.md): Sensitive information disclosure due to excessive collection of system information. (CVSS 6.1, Acronis Agent · Acronis Cyber Protect)
- [CVE-2023-41044](https://cve.now/CVE-2023-41044.md): Partial path traversal vulnerability in Support Bundle feature of Graylog (CVSS 3.3, graylog2-server · org.graylog2:graylog2-server)
- [CVE-2023-41034](https://cve.now/CVE-2023-41034.md): DDFFileParser in eclipse leshan is vulnerable to XXE Attacks (CVSS 6.5, eclipse-leshan leshan · org.eclipse.leshan:leshan-core)
- [CVE-2023-4683](https://cve.now/CVE-2023-4683.md): NULL Pointer Dereference in gpac/gpac (CVSS 5.3, gpac/gpac)
- [CVE-2023-4682](https://cve.now/CVE-2023-4682.md): Heap-based Buffer Overflow in gpac/gpac (CVSS 5.9, gpac/gpac)
- [CVE-2023-4681](https://cve.now/CVE-2023-4681.md): NULL Pointer Dereference in gpac/gpac (CVSS 5.1, gpac/gpac)
- [CVE-2023-4678](https://cve.now/CVE-2023-4678.md): Divide By Zero in gpac/gpac (CVSS 5.1, gpac/gpac)
- [CVE-2023-34392](https://cve.now/CVE-2023-34392.md): Missing Authentication for Critical Function (CVSS 8.2, Schweitzer Engineering Laboratories SEL-5037 SEL Grid Confi…)
- [CVE-2023-34391](https://cve.now/CVE-2023-34391.md): Insecure Inherited Permissions (CVSS 7.4, Schweitzer Engineering Laboratories SEL-5033 AcSELerator RT…)
- [CVE-2023-31175](https://cve.now/CVE-2023-31175.md): Execution with Unnecessary Privileges (CVSS 8.8, Schweitzer Engineering Laboratories SEL-5037 SEL Grid Confi…)
- [CVE-2023-31174](https://cve.now/CVE-2023-31174.md): Cross-Site Request Forgery (CSRF) (CVSS 7.4, Schweitzer Engineering Laboratories SEL-5037 SEL Grid Confi…)
- [CVE-2023-31173](https://cve.now/CVE-2023-31173.md): Use of Hard-coded Credentials (CVSS 7.7, Schweitzer Engineering Laboratories SEL-5037 SEL Grid Confi…)
- [CVE-2023-31172](https://cve.now/CVE-2023-31172.md): Incomplete Filtering of Special Elements (CVSS 5.9, Schweitzer Engineering Laboratories SEL-5030 acSELerator Qu…)
- [CVE-2023-31171](https://cve.now/CVE-2023-31171.md): Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CVSS 5.9, Schweitzer Engineering Laboratories SEL-5030 acSELerator Qu…)
- [CVE-2023-31170](https://cve.now/CVE-2023-31170.md): Inclusion of Functionality from Untrusted Control Sphere (CVSS 5.9, Schweitzer Engineering Laboratories SEL-5030 acSELerator Qu…)
- [CVE-2023-31169](https://cve.now/CVE-2023-31169.md): Improper Handling of Unicode Encoding (CVSS 4.8, Schweitzer Engineering Laboratories SEL-5030 acSELerator Qu…)
- [CVE-2023-31168](https://cve.now/CVE-2023-31168.md): Inclusion of Functionality from Untrusted Control Sphere (CVSS 5.5, Schweitzer Engineering Laboratories SEL-5030 acSELerator Qu…)
- [CVE-2023-31167](https://cve.now/CVE-2023-31167.md): Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CVSS 5.0, Schweitzer Engineering Laboratories SEL-5036 acSELerator Ba…)
- [CVE-2023-41744](https://cve.now/CVE-2023-41744.md): Local privilege escalation due to unrestricted loading of unsigned libraries. (CVSS 7.8, Acronis Agent · Acronis Cyber Protect)
- [CVE-2023-41743](https://cve.now/CVE-2023-41743.md): Local privilege escalation due to insecure driver communication port permissions. (CVSS 8.8, Acronis Cyber Protect Home Office · Acronis Cyber Protec… +2)
- [CVE-2022-46868](https://cve.now/CVE-2022-46868.md): Local privilege escalation during recovery due to improper soft link handling. (CVSS 6.7, Acronis Cyber Protect Home Office)
- [CVE-2022-45451](https://cve.now/CVE-2022-45451.md): Local privilege escalation due to insecure driver communication port permissions. (CVSS 8.8, Acronis Cyber Protect Home Office · Acronis Agent +1)
- [CVE-2023-41742](https://cve.now/CVE-2023-41742.md): Excessive attack surface due to binding to an unrestricted IP address. (CVSS 4.3, Acronis Agent · Acronis Cyber Protect)
- [CVE-2023-28801](https://cve.now/CVE-2023-28801.md): Improper SAML signature verification (CVSS 9.6, Zscaler ZIA Admin Portal)
- [CVE-2023-33835](https://cve.now/CVE-2023-33835.md): IBM Security Verify Information Queue information disclosure (CVSS 4.3, IBM Security Verify Information Queue)
- [CVE-2023-33834](https://cve.now/CVE-2023-33834.md): IBM Security Verify Information Queue information disclosure (CVSS 4.3, IBM Security Verify Information Queue)
- [CVE-2023-33833](https://cve.now/CVE-2023-33833.md): IBM Security Verify Information Queue information disclosure (CVSS 2.9, IBM Security Verify Information Queue)
- [CVE-2023-20900](https://cve.now/CVE-2023-20900.md): A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A95 (CVSS 7.1, VMware Tools)
- [CVE-2023-41741](https://cve.now/CVE-2023-41741.md): Exposure of sensitive information to an unauthorized actor vulnerability in cgi component in Synology Router Manager (SRM) before 1.3.1-9346 (CVSS 5.3, Synology Router Manager)
- [CVE-2023-41740](https://cve.now/CVE-2023-41740.md): Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in cgi component in Synology Router Manager (SR (CVSS 5.3, Synology Router Manager)
- [CVE-2023-41739](https://cve.now/CVE-2023-41739.md): Uncontrolled resource consumption vulnerability in File Functionality in Synology Router Manager (SRM) before 1.3.1-9346-6 allows remote aut (CVSS 4.9, Synology Router Manager)
- [CVE-2023-41738](https://cve.now/CVE-2023-41738.md): Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in Directory Domain Functionality i (CVSS 7.2, Synology Router Manager)
- [CVE-2023-4471](https://cve.now/CVE-2023-4471.md): Order Tracking Pro \<= 3.3.6 - Reflected Cross-Site Scripting (CVSS 6.1, rustaurius Order Tracking – WordPress Status Tracking Plugin)
- [CVE-2023-3764](https://cve.now/CVE-2023-3764.md): WooCommerce PDF Invoice Builder \<= 1.2.90 - Cross-Site Request Forgery via Save (CVSS 4.3, edgarrojas PDF Builder for WooCommerce. Create invoices,pac…)
- [CVE-2023-2173](https://cve.now/CVE-2023-2173.md): BadgeOS \<= 3.7.1.6 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Post Deletion (CVSS 6.5, learningtimes BadgeOS)
- [CVE-2023-2352](https://cve.now/CVE-2023-2352.md): CHP Ads Block Detector \<= 3.9.4 - Cross-Site Request Forgery via chp\_abd\_action (CVSS 4.3, sureshchand12a CHP Ads Block Detector)
- [CVE-2023-2188](https://cve.now/CVE-2023-2188.md): Colibri Page Builder \<= 1.0.227 - Authenticated (Administrator+) SQL Injection via post\_id (CVSS 7.2, extendthemes Colibri Page Builder)
- [CVE-2023-2279](https://cve.now/CVE-2023-2279.md): WP Directory Kit \<= 1.2.1 - Cross-Site Request Forgery to Plugin Settings Change/Delete, Demo Import, Directory Kit Modification/Deletion via admin\_page\_display (CVSS 5.4, wpdirectorykit WP Directory Kit)
- [CVE-2023-4500](https://cve.now/CVE-2023-4500.md): Order Tracking Pro \<= 3.3.6 - Authenticated (Administrator+) Stored Cross-Site Scripting (CVSS 4.7, rustaurius Order Tracking – WordPress Status Tracking Plugin)
- [CVE-2023-4000](https://cve.now/CVE-2023-4000.md): Waiting: One-click countdowns \<= 0.6.2 - Cross-Site Request Forgery (CVSS 6.3, pluginbuilders Waiting: One-click countdowns)
- [CVE-2023-2171](https://cve.now/CVE-2023-2171.md): BadgeOS \<= 3.7.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 5.4, learningtimes BadgeOS)
- [CVE-2023-2354](https://cve.now/CVE-2023-2354.md): CHP Ads Block Detector \<= 3.9.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting (CVSS 4.9, sureshchand12a CHP Ads Block Detector)
- [CVE-2023-3404](https://cve.now/CVE-2023-3404.md): ProfileGrid \<= 5.5.0 - Hardcoded Encryption Key (CVSS 4.9, metagauss ProfileGrid – User Profiles, Groups and Communiti…)
- [CVE-2023-4160](https://cve.now/CVE-2023-4160.md): WooCommerce PDF Invoice Builder \<= 1.2.90 - Authenticated (Administrator+) Cross-Site Scripting (CVSS 4.4, edgarrojas PDF Builder for WooCommerce. Create invoices,pac…)
- [CVE-2023-3636](https://cve.now/CVE-2023-3636.md): WP Project Manager \<= 2.6.4 - Arbitrary Usermeta Update to Authenticated (Subscriber+) Privilege Escalation (CVSS 8.8, wedevs Project Manager – AI Powered Project Management, Tas…)
- [CVE-2023-4315](https://cve.now/CVE-2023-4315.md): Woo Custom Emails \<= 2.2 - Reflected Cross-Site Scripting via wcemails\_edit (CVSS 6.1, mehulkaklotar Woo Custom Emails)
- [CVE-2023-2174](https://cve.now/CVE-2023-2174.md): BadgeOS \<= 3.7.1.6 - Missing Authorization in delete\_badgeos\_log\_entries (CVSS 4.3, learningtimes BadgeOS)
- [CVE-2023-2172](https://cve.now/CVE-2023-2172.md): BadgeOS \<= 3.7.1.6 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Post Title Overwrite (CVSS 4.3, learningtimes BadgeOS)
- [CVE-2023-2353](https://cve.now/CVE-2023-2353.md): CHP Ads Block Detector \<= 3.9.4 - Missing Authorization to Plugin Settings Update (CVSS 4.3, sureshchand12a CHP Ads Block Detector)
- [CVE-2023-3162](https://cve.now/CVE-2023-3162.md): Stripe Payment Plugin for WooCommerce \<= 3.7.7 - Authentication Bypass (CVSS 9.8, themehigh Payment Gateway of Stripe for WooCommerce)
- [CVE-2023-3677](https://cve.now/CVE-2023-3677.md): WooCommerce PDF Invoice Builder \<= 1.2.89 - Authenticated (Subscriber+) SQL Injection via Export (CVSS 8.8, edgarrojas PDF Builder for WooCommerce. Create invoices,pac…)
- [CVE-2023-4161](https://cve.now/CVE-2023-4161.md): WooCommerce PDF Invoice Builder \<= 1.2.90 - Cross-Site Request Forgery to Custom Field Creation (CVSS 4.3, edgarrojas PDF Builder for WooCommerce. Create invoices,pac…)
- [CVE-2023-0689](https://cve.now/CVE-2023-0689.md): Metform Elementor Contact Form Builder \<= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via 'mf\_first\_name' shortcode (CVSS 4.3, roxnor MetForm – Contact Form, Survey, Quiz, & Custom Form…)
- [CVE-2023-2229](https://cve.now/CVE-2023-2229.md): Quick Post Duplicator \<= 2.0 - Authenticated (Contributor+) SQL Injection via post\_id (CVSS 8.8, rahulsingh74388 Quick Post Duplicator)
- [CVE-2023-3999](https://cve.now/CVE-2023-3999.md): Waiting: One-click countdowns \<= 0.6.2 - Missing Authorization (CVSS 6.3, pluginbuilders Waiting: One-click countdowns)
- [CVE-2023-4245](https://cve.now/CVE-2023-4245.md): WooCommerce PDF Invoice Builder \<= 1.2.89 - Missing Authorization to Sensitive Information Exposure (CVSS 4.3, edgarrojas PDF Builder for WooCommerce. Create invoices,pac…)
- [CVE-2023-31424](https://cve.now/CVE-2023-31424.md): Web authentication and authorization bypass (CVSS 8.1, Brocade SANnav)
- [CVE-2023-31423](https://cve.now/CVE-2023-31423.md): Possible information exposure through log file vulnerability (CVSS 5.7, Brocade SANnav)
- [CVE-2023-31925](https://cve.now/CVE-2023-31925.md): Storage of clear text password in Brocade SANnav (CVSS 5.4, Brocade SANnav)
- [CVE-2023-4162](https://cve.now/CVE-2023-4162.md): Segmentation fault in Brocade Fabric OS after Brocade Fabric OS v9.0 (CVSS 4.4, Brocade Fabric OS)
- [CVE-2023-4163](https://cve.now/CVE-2023-4163.md): Possible buffer overflow in portcfgfportbuffers in Brocade Fabric OS (CVSS 4.4, Brocade Fabric OS)
- [CVE-2023-4654](https://cve.now/CVE-2023-4654.md): Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in instantsoft/icms2 (CVSS 2.6, instantsoft/icms2)
- [CVE-2023-4655](https://cve.now/CVE-2023-4655.md): Cross-site Scripting (XSS) - Reflected in instantsoft/icms2 (CVSS 4.3, instantsoft/icms2)
- [CVE-2023-4650](https://cve.now/CVE-2023-4650.md): Improper Access Control in instantsoft/icms2 (CVSS 4.7, instantsoft/icms2)
- [CVE-2023-4649](https://cve.now/CVE-2023-4649.md): Session Fixation in instantsoft/icms2 (CVSS 4.3, instantsoft/icms2)
- [CVE-2023-4651](https://cve.now/CVE-2023-4651.md): Server-Side Request Forgery (SSRF) in instantsoft/icms2 (CVSS 6.4, instantsoft/icms2)
- [CVE-2023-4653](https://cve.now/CVE-2023-4653.md): Cross-site Scripting (XSS) - Stored in instantsoft/icms2 (CVSS 5.9, instantsoft/icms2)
- [CVE-2023-4652](https://cve.now/CVE-2023-4652.md): Cross-site Scripting (XSS) - Stored in instantsoft/icms2 (CVSS 6.8, instantsoft/icms2)
- [CVE-2023-39912](https://cve.now/CVE-2023-39912.md): Zoho ManageEngine ADManager Plus before 7203 allows Help Desk Technician users to read arbitrary files on the machine where this product is (CVSS 4.9)
- [CVE-2023-41635](https://cve.now/CVE-2023-41635.md): A XML External Entity (XXE) vulnerability in the VerifichePeriodiche.aspx component of GruppoSCAI RealGimm v1.1.37p38 allows attackers to re (no CVSS)
- [CVE-2023-41636](https://cve.now/CVE-2023-41636.md): A SQL injection vulnerability in the Data Richiesta dal parameter of GruppoSCAI RealGimm v1.1.37p38 allows attackers to access the database (no CVSS)
- [CVE-2023-41637](https://cve.now/CVE-2023-41637.md): An arbitrary file upload vulnerability in the Carica immagine function of GruppoSCAI RealGimm 1.1.37p38 allows attackers to execute arbitrar (no CVSS)
- [CVE-2023-41638](https://cve.now/CVE-2023-41638.md): An arbitrary file upload vulnerability in the Gestione Documentale module of GruppoSCAI RealGimm 1.1.37p38 allows attackers to execute arbit (no CVSS)
- [CVE-2023-41640](https://cve.now/CVE-2023-41640.md): An improper error handling vulnerability in the component ErroreNonGestito.aspx of GruppoSCAI RealGimm 1.1.37p38 allows attackers to obtain (no CVSS)
- [CVE-2023-41642](https://cve.now/CVE-2023-41642.md): Multiple reflected cross-site scripting (XSS) vulnerabilities in the ErroreNonGestito.aspx component of GruppoSCAI RealGimm 1.1.37p38 allow (no CVSS)
- [CVE-2023-41717](https://cve.now/CVE-2023-41717.md): Inappropriate file type control in Zscaler Proxy versions 3.6.1.25 and prior allows local attackers to bypass file download/upload restricti (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-08-31
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.