# CVEs published 2023-09-01

79 CVEs were published on September 1, 2023: 4 critical, 9 high. Days are UTC.

- [CVE-2023-3297](https://cve.now/CVE-2023-3297.md): In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice by sending a D-Bus (CVSS 8.1, Canonical AccountService)
- [CVE-2023-4714](https://cve.now/CVE-2023-4714.md): PlayTube Redirect information disclosure (CVSS 4.3, PlayTube)
- [CVE-2023-4713](https://cve.now/CVE-2023-4713.md): IBOS OA addcomment addComment sql injection (CVSS 5.5, IBOS OA)
- [CVE-2023-41046](https://cve.now/CVE-2023-41046.md): Velocity execution without script rights in Xwiki platform (CVSS 6.3, xwiki-platform · org.xwiki.platform:xwiki-platform-oldcore)
- [CVE-2023-41049](https://cve.now/CVE-2023-41049.md): Improper Neutralization of Script in Attributes in @dcl/single-sign-on-client (CVSS 7.5, decentraland single-sign-on-client · @dcl/single-sign-on-cl…)
- [CVE-2023-4712](https://cve.now/CVE-2023-4712.md): Xintian Smart Table Integrated Management System AddUpdateRole.aspx sql injection (CVSS 5.5, Xintian Smart Table Integrated Management System)
- [CVE-2023-4711](https://cve.now/CVE-2023-4711.md): D-Link DAR-8000-10 decodmail.php os command injection (CVSS 5.0, D-Link DAR-8000-10)
- [CVE-2023-4710](https://cve.now/CVE-2023-4710.md): TOTVS RM Portal cross site scripting (CVSS 4.3, TOTVS RM)
- [CVE-2023-1523](https://cve.now/CVE-2023-1523.md): Using the TIOCLINUX ioctl request, a malicious snap could inject contents into the input of the controlling terminal which could allow it to (CVSS 10.0, Canonical snapd)
- [CVE-2023-4709](https://cve.now/CVE-2023-4709.md): TOTVS RM Portal Login.aspx cross site scripting (CVSS 2.3, TOTVS RM)
- [CVE-2023-41051](https://cve.now/CVE-2023-41051.md): Default functions in VolatileMemory trait lack bounds checks in vm-memory (CVSS 2.5, rust-vmm vm-memory · vm-memory)
- [CVE-2023-4708](https://cve.now/CVE-2023-4708.md): Infosoftbd Clcknshop GET Parameter all sql injection (CVSS 6.3, Infosoftbd Clcknshop)
- [CVE-2023-4707](https://cve.now/CVE-2023-4707.md): Infosoftbd Clcknshop all cross site scripting (CVSS 3.5, Infosoftbd Clcknshop)
- [CVE-2022-3407](https://cve.now/CVE-2022-3407.md): I some cases, when the device is USB-tethered to a host PC, and the device is sharing its mobile network connection with the host PC, if the (CVSS 4.9, Motorola Mobility Motorola smartphones)
- [CVE-2023-4722](https://cve.now/CVE-2023-4722.md): Integer Overflow or Wraparound in gpac/gpac (CVSS 5.9, gpac/gpac)
- [CVE-2023-4721](https://cve.now/CVE-2023-4721.md): Out-of-bounds Read in gpac/gpac (CVSS 5.9, gpac/gpac)
- [CVE-2023-4720](https://cve.now/CVE-2023-4720.md): Floating Point Comparison with Incorrect Operator in gpac/gpac (CVSS 4.0, gpac/gpac)
- [CVE-2023-23763](https://cve.now/CVE-2023-23763.md): Information disclosure in GitHub Enterprise Server leading to private repository leakage (CVSS 5.3, GitHub Enterprise Server)
- [CVE-2023-37997](https://cve.now/CVE-2023-37997.md): WordPress Post List With Featured Image Plugin \<= 1.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Dharmesh Patel Post List With Featured Image)
- [CVE-2022-22305](https://cve.now/CVE-2022-22305.md): An improper certificate validation vulnerability \[CWE-295\] in FortiManager 7.0.1 and below, 6.4.6 and below; FortiAnalyzer 7.0.2 and below, (CVSS 5.4, Fortinet FortiAnalyzer · Fortinet FortiSandbox +1)
- [CVE-2023-37994](https://cve.now/CVE-2023-37994.md): WordPress Art Decoration Shortcode Plugin \<= 1.5.6 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Artem Abramovich Art Decoration Shortcode)
- [CVE-2023-34011](https://cve.now/CVE-2023-34011.md): WordPress ShopConstruct Plugin \<= 1.1.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, ShopConstruct)
- [CVE-2023-37986](https://cve.now/CVE-2023-37986.md): WordPress YourMembership Single Sign On Plugin \<= 1.1.3 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, miniOrange YourMembership Single Sign On – YM SSO Login)
- [CVE-2023-37893](https://cve.now/CVE-2023-37893.md): WordPress Coming Soon Chop Chop Plugin \<= 2.2.4 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Chop-Chop Coming Soon Chop Chop)
- [CVE-2023-25488](https://cve.now/CVE-2023-25488.md): WordPress WP Default Feature Image Plugin \<= 1.0.1.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Duc Bui Quang WP Default Feature Image)
- [CVE-2023-25044](https://cve.now/CVE-2023-25044.md): WordPress Social Share Boost Plugin \<= 4.4 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Sumo Social Share Boost)
- [CVE-2023-25042](https://cve.now/CVE-2023-25042.md): WordPress oAuth Twitter Feed for Developers Plugin \<= 2.3.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Liam Gladdy (Storm Consultancy) oAuth Twitter Feed for Deve…)
- [CVE-2023-24412](https://cve.now/CVE-2023-24412.md): WordPress Image Social Feed Plugin Plugin \<= 1.7.6 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Web-Settler Image Social Feed)
- [CVE-2023-25477](https://cve.now/CVE-2023-25477.md): WordPress Video Gallery Plugin \<= 1.3.12 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Yotuwp Video Gallery)
- [CVE-2023-3210](https://cve.now/CVE-2023-3210.md): Inefficient Regular Expression Complexity in GitLab (CVSS 6.5, GitLab)
- [CVE-2023-3950](https://cve.now/CVE-2023-3950.md): Cleartext Storage of Sensitive Information in GitLab (CVSS 5.5, GitLab)
- [CVE-2023-4018](https://cve.now/CVE-2023-4018.md): Direct Request ('Forced Browsing') in GitLab (CVSS 4.3, GitLab)
- [CVE-2023-4378](https://cve.now/CVE-2023-4378.md): Insertion of Sensitive Information Into Sent Data in GitLab (CVSS 5.5, GitLab)
- [CVE-2023-4647](https://cve.now/CVE-2023-4647.md): Allocation of Resources Without Limits or Throttling in GitLab (CVSS 5.3, GitLab)
- [CVE-2022-4343](https://cve.now/CVE-2022-4343.md): Exposure of Sensitive Information to an Unauthorized Actor in GitLab (CVSS 5.0, GitLab)
- [CVE-2023-0120](https://cve.now/CVE-2023-0120.md): Incorrect Authorization in GitLab (CVSS 3.5, GitLab)
- [CVE-2023-1279](https://cve.now/CVE-2023-1279.md): URL Redirection to Untrusted Site in GitLab (CVSS 2.6, GitLab)
- [CVE-2023-1555](https://cve.now/CVE-2023-1555.md): Missing Authorization in GitLab (CVSS 2.7, GitLab)
- [CVE-2023-3205](https://cve.now/CVE-2023-3205.md): Inefficient Regular Expression Complexity in GitLab (CVSS 6.5, GitLab)
- [CVE-2023-3915](https://cve.now/CVE-2023-3915.md): Incorrect Execution-Assigned Permissions in GitLab (CVSS 6.5, GitLab)
- [CVE-2023-4704](https://cve.now/CVE-2023-4704.md): External Control of System or Configuration Setting in instantsoft/icms2 (CVSS 8.8, instantsoft/icms2)
- [CVE-2023-4697](https://cve.now/CVE-2023-4697.md): Improper Privilege Management in usememos/memos (CVSS 8.8, usememos/memos · github.com/usememos/memos)
- [CVE-2023-4698](https://cve.now/CVE-2023-4698.md): Improper Input Validation in usememos/memos (CVSS 7.5, usememos/memos · github.com/usememos/memos)
- [CVE-2023-4696](https://cve.now/CVE-2023-4696.md): Improper Access Control in usememos/memos (CVSS 9.8, usememos/memos · github.com/usememos/memos)
- [CVE-2023-4695](https://cve.now/CVE-2023-4695.md): Use of Predictable Algorithm in Random Number Generator in pkp/pkp-lib (CVSS 9.6, pkp/pkp-lib)
- [CVE-2020-22612](https://cve.now/CVE-2020-22612.md): Installer RCE on settings file write in MyBB before 1.8.22. (no CVSS)
- [CVE-2022-44349](https://cve.now/CVE-2022-44349.md): NAVBLUE S.A.S N-Ops & Crew 22.5-rc.50 is vulnerable to Cross Site Scripting (XSS). (CVSS 5.4)
- [CVE-2022-46527](https://cve.now/CVE-2022-46527.md): ELSYS ERS 1.5 Sound v2.3.8 was discovered to contain a buffer overflow via the NFC data parser. (no CVSS)
- [CVE-2023-24674](https://cve.now/CVE-2023-24674.md): Permissions vulnerability found in Bludit CMS v.4.0.0 allows local attackers to escalate privileges via the role:admin parameter. (no CVSS)
- [CVE-2023-24675](https://cve.now/CVE-2023-24675.md): Cross Site Scripting Vulnerability in BluditCMS v.3.14.1 allows attackers to execute arbitrary code via the Categories Friendly URL. (no CVSS)
- [CVE-2023-28366](https://cve.now/CVE-2023-28366.md): The broker in Eclipse Mosquitto 1.3.2 through 2.x before 2.0.16 has a memory leak that can be abused remotely when a client sends many QoS 2 (CVSS 7.5)
- [CVE-2023-36076](https://cve.now/CVE-2023-36076.md): SQL Injection vulnerability in smanga version 3.1.9 and earlier, allows remote attackers to execute arbitrary code and gain sensitive inform (no CVSS)
- [CVE-2023-36088](https://cve.now/CVE-2023-36088.md): Server Side Request Forgery (SSRF) vulnerability in NebulaGraph Studio version 3.7.0, allows remote attackers to gain sensitive information. (no CVSS)
- [CVE-2023-36100](https://cve.now/CVE-2023-36100.md): An issue was discovered in IceCMS version 2.0.1, allows attackers to escalate privileges and gain sensitive information via UserID parameter (no CVSS)
- [CVE-2023-36187](https://cve.now/CVE-2023-36187.md): Buffer Overflow vulnerability in NETGEAR R6400v2 before version 1.0.4.118, allows remote unauthenticated attackers to execute arbitrary code (no CVSS)
- [CVE-2023-36326](https://cve.now/CVE-2023-36326.md): Integer Overflow vulnerability in RELIC before commit 34580d840469361ba9b5f001361cad659687b9ab, allows attackers to execute arbitrary code, (no CVSS)
- [CVE-2023-36327](https://cve.now/CVE-2023-36327.md): Integer Overflow vulnerability in RELIC before commit 421f2e91cf2ba42473d4d54daf24e295679e290e, allows attackers to execute arbitrary code a (no CVSS)
- [CVE-2023-36328](https://cve.now/CVE-2023-36328.md): Integer Overflow vulnerability in mp\_grow in libtom libtommath before commit beba892bc0d4e4ded4d667ab1d2a94f4d75109a9, allows attackers to e (CVSS 9.8)
- [CVE-2023-37826](https://cve.now/CVE-2023-37826.md): A cross-site scripting (XSS) vulnerability in General Solutions Steiner GmbH CASE 3 Taskmanagement V 3.3 allows attackers to execute arbitra (no CVSS)
- [CVE-2023-37827](https://cve.now/CVE-2023-37827.md): A cross-site scripting (XSS) vulnerability in General Solutions Steiner GmbH CASE 3 Taskmanagement V 3.3 allows attackers to execute arbitra (no CVSS)
- [CVE-2023-37828](https://cve.now/CVE-2023-37828.md): A cross-site scripting (XSS) vulnerability in General Solutions Steiner GmbH CASE 3 Taskmanagement V 3.3 allows attackers to execute arbitra (no CVSS)
- [CVE-2023-37829](https://cve.now/CVE-2023-37829.md): A cross-site scripting (XSS) vulnerability in General Solutions Steiner GmbH CASE 3 Taskmanagement V 3.3 allows attackers to execute arbitra (no CVSS)
- [CVE-2023-37830](https://cve.now/CVE-2023-37830.md): A cross-site scripting (XSS) vulnerability in General Solutions Steiner GmbH CASE 3 Taskmanagement V 3.3 allows attackers to execute arbitra (no CVSS)
- [CVE-2023-39582](https://cve.now/CVE-2023-39582.md): SQL Injection vulnerability in Chamilo LMS v.1.11 thru v.1.11.20 allows a remote privileged attacker to obtain sensitive information via the (no CVSS)
- [CVE-2023-39631](https://cve.now/CVE-2023-39631.md): An issue in LanChain-ai Langchain v.0.0.245 allows a remote attacker to execute arbitrary code via the evaluate function in the numexpr libr (no CVSS, langchain · numexpr)
- [CVE-2023-39685](https://cve.now/CVE-2023-39685.md): An issue in hjson-java up to v3.0.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted JSON string. (no CVSS, org.hjson:hjson)
- [CVE-2023-39703](https://cve.now/CVE-2023-39703.md): A cross site scripting (XSS) vulnerability in the Markdown Editor component of Typora v1.6.7 allows attackers to execute arbitrary code via (no CVSS)
- [CVE-2023-39710](https://cve.now/CVE-2023-39710.md): Multiple cross-site scripting (XSS) vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arb (no CVSS)
- [CVE-2023-39714](https://cve.now/CVE-2023-39714.md): Multiple cross-site scripting (XSS) vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arb (no CVSS)
- [CVE-2023-40239](https://cve.now/CVE-2023-40239.md): Certain Lexmark devices (such as CS310) before 2023-08-25 allow XXE attacks, leading to information disclosure. (no CVSS)
- [CVE-2023-40771](https://cve.now/CVE-2023-40771.md): SQL injection vulnerability in DataEase v.1.18.9 allows a remote attacker to obtain sensitive information via a crafted string outside of th (no CVSS, io.dataease:dataease-plugin-common)
- [CVE-2023-40968](https://cve.now/CVE-2023-40968.md): Buffer Overflow vulnerability in hzeller timg v.1.5.1 and before allows a remote attacker to cause a denial of service via the 0x61200000045 (no CVSS)
- [CVE-2023-40969](https://cve.now/CVE-2023-40969.md): Senayan Library Management Systems SLIMS 9 Bulian v9.6.1 is vulnerable to Server Side Request Forgery (SSRF) via admin/modules/bibliography/ (no CVSS)
- [CVE-2023-40970](https://cve.now/CVE-2023-40970.md): Senayan Library Management Systems SLIMS 9 Bulian v 9.6.1 is vulnerable to SQL Injection via admin/modules/circulation/loan\_rules.php. (no CVSS)
- [CVE-2023-40980](https://cve.now/CVE-2023-40980.md): File Upload vulnerability in DWSurvey DWSurvey-OSS v.3.2.0 and before allows a remote attacker to execute arbitrary code via the saveimage m (no CVSS)
- [CVE-2023-41364](https://cve.now/CVE-2023-41364.md): In tine through 2023.01.14.325, the sort parameter of the /index.php endpoint allows SQL Injection. (no CVSS)
- [CVE-2023-41627](https://cve.now/CVE-2023-41627.md): O-RAN Software Community ric-plt-lib-rmr v4.9.0 does not validate the source of the routing tables it receives, potentially allowing attacke (no CVSS)
- [CVE-2023-41628](https://cve.now/CVE-2023-41628.md): An issue in O-RAN Software Community E2 G-Release allows attackers to cause a Denial of Service (DoS) by incorrectly initiating the messagin (no CVSS)
- [CVE-2023-41633](https://cve.now/CVE-2023-41633.md): Catdoc v0.95 was discovered to contain a NULL pointer dereference via the component xls2csv at src/fileutil.c. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-09-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.