# CVEs published 2023-09-02

10 CVEs were published on September 2, 2023: 1 critical, 6 high. Days are UTC.

- [CVE-2023-4738](https://cve.now/CVE-2023-4738.md): Heap-based Buffer Overflow in vim/vim (CVSS 7.8, vim/vim)
- [CVE-2023-4736](https://cve.now/CVE-2023-4736.md): Untrusted Search Path in vim/vim (CVSS 7.8, vim/vim)
- [CVE-2023-4735](https://cve.now/CVE-2023-4735.md): Out-of-bounds Write in vim/vim (CVSS 4.8, vim/vim)
- [CVE-2023-4734](https://cve.now/CVE-2023-4734.md): Integer Overflow or Wraparound in vim/vim (CVSS 7.8, vim/vim)
- [CVE-2023-39983](https://cve.now/CVE-2023-39983.md): MXsecurity Register Database Pollution (CVSS 5.3, Moxa MXsecurity Series)
- [CVE-2023-39982](https://cve.now/CVE-2023-39982.md): MXsecurity Hardcoded Credential (CVSS 7.5, Moxa MXsecurity Series)
- [CVE-2023-39981](https://cve.now/CVE-2023-39981.md): MXsecurity Device Information Disclosure (CVSS 7.5, Moxa MXsecurity Series)
- [CVE-2023-39980](https://cve.now/CVE-2023-39980.md): MXsecurity Authenticated Information Disclosure Due to SQL Injection (CVSS 7.1, Moxa MXsecurity Series)
- [CVE-2023-39979](https://cve.now/CVE-2023-39979.md): MXsecurity Authentication Bypass (CVSS 9.8, Moxa MXsecurity Series)
- [CVE-2023-4718](https://cve.now/CVE-2023-4718.md): Font Awesome 4 Menus \<= 4.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, new-nine Font Awesome 4 Menus)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-09-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.