CVEs published September 3, 2023
26 CVEs were published on September 3, 2023: 2 critical, 9 high.
- Published
- 26
- Critical
- 2
- High
- 9
- Medium
- 13
- Low
- 1
- Unrated
- 1
- Now in CISA KEV
- 0
- Fix available
- 9
Most affected products
- StarTrinity Softswitch
- 4
- IBOS OA
- 3
- 7Twenty BOT
- 1
- Apache Software Foundation Apache NiFi MiNiFi C++
- 1
- Byzoro Smart S45F Multi-Service Secure Gateway Intelligent…
- 1
- Byzoro Smart S85F Management Platform
- 1
- Dreamer CMS
- 1
- Elastic Email Sender
- 1
- Exifography
- 1
- Farsight Tech Nordic AB ProVide
- 1
Critical 2
High 9
- CVE-2023-4751Heap-based Buffer Overflow in vim/vimvim/vim
- CVE-2023-39374 ForeScout NAC SecureConnector – CWE-427: Uncontrolled Search Path ElementForeScout NAC SecureConnector
- CVE-2023-39373 Hyundai car CWE-294: Authentication Bypass by Capture-replay Hyundai model
- CVE-2023-39372 StarTrinity Softswitch version 2023-02-16 - multiple CSRF (CWE-352)StarTrinity Softswitch
- CVE-2023-39371 StarTrinity Softswitch version 2023-02-16 – Open Redirect (CWE-601)StarTrinity Softswitch
- CVE-2023-39370 StarTrinity Softswitch version 2023-02-16 - Persistent XSS (CWE-79) StarTrinity Softswitch
- CVE-2023-39369 StarTrinity Softswitch version 2023-02-16 - multiple Reflected XSS (CWE-79)StarTrinity Softswitch
- CVE-2023-372217Twenty BOT - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting').7Twenty BOT
- CVE-2023-37220Synel Terminals - CWE-494: Download of Code Without Integrity CheckSynel Terminals
Medium, low and unrated 15
- CVE-2023-4745Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform importexport.php sql injectionByzoro Smart S45F Multi-Service Secure Gateway Intelligent…
- CVE-2023-4743Dreamer CMS file accessDreamer CMS
- CVE-2023-4742IBOS OA export&uid=X sql injectionIBOS OA
- CVE-2023-4741IBOS OA Delete Logs del sql injectionIBOS OA
- CVE-2023-4740IBOS OA Delete Draft delDraft&archiveId=0 sql injectionIBOS OA
- CVE-2023-4739Byzoro Smart S85F Management Platform updateos.php unrestricted uploadByzoro Smart S85F Management Platform
- CVE-2023-41180Apache NiFi MiNiFi C++: Incorrect Certificate Validation in InvokeHTTP for MiNiFi C++Apache Software Foundation Apache NiFi MiNiFi C++
- CVE-2023-37222Farsight Tech Nordic AB ProVide Farsight Tech Nordic AB ProVide
- CVE-2023-38476WordPress Client Portal : SuiteDash Direct Login Plugin <= 1.7.6 is vulnerable to Cross Site Scripting (XSS)SuiteDash :: ONE Dashboard® Client Portal : SuiteDash Direc…
- CVE-2023-38482WordPress Post Affiliate Pro Plugin <= 1.25.0 is vulnerable to Cross Site Scripting (XSS)QualityUnit Post Affiliate Pro
- CVE-2023-38516WordPress Audio Player with Playlist Ultimate Plugin <= 1.2.2 is vulnerable to Cross Site Scripting (XSS)WP OnlineSupport, Essential Plugin Audio Player with Playli…
- CVE-2023-38517WordPress WRC Pricing Tables Plugin <= 2.3.7 is vulnerable to Cross Site Scripting (XSS)Realwebcare WRC Pricing Tables
- CVE-2023-38518WordPress Borderless Plugin <= 1.4.8 is vulnerable to Cross Site Scripting (XSS)Visualmodo Borderless
- CVE-2023-38387WordPress Elastic Email Sender Plugin <= 1.2.6 is vulnerable to Cross Site Scripting (XSS)Elastic Email Sender
- CVE-2023-38521WordPress Exifography Plugin <= 1.3.1 is vulnerable to Cross Site Scripting (XSS)Exifography