CVEs published September 7, 2023
66 CVEs were published on September 7, 2023: 4 critical, 35 high. 2 are now in CISA KEV.
- Published
- 66
- Critical
- 4
- High
- 35
- Medium
- 14
- Low
- 8
- Unrated
- 5
- Now in CISA KEV
- 2
- Fix available
- 11
Most affected products
- Adobe Illustrator
- 10
- Adobe After Effects
- 9
- Adobe Premiere Pro
- 5
- ASUS RT-AC86U
- 5
- Resort Data Processing IRM Next Generation
- 5
- Adobe ColdFusion
- 2
- Adobe Photoshop Desktop
- 2
- ASUS RT-AX55 · ASUS RT-AX56U_V2
- 2
- Cisco Identity Services Engine Software
- 2
- Adobe Acrobat Reader
- 1
Critical 4
- CVE-2023-40029Cluster secret might leak in cluster details page in Argo CDargoproj argo-cd · github.com/argoproj/argo-cd +1
- CVE-2023-30908A remote authentication bypass issue exists in a OneView API.Hewlett Packard Enterprise (HPE) HPE OneView
- CVE-2023-39424Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') in RDPngFileUpload.dllResort Data Processing IRM Next Generation
- CVE-2023-39420Use of Hard-coded Credentials in RDPCore.dllResort Data Processing IRM Next Generation
High 35
- CVE-2023-4685CVE-2023-4685Delta Industrial Automation CNCSoft-B DOPSoft
- CVE-2023-4528JSCAPE MFT Server Unsafe Deserialization on Management PortRedwood Software JSCAPE MFT Server
- CVE-2023-41064A buffer overflow issue was addressed with improved memory handling.Apple macOS · Apple iOS and iPadOS
- CVE-2023-41061A validation issue was addressed with improved logic.Apple iOS and iPadOS · Apple watchOS
- CVE-2023-400602FA/MFA Bypass Vulnerability in Serv-U 15.4 and 15.4 Hotfix 1SolarWinds Serv-U
- CVE-2023-30800MikroTik RouterOS Web Interface Heap CorruptionMikroTik RouterOS
- CVE-2022-30642Adobe Illustrator Font Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe Illustrator
- CVE-2022-30639Adobe Illustrator Font Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe Illustrator
- CVE-2022-30644Adobe Illustrator Font Parsing Use-After-Free Remote Code Execution VulnerabilityAdobe Illustrator
- CVE-2022-30640Adobe Illustrator Font Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe Illustrator
- CVE-2022-30645Adobe Illustrator SVG File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe Illustrator
- CVE-2022-30643Adobe Illustrator Font Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe Illustrator
- CVE-2022-30637Adobe Illustrator Font Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe Illustrator
- CVE-2022-30646Adobe Illustrator Font Parsing Out-of-bounds Write Remote Code Execution VulnerabilityAdobe Illustrator
- CVE-2022-30641Adobe Illustrator SVG File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe Illustrator
- CVE-2022-30638Adobe Illustrator Font Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe Illustrator
- CVE-2021-40699ColdFusion CFIDE Improper Access Control Leads To Privilege EscalationAdobe ColdFusion
- CVE-2021-44188Adobe After Effects 3GP File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityAdobe After Effects
- CVE-2021-40795Adobe Premiere Pro 3GP File Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityAdobe Premiere Pro
- CVE-2021-43018Adobe Photoshop JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe Photoshop Desktop
- CVE-2021-40698ColdFusion Use of Inherently Dangerous Function Leads To Security feature bypass Adobe ColdFusion
- CVE-2021-43753Adobe Lightroom TIF File Parsing Use-After-Free Information Disclosure VulnerabilityAdobe Lightroom Desktop
- CVE-2021-43027Adobe After Effects TIF File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe After Effects
- CVE-2023-39423Improper Neutralization of Special Elements used in an SQL Command in RDPData.dllResort Data Processing IRM Next Generation
- CVE-2023-39421Use of Hard-coded Credentials in RDPWin.dllResort Data Processing IRM Next Generation
- CVE-2023-39240ASUS RT-AX55、RT-AX56U_V2 - Format String - 3ASUS RT-AX55 · ASUS RT-AX56U_V2
- CVE-2023-39239ASUS RT-AX55、RT-AX56U_V2、RT-AC86U - Format String - 2ASUS RT-AX55 · ASUS RT-AX56U_V2 +1
- CVE-2023-39238ASUS RT-AX55、RT-AX56U_V2 - Format String - 1ASUS RT-AX55 · ASUS RT-AX56U_V2
- CVE-2023-39237ASUS RT-AC86U - Command injection vulnerability - 5ASUS RT-AC86U
- CVE-2023-39236ASUS RT-AC86U - Command injection vulnerability - 4ASUS RT-AC86U
- CVE-2023-38033ASUS RT-AC86U - Command injection vulnerability - 3ASUS RT-AC86U
- CVE-2023-38032ASUS RT-AC86U - Command injection vulnerability - 2ASUS RT-AC86U
- CVE-2023-4815Missing Authentication for Critical Function in answerdev/answeranswerdev/answer · github.com/answerdev/answer
- CVE-2023-38031ASUS RT-AC86U - Command injection vulnerability - 1ASUS RT-AC86U
- CVE-2023-34357Soar Cloud Ltd. HR Portal - Weak Password Recovery Mechanism for Forgotten PasswordSoar Cloud HR Portal
Medium, low and unrated 27
- CVE-2023-40584Denial of Service to Argo CD repo-server argoproj argo-cd · github.com/argoproj/argo-cd/v2 +1
- CVE-2023-41316HTML Injection with email in Tolgeetolgee-platform
- CVE-2023-20194A vulnerability in the ERS API of Cisco ISE could allow an authenticated, remote attacker to read arbitrary files on the underlying operatinCisco Identity Services Engine Software
- CVE-2023-20193A vulnerability in the Embedded Service Router (ESR) of Cisco ISE could allow an authenticated, local attacker to read, write, or delete arbCisco Identity Services Engine Software
- CVE-2021-44193Adobe After Effects MOV File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe After Effects
- CVE-2021-44189Adobe After Effects JPEG2000 Parsing Use-After-Free Information Disclosure VulnerabilityAdobe After Effects
- CVE-2021-44195Adobe After Effects JPEG File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe After Effects
- CVE-2021-44194Adobe After Effects 3GP File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe After Effects
- CVE-2021-44192Adobe After Effects MOV File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe After Effects
- CVE-2021-44190Adobe After Effects MP4 File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe After Effects
- CVE-2021-44191Adobe After Effects MP4 File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe After Effects
- CVE-2021-40790Adobe Premiere Pro MOV File Parsing Use-After-Free Information Disclosure VulnerabilityAdobe Premiere Pro
- CVE-2021-42734Adobe Photoshop TIF File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Photoshop Desktop
- CVE-2021-40791Adobe Premiere Pro JPEG File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Premiere Pro
- CVE-2021-42265Adobe Premiere Pro MP4 File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Premiere Pro
- CVE-2021-40723Acrobat Reader DC Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Acrobat Reader
- CVE-2021-43751Adobe Premiere Pro MP4 File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Premiere Pro
- CVE-2023-36635An improper access control in Fortinet FortiSwitchManager version 7.2.0 through 7.2.2 7.0.0 through 7.0.1 may allow a remote authenticated Fortinet FortiSwitchManager
- CVE-2023-39422Use of Hard-coded Credentials in multiple /irmdata/api/ endpointsResort Data Processing IRM Next Generation
- CVE-2023-3747Insufficient Validation on Override Codes for Always-Enabled WARP ModeCloudflare WARP Client
- CVE-2023-4792Duplicate Post Page Menu & Custom Post Type <= 2.3.1 - Missing Authorization to Post Duplicationinqsys Duplicate Post Page Menu & Custom Post Type
- CVE-2023-4772Newsletter <= 7.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodesatollo Newsletter – Send awesome emails from WordPress
- CVE-2023-37798A stored cross-site scripting (XSS) vulnerability in the new REDCap project creation function of Vanderbilt REDCap 13.1.35 allows attackers
- CVE-2023-39711Multiple cross-site scripting (XSS) vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arb
- CVE-2023-40942Tenda AC9 V3.0BR_V15.03.06.42_multi_TD01 was discovered stack overflow via parameter 'firewall_value' at url /goform/SetFirewallCfg.
- CVE-2023-41161Multiple stored cross-site scripting (XSS) vulnerabilities in Usermin 2.000 allow remote attackers to inject arbitrary web script or HTML vi
- CVE-2023-41646Buttercup v2.20.3 allows attackers to obtain the hash of the master password for the password manager via accessing the file /vaults.json/buttercup