CVEs published September 11, 2023
115 CVEs were published on September 11, 2023: 2 critical, 32 high. 3 are now in CISA KEV.
- Published
- 115
- Critical
- 2
- High
- 32
- Medium
- 18
- Low
- 0
- Unrated
- 63
- Now in CISA KEV
- 3
- Fix available
- 36
Most affected products
- Google Android
- 20
- Mozilla Firefox · Mozilla Thunderbird
- 12
- Adobe Acrobat Reader
- 6
- Adobe InCopy
- 3
- Adobe InDesign Desktop
- 3
- Dover Fueling Solutions MAGLINK LX Web Console Configuration
- 3
- mintplex-labs/anything-llm
- 3
- Herd Effects
- 2
- Softneta MedDream PACS
- 2
- tagDiv Composer
- 2
Critical 2
High 32
- CVE-2023-41990The issue was addressed with improved handling of caches.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2023-40440This issue was addressed with improved state management of S/MIME encrypted emails.Apple macOS
- CVE-2023-4899SQL Injection in mintplex-labs/anything-llmmintplex-labs/anything-llm
- CVE-2023-4898Authentication Bypass by Primary Weakness in mintplex-labs/anything-llmmintplex-labs/anything-llm
- CVE-2023-41879Magento LTS's guest order "protect code" can be brute-forced too easilyOpenMage magento-lts · openmage/magento-lts
- CVE-2022-1415Drools: unsafe data deserialization in streamutilsRed Hat RHPAM 7.13.1 async · Red Hat build of Apache Ca… +10
- CVE-2023-35682In hasPermissionForActivity of PackageManagerHelper.java, there is a possible way to start arbitrary components due to a confused deputy.Google Android
- CVE-2023-35674In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the code.Google Android
- CVE-2023-35670In computeValuesFromData of FileUtils.java, there is a possible way to insert files to other apps' external private directories due to a patGoogle Android
- CVE-2023-4897Relative Path Traversal in mintplex-labs/anything-llmmintplex-labs/anything-llm
- CVE-2023-4278MasterStudy LMS < 3.0.18 - Unauthenticated Instructor Account CreationMasterStudy LMS WordPress Plugin
- CVE-2023-4314wpDataTables < 2.1.66 - Admin+ PHP Object InjectionwpDataTables
- CVE-2023-36497Dover Fueling Solutions MAGLINK LX Web Console Authentication Bypass by Primary WeaknessDover Fueling Solutions MAGLINK LX Web Console Configuration
- CVE-2019-16471Use-After-Free in app.measureDialog - Tianfu CupAdobe Acrobat Reader
- CVE-2019-16470CoolType.dll crash - Tianfu CupAdobe Acrobat Reader
- CVE-2022-34227Adobe Acrobat Reader DC AcroForm value Use-After-Free Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2022-34224Adobe Acrobat Reader DC AcroForm setItems Use-After-Free Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2022-28835Adobe InCopy Font Parsing Use-After-Free Remote Code Execution VulnerabilityAdobe InCopy
- CVE-2022-28834Adobe InCopy Font Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe InCopy
- CVE-2022-28836Adobe InCopy Font Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe InCopy
- CVE-2022-28831Adobe InDesign Font Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe InDesign Desktop
- CVE-2022-28833Adobe InDesign Font Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityAdobe InDesign Desktop
- CVE-2022-28832Adobe InDesign Font Parsing Out-Of-Bounds Read Remote Code Execution VulnerabilityAdobe InDesign Desktop
- CVE-2023-3612Unprotected WebView access in Govee Home AppGovee Home
- CVE-2023-4585Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2Mozilla Firefox · Mozilla Thunderbird
- CVE-2023-4583Browsing Context potentially not cleared when closing Private WindowMozilla Firefox · Mozilla Thunderbird
- CVE-2023-4582Buffer Overflow in WebGL glGetProgramivMozilla Firefox · Mozilla Thunderbird
- CVE-2022-23382Shenzhen Hichip Vision Technology IP Camera Firmware V11.4.8.1.1-20170926 has a denial of service vulnerability through sending a crafted mu
- CVE-2023-31468An issue was discovered in Inosoft VisiWin 7 through 2022-2.1 (Runtime RT7.3 RC3 20221209.5).
- CVE-2023-38743Zoho ManageEngine ADManager Plus before Build 7200 allows admin users to execute commands on the host machine.
- CVE-2023-39063Buffer Overflow vulnerability in RaidenFTPD 2.4.4005 allows a local attacker to execute arbitrary code via the Server name field of the Step
- CVE-2023-39780On ASUS RT-AX55 3.0.0.4.386.51598 devices, authenticated attackers can perform OS command injection via the /start_apply.htm…ASUS RT-AX55
Medium, low and unrated 81
- CVE-2023-40442A privacy issue was addressed with improved private data redaction for log entries.Apple iOS and iPadOS · Apple macOS
- CVE-2023-35687In MtpPropertyValue of MtpProperty.h, there is a possible memory corruption due to a use after free.Google Android
- CVE-2023-35684In avdt_msg_asmbl of avdt_msg.cc, there is a possible out of bounds write due to an integer overflow.Google Android
- CVE-2023-35683In bindSelection of DatabaseUtils.java, there is a possible way to access files from other applications due to SQL injection.Google Android
- CVE-2023-35681In eatt_l2cap_reconfig_completed of eatt_impl.h, there is a possible out of bounds write due to an integer overflow.Google Android
- CVE-2023-35680In multiple locations, there is a possible way to import contacts belonging to other users due to a confused deputy.Google Android
- CVE-2023-35679In MtpPropertyValue of MtpProperty.h, there is a possible out of bounds read due to uninitialized data.Google Android
- CVE-2023-35677In onCreate of DeviceAdminAdd.java, there is a possible way to forcibly add a device admin due to a missing permission check.Google Android
- CVE-2023-35676In createQuickShareAction of SaveImageInBackgroundTask.java, there is a possible way to trigger a background activity launch due to an unsafGoogle Android
- CVE-2023-35675In loadMediaResumptionControls of MediaResumeListener.kt, there is a possible way to play and listen to media files played by another user oGoogle Android
- CVE-2023-35673In build_read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to an integer overflow.Google Android
- CVE-2023-35671In onHostEmulationData of HostEmulationManager.java, there is a possible way for a general purpose NFC reader to read the full card number aGoogle Android
- CVE-2023-35669In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to control other running activities due to unsafe Google Android
- CVE-2023-35667In updateList of NotificationAccessSettings.java, there is a possible way to hide approved notification listeners in the settings due to a lGoogle Android
- CVE-2023-35666In bta_av_rc_msg of bta_av_act.cc, there is a possible use after free due to a logic error in the code.Google Android
- CVE-2023-35665In multiple files, there is a possible way to import a contact from another user due to a missing permission check.Google Android
- CVE-2023-35664In convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check.Google Android
- CVE-2023-35658In gatt_process_prep_write_rsp of gatt_cl.cc, there is a possible privilege escalation due to a use after free.Google Android
- CVE-2023-4294URL Shortify < 1.7.6 - Unauthenticated Stored XSS via referer headerURL Shortify
- CVE-2023-3170tagDiv Composer < 4.2 - Admin+ Stored XSStagDiv Composer
- CVE-2023-4060WP Adminify < 3.1.6 - Admin+ Stored XSSWP Adminify
- CVE-2023-3510FTP Access <= 1.0 - Subscriber+ Stored XSSFTP Access
- CVE-2023-3169tagDiv Composer < 4.2 - Unauthenticated Stored XSStagDiv Composer
- CVE-2023-2705Appointment booking addon for Gravity Forms < 1.10.0 - Reflected Cross-Site ScriptinggAppointments
- CVE-2023-4022Herd Effects < 5.2.3 - Admin+ Stored XSSHerd Effects
- CVE-2023-4318Herd Effects < 5.2.4 - Effect Deletion via CSRFHerd Effects
- CVE-2023-4270Min Max Control < 4.6 - Reflected XSSMin Max Control
- CVE-2023-4307Lock User Account <= 1.0.3 - Arbitrary Account Lock/Unlock via CSRFLock User Account
- CVE-2023-38256Dover Fueling Solutions MAGLINK LX Console Path TraversalDover Fueling Solutions MAGLINK LX Web Console Configuration
- CVE-2023-41336Prevent injection of invalid entity ids for "autocomplete" fields in symfony ux-autocompletesymfony ux-autocomplete · symfony/ux-autocomplete
- CVE-2023-39227Softneta MedDream PACS Plaintext Storage of a PasswordSoftneta MedDream PACS
- CVE-2023-40032Potential segfault due to NULL pointer dereference in libvipslibvips
- CVE-2019-7819Adobe Acrobat Pro DC PostScript File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability Adobe Acrobat Reader
- CVE-2022-34238Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Acrobat Reader
- CVE-2023-4630Missing Authorization in GitLabGitLab
- CVE-2023-4104An invalid Polkit Authentication check and missing authentication requirements for D-Bus methods allowed any local user to configure arbitraMozilla VPN
- CVE-2023-4584Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2Mozilla Firefox · Mozilla Thunderbird
- CVE-2023-4581XLL file extensions were downloadable without warningsMozilla Firefox · Mozilla Thunderbird
- CVE-2023-4580Push notifications saved to disk unencryptedMozilla Firefox · Mozilla Thunderbird
- CVE-2023-4579Persisted search terms were formatted as URLsMozilla Firefox
- CVE-2023-4578Error reporting methods in SpiderMonkey could have triggered an Out of Memory ExceptionMozilla Firefox · Mozilla Thunderbird
- CVE-2023-4577Memory corruption in JIT UpdateRegExpStaticsMozilla Firefox · Mozilla Thunderbird
- CVE-2023-4576Integer Overflow in RecordedSourceSurfaceCreationMozilla Firefox · Mozilla Thunderbird
- CVE-2023-4575Memory corruption in IPC FilePickerShownCallbackMozilla Firefox · Mozilla Thunderbird
- CVE-2023-4574Memory corruption in IPC ColorPickerShownCallbackMozilla Firefox · Mozilla Thunderbird
- CVE-2023-4573Memory corruption in IPC CanvasTranslatorMozilla Firefox · Mozilla Thunderbird
- CVE-2023-4816A vulnerability exists in the Equipment Tag Out authentication, when configured with Single Sign-On (SSO) with password validation in T214.Hitachi Energy Asset Suite
- CVE-2020-19318Buffer Overflow vulnerability in D-Link DIR-605L, hardware version AX, firmware version 1.17beta and below, allows authorized attackers exec
- CVE-2020-19319Buffer overflow vulnerability in DLINK 619L version B 2.06beta via the FILECODE parameter on login.
- CVE-2020-19320Buffer overflow vulnerability in DLINK 619L version B 2.06beta via the curTime parameter on login.
- CVE-2020-19323An issue was discovered in /bin/mini_upnpd on D-Link DIR-619L 2.06beta devices.
- CVE-2020-19559An issue in Diebold Aglis XFS for Opteva v.4.1.61.1 allows a remote attacker to execute arbitrary code via a crafted payload to the ResolveM
- CVE-2020-24088An issue was discovered in MmMapIoSpace routine in Foxconn Live Update Utility 2.1.6.26, allows local attackers to escalate privileges.
- CVE-2023-27470BASupSrvcUpdater.exe in N-able Take Control Agent through 7.0.41.1141 before 7.0.43 has a TOCTOU Race Condition via a pseudo-symlink at %PRO
- CVE-2023-30058novel-plus 3.6.2 is vulnerable to SQL Injection.
- CVE-2023-31067An issue was discovered in TSplus Remote Access through 16.0.2.14.
- CVE-2023-31068An issue was discovered in TSplus Remote Access through 16.0.2.14.
- CVE-2023-31069An issue was discovered in TSplus Remote Access through 16.0.2.14.
- CVE-2023-35845Anaconda 3 2023.03-1-Linux allows local users to disrupt TLS certificate validation by modifying the cacert.pem file used by the installed p
- CVE-2023-36140In PHPJabbers Cleaning Business Software 1.0, there is no encryption on user passwords allowing an attacker to gain access to all user accou
- CVE-2023-36161An issue was discovered in Qubo Smart Plug 10A version HSP02_01_01_14_SYSTEM-10A, allows attackers to cause a denial of service (DoS) via Wi
- CVE-2023-36980An issue in Ethereum Blockchain v0.1.1+commit.6ff4cd6 cause the balance to be zeroed out when the value of betsize+casino.balance exceeds th
- CVE-2023-38829An issue in NETIS SYSTEMS WF2409E v.3.6.42541 allows a remote attacker to execute arbitrary code via the ping and traceroute functions of th
- CVE-2023-38878A reflected cross-site scripting (XSS) vulnerability in DevCode OpenSTAManager versions 2.4.24 to 2.4.47 may allow a remote attacker to exec
- CVE-2023-39067Cross Site Scripting vulnerability in ZLMediaKiet v.4.0 and v.5.0 allows an attacker to execute arbitrary code via a crafted script to the U
- CVE-2023-39068Buffer Overflow vulnerability in NBD80S09S-KLC v.YK_HZXM_NBD80S09S-KLC_V4.03.R11.7601.Nat.OnvifC.20230414.bin and NBD80N32RA-KL-V3 v.YK_HZXM
- CVE-2023-39069An issue in StrangeBee TheHive v.5.0.8, v.4.1.21 and Cortex v.3.1.6 allows a remote attacker to gain privileges via Active Directory authent
- CVE-2023-39070An issue in Cppcheck 2.12 dev allows a local attacker to execute arbitrary code via the removeContradiction parameter in token.cpp:1934.
- CVE-2023-40039An issue was discovered on ARRIS TG852G, TG862G, and TG1672G devices.
- CVE-2023-40040An issue was discovered in the MyCrops HiGrade "THC Testing & Cannabi" application 1.0.337 for Android.
- CVE-2023-40786HKcms v2.3.0.230709 is vulnerable to Cross Site Scripting (XSS) allowing administrator cookies to be stolen.
- CVE-2023-40944Schoolmate 1.3 is vulnerable to SQL Injection in the variable $schoolname from Database at ~\header.php.
- CVE-2023-40945Sourcecodester Doctor Appointment System 1.0 is vulnerable to SQL Injection in the variable $userid at doctors\myDetails.php.
- CVE-2023-40946Schoolmate 1.3 is vulnerable to SQL Injection in the variable $username from SESSION in ValidateLogin.php.
- CVE-2023-41000GPAC through 2.2.1 has a use-after-free vulnerability in the function gf_bifs_flush_command_list in bifs/memory_decoder.c.
- CVE-2023-41103Interact 7.9.79.5 allows stored Cross-site Scripting (XSS) attacks in several locations, allowing an attacker to store a JavaScript payload.
- CVE-2023-41593Multiple cross-site scripting (XSS) vulnerabilities in Dairy Farm Shop Management System Using PHP and MySQL v1.1 allow attackers to execute
- CVE-2023-41609An open redirect vulnerability in the sanitize_url() parameter of CouchCMS v2.3 allows attackers to redirect a victim user to an arbitrary w
- CVE-2023-42467QEMU through 8.0.0 could trigger a division by zero in scsi_disk_reset in hw/scsi/scsi-disk.c because scsi_disk_emulate_mode_select does not
- CVE-2023-42470The Imou Life com.mm.android.smartlifeiot application through 6.8.0 for Android allows Remote Code Execution via a crafted intent to an expo
- CVE-2023-42471The wave.ai.browser application through 1.0.35 for Android allows a remote attacker to execute arbitrary JavaScript code via a crafted inten