# CVEs published 2023-09-11

115 CVEs were published on September 11, 2023: 2 critical, 32 high. 3 are now in CISA KEV. Days are UTC.

- [CVE-2023-40442](https://cve.now/CVE-2023-40442.md): A privacy issue was addressed with improved private data redaction for log entries. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2023-41990](https://cve.now/CVE-2023-41990.md): The issue was addressed with improved handling of caches. (CVSS 7.8, KEV, Apple iOS and iPadOS · Apple tvOS +2)
- [CVE-2023-40440](https://cve.now/CVE-2023-40440.md): This issue was addressed with improved state management of S/MIME encrypted emails. (CVSS 7.5, Apple macOS)
- [CVE-2023-4899](https://cve.now/CVE-2023-4899.md): SQL Injection in mintplex-labs/anything-llm (CVSS 8.1, mintplex-labs/anything-llm)
- [CVE-2023-4898](https://cve.now/CVE-2023-4898.md): Authentication Bypass by Primary Weakness in mintplex-labs/anything-llm (CVSS 8.2, mintplex-labs/anything-llm)
- [CVE-2023-41879](https://cve.now/CVE-2023-41879.md): Magento LTS's guest order "protect code" can be brute-forced too easily (CVSS 7.5, OpenMage magento-lts · openmage/magento-lts)
- [CVE-2022-1415](https://cve.now/CVE-2022-1415.md): Drools: unsafe data deserialization in streamutils (CVSS 8.1, Red Hat RHPAM 7.13.1 async · Red Hat build of Apache Ca… +10)
- [CVE-2023-35687](https://cve.now/CVE-2023-35687.md): In MtpPropertyValue of MtpProperty.h, there is a possible memory corruption due to a use after free. (no CVSS, Google Android)
- [CVE-2023-35684](https://cve.now/CVE-2023-35684.md): In avdt\_msg\_asmbl of avdt\_msg.cc, there is a possible out of bounds write due to an integer overflow. (no CVSS, Google Android)
- [CVE-2023-35683](https://cve.now/CVE-2023-35683.md): In bindSelection of DatabaseUtils.java, there is a possible way to access files from other applications due to SQL injection. (no CVSS, Google Android)
- [CVE-2023-35682](https://cve.now/CVE-2023-35682.md): In hasPermissionForActivity of PackageManagerHelper.java, there is a possible way to start arbitrary components due to a confused deputy. (CVSS 7.8, Google Android)
- [CVE-2023-35681](https://cve.now/CVE-2023-35681.md): In eatt\_l2cap\_reconfig\_completed of eatt\_impl.h, there is a possible out of bounds write due to an integer overflow. (no CVSS, Google Android)
- [CVE-2023-35680](https://cve.now/CVE-2023-35680.md): In multiple locations, there is a possible way to import contacts belonging to other users due to a confused deputy. (no CVSS, Google Android)
- [CVE-2023-35679](https://cve.now/CVE-2023-35679.md): In MtpPropertyValue of MtpProperty.h, there is a possible out of bounds read due to uninitialized data. (no CVSS, Google Android)
- [CVE-2023-35677](https://cve.now/CVE-2023-35677.md): In onCreate of DeviceAdminAdd.java, there is a possible way to forcibly add a device admin due to a missing permission check. (no CVSS, Google Android)
- [CVE-2023-35676](https://cve.now/CVE-2023-35676.md): In createQuickShareAction of SaveImageInBackgroundTask.java, there is a possible way to trigger a background activity launch due to an unsaf (no CVSS, Google Android)
- [CVE-2023-35675](https://cve.now/CVE-2023-35675.md): In loadMediaResumptionControls of MediaResumeListener.kt, there is a possible way to play and listen to media files played by another user o (no CVSS, Google Android)
- [CVE-2023-35674](https://cve.now/CVE-2023-35674.md): In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the code. (CVSS 8.8, KEV, Google Android)
- [CVE-2023-35673](https://cve.now/CVE-2023-35673.md): In build\_read\_multi\_rsp of gatt\_sr.cc, there is a possible out of bounds write due to an integer overflow. (no CVSS, Google Android)
- [CVE-2023-35671](https://cve.now/CVE-2023-35671.md): In onHostEmulationData of HostEmulationManager.java, there is a possible way for a general purpose NFC reader to read the full card number a (no CVSS, Google Android)
- [CVE-2023-35670](https://cve.now/CVE-2023-35670.md): In computeValuesFromData of FileUtils.java, there is a possible way to insert files to other apps' external private directories due to a pat (CVSS 7.8, Google Android)
- [CVE-2023-35669](https://cve.now/CVE-2023-35669.md): In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to control other running activities due to unsafe (no CVSS, Google Android)
- [CVE-2023-35667](https://cve.now/CVE-2023-35667.md): In updateList of NotificationAccessSettings.java, there is a possible way to hide approved notification listeners in the settings due to a l (no CVSS, Google Android)
- [CVE-2023-35666](https://cve.now/CVE-2023-35666.md): In bta\_av\_rc\_msg of bta\_av\_act.cc, there is a possible use after free due to a logic error in the code. (no CVSS, Google Android)
- [CVE-2023-35665](https://cve.now/CVE-2023-35665.md): In multiple files, there is a possible way to import a contact from another user due to a missing permission check. (no CVSS, Google Android)
- [CVE-2023-35664](https://cve.now/CVE-2023-35664.md): In convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2023-35658](https://cve.now/CVE-2023-35658.md): In gatt\_process\_prep\_write\_rsp of gatt\_cl.cc, there is a possible privilege escalation due to a use after free. (no CVSS, Google Android)
- [CVE-2023-4897](https://cve.now/CVE-2023-4897.md): Relative Path Traversal in mintplex-labs/anything-llm (CVSS 8.7, mintplex-labs/anything-llm)
- [CVE-2023-4294](https://cve.now/CVE-2023-4294.md): URL Shortify \< 1.7.6 - Unauthenticated Stored XSS via referer header (CVSS 6.1, URL Shortify)
- [CVE-2023-3170](https://cve.now/CVE-2023-3170.md): tagDiv Composer \< 4.2 - Admin+ Stored XSS (CVSS 4.8, tagDiv Composer)
- [CVE-2023-4278](https://cve.now/CVE-2023-4278.md): MasterStudy LMS \< 3.0.18 - Unauthenticated Instructor Account Creation (CVSS 7.5, MasterStudy LMS WordPress Plugin)
- [CVE-2023-4060](https://cve.now/CVE-2023-4060.md): WP Adminify \< 3.1.6 - Admin+ Stored XSS (CVSS 4.8, WP Adminify)
- [CVE-2023-3510](https://cve.now/CVE-2023-3510.md): FTP Access \<= 1.0 - Subscriber+ Stored XSS (no CVSS, FTP Access)
- [CVE-2023-3169](https://cve.now/CVE-2023-3169.md): tagDiv Composer \< 4.2 - Unauthenticated Stored XSS (CVSS 6.1, tagDiv Composer)
- [CVE-2023-4314](https://cve.now/CVE-2023-4314.md): wpDataTables \< 2.1.66 - Admin+ PHP Object Injection (CVSS 7.2, wpDataTables)
- [CVE-2023-2705](https://cve.now/CVE-2023-2705.md): Appointment booking addon for Gravity Forms \< 1.10.0 - Reflected Cross-Site Scripting (CVSS 6.1, gAppointments)
- [CVE-2023-4022](https://cve.now/CVE-2023-4022.md): Herd Effects \< 5.2.3 - Admin+ Stored XSS (CVSS 4.8, Herd Effects)
- [CVE-2023-4318](https://cve.now/CVE-2023-4318.md): Herd Effects \< 5.2.4 - Effect Deletion via CSRF (CVSS 4.3, Herd Effects)
- [CVE-2023-4270](https://cve.now/CVE-2023-4270.md): Min Max Control \< 4.6 - Reflected XSS (CVSS 6.1, Min Max Control)
- [CVE-2023-4307](https://cve.now/CVE-2023-4307.md): Lock User Account \<= 1.0.3 - Arbitrary Account Lock/Unlock via CSRF (CVSS 4.3, Lock User Account)
- [CVE-2023-36497](https://cve.now/CVE-2023-36497.md): Dover Fueling Solutions MAGLINK LX Web Console Authentication Bypass by Primary Weakness (CVSS 8.8, Dover Fueling Solutions MAGLINK LX Web Console Configuration)
- [CVE-2023-38256](https://cve.now/CVE-2023-38256.md): Dover Fueling Solutions MAGLINK LX Console Path Traversal (CVSS 6.8, Dover Fueling Solutions MAGLINK LX Web Console Configuration)
- [CVE-2023-41336](https://cve.now/CVE-2023-41336.md): Prevent injection of invalid entity ids for "autocomplete" fields in symfony ux-autocomplete (CVSS 6.5, symfony ux-autocomplete · symfony/ux-autocomplete)
- [CVE-2023-39227](https://cve.now/CVE-2023-39227.md): ​Softneta MedDream PACS Plaintext Storage of a Password (CVSS 6.1, Softneta MedDream PACS)
- [CVE-2023-40150](https://cve.now/CVE-2023-40150.md): Softneta MedDream PACS Exposed Dangerous Method or Function (CVSS 9.8, Softneta MedDream PACS)
- [CVE-2023-41256](https://cve.now/CVE-2023-41256.md): Dover Fueling Solutions MAGLINK LX Console Authentication Bypass (CVSS 9.1, Dover Fueling Solutions MAGLINK LX Web Console Configuration)
- [CVE-2023-40032](https://cve.now/CVE-2023-40032.md): Potential segfault due to NULL pointer dereference in libvips (CVSS 5.5, libvips)
- [CVE-2019-16471](https://cve.now/CVE-2019-16471.md): Use-After-Free in app.measureDialog - Tianfu Cup (CVSS 7.8, Adobe Acrobat Reader)
- [CVE-2019-16470](https://cve.now/CVE-2019-16470.md): CoolType.dll crash - Tianfu Cup (CVSS 7.8, Adobe Acrobat Reader)
- [CVE-2019-7819](https://cve.now/CVE-2019-7819.md): Adobe Acrobat Pro DC PostScript File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 5.5, Adobe Acrobat Reader)
- [CVE-2022-34238](https://cve.now/CVE-2022-34238.md): Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 5.5, Adobe Acrobat Reader)
- [CVE-2022-34227](https://cve.now/CVE-2022-34227.md): Adobe Acrobat Reader DC AcroForm value Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Adobe Acrobat Reader)
- [CVE-2022-34224](https://cve.now/CVE-2022-34224.md): Adobe Acrobat Reader DC AcroForm setItems Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Adobe Acrobat Reader)
- [CVE-2022-28835](https://cve.now/CVE-2022-28835.md): Adobe InCopy Font Parsing Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Adobe InCopy)
- [CVE-2022-28834](https://cve.now/CVE-2022-28834.md): Adobe InCopy Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, Adobe InCopy)
- [CVE-2022-28836](https://cve.now/CVE-2022-28836.md): Adobe InCopy Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, Adobe InCopy)
- [CVE-2022-28831](https://cve.now/CVE-2022-28831.md): Adobe InDesign Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, Adobe InDesign Desktop)
- [CVE-2022-28833](https://cve.now/CVE-2022-28833.md): Adobe InDesign Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, Adobe InDesign Desktop)
- [CVE-2022-28832](https://cve.now/CVE-2022-28832.md): Adobe InDesign Font Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, Adobe InDesign Desktop)
- [CVE-2023-4630](https://cve.now/CVE-2023-4630.md): Missing Authorization in GitLab (CVSS 5.0, GitLab)
- [CVE-2023-3612](https://cve.now/CVE-2023-3612.md): Unprotected WebView access in Govee Home App (CVSS 8.2, Govee Home)
- [CVE-2023-4104](https://cve.now/CVE-2023-4104.md): An invalid Polkit Authentication check and missing authentication requirements for D-Bus methods allowed any local user to configure arbitra (CVSS 5.5, Mozilla VPN)
- [CVE-2023-4585](https://cve.now/CVE-2023-4585.md): Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2 (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2023-4584](https://cve.now/CVE-2023-4584.md): Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2 (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2023-4583](https://cve.now/CVE-2023-4583.md): Browsing Context potentially not cleared when closing Private Window (CVSS 7.5, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2023-4582](https://cve.now/CVE-2023-4582.md): Buffer Overflow in WebGL glGetProgramiv (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2023-4581](https://cve.now/CVE-2023-4581.md): XLL file extensions were downloadable without warnings (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2023-4580](https://cve.now/CVE-2023-4580.md): Push notifications saved to disk unencrypted (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2023-4579](https://cve.now/CVE-2023-4579.md): Persisted search terms were formatted as URLs (no CVSS, Mozilla Firefox)
- [CVE-2023-4578](https://cve.now/CVE-2023-4578.md): Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2023-4577](https://cve.now/CVE-2023-4577.md): Memory corruption in JIT UpdateRegExpStatics (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2023-4576](https://cve.now/CVE-2023-4576.md): Integer Overflow in RecordedSourceSurfaceCreation (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2023-4575](https://cve.now/CVE-2023-4575.md): Memory corruption in IPC FilePickerShownCallback (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2023-4574](https://cve.now/CVE-2023-4574.md): Memory corruption in IPC ColorPickerShownCallback (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2023-4573](https://cve.now/CVE-2023-4573.md): Memory corruption in IPC CanvasTranslator (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2023-4816](https://cve.now/CVE-2023-4816.md): A vulnerability exists in the Equipment Tag Out authentication, when configured with Single Sign-On (SSO) with password validation in T214. (CVSS 6.9, Hitachi Energy Asset Suite)
- [CVE-2020-19318](https://cve.now/CVE-2020-19318.md): Buffer Overflow vulnerability in D-Link DIR-605L, hardware version AX, firmware version 1.17beta and below, allows authorized attackers exec (no CVSS)
- [CVE-2020-19319](https://cve.now/CVE-2020-19319.md): Buffer overflow vulnerability in DLINK 619L version B 2.06beta via the FILECODE parameter on login. (no CVSS)
- [CVE-2020-19320](https://cve.now/CVE-2020-19320.md): Buffer overflow vulnerability in DLINK 619L version B 2.06beta via the curTime parameter on login. (no CVSS)
- [CVE-2020-19323](https://cve.now/CVE-2020-19323.md): An issue was discovered in /bin/mini\_upnpd on D-Link DIR-619L 2.06beta devices. (no CVSS)
- [CVE-2020-19559](https://cve.now/CVE-2020-19559.md): An issue in Diebold Aglis XFS for Opteva v.4.1.61.1 allows a remote attacker to execute arbitrary code via a crafted payload to the ResolveM (no CVSS)
- [CVE-2020-24088](https://cve.now/CVE-2020-24088.md): An issue was discovered in MmMapIoSpace routine in Foxconn Live Update Utility 2.1.6.26, allows local attackers to escalate privileges. (no CVSS)
- [CVE-2022-23382](https://cve.now/CVE-2022-23382.md): Shenzhen Hichip Vision Technology IP Camera Firmware V11.4.8.1.1-20170926 has a denial of service vulnerability through sending a crafted mu (CVSS 8.1)
- [CVE-2023-27470](https://cve.now/CVE-2023-27470.md): BASupSrvcUpdater.exe in N-able Take Control Agent through 7.0.41.1141 before 7.0.43 has a TOCTOU Race Condition via a pseudo-symlink at %PRO (no CVSS)
- [CVE-2023-30058](https://cve.now/CVE-2023-30058.md): novel-plus 3.6.2 is vulnerable to SQL Injection. (no CVSS)
- [CVE-2023-31067](https://cve.now/CVE-2023-31067.md): An issue was discovered in TSplus Remote Access through 16.0.2.14. (no CVSS)
- [CVE-2023-31068](https://cve.now/CVE-2023-31068.md): An issue was discovered in TSplus Remote Access through 16.0.2.14. (no CVSS)
- [CVE-2023-31069](https://cve.now/CVE-2023-31069.md): An issue was discovered in TSplus Remote Access through 16.0.2.14. (no CVSS)
- [CVE-2023-31468](https://cve.now/CVE-2023-31468.md): An issue was discovered in Inosoft VisiWin 7 through 2022-2.1 (Runtime RT7.3 RC3 20221209.5). (CVSS 7.8)
- [CVE-2023-35845](https://cve.now/CVE-2023-35845.md): Anaconda 3 2023.03-1-Linux allows local users to disrupt TLS certificate validation by modifying the cacert.pem file used by the installed p (no CVSS)
- [CVE-2023-36140](https://cve.now/CVE-2023-36140.md): In PHPJabbers Cleaning Business Software 1.0, there is no encryption on user passwords allowing an attacker to gain access to all user accou (no CVSS)
- [CVE-2023-36161](https://cve.now/CVE-2023-36161.md): An issue was discovered in Qubo Smart Plug 10A version HSP02\_01\_01\_14\_SYSTEM-10A, allows attackers to cause a denial of service (DoS) via Wi (no CVSS)
- [CVE-2023-36980](https://cve.now/CVE-2023-36980.md): An issue in Ethereum Blockchain v0.1.1+commit.6ff4cd6 cause the balance to be zeroed out when the value of betsize+casino.balance exceeds th (no CVSS)
- [CVE-2023-38743](https://cve.now/CVE-2023-38743.md): Zoho ManageEngine ADManager Plus before Build 7200 allows admin users to execute commands on the host machine. (CVSS 7.2)
- [CVE-2023-38829](https://cve.now/CVE-2023-38829.md): An issue in NETIS SYSTEMS WF2409E v.3.6.42541 allows a remote attacker to execute arbitrary code via the ping and traceroute functions of th (no CVSS)
- [CVE-2023-38878](https://cve.now/CVE-2023-38878.md): A reflected cross-site scripting (XSS) vulnerability in DevCode OpenSTAManager versions 2.4.24 to 2.4.47 may allow a remote attacker to exec (no CVSS)
- [CVE-2023-39063](https://cve.now/CVE-2023-39063.md): Buffer Overflow vulnerability in RaidenFTPD 2.4.4005 allows a local attacker to execute arbitrary code via the Server name field of the Step (CVSS 7.8)
- [CVE-2023-39067](https://cve.now/CVE-2023-39067.md): Cross Site Scripting vulnerability in ZLMediaKiet v.4.0 and v.5.0 allows an attacker to execute arbitrary code via a crafted script to the U (no CVSS)
- [CVE-2023-39068](https://cve.now/CVE-2023-39068.md): Buffer Overflow vulnerability in NBD80S09S-KLC v.YK\_HZXM\_NBD80S09S-KLC\_V4.03.R11.7601.Nat.OnvifC.20230414.bin and NBD80N32RA-KL-V3 v.YK\_HZXM (no CVSS)
- [CVE-2023-39069](https://cve.now/CVE-2023-39069.md): An issue in StrangeBee TheHive v.5.0.8, v.4.1.21 and Cortex v.3.1.6 allows a remote attacker to gain privileges via Active Directory authent (no CVSS)
- [CVE-2023-39070](https://cve.now/CVE-2023-39070.md): An issue in Cppcheck 2.12 dev allows a local attacker to execute arbitrary code via the removeContradiction parameter in token.cpp:1934. (no CVSS)
- [CVE-2023-39780](https://cve.now/CVE-2023-39780.md): On ASUS RT-AX55 3.0.0.4.386.51598 devices, authenticated attackers can perform OS command injection via the /start\_apply.htm… (CVSS 8.8, KEV, ASUS RT-AX55)
- [CVE-2023-40039](https://cve.now/CVE-2023-40039.md): An issue was discovered on ARRIS TG852G, TG862G, and TG1672G devices. (no CVSS)
- [CVE-2023-40040](https://cve.now/CVE-2023-40040.md): An issue was discovered in the MyCrops HiGrade "THC Testing & Cannabi" application 1.0.337 for Android. (no CVSS)
- [CVE-2023-40786](https://cve.now/CVE-2023-40786.md): HKcms v2.3.0.230709 is vulnerable to Cross Site Scripting (XSS) allowing administrator cookies to be stolen. (no CVSS)
- [CVE-2023-40944](https://cve.now/CVE-2023-40944.md): Schoolmate 1.3 is vulnerable to SQL Injection in the variable $schoolname from Database at ~\\header.php. (no CVSS)
- [CVE-2023-40945](https://cve.now/CVE-2023-40945.md): Sourcecodester Doctor Appointment System 1.0 is vulnerable to SQL Injection in the variable $userid at doctors\\myDetails.php. (no CVSS)
- [CVE-2023-40946](https://cve.now/CVE-2023-40946.md): Schoolmate 1.3 is vulnerable to SQL Injection in the variable $username from SESSION in ValidateLogin.php. (no CVSS)
- [CVE-2023-41000](https://cve.now/CVE-2023-41000.md): GPAC through 2.2.1 has a use-after-free vulnerability in the function gf\_bifs\_flush\_command\_list in bifs/memory\_decoder.c. (no CVSS)
- [CVE-2023-41103](https://cve.now/CVE-2023-41103.md): Interact 7.9.79.5 allows stored Cross-site Scripting (XSS) attacks in several locations, allowing an attacker to store a JavaScript payload. (no CVSS)
- [CVE-2023-41593](https://cve.now/CVE-2023-41593.md): Multiple cross-site scripting (XSS) vulnerabilities in Dairy Farm Shop Management System Using PHP and MySQL v1.1 allow attackers to execute (no CVSS)
- [CVE-2023-41609](https://cve.now/CVE-2023-41609.md): An open redirect vulnerability in the sanitize\_url() parameter of CouchCMS v2.3 allows attackers to redirect a victim user to an arbitrary w (no CVSS)
- [CVE-2023-42467](https://cve.now/CVE-2023-42467.md): QEMU through 8.0.0 could trigger a division by zero in scsi\_disk\_reset in hw/scsi/scsi-disk.c because scsi\_disk\_emulate\_mode\_select does not (no CVSS)
- [CVE-2023-42470](https://cve.now/CVE-2023-42470.md): The Imou Life com.mm.android.smartlifeiot application through 6.8.0 for Android allows Remote Code Execution via a crafted intent to an expo (no CVSS)
- [CVE-2023-42471](https://cve.now/CVE-2023-42471.md): The wave.ai.browser application through 1.0.35 for Android allows a remote attacker to execute arbitrary JavaScript code via a crafted inten (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-09-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.