# CVEs published 2023-09-14

67 CVEs were published on September 14, 2023: 7 critical, 8 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2023-4680](https://cve.now/CVE-2023-4680.md): Vault's Transit Secrets Engine Allowed Nonce Specified without Convergent Encryption (CVSS 6.8, HashiCorp Vault · github.com/hashicorp/vault)
- [CVE-2023-25584](https://cve.now/CVE-2023-25584.md): Out of bounds read in parse\_module function in bfd/vms-alpha.c (CVSS 6.3, binutils · Red Hat Enterprise Linux +2)
- [CVE-2023-25585](https://cve.now/CVE-2023-25585.md): Field \`file\_table\` of \`struct module \*module\` is uninitialized (CVSS 4.7, binutils · Red Hat Enterprise Linux +1)
- [CVE-2023-25586](https://cve.now/CVE-2023-25586.md): Local variable \`ch\_type\` in function \`bfd\_init\_section\_decompress\_status\` can be uninitialized (CVSS 4.7, binutils · Red Hat Enterprise Linux +1)
- [CVE-2023-25588](https://cve.now/CVE-2023-25588.md): Field \`the\_bfd\` of \`asymbol\` is uninitialized in function \`bfd\_mach\_o\_get\_synthetic\_symtab\` (CVSS 4.7, binutils · Red Hat Enterprise Linux +1)
- [CVE-2023-4965](https://cve.now/CVE-2023-4965.md): phpipam Header redirect (CVSS 2.7, phpipam)
- [CVE-2023-4676](https://cve.now/CVE-2023-4676.md): XSS in Yordams MedasPro (CVSS 6.1, Yordam MedasPro)
- [CVE-2023-32636](https://cve.now/CVE-2023-32636.md): A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service introduced by additional input valida (CVSS 4.7, glib)
- [CVE-2023-32643](https://cve.now/CVE-2023-32643.md): A flaw was found in GLib. (CVSS 5.3, glib)
- [CVE-2023-32611](https://cve.now/CVE-2023-32611.md): G\_variant\_byteswap() can take a long time with some non-normal inputs (CVSS 5.5, glib2 · Red Hat Enterprise Linux +2)
- [CVE-2023-29499](https://cve.now/CVE-2023-29499.md): Gvariant offset table entry size is not checked in is\_normal() (CVSS 5.5, glib2 · Red Hat Enterprise Linux +2)
- [CVE-2023-32665](https://cve.now/CVE-2023-32665.md): Gvariant deserialisation does not match spec for non-normal data (CVSS 5.5, glib2 · Red Hat Enterprise Linux +1)
- [CVE-2023-4972](https://cve.now/CVE-2023-4972.md): Information Disclosure in Digital Yepas (CVSS 9.8, Digital Yepas)
- [CVE-2023-4702](https://cve.now/CVE-2023-4702.md): Authentication Bypass in Digital Yepas (CVSS 9.8, Digital Yepas)
- [CVE-2023-4669](https://cve.now/CVE-2023-4669.md): Authentication Bypass in Exagate SYSGuard 3001 (CVSS 9.8, Exagate SYSGuard)
- [CVE-2023-4766](https://cve.now/CVE-2023-4766.md): SQLi in Movus Admin Panel (CVSS 9.8, Movus)
- [CVE-2023-4832](https://cve.now/CVE-2023-4832.md): SQLi in Aceka Holdings Company Management (CVSS 9.8, Aceka Company Management)
- [CVE-2023-4951](https://cve.now/CVE-2023-4951.md): Cross Site Scripting (XSS) Issue on "Client Based Authentication Policy Configuration" Screen (CVSS 2.0, Green Rocket Security GreenRADIUS)
- [CVE-2023-30909](https://cve.now/CVE-2023-30909.md): A remote authentication bypass issue exists in some OneView APIs. (CVSS 9.8, Hewlett Packard Enterprise (HPE) HPE OneView)
- [CVE-2023-1108](https://cve.now/CVE-2023-1108.md): Undertow: infinite loop in sslconduit during close (CVSS 7.5, io.undertow:undertow-core · Red Hat EAP 7.4.10 release +14)
- [CVE-2023-2848](https://cve.now/CVE-2023-2848.md): Movim prior to version 0.22 is affected by a Cross-Site WebSocket Hijacking vulnerability. (CVSS 8.0, Movim)
- [CVE-2023-38558](https://cve.now/CVE-2023-38558.md): A vulnerability has been identified in SIMATIC PCS neo (Administration Console) V4.0 (All versions), SIMATIC PCS neo (Administration Console (CVSS 5.5, Siemens SIMATIC PCS neo (Administration Console))
- [CVE-2023-38557](https://cve.now/CVE-2023-38557.md): A vulnerability has been identified in Spectrum Power 7 (All versions \< V23Q3). (CVSS 8.2, Siemens Spectrum Power)
- [CVE-2023-4516](https://cve.now/CVE-2023-4516.md): A CWE-306: Missing Authentication for Critical Function vulnerability exists in the IGSS Update Service that could allow a local attacker t (CVSS 7.8, Schneider Electric IGSS Update Service)
- [CVE-2023-41267](https://cve.now/CVE-2023-41267.md): Apache HDFS Provider error message suggested installation of incorrect pip package (low (no CVSS), Apache Software Foundation Apache Airflow HDFS Provider · a…)
- [CVE-2023-42503](https://cve.now/CVE-2023-42503.md): Apache Commons Compress: Denial of service via CPU consumption for malformed TAR file (no CVSS, Apache Software Foundation Apache Commons Compress · org.ap…)
- [CVE-2023-38204](https://cve.now/CVE-2023-38204.md): Bypass APSB23-41 (CVE-2023-38203) - Pre-Auth RCE ColdFusion 2021 Update 8 (CVSS 9.8, Adobe ColdFusion)
- [CVE-2023-38205](https://cve.now/CVE-2023-38205.md): ColdFusion Bypass - Vulnerability disclosure in ColdFusion | BYPASS CVE-2023-29298 (CVSS 7.5, KEV, Adobe ColdFusion)
- [CVE-2023-38206](https://cve.now/CVE-2023-38206.md): ColdFusion | Improper Access Control (CWE-284) (CVSS 5.3, Adobe ColdFusion)
- [CVE-2023-4814](https://cve.now/CVE-2023-4814.md): A Privilege escalation vulnerability exists in Trellix Windows DLP endpoint for windows which can be abused to delete any file/folder for w (CVSS 7.1, Trellix Data Loss Prevention Endpoint for Windows)
- [CVE-2023-26141](https://cve.now/CVE-2023-26141.md): Versions of the package sidekiq before 7.1.3 are vulnerable to Denial of Service (DoS) due to insufficient checks in the dashboard-charts.js (CVSS 7.5, sidekiq)
- [CVE-2023-4948](https://cve.now/CVE-2023-4948.md): WooCommerce CVR Payment Gateway \< 6.1.0 - Missing Authorization to Authenticated (Contributor+) CVR Update (CVSS 4.3, Yan&Co WooCommerce CVR Payment Gateway)
- [CVE-2023-4945](https://cve.now/CVE-2023-4945.md): Booster for WooCommerce \<= 7.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, pluggabl Booster for WooCommerce – PDF Invoices, Abandoned…)
- [CVE-2023-4944](https://cve.now/CVE-2023-4944.md): Awesome Weather Widget \<= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, richardgabriel Awesome Weather Widget)
- [CVE-2023-4841](https://cve.now/CVE-2023-4841.md): Feeds for YouTube \<= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, smub Feeds for YouTube)
- [CVE-2021-28485](https://cve.now/CVE-2021-28485.md): In Ericsson Mobile Switching Center Server (MSC-S) before IS 3.1 CP22, the SIS web application allows relative path traversal via a specific (no CVSS)
- [CVE-2022-47631](https://cve.now/CVE-2022-47631.md): Razer Synapse through 3.7.1209.121307 allows privilege escalation due to an unsafe installation path and improper privilege management. (no CVSS)
- [CVE-2023-36250](https://cve.now/CVE-2023-36250.md): CSV Injection vulnerability in GNOME time tracker version 3.0.2, allows local attackers to execute arbitrary code via crafted .tsv file when (CVSS 7.8)
- [CVE-2023-37739](https://cve.now/CVE-2023-37739.md): i-doit Pro v25 and below was discovered to be vulnerable to path traversal. (no CVSS)
- [CVE-2023-37755](https://cve.now/CVE-2023-37755.md): i-doit pro 25 and below and I-doit open 25 and below are configured with insecure default administrator credentials, and there is no warning (no CVSS)
- [CVE-2023-37756](https://cve.now/CVE-2023-37756.md): I-doit pro 25 and below and I-doit open 25 and below employ weak password requirements for Administrator account creation. (no CVSS)
- [CVE-2023-38891](https://cve.now/CVE-2023-38891.md): SQL injection vulnerability in Vtiger CRM v.7.5.0 allows a remote authenticated attacker to escalate privileges via the getQueryColumnsList (no CVSS)
- [CVE-2023-38912](https://cve.now/CVE-2023-38912.md): SQL injection vulnerability in Super Store Finder PHP Script v.3.6 allows a remote attacker to execute arbitrary code via a crafted payload (no CVSS)
- [CVE-2023-39285](https://cve.now/CVE-2023-39285.md): A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 SP3 (22.24.5800.0) could allow an unauthenticated attack (no CVSS)
- [CVE-2023-39286](https://cve.now/CVE-2023-39286.md): A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2304.102 could allow an unauthenticated attack (no CVSS)
- [CVE-2023-39638](https://cve.now/CVE-2023-39638.md): D-LINK DIR-859 A1 1.05 and A1 1.06B01 Beta01 was discovered to contain a command injection vulnerability via the lxmldbc\_system function at (no CVSS)
- [CVE-2023-39639](https://cve.now/CVE-2023-39639.md): LeoTheme leoblog up to v3.1.2 was discovered to contain a SQL injection vulnerability via the component LeoBlogBlog::getListBlogs. (no CVSS)
- [CVE-2023-39641](https://cve.now/CVE-2023-39641.md): Active Design psaffiliate before v1.9.8 was discovered to contain a SQL injection vulnerability via the component PsaffiliateGetaffiliatesde (no CVSS)
- [CVE-2023-39642](https://cve.now/CVE-2023-39642.md): Carts Guru cartsguru up to v2.4.2 was discovered to contain a SQL injection vulnerability via the component CartsGuruCatalogModuleFrontContr (no CVSS)
- [CVE-2023-40779](https://cve.now/CVE-2023-40779.md): An issue in IceWarp Mail Server Deep Castle 2 v.13.0.1.2 allows a remote attacker to execute arbitrary code via a crafted request to the URL (no CVSS)
- [CVE-2023-40868](https://cve.now/CVE-2023-40868.md): Cross Site Request Forgery vulnerability in mooSocial MooSocial Software v.Demo allows a remote attacker to execute arbitrary code via the D (no CVSS)
- [CVE-2023-40869](https://cve.now/CVE-2023-40869.md): Cross Site Scripting vulnerability in mooSocial mooSocial Software 3.1.6 and 3.1.7 allows a remote attacker to execute arbitrary code via a (no CVSS)
- [CVE-2023-40955](https://cve.now/CVE-2023-40955.md): A SQL injection vulnerability in Didotech srl Engineering & Lifecycle Management (aka pdm) v.14.0, v.15.0 and v.16.0 fixed in pdm-14.0.1.0.0 (no CVSS)
- [CVE-2023-40956](https://cve.now/CVE-2023-40956.md): A SQL injection vulnerability in Cloudroits Website Job Search v.15.0 allows a remote authenticated attacker to execute arbitrary code via t (no CVSS)
- [CVE-2023-40957](https://cve.now/CVE-2023-40957.md): A SQL injection vulnerability in Didotech srl Engineering & Lifecycle Management (aka pdm) v.14.0, v.15.0 and v.16.0 fixed in pdm-14.0.1.0.0 (no CVSS)
- [CVE-2023-40958](https://cve.now/CVE-2023-40958.md): A SQL injection vulnerability in Didotech srl Engineering & Lifecycle Management (aka pdm) v.14.0, v.15.0 and v.16.0 fixed in pdm-14.0.1.0.0 (no CVSS)
- [CVE-2023-41010](https://cve.now/CVE-2023-41010.md): Insecure Permissions vulnerability in Sichuan Tianyi Kanghe Communication Co., Ltd China Telecom Tianyi Home Gateway v.TEWA-700G allows a lo (no CVSS)
- [CVE-2023-41011](https://cve.now/CVE-2023-41011.md): Command Execution vulnerability in China Mobile Communications China Mobile Intelligent Home Gateway v.HG6543C4 allows a remote attacker… (no CVSS)
- [CVE-2023-41156](https://cve.now/CVE-2023-41156.md): A Stored Cross-Site Scripting (XSS) vulnerability in the filter and forward mail tab in Usermin 2.001 allows remote attackers to inject arbi (no CVSS)
- [CVE-2023-41159](https://cve.now/CVE-2023-41159.md): A Stored Cross-Site Scripting (XSS) vulnerability while editing the autoreply file page in Usermin 2.000 allows remote attackers to inject a (no CVSS)
- [CVE-2023-41160](https://cve.now/CVE-2023-41160.md): A Stored Cross-Site Scripting (XSS) vulnerability in the SSH configuration tab in Usermin 2.001 allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2023-41588](https://cve.now/CVE-2023-41588.md): A cross-site scripting (XSS) vulnerability in Time to SLA plugin v10.13.5 allows attackers to execute arbitrary web scripts or HTML via a cr (no CVSS)
- [CVE-2023-41592](https://cve.now/CVE-2023-41592.md): Froala Editor v4.0.1 to v4.1.1 was discovered to contain a cross-site scripting (XSS) vulnerability. (no CVSS, froala/wysiwyg-editor · froala-editor)
- [CVE-2023-42178](https://cve.now/CVE-2023-42178.md): Lenosp 1.0.0-1.2.0 is vulnerable to SQL Injection via the log query module. (no CVSS)
- [CVE-2023-42180](https://cve.now/CVE-2023-42180.md): An arbitrary file upload vulnerability in the /user/upload component of lenosp 1.0-1.2.0 allows attackers to execute html code via a crafted (no CVSS)
- [CVE-2023-42362](https://cve.now/CVE-2023-42362.md): An arbitrary file upload vulnerability in Teller Web App v.4.4.0 allows a remote attacker to execute arbitrary commands and obtain sensitive (no CVSS)
- [CVE-2023-42405](https://cve.now/CVE-2023-42405.md): SQL injection vulnerability in FIT2CLOUD RackShift v1.7.1 allows attackers to execute arbitrary code via the \`sort\` parameter to taskService (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-09-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.