# CVEs published 2023-09-15

77 CVEs were published on September 15, 2023: 13 critical, 19 high. Days are UTC.

- [CVE-2023-36562](https://cve.now/CVE-2023-36562.md): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (CVSS 7.1, Microsoft Edge)
- [CVE-2023-36727](https://cve.now/CVE-2023-36727.md): Microsoft Edge (Chromium-based) Spoofing Vulnerability (CVSS 6.1, Microsoft Edge)
- [CVE-2023-36735](https://cve.now/CVE-2023-36735.md): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (CVSS 9.6, Microsoft Edge)
- [CVE-2023-42442](https://cve.now/CVE-2023-42442.md): JumpServer session replays download without authentication (CVSS 8.2, jumpserver)
- [CVE-2023-42439](https://cve.now/CVE-2023-42439.md): GeoNode SSRF Bypass to return internal host data (CVSS 7.5, geonode)
- [CVE-2022-3261](https://cve.now/CVE-2022-3261.md): Plain-text passwords saved in /var/log/messages (CVSS 4.4, openstack · Red Hat OpenStack Platform)
- [CVE-2023-41900](https://cve.now/CVE-2023-41900.md): Jetty's OpenId Revoked authentication allows one request (CVSS 3.5, eclipse jetty.project · org.eclipse.jetty:jetty-openid)
- [CVE-2023-0813](https://cve.now/CVE-2023-0813.md): Network-observability-console-plugin-container: setting loki authtoken configuration to disable or host mode leads to authentication longer being enforced (CVSS 7.5, github.com/netobserv/network-observability-console-plugin ·…)
- [CVE-2023-0923](https://cve.now/CVE-2023-0923.md): Odh-notebook-controller-container: missing authorization allows for file contents disclosure (CVSS 8.8, Red Hat RHODS-1.22-RHEL-8)
- [CVE-2023-41889](https://cve.now/CVE-2023-41889.md): Late-Unicode normalization vulnerability in SHIRASAGI (CVSS 5.3, shirasagi)
- [CVE-2023-41887](https://cve.now/CVE-2023-41887.md): Remote Code exec in project import with mysql jdbc url attack (CVSS 9.8, OpenRefine · org.openrefine:database)
- [CVE-2023-41886](https://cve.now/CVE-2023-41886.md): OpenRefine vulnerable to arbitrary file read in project import with mysql jdbc url attack (CVSS 7.5, OpenRefine · org.openrefine:database)
- [CVE-2023-41880](https://cve.now/CVE-2023-41880.md): Miscompilation of wasm \`i64x2.shr\_s\` instruction with constant input on x86\_64 (CVSS 2.2, bytecodealliance wasmtime · wasmtime)
- [CVE-2023-41325](https://cve.now/CVE-2023-41325.md): OP-TEE double free in shdr\_verify\_signature (CVSS 7.4, OP-TEE optee\_os)
- [CVE-2023-40167](https://cve.now/CVE-2023-40167.md): Jetty accepts "+" prefixed value in Content-Length (CVSS 5.3, eclipse jetty.project · org.eclipse.jetty:jetty-http)
- [CVE-2023-40019](https://cve.now/CVE-2023-40019.md): FreeSWITCH allows authorized users to cause a denial of service attack by sending re-INVITE with SDP containing duplicate codec names (CVSS 7.5, signalwire freeswitch)
- [CVE-2023-40018](https://cve.now/CVE-2023-40018.md): FreeSWITCH allows remote users to trigger out of bounds write by offering an ICE candidate with unknown component ID (CVSS 7.5, signalwire freeswitch)
- [CVE-2023-41043](https://cve.now/CVE-2023-41043.md): Discourse DoS via SvgSprite cache (CVSS 6.5, discourse)
- [CVE-2023-41042](https://cve.now/CVE-2023-41042.md): Discourse DoS via remote theme assets (CVSS 4.9, discourse)
- [CVE-2023-40588](https://cve.now/CVE-2023-40588.md): Discourse DoS via 2FA and Security Key Names (CVSS 6.5, discourse)
- [CVE-2023-38706](https://cve.now/CVE-2023-38706.md): Discourse vulnerable to DoS via drafts (CVSS 6.5, discourse)
- [CVE-2023-37459](https://cve.now/CVE-2023-37459.md): Out-of-bounds read when processing a received IPv6 packet (CVSS 5.3, contiki-ng)
- [CVE-2023-37281](https://cve.now/CVE-2023-37281.md): Out-of-bounds read during IPHC address decompression (CVSS 5.3, contiki-ng)
- [CVE-2023-38507](https://cve.now/CVE-2023-38507.md): Strapi Improper Rate Limiting vulnerability (CVSS 7.3, strapi · @strapi/admin +1)
- [CVE-2023-37263](https://cve.now/CVE-2023-37263.md): Strapi's field level permissions not being respected in relationship title (CVSS 6.8, strapi · @strapi/plugin-content-manager)
- [CVE-2023-36472](https://cve.now/CVE-2023-36472.md): Strapi may leak sensitive user information, user reset password, tokens via content-manager views (CVSS 5.8, strapi · @strapi/plugin-content-manager +2)
- [CVE-2023-36479](https://cve.now/CVE-2023-36479.md): Jetty vulnerable to errant command quoting in CGI Servlet (CVSS 3.5, eclipse jetty.project · org.eclipse.jetty:jetty-servlets +3)
- [CVE-2023-4991](https://cve.now/CVE-2023-4991.md): NextBX QWAlerter QWAlerter.exe unquoted search path (CVSS 7.8, NextBX QWAlerter)
- [CVE-2023-4988](https://cve.now/CVE-2023-4988.md): Bettershop LaikeTui unrestricted upload (CVSS 6.3, Bettershop LaikeTui)
- [CVE-2023-4987](https://cve.now/CVE-2023-4987.md): infinitietech taskhub GET Parameter get\_tasks\_list sql injection (CVSS 5.5, infinitietech taskhub)
- [CVE-2023-4986](https://cve.now/CVE-2023-4986.md): Supcon InPlant SCADA Project.xml unknown vulnerability (CVSS 2.5, Supcon InPlant SCADA)
- [CVE-2023-4985](https://cve.now/CVE-2023-4985.md): Supcon InPlant SCADA Project.xml improper authentication (CVSS 5.9, Supcon InPlant SCADA)
- [CVE-2023-4984](https://cve.now/CVE-2023-4984.md): didi KnowSearch 1 credentials storage (CVSS 4.3, didi KnowSearch)
- [CVE-2023-4983](https://cve.now/CVE-2023-4983.md): app1pro Shopicial search cross site scripting (CVSS 4.3, app1pro Shopicial)
- [CVE-2022-3466](https://cve.now/CVE-2022-3466.md): Cri-o: security regression of cve-2022-27652 (CVSS 4.8, Red Hat OpenShift Container Platform)
- [CVE-2023-4959](https://cve.now/CVE-2023-4959.md): Quay: cross-site request forgery (csrf) on config-editor page (CVSS 6.5, Red Hat Quay)
- [CVE-2023-4665](https://cve.now/CVE-2023-4665.md): Privilage Escalation in Saphira Connect (CVSS 8.8, Saphira Connect)
- [CVE-2023-4664](https://cve.now/CVE-2023-4664.md): Privilage Escalation in Saphira Connect (CVSS 8.8, Saphira Connect)
- [CVE-2023-4663](https://cve.now/CVE-2023-4663.md): XSS in Saphira Connect (CVSS 6.1, Saphira Connect)
- [CVE-2023-4662](https://cve.now/CVE-2023-4662.md): RCE in Saphira Connect (CVSS 9.8, Saphira Connect)
- [CVE-2023-4661](https://cve.now/CVE-2023-4661.md): SQLi in Saphira Connect (CVSS 9.8, Saphira Connect)
- [CVE-2023-4833](https://cve.now/CVE-2023-4833.md): SQLi in Besttem's Network Marketing Software (CVSS 9.8, Besttem Network Marketing Software)
- [CVE-2023-4835](https://cve.now/CVE-2023-4835.md): SQLi in CF's Oil Management Software (CVSS 9.8, CF Software Oil Management Software)
- [CVE-2023-4231](https://cve.now/CVE-2023-4231.md): SQLi in Cevik Informatics' Online Payment System (CVSS 9.8, Cevik Informatics Online Payment System)
- [CVE-2023-4670](https://cve.now/CVE-2023-4670.md): SQLi in Innosa's Probbys (CVSS 9.8, Innosa Probbys)
- [CVE-2023-4831](https://cve.now/CVE-2023-4831.md): SQLi in nCep (CVSS 9.8, Ncode Ncep)
- [CVE-2023-32461](https://cve.now/CVE-2023-32461.md): Dell PowerEdge BIOS and Dell Precision BIOS contain a buffer overflow vulnerability. (CVSS 5.0, Dell PowerEdge Platform)
- [CVE-2023-4830](https://cve.now/CVE-2023-4830.md): SQLi in Tura's Signalix (CVSS 9.8, Tura Signalix)
- [CVE-2023-4673](https://cve.now/CVE-2023-4673.md): SQLi in Sanalogy's Turasistan (CVSS 9.8, Sanalogy Turasistan)
- [CVE-2023-38039](https://cve.now/CVE-2023-38039.md): When curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed later via the libcurl headers API. (CVSS 7.5, curl)
- [CVE-2023-4963](https://cve.now/CVE-2023-4963.md): WS Facebook Like Box Widget \<= 5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, webshouter WS Facebook Like Box Widget)
- [CVE-2022-20917](https://cve.now/CVE-2022-20917.md): A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) message processing feature of Cisco Jabber could allow an authentic (CVSS 4.3, Cisco Jabber)
- [CVE-2023-3891](https://cve.now/CVE-2023-3891.md): Lapce v0.2.8 - Privilege escalation via Race Condition (CVSS 7.3, Lapce)
- [CVE-2023-4974](https://cve.now/CVE-2023-4974.md): Academy LMS GET Parameter filter sql injection (CVSS 6.3, Academy LMS)
- [CVE-2023-4973](https://cve.now/CVE-2023-4973.md): Academy LMS GET Parameter filter cross site scripting (CVSS 3.5, Academy LMS)
- [CVE-2023-4982](https://cve.now/CVE-2023-4982.md): Cross-site Scripting (XSS) - Stored in librenms/librenms (CVSS 9.8, librenms/librenms)
- [CVE-2023-4981](https://cve.now/CVE-2023-4981.md): Cross-site Scripting (XSS) - DOM in librenms/librenms (CVSS 8.8, librenms/librenms)
- [CVE-2023-4980](https://cve.now/CVE-2023-4980.md): Cross-site Scripting (XSS) - Generic in librenms/librenms (CVSS 8.8, librenms/librenms)
- [CVE-2023-4978](https://cve.now/CVE-2023-4978.md): Cross-site Scripting (XSS) - DOM in librenms/librenms (CVSS 9.0, librenms/librenms)
- [CVE-2023-4979](https://cve.now/CVE-2023-4979.md): Cross-site Scripting (XSS) - Reflected in librenms/librenms (CVSS 8.8, librenms/librenms)
- [CVE-2023-4977](https://cve.now/CVE-2023-4977.md): Code Injection in librenms/librenms (CVSS 7.3, librenms/librenms)
- [CVE-2022-47848](https://cve.now/CVE-2022-47848.md): An issue was discovered in Bezeq Vtech NB403-IL version BZ\_2.02.07.09.13.01 and Vtech IAD604-IL versions BZ\_2.02.07.09.13.01, BZ\_2.02.07.09. (no CVSS)
- [CVE-2023-28614](https://cve.now/CVE-2023-28614.md): Freewill iFIS (aka SMART Trade) 20.01.01.04 allows OS Command Injection via shell metacharacters to a report page. (no CVSS)
- [CVE-2023-36160](https://cve.now/CVE-2023-36160.md): An issue was discovered in Qubo Smart Plug10A version HSP02\_01\_01\_14\_SYSTEM-10 A, allows local attackers to gain sensitive information and o (no CVSS)
- [CVE-2023-36657](https://cve.now/CVE-2023-36657.md): An issue was discovered in OPSWAT MetaDefender KIOSK 4.6.1.9996. (no CVSS)
- [CVE-2023-36658](https://cve.now/CVE-2023-36658.md): An issue was discovered in OPSWAT MetaDefender KIOSK 4.6.1.9996. (no CVSS)
- [CVE-2023-36659](https://cve.now/CVE-2023-36659.md): An issue was discovered in OPSWAT MetaDefender KIOSK 4.6.1.9996. (no CVSS)
- [CVE-2023-39643](https://cve.now/CVE-2023-39643.md): Bl Modules xmlfeeds before v3.9.8 was discovered to contain a SQL injection vulnerability via the component SearchApiXml::Xmlfeeds(). (no CVSS)
- [CVE-2023-40982](https://cve.now/CVE-2023-40982.md): A stored cross-site scripting (XSS) vulnerability in Webmin v2.100 allows attackers to execute arbitrary web scripts or HTML via a crafted p (no CVSS)
- [CVE-2023-40983](https://cve.now/CVE-2023-40983.md): A reflected cross-site scripting (XSS) vulnerability in the File Manager function of Webmin v2.100 allows attackers to execute malicious scr (no CVSS)
- [CVE-2023-40984](https://cve.now/CVE-2023-40984.md): A reflected cross-site scripting (XSS) vulnerability in the File Manager function of Webmin v2.100 allows attackers to execute malicious scr (no CVSS)
- [CVE-2023-40985](https://cve.now/CVE-2023-40985.md): An issue was discovered in Webmin 2.100. (no CVSS)
- [CVE-2023-40986](https://cve.now/CVE-2023-40986.md): A stored cross-site scripting (XSS) vulnerability in the Usermin Configuration function of Webmin v2.100 allows attackers to execute arbitra (no CVSS)
- [CVE-2023-41436](https://cve.now/CVE-2023-41436.md): Cross Site Scripting vulnerability in CSZCMS v.1.3.0 allows a local attacker to execute arbitrary code via a crafted script to the Additiona (no CVSS)
- [CVE-2023-41626](https://cve.now/CVE-2023-41626.md): Gradio v3.27.0 was discovered to contain an arbitrary file upload vulnerability via the /upload interface. (no CVSS, gradio)
- [CVE-2023-42270](https://cve.now/CVE-2023-42270.md): Grocy \<= 4.0.2 is vulnerable to Cross Site Request Forgery (CSRF). (no CVSS)
- [CVE-2023-42398](https://cve.now/CVE-2023-42398.md): An issue in zzCMS v.2023 allows a remote attacker to execute arbitrary code and obtain sensitive information via the ueditor component in co (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-09-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.