# CVEs published 2023-09-22

41 CVEs were published on September 22, 2023: 1 critical, 14 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2023-43640](https://cve.now/CVE-2023-43640.md): TaxonWorks SQL injection vulnerability (CVSS 6.5, SpeciesFileGroup taxonworks)
- [CVE-2023-42821](https://cve.now/CVE-2023-42821.md): github.com/gomarkdown/markdown Out-of-bounds Read while parsing citations (CVSS 7.5, gomarkdown markdown · github.com/gomarkdown/markdown)
- [CVE-2023-41031](https://cve.now/CVE-2023-41031.md): Juplink RX4-1500 homemng.htm Command Injection Vulnerability (CVSS 8.0, Juplink RX4-1500)
- [CVE-2023-41029](https://cve.now/CVE-2023-41029.md): Juplink RX4-1500 Command Injection Vulnerability (CVSS 8.0, Juplink RX4-1500)
- [CVE-2023-42812](https://cve.now/CVE-2023-42812.md): Galaxy vulnerable to Server Side Request Forgery during data imports (CVSS 6.3, galaxyproject galaxy)
- [CVE-2023-41027](https://cve.now/CVE-2023-41027.md): Juplink RX4-1500 Credential Disclosure Vulnerability (CVSS 8.0, Juplink RX4-1500)
- [CVE-2023-42811](https://cve.now/CVE-2023-42811.md): AEADs/aes-gcm: Plaintext exposed in decrypt\_in\_place\_detached even on tag verification failure (CVSS 4.7, RustCrypto AEADs · aes-gcm)
- [CVE-2023-42798](https://cve.now/CVE-2023-42798.md): AutomataCI Release Job Can Revert Repo to First Commit (CVSS 8.2, ChewKeanHo AutomataCI)
- [CVE-2023-23766](https://cve.now/CVE-2023-23766.md): Incorrect comparison vulnerability in GitHub Enterprise Server leading to commit smuggling (CVSS 4.5, GitHub Enterprise Server)
- [CVE-2022-4039](https://cve.now/CVE-2022-4039.md): Rhsso-container-image: unsecured management interface exposed to adjecent network (CVSS 8.0, Red Hat RHEL-8 based Middleware Containers · Red Hat Single…)
- [CVE-2022-3874](https://cve.now/CVE-2022-3874.md): Os command injection via ct\_command and fcct\_command (CVSS 8.0, foreman · Red Hat Satellite)
- [CVE-2023-34319](https://cve.now/CVE-2023-34319.md): Linux: buffer overrun in netback due to unusual packet (CVSS 7.8, Linux)
- [CVE-2023-5002](https://cve.now/CVE-2023-5002.md): Pgadmin4: remote code execution by an authenticated user (CVSS 6.0, pgadmin4)
- [CVE-2023-4774](https://cve.now/CVE-2023-4774.md): WP-Matomo Integration (WP-Piwik) \<= 1.0.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, matomoteam Connect Matomo – Analytics Dashboard for WordPre…)
- [CVE-2023-4716](https://cve.now/CVE-2023-4716.md): Media Library Assistant \<= 3.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4, dglingren Media Library Assistant)
- [CVE-2023-43090](https://cve.now/CVE-2023-43090.md): Gnome-shell: screenshot tool allows viewing open windows when session is locked (CVSS 5.5, gnome-shell)
- [CVE-2023-23364](https://cve.now/CVE-2023-23364.md): Multimedia Console (CVSS 8.1, QNAP Systems Multimedia Console)
- [CVE-2023-23363](https://cve.now/CVE-2023-23363.md): QTS (CVSS 8.1, QNAP Systems QTS)
- [CVE-2023-23362](https://cve.now/CVE-2023-23362.md): QTS, QuTS hero, QuTScloud (CVSS 8.8, QNAP Systems QTS · QNAP Systems QuTS hero +1)
- [CVE-2023-38346](https://cve.now/CVE-2023-38346.md): An issue was discovered in Wind River VxWorks 6.9 and 7. (CVSS 8.8)
- [CVE-2023-40989](https://cve.now/CVE-2023-40989.md): SQL injection vulnerbility in jeecgboot jeecg-boot v 3.0, 3.5.3 that allows a remote attacker to execute arbitrary code via a crafted reques (no CVSS, org.jeecgframework.boot:jeecg-boot-common)
- [CVE-2023-43129](https://cve.now/CVE-2023-43129.md): D-LINK DIR-806 1200M11AC wireless router DIR806A1\_FW100CNb11 is vulnerable to command injection due to lax filtering of REMOTE\_PORT paramete (no CVSS)
- [CVE-2023-43130](https://cve.now/CVE-2023-43130.md): D-LINK DIR-806 1200M11AC wireless router DIR806A1\_FW100CNb11 is vulnerable to command injection. (no CVSS)
- [CVE-2023-43144](https://cve.now/CVE-2023-43144.md): Projectworldsl Assets-management-system-in-php 1.0 is vulnerable to SQL Injection via the "id" parameter in delete.php. (no CVSS)
- [CVE-2023-43270](https://cve.now/CVE-2023-43270.md): dst-admin v1.5.0 was discovered to contain a remote command execution (RCE) vulnerability via the userId parameter at /home/playerOperate. (no CVSS)
- [CVE-2023-43338](https://cve.now/CVE-2023-43338.md): Cesanta mjs v2.20.0 was discovered to contain a function pointer hijacking vulnerability via the function mjs\_get\_ptr(). (no CVSS)
- [CVE-2023-43468](https://cve.now/CVE-2023-43468.md): SQL injection vulnerability in janobe Online Job Portal v.2020 allows a remote attacker to execute arbitrary code via the login.php componen (no CVSS)
- [CVE-2023-43469](https://cve.now/CVE-2023-43469.md): SQL injection vulnerability in janobe Online Job Portal v.2020 allows a remote attacker to execute arbitrary code via the ForPass.php compon (no CVSS)
- [CVE-2023-43470](https://cve.now/CVE-2023-43470.md): SQL injection vulnerability in janobe Online Voting System v.1.0 allows a remote attacker to execute arbitrary code via the checklogin.php c (no CVSS)
- [CVE-2023-43760](https://cve.now/CVE-2023-43760.md): Certain WithSecure products allow Denial of Service via a fuzzed PE32 file. (no CVSS)
- [CVE-2023-43761](https://cve.now/CVE-2023-43761.md): Certain WithSecure products allow Denial of Service (infinite loop). (CVSS 7.5)
- [CVE-2023-43762](https://cve.now/CVE-2023-43762.md): Certain WithSecure products allow Unauthenticated Remote Code Execution via the web server (backend). (CVSS 9.8)
- [CVE-2023-43763](https://cve.now/CVE-2023-43763.md): Certain WithSecure products allow XSS via an unvalidated parameter in the endpoint. (no CVSS)
- [CVE-2023-43765](https://cve.now/CVE-2023-43765.md): Certain WithSecure products allow Denial of Service in the aeelf component. (CVSS 7.5)
- [CVE-2023-43766](https://cve.now/CVE-2023-43766.md): Certain WithSecure products allow Local privilege escalation via the lhz archive unpack handler. (no CVSS)
- [CVE-2023-43767](https://cve.now/CVE-2023-43767.md): Certain WithSecure products allow Denial of Service via the aepack archive unpack handler. (no CVSS)
- [CVE-2023-43770](https://cve.now/CVE-2023-43770.md): Roundcube before 1.4.14, 1.5.x before 1.5.4, and 1.6.x before 1.6.3 allows XSS via text/plain e-mail messages with crafted links because of (CVSS 6.1, KEV)
- [CVE-2023-43771](https://cve.now/CVE-2023-43771.md): In nqptp-message-handlers.c in nqptp before 1.2.3, crafted packets received on the control port could crash the program. (CVSS 5.5)
- [CVE-2023-43782](https://cve.now/CVE-2023-43782.md): Cadence through 0.9.2 2023-08-21 uses an Insecure /tmp/.cadence-aloop-daemon.x Temporary File. (no CVSS)
- [CVE-2023-43783](https://cve.now/CVE-2023-43783.md): Cadence through 0.9.2 2023-08-21 uses an Insecure /tmp/cadence-wineasio.reg Temporary File. (no CVSS)
- [CVE-2023-43784](https://cve.now/CVE-2023-43784.md): Plesk Onyx 17.8.11 has accessKeyId and secretAccessKey fields that are related to an Amazon AWS Firehose component. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-09-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.