# CVEs published 2023-09-25

93 CVEs were published on September 25, 2023: 9 critical, 28 high. Days are UTC.

- [CVE-2023-4259](https://cve.now/CVE-2023-4259.md): Potential buffer overflow vulnerabilities in the Zephyr eS-WiFi driver (CVSS 7.1, zephyrproject-rtos Zephyr)
- [CVE-2023-4258](https://cve.now/CVE-2023-4258.md): bt: mesh: vulnerability in provisioning protocol implementation on provisionee side (CVSS 8.6, zephyrproject-rtos Zephyr)
- [CVE-2023-42753](https://cve.now/CVE-2023-42753.md): Kernel: netfilter: potential slab-out-of-bound access due to integer underflow (CVSS 7.0, Red Hat Enterprise Linux · Red Hat Virtualization 4 for Red…)
- [CVE-2022-4318](https://cve.now/CVE-2022-4318.md): Cri-o: /etc/passwd tampering privesc (CVSS 7.8, Red Hat OpenShift Container Platform · Red Hat Enterpris… +1)
- [CVE-2022-4245](https://cve.now/CVE-2022-4245.md): Codehaus-plexus: xml external entity (xxe) injection (CVSS 4.3, Red Hat RHINT Camel-K-1.10.1 · Red Hat RHPAM 7.13.1 asy… +21)
- [CVE-2022-4244](https://cve.now/CVE-2022-4244.md): Codehaus-plexus: directory traversal (CVSS 7.5, Red Hat RHINT Camel-K-1.10.1 · Red Hat RHPAM 7.13.1 asy… +21)
- [CVE-2022-4137](https://cve.now/CVE-2022-4137.md): Keycloak: reflected xss attack (CVSS 8.1, Red Hat Single Sign-On · org.keycloak:keycloak-parent)
- [CVE-2023-43644](https://cve.now/CVE-2023-43644.md): Improper authentication in the SOCKS5 inbound in sing-box (CVSS 9.1, SagerNet sing-box · github.com/sagernet/sing-box +1)
- [CVE-2023-43642](https://cve.now/CVE-2023-43642.md): Missing upper bound check on chunk length in snappy-java (CVSS 7.5, xerial snappy-java · org.xerial.snappy:snappy-java)
- [CVE-2023-42817](https://cve.now/CVE-2023-42817.md): Cross-site Scripting (XSS) in pimcore admin-ui-classic-bundle translations (CVSS 5.4, pimcore admin-ui-classic-bundle · pimcore/admin-ui-classic-…)
- [CVE-2023-40581](https://cve.now/CVE-2023-40581.md): yt-dlp command injection when using \`%q\` in \`--exec\` on Windows (CVSS 8.4, yt-dlp)
- [CVE-2023-41863](https://cve.now/CVE-2023-41863.md): WordPress PeproDev CF7 Database Plugin \<= 1.7.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Pepro Dev. Group PeproDev CF7 Database)
- [CVE-2023-41867](https://cve.now/CVE-2023-41867.md): WordPress AcyMailing SMTP Newsletter Plugin \<= 8.6.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, AcyMailing Newsletter Team AcyMailing)
- [CVE-2023-41868](https://cve.now/CVE-2023-41868.md): WordPress Stagtools Plugin \<= 2.3.7 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Ram Ratan Maurya, Codestag StagTools)
- [CVE-2023-41871](https://cve.now/CVE-2023-41871.md): WordPress Poll Maker Plugin \<= 4.7.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Poll Maker Team Poll Maker)
- [CVE-2023-4156](https://cve.now/CVE-2023-4156.md): Heap out of bound read in builtin.c (CVSS 4.4, gawk · Red Hat Enterprise Linux +1)
- [CVE-2023-4476](https://cve.now/CVE-2023-4476.md): Locatoraid Store Locator \< 3.9.24 - Reflected XSS (CVSS 6.1, Locatoraid Store Locator)
- [CVE-2023-4549](https://cve.now/CVE-2023-4549.md): DoLogin Security \< 3.7 - Unauthenticated Stored Cross-Site Scripting (no CVSS, DoLogin Security)
- [CVE-2023-3664](https://cve.now/CVE-2023-3664.md): FileOrganizer \<= 1.0.2 - Admin+ Arbitrary File Access (CVSS 7.2, FileOrganizer)
- [CVE-2023-3547](https://cve.now/CVE-2023-3547.md): All in One B2B for WooCommerce \<= 1.0.3 - Multiple CSRF (CVSS 8.8, All in One B2B for WooCommerce)
- [CVE-2023-4502](https://cve.now/CVE-2023-4502.md): Translate WordPress with GTranslate \< 3.0.4 - Admin+ Stored XSS (CVSS 4.8, Translate WordPress with GTranslate)
- [CVE-2023-4148](https://cve.now/CVE-2023-4148.md): Ditty \< 3.1.25 - Reflected XSS (CVSS 6.1, Ditty)
- [CVE-2023-4631](https://cve.now/CVE-2023-4631.md): DoLogin Security \< 3.7 - IP Spoofing (CVSS 5.3, DoLogin Security)
- [CVE-2023-4521](https://cve.now/CVE-2023-4521.md): Import XML and RSS Feeds \< 2.1.5 - Unauthenticated RCE (CVSS 9.8, Import XML and RSS Feeds)
- [CVE-2023-4281](https://cve.now/CVE-2023-4281.md): Activity Log \< 2.8.8 - IP Spoofing (CVSS 5.3, Activity Log)
- [CVE-2023-4238](https://cve.now/CVE-2023-4238.md): Prevent files / folders access \< 2.5.2 - Admin+ Arbitrary File Upload (CVSS 7.2, Prevent files / folders access)
- [CVE-2023-4490](https://cve.now/CVE-2023-4490.md): WP Job Portal \< 2.0.6 - Unauthenticated SQLi (CVSS 9.8, WP Job Portal)
- [CVE-2023-3226](https://cve.now/CVE-2023-3226.md): Popup Builder \< 4.2.0 - Admin+ Stored Cross-Site Scripting (no CVSS, Popup Builder)
- [CVE-2023-4300](https://cve.now/CVE-2023-4300.md): Import XML and RSS Feeds \< 2.1.4 - Admin+ Arbitrary File Upload (CVSS 7.2, Import XML and RSS Feeds)
- [CVE-2023-4892](https://cve.now/CVE-2023-4892.md): Teedy v1.11 - Stored cross-site scripting (XSS) (CVSS 5.7, Teedy)
- [CVE-2023-5158](https://cve.now/CVE-2023-5158.md): Possible dos from guest to host invringh\_kiov\_advance in vhost driver at drivers/vhost/vringh.c (CVSS 6.5, kernel · Red Hat Enterprise Linux +1)
- [CVE-2023-5156](https://cve.now/CVE-2023-5156.md): Glibc: dos due to memory leak in getaddrinfo.c (CVSS 7.5, Red Hat Enterprise Linux)
- [CVE-2023-0633](https://cve.now/CVE-2023-0633.md): In Docker Desktop on Windows before 4.12.0 an argument injection to installer may result in LPE (CVSS 7.2, Docker Desktop)
- [CVE-2023-0627](https://cve.now/CVE-2023-0627.md): Docker Desktop 4.11.x allows --no-windows-containers flag bypass (CVSS 6.7, Docker Desktop)
- [CVE-2023-0626](https://cve.now/CVE-2023-0626.md): Docker Desktop before 4.12.0 is vulnerable to RCE via query parameters in message-box route (CVSS 8.0, Docker Desktop)
- [CVE-2023-0625](https://cve.now/CVE-2023-0625.md): Docker Desktop before 4.12.0 is vulnerable to RCE via a crafted extension description or changelog (CVSS 8.0, Docker Desktop)
- [CVE-2023-5166](https://cve.now/CVE-2023-5166.md): Docker Desktop before 4.23.0 allows Access Token theft via a crafted extension icon URL (CVSS 8.0, Docker Desktop)
- [CVE-2023-5165](https://cve.now/CVE-2023-5165.md): Docker Desktop before 4.23.0 allows Enhanced Container Isolation bypass via debug shell (CVSS 7.1, Docker Desktop)
- [CVE-2023-23567](https://cve.now/CVE-2023-23567.md): A heap-based buffer overflow vulnerability exists in the CreateDIBfromPict functionality of Accusoft ImageGear 20.1. (CVSS 8.1, Accusoft ImageGear)
- [CVE-2023-28393](https://cve.now/CVE-2023-28393.md): A stack-based buffer overflow vulnerability exists in the tif\_processing\_dng\_channel\_count functionality of Accusoft ImageGear 20.1. (CVSS 5.6, Accusoft ImageGear)
- [CVE-2023-32614](https://cve.now/CVE-2023-32614.md): A heap-based buffer overflow vulnerability exists in the create\_png\_object functionality of Accusoft ImageGear 20.1. (CVSS 7.0, Accusoft ImageGear)
- [CVE-2023-32284](https://cve.now/CVE-2023-32284.md): An out-of-bounds write vulnerability exists in the tiff\_planar\_adobe functionality of Accusoft ImageGear 20.1. (CVSS 8.1, Accusoft ImageGear)
- [CVE-2023-35002](https://cve.now/CVE-2023-35002.md): A heap-based buffer overflow vulnerability exists in the pictwread functionality of Accusoft ImageGear 20.1. (CVSS 9.8, Accusoft ImageGear)
- [CVE-2023-32653](https://cve.now/CVE-2023-32653.md): An out-of-bounds write vulnerability exists in the dcm\_pixel\_data\_decode functionality of Accusoft ImageGear 20.1. (CVSS 9.8, Accusoft ImageGear)
- [CVE-2023-39453](https://cve.now/CVE-2023-39453.md): A use-after-free vulnerability exists in the tif\_parse\_sub\_IFD functionality of Accusoft ImageGear 20.1. (CVSS 9.8, Accusoft ImageGear)
- [CVE-2023-40163](https://cve.now/CVE-2023-40163.md): An out-of-bounds write vulnerability exists in the allocate\_buffer\_for\_jpeg\_decoding functionality of Accusoft ImageGear 20.1. (CVSS 9.8, Accusoft ImageGear)
- [CVE-2023-3550](https://cve.now/CVE-2023-3550.md): Stored XSS leads to privilege escalation in MediaWiki v1.40.0 (CVSS 7.3, MediaWiki)
- [CVE-2023-41303](https://cve.now/CVE-2023-41303.md): Command injection vulnerability in the distributed file system module. (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2022-48605](https://cve.now/CVE-2022-48605.md): Input verification vulnerability in the fingerprint module. (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2023-41293](https://cve.now/CVE-2023-41293.md): Data security classification vulnerability in the DDMP module. (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2023-41302](https://cve.now/CVE-2023-41302.md): Redirection permission verification vulnerability in the home screen module. (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2023-41301](https://cve.now/CVE-2023-41301.md): Vulnerability of unauthorized API access in the PMS module. (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2023-41300](https://cve.now/CVE-2023-41300.md): Vulnerability of parameters not being strictly verified in the PMS module. (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2023-41299](https://cve.now/CVE-2023-41299.md): DoS vulnerability in the PMS module. (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2023-41298](https://cve.now/CVE-2023-41298.md): Vulnerability of permission control in the window module. (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2023-41297](https://cve.now/CVE-2023-41297.md): Vulnerability of defects introduced in the design process in the HiviewTunner module. (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2023-41296](https://cve.now/CVE-2023-41296.md): Vulnerability of missing authorization in the kernel module. (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2023-41295](https://cve.now/CVE-2023-41295.md): Vulnerability of improper permission management in the displayengine module. (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2023-41294](https://cve.now/CVE-2023-41294.md): The DP module has a service hijacking vulnerability.Successful exploitation of this vulnerability may affect some Super Device services. (no CVSS, Huawei HarmonyOS)
- [CVE-2023-39409](https://cve.now/CVE-2023-39409.md): DoS vulnerability in the PMS module. (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2023-39408](https://cve.now/CVE-2023-39408.md): DoS vulnerability in the PMS module. (no CVSS, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2023-39407](https://cve.now/CVE-2023-39407.md): The Watchkit has a risk of unauthorized file access.Successful exploitation of this vulnerability may affect confidentiality and integrity. (no CVSS, Huawei HarmonyOS)
- [CVE-2023-5154](https://cve.now/CVE-2023-5154.md): D-Link DAR-8000 changelogo.php unrestricted upload (CVSS 6.3, D-Link DAR-8000)
- [CVE-2023-5153](https://cve.now/CVE-2023-5153.md): D-Link DAR-8000 querysql.php sql injection (CVSS 6.3, D-Link DAR-8000)
- [CVE-2023-5152](https://cve.now/CVE-2023-5152.md): D-Link DAR-7000/DAR-8000 importexport.php sql injection (CVSS 6.3, D-Link DAR-7000 · D-Link DAR-8000)
- [CVE-2023-5151](https://cve.now/CVE-2023-5151.md): D-Link DAR-8000 autheditpwd.php sql injection (CVSS 6.3, D-Link DAR-8000)
- [CVE-2023-5150](https://cve.now/CVE-2023-5150.md): D-Link DAR-7000/DAR-8000 web.php unrestricted upload (CVSS 6.3, D-Link DAR-7000 · D-Link DAR-8000)
- [CVE-2023-41872](https://cve.now/CVE-2023-41872.md): WordPress WoodMart Theme \<= 7.2.4 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Xtemos WoodMart)
- [CVE-2023-5149](https://cve.now/CVE-2023-5149.md): D-Link DAR-7000 userattestation.php unrestricted upload (CVSS 6.3, D-Link DAR-7000)
- [CVE-2023-5148](https://cve.now/CVE-2023-5148.md): D-Link DAR-7000/DAR-8000 uploadfile.php unrestricted upload (CVSS 6.3, D-Link DAR-7000 · D-Link DAR-8000)
- [CVE-2023-41874](https://cve.now/CVE-2023-41874.md): WordPress Order Delivery Date for WooCommerce Plugin \<= 3.20.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Tyche Softwares Order Delivery Date for WooCommerce)
- [CVE-2023-41948](https://cve.now/CVE-2023-41948.md): WordPress Cookie Notice & Consent Plugin \<= 1.6.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Christoph Rado Cookie Notice & Consent)
- [CVE-2023-41949](https://cve.now/CVE-2023-41949.md): WordPress iFolders Plugin \<= 1.5.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Avirtum iFolders)
- [CVE-2023-5147](https://cve.now/CVE-2023-5147.md): D-Link DAR-7000 updateos.php unrestricted upload (CVSS 6.3, D-Link DAR-7000)
- [CVE-2023-5146](https://cve.now/CVE-2023-5146.md): D-Link DAR-7000/DAR-8000 updatelib.php unrestricted upload (CVSS 6.3, D-Link DAR-7000 · D-Link DAR-8000)
- [CVE-2015-6964](https://cve.now/CVE-2015-6964.md): MultiBit HD before 0.1.2 allows attackers to conduct bit-flipping attacks that insert unspendable Bitcoin addresses into the list that Multi (CVSS 5.3)
- [CVE-2023-38907](https://cve.now/CVE-2023-38907.md): An issue in TPLink Smart Bulb Tapo series L530 before 1.2.4, L510E before 1.1.0, L630 before 1.0.4, P100 before 1.5.0, and Tapo Application (no CVSS)
- [CVE-2023-39640](https://cve.now/CVE-2023-39640.md): UpLight cookiebanner before 1.5.1 was discovered to contain a SQL injection vulnerability via the component Hook::getHookModuleExecList(). (CVSS 9.8)
- [CVE-2023-41419](https://cve.now/CVE-2023-41419.md): An issue in Gevent before version 23.9.0 allows a remote attacker to escalate privileges via a crafted script to the WSGIServer component. (no CVSS, gevent)
- [CVE-2023-42426](https://cve.now/CVE-2023-42426.md): Cross-site scripting (XSS) vulnerability in Froala Froala Editor v.4.1.1 allows remote attackers to execute arbitrary code via the 'Insert l (CVSS 6.1)
- [CVE-2023-43131](https://cve.now/CVE-2023-43131.md): General Device Manager 2.5.2.2 is vulnerable to Buffer Overflow. (CVSS 9.8)
- [CVE-2023-43132](https://cve.now/CVE-2023-43132.md): szvone vmqphp \<=1.13 is vulnerable to SQL Injection. (no CVSS)
- [CVE-2023-43141](https://cve.now/CVE-2023-43141.md): TOTOLINK A3700R V9.1.2u.6134\_B20201202 and N600R V5.3c.5137 are vulnerable to Incorrect Access Control. (no CVSS)
- [CVE-2023-43256](https://cve.now/CVE-2023-43256.md): A path traversal in Gladys Assistant v4.26.1 and below allows authenticated attackers to extract sensitive files in the host machine by expl (no CVSS)
- [CVE-2023-43278](https://cve.now/CVE-2023-43278.md): A Cross-Site Request Forgery (CSRF) in admin\_manager.php of Seacms up to v12.8 allows attackers to arbitrarily add an admin account. (no CVSS)
- [CVE-2023-43319](https://cve.now/CVE-2023-43319.md): Cross Site Scripting (XSS) vulnerability in the Sign-In page of IceWarp WebClient 10.3.5 allows attackers to execute arbitrary web scripts o (no CVSS)
- [CVE-2023-43325](https://cve.now/CVE-2023-43325.md): A reflected cross-site scripting (XSS) vulnerability in the data\[redirect\_url\] parameter of mooSocial v3.1.8 allows attackers to steal user' (no CVSS)
- [CVE-2023-43326](https://cve.now/CVE-2023-43326.md): A reflected cross-site scripting (XSS) vulnerability exisits in multiple url of mooSocial v3.1.8 allows attackers to steal user's session co (no CVSS)
- [CVE-2023-43339](https://cve.now/CVE-2023-43339.md): Cross-Site Scripting (XSS) vulnerability in cmsmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted payload i (no CVSS)
- [CVE-2023-43382](https://cve.now/CVE-2023-43382.md): Directory Traversal vulnerability in itechyou dreamer CMS v.4.1.3 allows a remote attacker to execute arbitrary code via the themePath in th (no CVSS)
- [CVE-2023-43456](https://cve.now/CVE-2023-43456.md): Cross Site Scripting vulnerability in Service Provider Management System v.1.0 allows a remote attacker to execute arbitrary code and obtain (no CVSS)
- [CVE-2023-43457](https://cve.now/CVE-2023-43457.md): An issue in Service Provider Management System v.1.0 allows a remote attacker to gain privileges via the ID parameter in the /php-spms/admin (no CVSS)
- [CVE-2023-43458](https://cve.now/CVE-2023-43458.md): Cross Site Scripting (XSS) vulnerability in Resort Reservation System v.1.0 allows a remote attacker to execute arbitrary code and obtain se (CVSS 5.4)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-09-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.