Week 25, 2023
19 June to 25 June 2023. The CVEs published in the week, the most severe of them, and what CISA added to its catalog of known exploited vulnerabilities.
- 526CVEs publishedin the whole week
- 70CriticalCVSS 9.0 and above
- 204HighCVSS 7.0 to 8.9
- 11Added to KEVknown exploited, newly listed
Added to KEVAttackers use these now; patch them first
- CVE-2023-27992
The pre-authentication command injection vulnerability in the Zyxel NAS326 firmware versions prior to V5.21(AAZF.14)C0, NAS540 firmware versions prior to…
Zyxel · NAS326 firmware
ExploitedCritical9.8 - CVE-2023-32439
A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5.1 and iPadOS 16.5.1, iOS 15.7.7 and iPadOS 15.7.7, macOS Ventura…
Apple · iOS and iPadOS
ExploitedHigh8.8 - CVE-2023-32435
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Safari 16.4, iOS 16.4 and iPadOS 16.4, iOS…
Apple · macOS
ExploitedHigh8.8 - CVE-2023-32434
An integer overflow was addressed with improved input validation. This issue is fixed in watchOS 9.5.2, macOS Big Sur 11.7.8, iOS 15.7.7 and iPadOS 15.7.7,…
Apple · macOS
ExploitedHigh7.8 - CVE-2023-20867
VMware Tools Authentication Bypass Vulnerability
VMware · VMware Tools
ExploitedLow3.9 - CVE-2023-20887
Aria Operations for Networks contains a command injection vulnerability. A malicious actor with network access to VMware Aria Operations for Networks may be…
Aria Operations for Networks (Formerly vRealize Network Insight)
ExploitedCritical9.8 - CVE-2021-44026
Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to a potential SQL injection via search or search_params.
Product not named
ExploitedCritical9.8 - CVE-2020-12641
rcube_image.php in Roundcube Webmail before 1.4.4 allows attackers to execute arbitrary code via shell metacharacters in a configuration setting for…
Product not named
ExploitedCritical9.8 - CVE-2016-0165
The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows…
Product not named
ExploitedHigh7.8 - CVE-2016-9079
A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox…
Mozilla · Firefox
ExploitedHigh7.5 - CVE-2020-35730
An XSS issue was discovered in Roundcube Webmail before 1.2.13, 1.3.x before 1.3.16, and 1.4.x before 1.4.10. The attacker can send a plain text e-mail…
Product not named
ExploitedMedium6.1
Most severe new CVEsBy CVSS score
- CVE-2023-35166
Privilege escalation (PR) from account through TipsPanel
xwiki · xwiki-platform
Critical10.0 - CVE-2023-35152
XWiki Platform vulnerable to privilege escalation (PR) from account through like LiveTableResults
xwiki · xwiki-platform
Critical10.0 - CVE-2023-34465
XWiki Platform's Mail.MailConfig can be edited by any user with edit rights
xwiki · xwiki-platform
Critical10.0 - CVE-2019-25136
A compromised child process could have injected XBL Bindings into privileged CSS rules, resulting in arbitrary code execution and a sandbox escape. This…
Mozilla · Firefox
Critical10.0 - CVE-2023-35150
XWiki Platform vulnerable to privilege escalation (PR) from view right via Invitation application
xwiki · xwiki-platform
Critical9.9 - CVE-2023-36355
TP-Link TL-WR940N V4 was discovered to contain a buffer overflow via the ipStart parameter at /userRpm/WanDynamicIpV6CfgRpm. This vulnerability allows…
Product not named
Critical9.9 - CVE-2023-27992
The pre-authentication command injection vulnerability in the Zyxel NAS326 firmware versions prior to V5.21(AAZF.14)C0, NAS540 firmware versions prior to…
Zyxel · NAS326 firmware
ExploitedCritical9.8 - CVE-2023-30258
Command Injection vulnerability in MagnusSolution magnusbilling 6.x and 7.x allows remote attackers to run arbitrary commands via unauthenticated HTTP request.
Product not named
Critical9.8 - CVE-2023-35885
CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication.
Product not named
Critical9.8 - CVE-2023-29711
An incorrect access control issue was discovered in Interlink PSG-5124 version 1.0.4, allows attackers to execute arbitrary code via crafted GET request.
Product not named
Critical9.8