# CVEs published 2023-12-02 10 CVEs were published on December 2, 2023: 0 critical, 2 high. Days are UTC. - [CVE-2023-6474](https://cve.now/CVE-2023-6474.md): PHPGurukul Nipah Virus Testing Management System manage-phlebotomist.php cross-site request forgery (CVSS 4.3, PHPGurukul Nipah Virus Testing Management System) - [CVE-2023-6473](https://cve.now/CVE-2023-6473.md): SourceCodester Online Quiz System take-quiz.php cross site scripting (CVSS 3.5, SourceCodester Online Quiz System) - [CVE-2023-6472](https://cve.now/CVE-2023-6472.md): PHPEMS Content Section api.cls.php cross site scripting (CVSS 2.4, PHPEMS) - [CVE-2023-6467](https://cve.now/CVE-2023-6467.md): Thecosy IceCMS Comment Like improper enforcement of a single, unique action (CVSS 3.1, Thecosy IceCMS) - [CVE-2023-6466](https://cve.now/CVE-2023-6466.md): Thecosy IceCMS User Comment planet cross site scripting (CVSS 3.5, Thecosy IceCMS) - [CVE-2023-6465](https://cve.now/CVE-2023-6465.md): PHPGurukul Nipah Virus Testing Management System registered-user-testing.php cross site scripting (CVSS 4.3, PHPGurukul Nipah Virus Testing Management System) - [CVE-2023-6464](https://cve.now/CVE-2023-6464.md): SourceCodester User Registration and Login System add-user.php sql injection (CVSS 6.3, SourceCodester User Registration and Login System) - [CVE-2023-39257](https://cve.now/CVE-2023-39257.md): Dell Rugged Control Center, version prior to 4.7, contains an Improper Access Control vulnerability. (CVSS 7.3, Dell Rugged Control Center) - [CVE-2023-39256](https://cve.now/CVE-2023-39256.md): Dell Rugged Control Center, version prior to 4.7, contains an improper access control vulnerability. (CVSS 7.3, Dell Rugged Control Center) - [CVE-2023-49914](https://cve.now/CVE-2023-49914.md): InteraXon Muse 2 devices allow remote attackers to cause a denial of service (incorrect Muse App report of an outstanding, calm meditation s (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2023-12-02 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.