CVEs published December 3, 2023
9 CVEs were published on December 3, 2023: 0 critical, 1 high.
- Published
- 9
- Critical
- 0
- High
- 1
- Medium
- 2
- Low
- 2
- Unrated
- 4
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- IBM Db2 for Linux, UNIX and Windows
- 2
- librespeed speedtest
- 1
- rl-institut NESP2
- 1
- ระบบบัญชีออนไลน์ Online Accounting System
- 1
High 1
Medium, low and unrated 8
- CVE-2023-40692IBM Db2 denial of serviceIBM Db2 for Linux, UNIX and Windows
- CVE-2022-4957librespeed speedtest stats.php cross site scriptinglibrespeed speedtest
- CVE-2023-45178IBM Db2 denial of serviceIBM Db2 for Linux, UNIX and Windows
- CVE-2018-25094ระบบบัญชีออนไลน์ Online Accounting System image.php path traversalระบบบัญชีออนไลน์ Online Accounting System
- CVE-2023-49926app/Lib/Tools/EventTimelineTool.php in MISP before 2.4.179 allows XSS in the event timeline widget.
- CVE-2023-49946In Forgejo before 1.20.5-1, certain endpoints do not check whether an object belongs to a repository for which permissions are being checked
- CVE-2023-49947Forgejo before 1.20.5-1 allows 2FA bypass when docker login uses Basic Authentication.
- CVE-2023-49948Forgejo before 1.20.5-1 allows remote attackers to test for the existence of private user accounts by appending .rss (or another extension)