CVEs published December 7, 2023
140 CVEs were published on December 7, 2023: 13 critical, 19 high.
- Published
- 140
- Critical
- 13
- High
- 19
- Medium
- 28
- Low
- 0
- Unrated
- 80
- Now in CISA KEV
- 0
- Fix available
- 7
Most affected products
- qriouslad System Dashboard
- 5
- SENEC Storage Box
- 4
- Microsoft Edge
- 3
- Byzoro S210
- 2
- Kashipara Group Student Information System
- 2
- Apache Software Foundation Apache Struts · org.apache.strut…
- 1
- Be Devious Web Development Password Reset with Code for Wor…
- 1
- Brainstorm Force Starter Templates — Elementor, WordPress &…
- 1
- Byzoro PatrolFlow 2530Pro
- 1
- Byzoro Smart S20
- 1
Critical 13
- CVE-2023-5008Student Information System v1.0 - Unauthenticated SQL InjectionKashipara Group Student Information System
- CVE-2023-4122Student Information System v1.0 - Insecure File UploadKashipara Group Student Information System
- CVE-2023-35618Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityMicrosoft Edge
- CVE-2023-39169SENEC: Storage Box V1,V2 and V3 using default credentialsSENEC Storage Box
- CVE-2023-39172SENEC: Storage Box V1,V2 and V3 transmitting sensitive data unencryptedSENEC Storage Box
- CVE-2023-35039WordPress Password Reset with Code for WordPress REST API Plugin <= 0.0.15 is vulnerable to Broken AuthenticationBe Devious Web Development Password Reset with Code for Wor…
- CVE-2023-50164Apache Struts: File upload component had a directory traversal vulnerabilityApache Software Foundation Apache Struts · org.apache.strut…
- CVE-2023-5761The Burst Statistics – Privacy-Friendly Analytics for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'url' parameter rogierlankhorst Burst Statistics – Privacy-Friendly Analyti…
- CVE-2023-40300NETSCOUT nGeniusPULSE 3.8 has a Hardcoded Cryptographic Key.
- CVE-2023-40301NETSCOUT nGeniusPULSE 3.8 has a Command Injection Vulnerability.
- CVE-2023-41913strongSwan before 5.9.12 has a buffer overflow and possible unauthenticated remote code execution via a DH public value that exceeds the int
- CVE-2023-49404Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function formAdvancedSetListSet.
- CVE-2023-49437Tenda AX12 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'list' parameter at /goform/SetNetControlLis
High 19
- CVE-2023-6580D-Link DIR-846 QoS POST deserializationD-Link DIR-846
- CVE-2023-6579osCommerce POST Parameter shopping-cart sql injectionosCommerce
- CVE-2023-6578Software AG WebMethods access controlSoftware AG WebMethods
- CVE-2023-4486Uncontrolled Resource Consumption in Metasys and Facility ExplorerJohnson Controls Metasys NAE55/SNE/SNC · Johnson Controls F…
- CVE-2023-6333Cross-site Scripting in ControlByWeb RelaysControlByWeb X-332-24I · ControlByWeb X-301-I +1
- CVE-2023-39171SENEC Storage Box V1,V2 and V3 accidentially expose a management interfaceSENEC Storage Box
- CVE-2023-39167SENEC: Storage Box V1,V2 and V3 affected by improper access control vulnerabilitySENEC Storage Box
- CVE-2022-45362WordPress Paytm Payment Gateway Plugin <= 2.7.0 is vulnerable to Server Side Request Forgery (SSRF)Paytm Payment Gateway
- CVE-2023-41804WordPress Starter Templates Plugin <= 3.2.4 is vulnerable to Server Side Request Forgery (SSRF)Brainstorm Force Starter Templates — Elementor, WordPress &…
- CVE-2023-43304An issue in PARK DANDAN mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access
- CVE-2023-46307An issue was discovered in server.js in etcd-browser 87ae63d75260.
- CVE-2023-48831A lack of rate limiting in pjActionAJaxSend in Availability Booking Calendar 5.0 allows attackers to cause resource exhaustion.
- CVE-2023-48834A lack of rate limiting in pjActionAjaxSend in Car Rental v3.0 allows attackers to cause resource exhaustion.
- CVE-2023-48841Appointment Scheduler 3.0 is vulnerable to CSV Injection via a Language > Labels > Export action.
- CVE-2023-49424Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the list parameter at /goform/SetVirtualServerCfg.
- CVE-2023-49428Tenda AX12 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'mac' parameter at /goform/SetOnlineDevName.
- CVE-2023-49460libheif v1.17.5 was discovered to contain a segmentation violation via the function UncompressedImageCodec::decode_uncompressed_image.
- CVE-2023-49468Libde265 v1.0.14 was discovered to contain a global buffer overflow vulnerability in the read_coding_unit function at slice.cc.
- CVE-2023-49958An issue was discovered in Dalmann OCPP.Core through 1.2.0 for OCPP (Open Charge Point Protocol) for electric vehicles.
Medium, low and unrated 108
- CVE-2023-5058Improper Input Validation in the processing of user-supplied splash screen during system boot in Phoenix SecureCore™ Technology™ 4 potentialPhoenix SecureCore™ Technology™
- CVE-2023-6581D-Link DAR-7000 workidajax.php sql injectionD-Link DAR-7000
- CVE-2023-36880Microsoft Edge (Chromium-based) Information Disclosure VulnerabilityMicrosoft Edge
- CVE-2023-38174Microsoft Edge (Chromium-based) Information Disclosure VulnerabilityMicrosoft Edge
- CVE-2023-6577Byzoro PatrolFlow 2530Pro mailsendview.php path traversalByzoro PatrolFlow 2530Pro
- CVE-2023-6576Byzoro S210 HTTP POST Request uploadfile.php unrestricted uploadByzoro S210
- CVE-2023-6575Byzoro S210 HTTP POST Request repair.php sql injectionByzoro S210
- CVE-2023-6574Byzoro Smart S20 HTTP POST Request updateos.php unrestricted uploadByzoro Smart S20
- CVE-2023-6588 Offline mode is always enabled, even if permission disallows it, in Devolutions Server data source in Devolutions Workspace 2023.3.2.0 aDevolutions Workspace
- CVE-2023-45762WordPress Responsive Column Widgets Plugin <= 1.2.7 is vulnerable to Open RedirectionMichael Uno (miunosoft) Responsive Column Widgets
- CVE-2023-47548WordPress Integrate Google Drive Plugin <= 1.3.2 is vulnerable to Open RedirectionSoftLab Integrate Google Drive – Browse, Upload, Download,…
- CVE-2023-47779WordPress Integration for Contact Form 7 and Constant Contact Plugin <= 1.1.4 is vulnerable to Open RedirectionCRM Perks Integration for Constant Contact and Contact Form…
- CVE-2023-48325WordPress Landing Page Builder Plugin <= 1.5.1.5 is vulnerable to Open RedirectionPluginOps Landing Page Builder – Lead Page – Optin Page – S…
- CVE-2023-35909WordPress Ninja Forms Plugin <= 3.6.25 is vulnerable to Denial of Service AttackSaturday Drive Ninja Forms Contact Form – The Drag and Drop…
- CVE-2023-46641WordPress 12 Step Meeting List Plugin <= 3.14.24 is vulnerable to Server Side Request Forgery (SSRF)Code for Recovery 12 Step Meeting List
- CVE-2023-49746WordPress SpeedyCache Plugin <= 1.1.2 is vulnerable to Server Side Request Forgery (SSRF)Softaculous Team SpeedyCache – Cache, Optimization, Perform…
- CVE-2023-49225A cross-site-scripting vulnerability exists in Ruckus Access Point products (ZoneDirector, SmartZone, and AP Solo).CommScope ZoneDirector · CommScope SmartZone +35
- CVE-2023-6568Reflected XSS via Content-Type Header in mlflow/mlflowmlflow/mlflow · mlflow
- CVE-2023-28017HCL Connections is vulnerable to cross-site scriptingHCL Software HCL Connections
- CVE-2023-5710System Dashboard <= 2.8.7 - Missing Authorization to Information Disclosure (sd_constants)qriouslad System Dashboard
- CVE-2023-5713System Dashboard <= 2.8.7 - Missing Authorization to Information Disclosure (sd_option_value)qriouslad System Dashboard
- CVE-2023-5712System Dashboard <= 2.8.7 - Missing Authorization to Information Disclosure (sd_global_value)qriouslad System Dashboard
- CVE-2023-5714System Dashboard <= 2.8.7 - Missing Authorization to Information Disclosure (sd_db_specs)qriouslad System Dashboard
- CVE-2023-5711System Dashboard <= 2.8.8 - Missing Authorization to Information Disclosure (sd_php_info)qriouslad System Dashboard
- CVE-2023-46218This flaw allows a malicious HTTP server to set "super cookies" in curl that are then passed back to more origins than what is otherwise allcurl
- CVE-2023-6566Business Logic Errors in microweber/microwebermicroweber/microweber
- CVE-2023-33411A web server in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro X11
- CVE-2023-33412The web interface in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation on Supermicro
- CVE-2023-33413The configuration functionality in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementation
- CVE-2023-39909Ericsson Network Manager before 23.2 mishandles Access Control and thus unauthenticated low-privilege users can access the NCM application.
- CVE-2023-40238A LogoFAIL issue was discovered in BmpDecoderDxe in Insyde InsydeH2O with kernel 5.2 before 05.28.47, 5.3 before 05.37.47, 5.4 before 05.45.
- CVE-2023-40302NETSCOUT nGeniusPULSE 3.8 has Weak File Permissions Vulnerability
- CVE-2023-41106An issue was discovered in Zimbra Collaboration (ZCS) before 10.0.3.
- CVE-2023-41168NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability (issue 1 of 4).
- CVE-2023-41169NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability (issue 2 of 4).
- CVE-2023-41170NetScout nGeniusONE 6.3.4 build 2298 allows a Reflected Cross-Site scripting vulnerability.
- CVE-2023-41171NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability (issue 3 of 4).
- CVE-2023-41172NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability (issue 4 of 4).
- CVE-2023-41905NETSCOUT nGeniusONE 6.3.4 build 2298 allows a Reflected Cross-Site scripting (XSS) vulnerability by an authenticated user.
- CVE-2023-43102An issue was discovered in Zimbra Collaboration (ZCS) before 10.0.4.
- CVE-2023-43103An XSS issue was discovered in a web endpoint in Zimbra Collaboration (ZCS) before 10.0.4 via an unsanitized parameter.
- CVE-2023-43298An issue in SCOL Members Card mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel a
- CVE-2023-43299An issue in DA BUTCHERS mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access
- CVE-2023-43300An issue in urban_project mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel acces
- CVE-2023-43301An issue in DARTS SHOP MAXIM mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel ac
- CVE-2023-43302An issue in sanTas mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token
- CVE-2023-43303An issue in craftbeer bar canvas mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channe
- CVE-2023-46693Cross Site Scripting (XSS) vulnerability in FormaLMS before 4.0.5 allows attackers to run arbitrary code via title parameters.
- CVE-2023-46857Squidex before 7.9.0 allows XSS via an SVG document to the Upload Assets feature.
- CVE-2023-46871GPAC version 2.3-DEV-rev602-ged8424300-master in MP4Box contains a memory leak in NewSFDouble scenegraph/vrml_tools.c:300.
- CVE-2023-46916Maxima Max Pro Power 1.0 486A devices allow BLE traffic replay.
- CVE-2023-46974Cross Site Scripting vulnerability in Best Courier Management System v.1.000 allows a remote attacker to execute arbitrary code via a crafte
- CVE-2023-47440Gladys Assistant v4.27.0 and prior is vulnerable to Directory Traversal.gladys
- CVE-2023-48172A Cross Site Scripting (XSS) vulnerability in Shuttle Booking Software 2.0 allows a remote attacker to inject JavaScript via the name, descr
- CVE-2023-48205Jorani Leave Management System 1.0.2 allows a remote attacker to spoof a Host header associated with password reset emails.
- CVE-2023-48206A Cross Site Scripting (XSS) vulnerability in GaatiTrack Courier Management System 1.0 allows a remote attacker to inject JavaScript via the
- CVE-2023-48207Availability Booking Calendar 5.0 allows CSV injection via the unique ID field in the Reservations list component.
- CVE-2023-48208A Cross Site Scripting vulnerability in Availability Booking Calendar 5.0 allows an attacker to inject JavaScript via the name, plugin_sms_a
- CVE-2023-48823A Blind SQL injection issue in ajax.php in GaatiTrack Courier Management System 1.0 allows an unauthenticated attacker to inject a payload v
- CVE-2023-48824BoidCMS 2.0.1 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) issues via the title, subtitle, footer, or keywords parameter in a
- CVE-2023-48825Availability Booking Calendar 5.0 is vulnerable to Multiple HTML Injection issues via SMS API Key or Default Country Code.
- CVE-2023-48826Time Slots Booking Calendar 4.0 is vulnerable to CSV Injection via the unique ID field of the Reservations List.
- CVE-2023-48827Time Slots Booking Calendar 4.0 is vulnerable to Multiple HTML Injection issues via the name, plugin_sms_api_key, plugin_sms_country_code, c
- CVE-2023-48828Time Slots Booking Calendar 4.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) issues via the name, plugin_sms_api_key, plugin_
- CVE-2023-48830Shuttle Booking Software 2.0 is vulnerable to CSV Injection in the Languages section via an export.
- CVE-2023-48833A lack of rate limiting in pjActionAJaxSend in Time Slots Booking Calendar 4.0 allows attackers to cause resource exhaustion.
- CVE-2023-48835Car Rental Script v3.0 is vulnerable to CSV Injection via a Language > Labels > Export action.
- CVE-2023-48836Car Rental Script 3.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) issues via the name, plugin_sms_api_key, plugin_sms_countr
- CVE-2023-48837Car Rental Script 3.0 is vulnerable to Multiple HTML Injection issues via SMS API Key or Default Country Code.
- CVE-2023-48838Appointment Scheduler 3.0 is vulnerable to Multiple HTML Injection issues via the SMS API Key or Default Country Code.
- CVE-2023-48839Appointment Scheduler 3.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) issues via the name, plugin_sms_api_key, plugin_sms_co
- CVE-2023-48840A lack of rate limiting in pjActionAjaxSend in Appointment Scheduler 3.0 allows attackers to cause resource exhaustion.
- CVE-2023-48860TOTOLINK N300RT version 3.2.4-B20180730.0906 has a post-authentication RCE due to incorrect access control, allows attackers can bypass fron
- CVE-2023-48861DLL hijacking vulnerability in TTplayer version 7.0.2, allows local attackers to escalate privileges and execute arbitrary code via urlmon.d
- CVE-2023-48958gpac 2.3-DEV-rev617-g671976fcc-master contains memory leaks in gf_mpd_resolve_url media_tools/mpd.c:4589.
- CVE-2023-49402Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function localMsg.
- CVE-2023-49403Tenda W30E V16.01.0.12(4843) was discovered to contain a command injection vulnerability via the function setFixTools.
- CVE-2023-49405Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function UploadCfg.
- CVE-2023-49406Tenda W30E V16.01.0.12(4843) was discovered to contain a Command Execution vulnerability via the function /goform/telnet.
- CVE-2023-49408Tenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the function set_device_name.
- CVE-2023-49409Tenda AX3 V16.03.12.11 was discovered to contain a Command Execution vulnerability via the function /goform/telnet.
- CVE-2023-49410Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function via the function set_wan_status.
- CVE-2023-49411Tenda W30E V16.01.0.12(4843) contains a stack overflow vulnerability via the function formDeleteMeshNode.
- CVE-2023-49425Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the deviceList parameter at /goform/setMacFilterCfg .
- CVE-2023-49426Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the list parameter at /goform/SetStaticRouteCfg.
- CVE-2023-49429Tenda AX9 V22.03.01.46 was discovered to contain a SQL command injection vulnerability in the 'setDeviceInfo' feature through the 'mac' para
- CVE-2023-49430Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetStaticRouteCfg.
- CVE-2023-49431Tenda AX9 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'mac' parameter at /goform/SetOnlineDevName.
- CVE-2023-49432Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'deviceList' parameter at /goform/setMacFilterCfg.
- CVE-2023-49433Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetVirtualServerCfg.
- CVE-2023-49434Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetNetControlList.
- CVE-2023-49435Tenda AX9 V22.03.01.46 is vulnerable to command injection.
- CVE-2023-49436Tenda AX9 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'list' parameter at /goform/SetNetControlList
- CVE-2023-49462libheif v1.17.5 was discovered to contain a segmentation violation via the component /libheif/exif.cc.
- CVE-2023-49463libheif v1.17.5 was discovered to contain a segmentation violation via the function find_exif_tag at /libheif/exif.cc.
- CVE-2023-49464libheif v1.17.5 was discovered to contain a segmentation violation via the function UncompressedImageCodec::get_luma_bits_per_pixel_from_con
- CVE-2023-49465Libde265 v1.0.14 was discovered to contain a heap-buffer-overflow vulnerability in the derive_spatial_luma_vector_prediction function at mot
- CVE-2023-49467Libde265 v1.0.14 was discovered to contain a heap-buffer-overflow vulnerability in the derive_combined_bipredictive_merging_candidates funct
- CVE-2023-49492DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the imgstick parameter at selectimages.
- CVE-2023-49493DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the v parameter at selectimages.php.
- CVE-2023-49955An issue was discovered in Dalmann OCPP.Core before 1.2.0 for OCPP (Open Charge Point Protocol) for electric vehicles.
- CVE-2023-49956An issue was discovered in Dalmann OCPP.Core before 1.3.0 for OCPP (Open Charge Point Protocol) for electric vehicles.
- CVE-2023-49957An issue was discovered in Dalmann OCPP.Core before 1.3.0 for OCPP (Open Charge Point Protocol) for electric vehicles.
- CVE-2023-49967Typecho v1.2.1 was discovered to be vulnerable to an XML Quadratic Blowup attack via the component /index.php/action/xmlrpc.
- CVE-2023-49999Tenda W30E V16.01.0.12(4843) was discovered to contain a command injection vulnerability via the function setUmountUSBPartition.
- CVE-2023-50000Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function formResetMeshNode.
- CVE-2023-50001Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function formUpgradeMeshOnline.
- CVE-2023-50002Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function formRebootMeshNode.