# CVEs published 2023-12-08

80 CVEs were published on December 8, 2023: 0 critical, 15 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2023-6560](https://cve.now/CVE-2023-6560.md): Kernel: io\_uring out of boundary memory access in \_\_io\_uaddr\_map() (CVSS 5.5, kernel · Red Hat Enterprise Linux +1)
- [CVE-2023-49799](https://cve.now/CVE-2023-49799.md): Server-Side Request Forgery in nuxt-api-party (CVSS 7.5, johannschopplich nuxt-api-party · nuxt-api-party)
- [CVE-2023-49800](https://cve.now/CVE-2023-49800.md): Denial of service by abusing \`fetchOptions.retry\` in nuxt-api-party (CVSS 7.5, johannschopplich nuxt-api-party · nuxt-api-party)
- [CVE-2023-49798](https://cve.now/CVE-2023-49798.md): Duplicated execution of subcalls in OpenZeppelin Contracts (CVSS 5.9, openzeppelin-contracts · @openzeppelin/contracts +1)
- [CVE-2023-6337](https://cve.now/CVE-2023-6337.md): Vault May be Vulnerable to a Denial of Service Through Memory Exhaustion When Handling Large HTTP Requests (CVSS 7.5, HashiCorp Vault · github.com/hashicorp/vault)
- [CVE-2023-34320](https://cve.now/CVE-2023-34320.md): arm: Guests can trigger a deadlock on Cortex-A77 (no CVSS, Xen)
- [CVE-2023-48311](https://cve.now/CVE-2023-48311.md): Any image allowed by default (CVSS 8.0, jupyterhub dockerspawner · dockerspawner)
- [CVE-2023-49782](https://cve.now/CVE-2023-49782.md): Cross-Site-Scripting vulnerability in error message passing in richdocumentscode (CVSS 7.1, CollaboraOnline online)
- [CVE-2023-49788](https://cve.now/CVE-2023-49788.md): Improper handling of browser-side provided input in richdocuments path handling (CVSS 7.2, CollaboraOnline online)
- [CVE-2023-6507](https://cve.now/CVE-2023-6507.md): Groups not dropped before running subprocess when using empty 'extra\_groups' parameter (CVSS 6.1, Python Software Foundation CPython)
- [CVE-2023-6622](https://cve.now/CVE-2023-6622.md): Kernel: null pointer dereference vulnerability in nft\_dynset\_init() (CVSS 5.5, Red Hat Enterprise Linux)
- [CVE-2023-6619](https://cve.now/CVE-2023-6619.md): SourceCodester Simple Student Attendance System class\_form.php sql injection (CVSS 5.5, SourceCodester Simple Student Attendance System)
- [CVE-2023-6618](https://cve.now/CVE-2023-6618.md): SourceCodester Simple Student Attendance System index.php file inclusion (CVSS 5.5, SourceCodester Simple Student Attendance System)
- [CVE-2023-6617](https://cve.now/CVE-2023-6617.md): SourceCodester Simple Student Attendance System attendance.php sql injection (CVSS 5.5, SourceCodester Simple Student Attendance System)
- [CVE-2023-6610](https://cve.now/CVE-2023-6610.md): Kernel: oob access in smb2\_dump\_detail (CVSS 7.1, Linux kernel · Red Hat Enterprise Linux +2)
- [CVE-2023-6606](https://cve.now/CVE-2023-6606.md): Kernel: out-of-bounds read vulnerability in smbcalcsize (CVSS 7.1, Red Hat Enterprise Linux · Red Hat Virtualization 4 for… +1)
- [CVE-2023-6616](https://cve.now/CVE-2023-6616.md): SourceCodester Simple Student Attendance System index.php cross site scripting (CVSS 3.5, SourceCodester Simple Student Attendance System)
- [CVE-2023-6615](https://cve.now/CVE-2023-6615.md): Typecho manage-users.php information disclosure (CVSS 3.5, Typecho)
- [CVE-2023-32968](https://cve.now/CVE-2023-32968.md): QTS, QuTS hero (CVSS 4.5, QNAP Systems QTS · QNAP Systems QuTS hero)
- [CVE-2023-23372](https://cve.now/CVE-2023-23372.md): QTS, QuTS hero (CVSS 6.5, QNAP Systems QTS · QNAP Systems QuTS hero)
- [CVE-2023-32975](https://cve.now/CVE-2023-32975.md): QTS, QuTS hero (CVSS 4.9, QNAP Systems QTS · QNAP Systems QuTS hero)
- [CVE-2023-47565](https://cve.now/CVE-2023-47565.md): Legacy VioStor NVR (CVSS 8.0, KEV, QNAP Systems VioStor NVR)
- [CVE-2023-6614](https://cve.now/CVE-2023-6614.md): Typecho Page manage-pages.php backdoor (CVSS 2.7, Typecho)
- [CVE-2023-48423](https://cve.now/CVE-2023-48423.md): In dhcp4\_SetPDNAddress of dhcp4\_Main.c, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2023-48422](https://cve.now/CVE-2023-48422.md): In Init of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2023-48421](https://cve.now/CVE-2023-48421.md): In gpu\_pixel\_handle\_buffer\_liveness\_update\_ioctl of private/google-modules/gpu/mali\_kbase/platform/pixel/pixel\_gpu\_slc.c, there is a possibl (CVSS 7.8, Google Android)
- [CVE-2023-48420](https://cve.now/CVE-2023-48420.md): there is a possible use after free due to a race condition. (no CVSS, Google Android)
- [CVE-2023-48416](https://cve.now/CVE-2023-48416.md): In multiple locations, there is a possible null dereference due to a missing null check. (no CVSS, Google Android)
- [CVE-2023-48415](https://cve.now/CVE-2023-48415.md): In Init of protocolembmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2023-48414](https://cve.now/CVE-2023-48414.md): In the Pixel Camera Driver, there is a possible use after free due to a logic error in the code. (no CVSS, Google Android)
- [CVE-2023-48413](https://cve.now/CVE-2023-48413.md): In Init of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2023-48412](https://cve.now/CVE-2023-48412.md): In private\_handle\_t of mali\_gralloc\_buffer.h, there is a possible information leak due to a logic error in the code. (no CVSS, Google Android)
- [CVE-2023-48411](https://cve.now/CVE-2023-48411.md): In SignalStrengthAdapter::FillGsmSignalStrength() of protocolmiscadapter.cpp, there is a possible out of bounds read due to a missing bounds (no CVSS, Google Android)
- [CVE-2023-48410](https://cve.now/CVE-2023-48410.md): In cd\_ParseMsg of cd\_codec.c, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2023-48409](https://cve.now/CVE-2023-48409.md): In gpu\_pixel\_handle\_buffer\_liveness\_update\_ioctl of private/google-modules/gpu/mali\_kbase/mali\_kbase\_core\_linux.c, there is a possible out o (no CVSS, Google Android)
- [CVE-2023-48408](https://cve.now/CVE-2023-48408.md): In ProtocolNetSimFileInfoAdapter() of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2023-48407](https://cve.now/CVE-2023-48407.md): there is a possible DCK won't be deleted after factory reset due to a logic error in the code. (no CVSS, Google Android)
- [CVE-2023-48406](https://cve.now/CVE-2023-48406.md): there is a possible permanent DoS or way for the modem to boot unverified firmware due to a logic error in the code. (no CVSS, Google Android)
- [CVE-2023-48405](https://cve.now/CVE-2023-48405.md): there is a possible way for the secure world to write to NS memory due to a logic error in the code. (no CVSS, Google Android)
- [CVE-2023-48404](https://cve.now/CVE-2023-48404.md): In ProtocolMiscCarrierConfigSimInfoIndAdapter of protocolmiscadapter.cpp, there is a possible out of bounds read due to a missing bounds che (no CVSS, Google Android)
- [CVE-2023-48403](https://cve.now/CVE-2023-48403.md): In sms\_DecodeCodedTpMsg of sms\_PduCodec.c, there is a possible out of bounds read due to a heap buffer overflow. (no CVSS, Google Android)
- [CVE-2023-48402](https://cve.now/CVE-2023-48402.md): In ppcfw\_enable of ppcfw.c, there is a possible EoP due to a missing permission check. (no CVSS, Google Android)
- [CVE-2023-48401](https://cve.now/CVE-2023-48401.md): In GetSizeOfEenlRecords of protocoladapter.cpp, there is a possible out of bounds read due to an incorrect bounds check. (no CVSS, Google Android)
- [CVE-2023-48399](https://cve.now/CVE-2023-48399.md): In ProtocolMiscATCommandAdapter::Init() of protocolmiscadapter.cpp, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2023-48398](https://cve.now/CVE-2023-48398.md): In ProtocolNetAcBarringInfo::ProtocolNetAcBarringInfo() of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing b (CVSS 7.5, Google Android)
- [CVE-2023-48397](https://cve.now/CVE-2023-48397.md): In Init of protocolcalladapter.cpp, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2023-6613](https://cve.now/CVE-2023-6613.md): Typecho Logo options-theme.php cross site scripting (CVSS 2.4, Typecho)
- [CVE-2023-6612](https://cve.now/CVE-2023-6612.md): Totolink X5000R cstecgi.cgi setWizardCfg os command injection (CVSS 5.5, Totolink X5000R)
- [CVE-2023-6611](https://cve.now/CVE-2023-6611.md): Tongda OA 2017 delete.php sql injection (CVSS 5.5, Tongda OA)
- [CVE-2023-6609](https://cve.now/CVE-2023-6609.md): osCommerce all-products cross site scripting (CVSS 3.5, osCommerce)
- [CVE-2023-6608](https://cve.now/CVE-2023-6608.md): Tongda OA 2017 delete.php sql injection (CVSS 5.5, Tongda OA)
- [CVE-2023-6245](https://cve.now/CVE-2023-6245.md): Infinite decoding loop through specially crafted payload (CVSS 7.5, Internet Computer Candid · candid)
- [CVE-2023-6146](https://cve.now/CVE-2023-6146.md): Stored XSS Vulnerability in QualysGuard VM/PC (CVSS 5.7, Qualysguard)
- [CVE-2023-6607](https://cve.now/CVE-2023-6607.md): Tongda OA 2017 delete.php sql injection (CVSS 5.5, Tongda OA)
- [CVE-2023-32460](https://cve.now/CVE-2023-32460.md): Dell PowerEdge BIOS contains an improper privilege management security vulnerability. (CVSS 8.8, Dell PowerEdge Platform)
- [CVE-2023-26158](https://cve.now/CVE-2023-26158.md): All versions of the package mockjs are vulnerable to Prototype Pollution via the Util.extend function due to missing check if the attribute (CVSS 8.2, mockjs)
- [CVE-2023-6599](https://cve.now/CVE-2023-6599.md): Missing Standardized Error Handling Mechanism in microweber/microweber (CVSS 3.1, microweber/microweber)
- [CVE-2023-43305](https://cve.now/CVE-2023-43305.md): An issue in studio kent mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access (no CVSS)
- [CVE-2023-43742](https://cve.now/CVE-2023-43742.md): An authentication bypass in Zultys MX-SE, MX-SE II, MX-E, MX-Virtual, MX250, and MX30 with firmware versions prior to 17.0.10 patch 17161 an (no CVSS)
- [CVE-2023-43743](https://cve.now/CVE-2023-43743.md): A SQL injection vulnerability in Zultys MX-SE, MX-SE II, MX-E, MX-Virtual, MX250, and MX30 with firmware versions prior to 17.0.10 patch 171 (CVSS 8.8)
- [CVE-2023-43744](https://cve.now/CVE-2023-43744.md): An OS command injection vulnerability in Zultys MX-SE, MX-SE II, MX-E, MX-Virtual, MX250, and MX30 with firmware versions prior to 17.0.10 p (no CVSS)
- [CVE-2023-45866](https://cve.now/CVE-2023-45866.md): Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and (no CVSS)
- [CVE-2023-46157](https://cve.now/CVE-2023-46157.md): File-Manager in MGT CloudPanel 2.0.0 through 2.3.2 allows the lowest privilege user to achieve OS command injection by changing file ownersh (no CVSS)
- [CVE-2023-46493](https://cve.now/CVE-2023-46493.md): Directory Traversal vulnerability in EverShop NPM versions before v.1.0.0-rc.8 allows a remote attacker to obtain sensitive information via (no CVSS, @evershop/evershop)
- [CVE-2023-46494](https://cve.now/CVE-2023-46494.md): Cross Site Scripting vulnerability in EverShop NPM versions before v.1.0.0-rc.5 allows a remote attacker to obtain sensitive information via (CVSS 6.1, @evershop/evershop)
- [CVE-2023-46495](https://cve.now/CVE-2023-46495.md): Cross Site Scripting vulnerability in EverShop NPM versions before v.1.0.0-rc.8 allows a remote attacker to obtain sensitive information via (no CVSS, @evershop/evershop)
- [CVE-2023-46496](https://cve.now/CVE-2023-46496.md): Directory Traversal vulnerability in EverShop NPM versions before v.1.0.0-rc.8 allows a remote attacker to obtain sensitive information via (no CVSS, @evershop/evershop)
- [CVE-2023-46497](https://cve.now/CVE-2023-46497.md): Directory Traversal vulnerability in EverShop NPM versions before v.1.0.0-rc.8 allows a remote attacker to obtain sensitive information via (no CVSS, @evershop/evershop)
- [CVE-2023-46498](https://cve.now/CVE-2023-46498.md): An issue in EverShop NPM versions before v.1.0.0-rc.8 allows a remote attacker to obtain sensitive information and execute arbitrary code vi (no CVSS, @evershop/evershop)
- [CVE-2023-46499](https://cve.now/CVE-2023-46499.md): Cross Site Scripting vulnerability in EverShop NPM versions before v.1.0.0-rc.5 allows a remote attacker to obtain sensitive information via (no CVSS, @evershop/evershop)
- [CVE-2023-48122](https://cve.now/CVE-2023-48122.md): An issue in microweber v.2.0.1 and fixed in v.2.0.4 allows a remote attacker to obtain sensitive information via the HTTP GET method. (no CVSS, microweber/microweber)
- [CVE-2023-48928](https://cve.now/CVE-2023-48928.md): Franklin Fueling Systems System Sentinel AnyWare (SSA) version 1.6.24.492 is vulnerable to Open Redirect. (CVSS 6.1)
- [CVE-2023-48929](https://cve.now/CVE-2023-48929.md): Franklin Fueling Systems System Sentinel AnyWare (SSA) version 1.6.24.492 is vulnerable to Session Fixation. (no CVSS)
- [CVE-2023-49007](https://cve.now/CVE-2023-49007.md): In Netgear Orbi RBR750 firmware before V7.2.6.21, there is a stack-based buffer overflow in /usr/sbin/httpd. (no CVSS)
- [CVE-2023-49443](https://cve.now/CVE-2023-49443.md): DoraCMS v2.1.8 was discovered to re-use the same code for verification of valid usernames and passwords. (no CVSS)
- [CVE-2023-49444](https://cve.now/CVE-2023-49444.md): An arbitrary file upload vulnerability in DoraCMS v2.1.8 allow attackers to execute arbitrary code via uploading a crafted HTML or image fil (no CVSS)
- [CVE-2023-49484](https://cve.now/CVE-2023-49484.md): Dreamer CMS v4.1.3 was discovered to contain a cross-site scripting (XSS) vulnerability in the article management department. (no CVSS)
- [CVE-2023-49485](https://cve.now/CVE-2023-49485.md): JFinalCMS v5.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the column management department. (CVSS 5.4, com.jfinal:jfinal)
- [CVE-2023-49486](https://cve.now/CVE-2023-49486.md): JFinalCMS v5.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the model management department. (no CVSS, com.jfinal:jfinal)
- [CVE-2023-49487](https://cve.now/CVE-2023-49487.md): JFinalCMS v5.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the navigation management department. (no CVSS, com.jfinal:jfinal)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-12-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.