CVEs published December 10, 2023
24 CVEs were published on December 10, 2023: 0 critical, 5 high.
- Published
- 24
- Critical
- 0
- High
- 5
- Medium
- 10
- Low
- 1
- Unrated
- 8
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- code-projects Matrimonial Site
- 2
- PHPGurukul Teacher Subject Allocation Management System
- 2
- Red Hat Advanced Cluster Security · Red Hat Enterprise L… +4
- 2
- SourceCodester Simple Student Attendance System
- 2
- AMTT HiBOS
- 1
- com.jfinal:jfinal
- 1
- DeepFaceLab
- 1
- github.com/shift72/caddy-geo-ip
- 1
- Hongjing e-HR
- 1
- mediawiki/semantic-media-wiki
- 1
High 5
- CVE-2023-5869Postgresql: buffer overrun from integer overflow in array modificationRed Hat Advanced Cluster Security · Red Hat Enterprise L… +3
- CVE-2023-6655Hongjing e-HR Login Interface loadhistroyorgtree sql injectionHongjing e-HR
- CVE-2023-6652code-projects Matrimonial Site register.php register sql injectioncode-projects Matrimonial Site
- CVE-2023-6651code-projects Matrimonial Site sql injectioncode-projects Matrimonial Site
- CVE-2023-6647AMTT HiBOS sql injectionAMTT HiBOS
Medium, low and unrated 19
- CVE-2023-6658SourceCodester Simple Student Attendance System sql injectionSourceCodester Simple Student Attendance System
- CVE-2023-6657SourceCodester Simple Student Attendance System student_form.php sql injectionSourceCodester Simple Student Attendance System
- CVE-2023-6656DeepFaceLab DFLJPG.py deserializationDeepFaceLab
- CVE-2023-5870Postgresql: role pg_signal_backend can signal certain superuser processes.Red Hat Advanced Cluster Security · Red Hat Enterprise L… +4
- CVE-2023-5868Postgresql: memory disclosure in aggregate function callsRed Hat Advanced Cluster Security · Red Hat Enterprise L… +4
- CVE-2023-6654PHPEMS Session Data session.cls.php deserializationPHPEMS · phpems/phpems
- CVE-2023-6653PHPGurukul Teacher Subject Allocation Management System Create a new Subject subject.php cross-site request forgeryPHPGurukul Teacher Subject Allocation Management System
- CVE-2023-6650SourceCodester Simple Invoice Generator System login.php cross site scriptingSourceCodester Simple Invoice Generator System
- CVE-2023-6649PHPGurukul Teacher Subject Allocation Management System index.php cross site scriptingPHPGurukul Teacher Subject Allocation Management System
- CVE-2023-6648PHPGurukul Nipah Virus Testing Management System password-recovery.php sql injectionPHPGurukul Nipah Virus Testing Management System
- CVE-2022-48614Special:Ask in Semantic MediaWiki before 4.0.2 allows Reflected XSS.mediawiki/semantic-media-wiki
- CVE-2023-50446An issue was discovered in Mullvad VPN Windows app before 2023.6-beta1.
- CVE-2023-50449JFinalCMS 5.0.0 could allow a remote attacker to read files via ../ Directory Traversal in the /common/down/file fileKey parameter.com.jfinal:jfinal
- CVE-2023-50453An issue was discovered in Zammad before 6.2.0.
- CVE-2023-50454An issue was discovered in Zammad before 6.2.0.
- CVE-2023-50455An issue was discovered in Zammad before 6.2.0.
- CVE-2023-50456An issue was discovered in Zammad before 6.2.0.
- CVE-2023-50457An issue was discovered in Zammad before 6.2.0.
- CVE-2023-50463The caddy-geo-ip (aka GeoIP) middleware through 0.6.0 for Caddy 2, when trust_header X-Forwarded-For is used, allows attackers to spoof theigithub.com/shift72/caddy-geo-ip