# CVEs published 2023-12-10

24 CVEs were published on December 10, 2023: 0 critical, 5 high. Days are UTC.

- [CVE-2023-6658](https://cve.now/CVE-2023-6658.md): SourceCodester Simple Student Attendance System sql injection (CVSS 5.5, SourceCodester Simple Student Attendance System)
- [CVE-2023-6657](https://cve.now/CVE-2023-6657.md): SourceCodester Simple Student Attendance System student\_form.php sql injection (CVSS 5.5, SourceCodester Simple Student Attendance System)
- [CVE-2023-6656](https://cve.now/CVE-2023-6656.md): DeepFaceLab DFLJPG.py deserialization (CVSS 5.0, DeepFaceLab)
- [CVE-2023-5870](https://cve.now/CVE-2023-5870.md): Postgresql: role pg\_signal\_backend can signal certain superuser processes. (CVSS 2.2, Red Hat Advanced Cluster Security · Red Hat Enterprise L… +4)
- [CVE-2023-5868](https://cve.now/CVE-2023-5868.md): Postgresql: memory disclosure in aggregate function calls (CVSS 4.3, Red Hat Advanced Cluster Security · Red Hat Enterprise L… +4)
- [CVE-2023-5869](https://cve.now/CVE-2023-5869.md): Postgresql: buffer overrun from integer overflow in array modification (CVSS 8.8, Red Hat Advanced Cluster Security · Red Hat Enterprise L… +3)
- [CVE-2023-6655](https://cve.now/CVE-2023-6655.md): Hongjing e-HR Login Interface loadhistroyorgtree sql injection (CVSS 7.3, Hongjing e-HR)
- [CVE-2023-6654](https://cve.now/CVE-2023-6654.md): PHPEMS Session Data session.cls.php deserialization (CVSS 6.3, PHPEMS · phpems/phpems)
- [CVE-2023-6653](https://cve.now/CVE-2023-6653.md): PHPGurukul Teacher Subject Allocation Management System Create a new Subject subject.php cross-site request forgery (CVSS 4.3, PHPGurukul Teacher Subject Allocation Management System)
- [CVE-2023-6652](https://cve.now/CVE-2023-6652.md): code-projects Matrimonial Site register.php register sql injection (CVSS 7.3, code-projects Matrimonial Site)
- [CVE-2023-6651](https://cve.now/CVE-2023-6651.md): code-projects Matrimonial Site sql injection (CVSS 7.3, code-projects Matrimonial Site)
- [CVE-2023-6650](https://cve.now/CVE-2023-6650.md): SourceCodester Simple Invoice Generator System login.php cross site scripting (CVSS 4.3, SourceCodester Simple Invoice Generator System)
- [CVE-2023-6649](https://cve.now/CVE-2023-6649.md): PHPGurukul Teacher Subject Allocation Management System index.php cross site scripting (CVSS 4.3, PHPGurukul Teacher Subject Allocation Management System)
- [CVE-2023-6648](https://cve.now/CVE-2023-6648.md): PHPGurukul Nipah Virus Testing Management System password-recovery.php sql injection (CVSS 6.9, PHPGurukul Nipah Virus Testing Management System)
- [CVE-2023-6647](https://cve.now/CVE-2023-6647.md): AMTT HiBOS sql injection (CVSS 7.3, AMTT HiBOS)
- [CVE-2022-48614](https://cve.now/CVE-2022-48614.md): Special:Ask in Semantic MediaWiki before 4.0.2 allows Reflected XSS. (no CVSS, mediawiki/semantic-media-wiki)
- [CVE-2023-50446](https://cve.now/CVE-2023-50446.md): An issue was discovered in Mullvad VPN Windows app before 2023.6-beta1. (no CVSS)
- [CVE-2023-50449](https://cve.now/CVE-2023-50449.md): JFinalCMS 5.0.0 could allow a remote attacker to read files via ../ Directory Traversal in the /common/down/file fileKey parameter. (no CVSS, com.jfinal:jfinal)
- [CVE-2023-50453](https://cve.now/CVE-2023-50453.md): An issue was discovered in Zammad before 6.2.0. (no CVSS)
- [CVE-2023-50454](https://cve.now/CVE-2023-50454.md): An issue was discovered in Zammad before 6.2.0. (no CVSS)
- [CVE-2023-50455](https://cve.now/CVE-2023-50455.md): An issue was discovered in Zammad before 6.2.0. (no CVSS)
- [CVE-2023-50456](https://cve.now/CVE-2023-50456.md): An issue was discovered in Zammad before 6.2.0. (CVSS 5.3)
- [CVE-2023-50457](https://cve.now/CVE-2023-50457.md): An issue was discovered in Zammad before 6.2.0. (no CVSS)
- [CVE-2023-50463](https://cve.now/CVE-2023-50463.md): The caddy-geo-ip (aka GeoIP) middleware through 0.6.0 for Caddy 2, when trust\_header X-Forwarded-For is used, allows attackers to spoof thei (no CVSS, github.com/shift72/caddy-geo-ip)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-12-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.