CVEs published December 17, 2023
27 CVEs were published on December 17, 2023: 1 critical, 3 high.
- Published
- 27
- Critical
- 1
- High
- 3
- Medium
- 21
- Low
- 1
- Unrated
- 1
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- Hikvision Intercom Broadcasting System
- 3
- codelyfe Stupid Simple CMS
- 2
- Jahastech NxFilter
- 2
- rmountjoy92 DashMachine
- 2
- Ciprian Popescu Block for Font Awesome
- 1
- Denis Kobozev CSV Importer
- 1
- GitLab
- 1
- HPE System Management Homepage
- 1
- Innovative Solutions Fix My Feed RSS Repair
- 1
- Netentsec NS-ASG Application Security Gateway
- 1
Critical 1
High 3
- CVE-2023-6903Netentsec NS-ASG Application Security Gateway sql injectionNetentsec NS-ASG Application Security Gateway
- CVE-2023-50271HP-UX System Management Homepage, Disclosure of InformationHPE System Management Homepage
- CVE-2023-6901codelyfe Stupid Simple CMS HTTP POST Request handle-command.php os command injectioncodelyfe Stupid Simple CMS
Medium, low and unrated 23
- CVE-2023-6905Jahastech NxFilter Bind Request ldap injectionJahastech NxFilter
- CVE-2023-3907Improper User Management in GitLabGitLab
- CVE-2023-6904Jahastech NxFilter config,admin.jsp cross-site request forgeryJahastech NxFilter
- CVE-2023-6902codelyfe Stupid Simple CMS upload.php unrestricted uploadcodelyfe Stupid Simple CMS
- CVE-2023-6900rmountjoy92 DashMachine delete_file path traversalrmountjoy92 DashMachine
- CVE-2023-6899rmountjoy92 DashMachine Config save_config code injectionrmountjoy92 DashMachine
- CVE-2023-49834WordPress WOOCS – WooCommerce Currency Switcher Plugin <= 1.4.1.4 is vulnerable to Cross Site Request Forgery (CSRF)realmag777 FOX – Currency Switcher Professional for WooComm…
- CVE-2023-49824WordPress Product Catalog Feed by PixelYourSite Plugin <= 2.1.1 is vulnerable to Cross Site Request Forgery (CSRF)Product Catalog Feed by PixelYourSite
- CVE-2023-6898SourceCodester Best Courier Management System manage_user.php sql injectionSourceCodester Best Courier Management System
- CVE-2023-49816WordPress Fix My Feed RSS Repair Plugin <= 1.4 is vulnerable to Cross Site Request Forgery (CSRF)Innovative Solutions Fix My Feed RSS Repair
- CVE-2023-49775WordPress CSV Importer Plugin <= 0.3.8 is vulnerable to Cross Site Request Forgery (CSRF)Denis Kobozev CSV Importer
- CVE-2023-6896SourceCodester Simple Image Stack Website cross site scriptingSourceCodester Simple Image Stack Website
- CVE-2023-49769WordPress Integrate Google Drive Plugin <= 1.3.4 is vulnerable to Cross Site Request Forgery (CSRF)SoftLab Integrate Google Drive
- CVE-2023-49751WordPress Block for Font Awesome Plugin <= 1.4.0 is vulnerable to Cross Site Request Forgery (CSRF)Ciprian Popescu Block for Font Awesome
- CVE-2023-24380WordPress Simple Wp Sitemap Plugin <= 1.2.1 is vulnerable to Cross Site Request Forgery (CSRF)Webbjocke Simple Wp Sitemap
- CVE-2023-6895Hikvision Intercom Broadcasting System ping.php os command injectionHikvision Intercom Broadcasting System
- CVE-2023-6894Hikvision Intercom Broadcasting System Log File system.html information disclosureHikvision Intercom Broadcasting System
- CVE-2023-6893Hikvision Intercom Broadcasting System exportrecord.php path traversalHikvision Intercom Broadcasting System
- CVE-2023-6891PeaZip Library dragdropfilesdll.dll uncontrolled search pathPeaZip
- CVE-2023-6888PHZ76 RtspServer RtspMesaage.cpp ParseRequestLine stack-based overflowPHZ76 RtspServer
- CVE-2023-6887saysky ForestBlog Image Upload img unrestricted uploadsaysky ForestBlog
- CVE-2023-6886xnx3 wangmarket Role Management Page code injectionxnx3 wangmarket · com.xnx3.wangmarket:wangmarket
- CVE-2023-50965In MicroHttpServer (aka Micro HTTP Server) through 4398570, _ReadStaticFiles in lib/middleware.c allows a stack-based buffer overflow and po