# CVEs published 2023-12-18

104 CVEs were published on December 18, 2023: 3 critical, 19 high. Days are UTC.

- [CVE-2023-46212](https://cve.now/CVE-2023-46212.md): WordPress WP EXtra Plugin \<= 6.2 is vulnerable to Broken Access Control (CVSS 6.3, TienCOP WP EXtra)
- [CVE-2023-46154](https://cve.now/CVE-2023-46154.md): WordPress e2pdf Plugin \<= 1.20.18 is vulnerable to PHP Object Injection (CVSS 6.6, E2Pdf.com E2Pdf – Export To Pdf Tool for WordPress)
- [CVE-2023-47754](https://cve.now/CVE-2023-47754.md): WordPress Delete Duplicate Posts Plugin \<= 4.8.9 is vulnerable to Broken Access Control (CVSS 4.3, Clever plugins Delete Duplicate Posts)
- [CVE-2023-48751](https://cve.now/CVE-2023-48751.md): WordPress Participants Database Plugin \<= 2.5.5 is vulnerable to Broken Access Control (CVSS 4.3, Roland Barker, xnau webdesign Participants Database)
- [CVE-2023-49819](https://cve.now/CVE-2023-49819.md): WordPress Structured Content Plugin \<= 1.5.3 is vulnerable to PHP Object Injection (CVSS 7.5, Gordon Böhme, Antonio Leutsch Structured Content (JSON-LD)…)
- [CVE-2022-45809](https://cve.now/CVE-2022-45809.md): WordPress Thumbs Rating Plugin \<= 5.0.0 is vulnerable to Race Condition (CVSS 5.3, Ricard Torres Thumbs Rating)
- [CVE-2023-6918](https://cve.now/CVE-2023-6918.md): Libssh: missing checks for return values for digests (CVSS 3.7, Red Hat Enterprise Linux)
- [CVE-2023-47506](https://cve.now/CVE-2023-47506.md): WordPress Master Slider Pro Plugin \<= 3.6.5 is vulnerable to SQL Injection (CVSS 7.6, Master Slider Pro)
- [CVE-2023-6927](https://cve.now/CVE-2023-6927.md): Keycloak: open redirect via "form\_post.jwt" jarm response mode (CVSS 4.6, Red Hat build of Keycloak · Red Hat Single Sign-On +2)
- [CVE-2023-47530](https://cve.now/CVE-2023-47530.md): WordPress Redirect 404 Error Page to Homepage or Custom Page with Logs Plugin \<= 1.8.7 is vulnerable to SQL Injection (CVSS 7.6, WPVibes Redirect 404 Error Page to Homepage or Custom Page…)
- [CVE-2023-47558](https://cve.now/CVE-2023-47558.md): WordPress Who Hit The Page – Hit Counter Plugin \<= 1.4.14.3 is vulnerable to SQL Injection (CVSS 7.6, Mahlamusa Who Hit The Page – Hit Counter)
- [CVE-2023-33331](https://cve.now/CVE-2023-33331.md): WordPress WooCommerce Product Vendors Plugin \<= 2.1.76 is vulnerable to SQL Injection (CVSS 8.5, WooCommerce Product Vendors)
- [CVE-2023-34168](https://cve.now/CVE-2023-34168.md): WordPress WP Report Post Plugin \<= 2.1.2 is vulnerable to SQL Injection (CVSS 7.6, Alex Raven WP Report Post)
- [CVE-2023-49821](https://cve.now/CVE-2023-49821.md): WordPress LiveChat Plugin \<= 4.5.15 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, LiveChat – WP live chat plugin for WordPress)
- [CVE-2023-49763](https://cve.now/CVE-2023-49763.md): WordPress CSprite Plugin \<= 1.1 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Creatomatic CSprite)
- [CVE-2023-49761](https://cve.now/CVE-2023-49761.md): WordPress Product Enquiry for WooCommerce Plugin \<= 3.0 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, Gravity Master Product Enquiry for WooCommerce)
- [CVE-2023-49760](https://cve.now/CVE-2023-49760.md): WordPress WPsoonOnlinePage Plugin \<= 1.9 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, Giannopoulos Kostas WPsoonOnlinePage)
- [CVE-2023-49759](https://cve.now/CVE-2023-49759.md): WordPress WooDiscuz – WooCommerce Comments Plugin \<= 2.3.0 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, gVectors Team WooDiscuz – WooCommerce Comments)
- [CVE-2023-49163](https://cve.now/CVE-2023-49163.md): WordPress teachPress Plugin \<= 9.0.5 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, Michael Winkler teachPress)
- [CVE-2023-49155](https://cve.now/CVE-2023-49155.md): WordPress Button Generator – easily Button Builder Plugin \<= 2.3.8 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Wow-Company Button Generator – easily Button Builder)
- [CVE-2023-49153](https://cve.now/CVE-2023-49153.md): WordPress Add to Cart Text Changer and Customize Button, Add Custom Icon Plugin \<= 2.0 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Saiful Islam Add to Cart Text Changer and Customize Button,…)
- [CVE-2023-49148](https://cve.now/CVE-2023-49148.md): WordPress Affiliate Booster – Pros & Cons, Notice, and CTA Blocks for Affiliates Plugin \<= 3.0.5 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, Kulwant Nagi Affiliate Booster – Pros & Cons, Notice, and C…)
- [CVE-2023-48781](https://cve.now/CVE-2023-48781.md): WordPress MkRapel Regiones y Ciudades de Chile para WC Plugin \<= 4.3.0 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Marketing Rapel MkRapel Regiones y Ciudades de Chile para WC)
- [CVE-2023-48778](https://cve.now/CVE-2023-48778.md): WordPress Product Size Chart For WooCommerce Plugin \<= 1.1.5 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, VillaTheme Product Size Chart For WooCommerce)
- [CVE-2023-48773](https://cve.now/CVE-2023-48773.md): WordPress WooCommerce Login Redirect Plugin \<= 2.2.4 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, WP Doctor WooCommerce Login Redirect)
- [CVE-2023-46686](https://cve.now/CVE-2023-46686.md): A reliance on untrusted inputs in a security decision could be exploited by a privileged user to configure the Gallagher Command Centre Dia (CVSS 5.5, Gallagher Command Centre Diagnostics Service)
- [CVE-2023-41967](https://cve.now/CVE-2023-41967.md): Sensitive information uncleared after debug/power state transition in the Controller 6000 could be abused by an attacker with knowledge of (CVSS 2.4, Gallagher Controller)
- [CVE-2023-24590](https://cve.now/CVE-2023-24590.md): A format string issue in the Controller 6000's optional diagnostic web interface can be used to write/read from memory, and in some insta (CVSS 7.5, Gallagher Controller)
- [CVE-2023-23584](https://cve.now/CVE-2023-23584.md): An observable response discrepancy in the Gallagher Command Centre RESTAPI allows an insufficiently-privileged user to infer the presence o (CVSS 4.3, Gallagher Command Centre Server)
- [CVE-2023-23576](https://cve.now/CVE-2023-23576.md): Incorrect behavior order in the Command Centre Server could allow privileged users to gain physical access to the site for longer than inte (CVSS 4.3, Gallagher Command Centre Server)
- [CVE-2023-23570](https://cve.now/CVE-2023-23570.md): Client-Side enforcement of Server-Side security for the Command Centre server could be bypassed and lead to invalid configuration with unde (CVSS 5.4, Gallagher Command Centre)
- [CVE-2023-48772](https://cve.now/CVE-2023-48772.md): WordPress Prevent Landscape Rotation Plugin \<= 2.0 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, Arul Prasad J Prevent Landscape Rotation)
- [CVE-2023-22439](https://cve.now/CVE-2023-22439.md): Improper input validation of a large HTTP request in the Controller 6000 and Controller 7000 optional diagnostic web interface (Port 80) ca (CVSS 3.1, Gallagher Controller 6000/ Controller)
- [CVE-2023-48769](https://cve.now/CVE-2023-48769.md): WordPress Chat Bubble Plugin \<= 2.3 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Blue Coral Chat Bubble – Floating Chat with Contact Chat Ic…)
- [CVE-2023-6355](https://cve.now/CVE-2023-6355.md): Incorrect selection of fuse values in the Controller 7000 platform allows an attacker to bypass some protection mechanisms to enable local (CVSS 6.8, Gallagher Controller)
- [CVE-2023-48768](https://cve.now/CVE-2023-48768.md): WordPress Quantity Plus Minus Button for WooCommerce by CodeAstrology Plugin \<= 1.1.9 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, CodeAstrology Team Quantity Plus Minus Button for WooCommer…)
- [CVE-2023-40691](https://cve.now/CVE-2023-40691.md): IBM Cloud Pak for Business Automation information disclosure (CVSS 4.9, IBM Cloud Pak for Business Automation)
- [CVE-2023-5882](https://cve.now/CVE-2023-5882.md): WP All Export (Free \< 1.4.1, Pro \< 1.8.6) - Remote Code Execution via CSRF (no CVSS, Export any WordPress data to XML/CSV · WP All Export Pro)
- [CVE-2023-4724](https://cve.now/CVE-2023-4724.md): WP All Export (Free \< 1.4.0, Pro \< 1.8.6) - Admin+ RCE (CVSS 7.2, Export any WordPress data to XML/CSV · WP All Export Pro)
- [CVE-2023-5949](https://cve.now/CVE-2023-5949.md): SmartCrawl WordPress SEO checker \< 3.8.3 - Unauthenticated Password Protected Post Disclosure (no CVSS, SmartCrawl WordPress SEO checker, SEO analyzer, SEO optimiz…)
- [CVE-2023-6077](https://cve.now/CVE-2023-6077.md): Slider - Ultimate Responsive Image Slider \< 3.5.12 - Subscriber+ Arbitrary Post Access (no CVSS, Slider)
- [CVE-2023-6295](https://cve.now/CVE-2023-6295.md): so-widgets-bundle \< 1.51.0 - Admin+ Local File Inclusion (no CVSS, SiteOrigin Widgets Bundle)
- [CVE-2023-6289](https://cve.now/CVE-2023-6289.md): Swift Performance Lite \<= 2.3.6.14 - Unauthenticated Configuration Export (CVSS 4.3, Swift Performance Lite)
- [CVE-2023-5348](https://cve.now/CVE-2023-5348.md): Product Catalog Enquiry for WooCommerce \< 5.0.3 - Unauthenticated Stored XSS via Arbitrary Setting Update (no CVSS, Product Catalog Mode For WooCommerce)
- [CVE-2023-4311](https://cve.now/CVE-2023-4311.md): Vrm 360 3D Model Viewer \<= 1.2.1 - Contributor+ Arbitrary File Upload Leading to RCE (no CVSS, Vrm 360 3D Model Viewer)
- [CVE-2023-5886](https://cve.now/CVE-2023-5886.md): WP All Export (Free \< 1.4.1, Pro \< 1.8.6) - Author+ PHAR Deserialization via CSRF (no CVSS, Export any WordPress data to XML/CSV · WP All Export Pro)
- [CVE-2023-6065](https://cve.now/CVE-2023-6065.md): Quttera Web Malware Scanner \< 3.4.2.1 - Directory Listing to Sensitive Data Exposure (no CVSS, Quttera Web Malware Scanner)
- [CVE-2023-6272](https://cve.now/CVE-2023-6272.md): Theme My Login 2FA \< 1.2 - Lack of Rate Limiting (no CVSS, tml-2fa)
- [CVE-2023-5005](https://cve.now/CVE-2023-5005.md): Autocomplete Location field Contact Form 7 \< 3.0 - Admin+ Store Cross-Site Scripting (CVSS 4.8, Autocomplete Location field Contact Form)
- [CVE-2023-6222](https://cve.now/CVE-2023-6222.md): Quttera Web Malware Scanner \< 3.4.2.1 - Admin+ Path Traversal (CVSS 7.2, Quttera Web Malware Scanner)
- [CVE-2023-6203](https://cve.now/CVE-2023-6203.md): The Events Calendar \< 6.2.8.1 - Unauthenticated Arbitrary Password Protected Post Read (no CVSS, The Events Calendar)
- [CVE-2023-47741](https://cve.now/CVE-2023-47741.md): IBM i information disclosure (CVSS 5.3, IBM i · IBM Db2 Mirror for i)
- [CVE-2023-6691](https://cve.now/CVE-2023-6691.md): Code Injection vulnerability in Cambium ePMP Force 300-25 (CVSS 7.8, Cambium ePMP Force 300-25)
- [CVE-2023-48766](https://cve.now/CVE-2023-48766.md): WordPress SVGator – Add Animated SVG Easily Plugin \<= 1.2.4 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, SVGator – Add Animated SVG Easily)
- [CVE-2023-46617](https://cve.now/CVE-2023-46617.md): WordPress AdFoxly – Ad Manager, AdSense Ads & Ads.txt Plugin \<= 1.8.5 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, AdFoxly – Ad Manager, AdSense Ads & Ads.txt)
- [CVE-2023-48762](https://cve.now/CVE-2023-48762.md): WordPress JetElements For Elementor Plugin \<= 2.6.13 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 6.3, Crocoblock JetElements For Elementor)
- [CVE-2023-48755](https://cve.now/CVE-2023-48755.md): WordPress teachPress Plugin \<= 9.0.4 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Michael Winkler teachPress)
- [CVE-2023-33214](https://cve.now/CVE-2023-33214.md): WordPress Taggbox Plugin \<= 3.1 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, Tagbox – UGC Galleries, Social Media Widgets, User Reviews…)
- [CVE-2023-47806](https://cve.now/CVE-2023-47806.md): WordPress Disable User Login Plugin \<= 1.3.7 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, Saint Systems Disable User Login)
- [CVE-2023-47789](https://cve.now/CVE-2023-47789.md): WordPress WooCommerce Canada Post Shipping Plugin \<= 2.8.3 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, WooCommerce Canada Post Shipping Method)
- [CVE-2023-47787](https://cve.now/CVE-2023-47787.md): WordPress WooCommerce Bookings Plugin \<= 2.0.3 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, WooCommerce Bookings)
- [CVE-2022-40312](https://cve.now/CVE-2022-40312.md): WordPress GiveWP Plugin \<= 2.25.1 is vulnerable to Server Side Request Forgery (SSRF) (CVSS 5.5, GiveWP – Donation Plugin and Fundraising Platform)
- [CVE-2023-6778](https://cve.now/CVE-2023-6778.md): Cross-site Scripting (XSS) - Stored in allegroai/clearml-server (CVSS 5.4, allegroai/clearml-server)
- [CVE-2023-49840](https://cve.now/CVE-2023-49840.md): WordPress Multi Currency For WooCommerce Plugin \<= 1.5.5 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Palscode Multi Currency For WooCommerce)
- [CVE-2023-49843](https://cve.now/CVE-2023-49843.md): WordPress First Order Discount Woocommerce Plugin \<= 1.21 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, QuanticEdge First Order Discount Woocommerce)
- [CVE-2023-49844](https://cve.now/CVE-2023-49844.md): WordPress WPPerformanceTester Plugin \<= 2.0.0 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Kevin Ohashi WPPerformanceTester)
- [CVE-2023-6817](https://cve.now/CVE-2023-6817.md): Use-after-free in Linux kernel's netfilter: nf\_tables component (CVSS 7.8, Linux Kernel)
- [CVE-2023-49853](https://cve.now/CVE-2023-49853.md): WordPress PayTR Taksit Tablosu Plugin \<= 1.3.1 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, PayTR Ödeme ve Elektronik Para Kuruluşu A.Ş. PayTR Taksit T…)
- [CVE-2023-46177](https://cve.now/CVE-2023-46177.md): IBM MQ Appliance information disclosure (CVSS 6.5, IBM MQ Appliance)
- [CVE-2023-6228](https://cve.now/CVE-2023-6228.md): Libtiff: heap-based buffer overflow in cpstriptotile() in tools/tiffcp.c (CVSS 3.3, Red Hat Enterprise Linux)
- [CVE-2023-5384](https://cve.now/CVE-2023-5384.md): Infinispan: credentials returned from configuration as clear text (CVSS 7.2, Red Hat Data Grid · org.infinispan:infinispan-core +7)
- [CVE-2023-5236](https://cve.now/CVE-2023-5236.md): Infinispan: circular reference on marshalling leads to dos (CVSS 4.4, Red Hat Data Grid · Red Hat build of Apache Camel 4 for… +8)
- [CVE-2023-5056](https://cve.now/CVE-2023-5056.md): Skupper-operator: privelege escalation via config map (CVSS 6.8, Red Hat Service Interconnect 1 for RHEL)
- [CVE-2023-5115](https://cve.now/CVE-2023-5115.md): Ansible: malicious role archive can cause ansible-galaxy to overwrite arbitrary files (CVSS 6.3, Red Hat Ansible Automation Platform 2.3 for RHEL · Red H… +2)
- [CVE-2023-3629](https://cve.now/CVE-2023-3629.md): Infinispan: non-admins should not be able to get cache config via rest api (CVSS 4.3, Red Hat Data Grid · Red Hat JBoss Enterprise Application… +1)
- [CVE-2023-3628](https://cve.now/CVE-2023-3628.md): Infispan: rest bulk ops don't check permissions (CVSS 6.5, Red Hat Data Grid · Red Hat JBoss Enterprise Application… +1)
- [CVE-2023-4320](https://cve.now/CVE-2023-4320.md): Satellite: arithmetic overflow in satellite (CVSS 7.6, Red Hat Satellite 6.15 for RHEL)
- [CVE-2023-47038](https://cve.now/CVE-2023-47038.md): Perl: write past buffer end via illegal user-defined unicode property (CVSS 7.0, perl · Red Hat Enterprise Linux)
- [CVE-2023-3430](https://cve.now/CVE-2023-3430.md): Openimageio: heap-buffer-overflow in file src/gif.imageio/gifinput.cpp (CVSS 7.5, OpenImageIO · Fedora Extra Packages for Enterprise Linux +1)
- [CVE-2022-41677](https://cve.now/CVE-2022-41677.md): An information disclosure vulnerability was discovered in Bosch IP camera devices allowing an unauthenticated attacker to retrieve informati (CVSS 5.3, Bosch Camera Firmware)
- [CVE-2023-35867](https://cve.now/CVE-2023-35867.md): An improper handling of a malformed API answer packets to API clients in Bosch BT software products can allow an unauthenticated attacker to (CVSS 5.9, Bosch BVMS · Bosch Configuration Manager +7)
- [CVE-2023-32230](https://cve.now/CVE-2023-32230.md): An improper handling of a malformed API request to an API server in Bosch BT software products can allow an unauthenticated attacker to caus (CVSS 7.5, Bosch Video Recording Manager · Bosch Video Streaming Ga… +3)
- [CVE-2023-39509](https://cve.now/CVE-2023-39509.md): A command injection vulnerability exists in Bosch IP cameras that allows an authenticated user with administrative rights to run arbitrary c (CVSS 7.2, Bosch Camera Firmware)
- [CVE-2023-28053](https://cve.now/CVE-2023-28053.md): Dell NetWorker Virtual Edition versions 19.8 and below contain the use of deprecated cryptographic algorithms in the SSH component. (CVSS 5.3, Dell NetWorker Virtual Edition)
- [CVE-2023-49854](https://cve.now/CVE-2023-49854.md): WordPress Caddy Plugin \<= 1.9.7 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4, Tribe Interactive Caddy – Smart Side Cart for WooCommerce)
- [CVE-2023-49855](https://cve.now/CVE-2023-49855.md): WordPress BC Menu Bar Cart Icon For WooCommerce By Binary Carpenter Plugin \<= 1.49.3 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 6.5, BinaryCarpenter Menu Bar Cart Icon For WooCommerce By Binar…)
- [CVE-2023-50372](https://cve.now/CVE-2023-50372.md): WordPress Custom Post Type Page Template Plugin \<= 1.1 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Hiroaki Miyashita Custom Post Type Page Template)
- [CVE-2023-32728](https://cve.now/CVE-2023-32728.md): Code injection in zabbix\_agent2 smart.disk.get caused by smartctl plugin (CVSS 4.6, Zabbix)
- [CVE-2023-32727](https://cve.now/CVE-2023-32727.md): Code execution vulnerability in icmpping (CVSS 6.8, Zabbix)
- [CVE-2023-32726](https://cve.now/CVE-2023-32726.md): Possible buffer overread from reading DNS responses (CVSS 3.9, Zabbix)
- [CVE-2023-32725](https://cve.now/CVE-2023-32725.md): Leak of zbx\_session cookie when using a scheduled report that includes a dashboard with a URL widget. (CVSS 9.6, Zabbix)
- [CVE-2023-6911](https://cve.now/CVE-2023-6911.md): Multiple WSO2 products have been identified as vulnerable due to improper output encoding, a Stored Cross Site Scripting (XSS) attack can be (CVSS 4.8, WSO2 API Manager · WSO2 API Microgateway +6)
- [CVE-2023-41314](https://cve.now/CVE-2023-41314.md): Apache Doris: Missing API authentication allowed DoS (no CVSS, Apache Software Foundation Apache Doris)
- [CVE-2023-6483](https://cve.now/CVE-2023-6483.md): Improper Authentication Vulnerability in ADiTaaS (CVSS 9.1, ADiTaaS Allied Digital Integrated Tool-as-a-Service)
- [CVE-2023-6908](https://cve.now/CVE-2023-6908.md): DFIRKuiper TAR Archive case\_management.py unzip\_file path traversal (CVSS 3.1, DFIRKuiper Kuiper)
- [CVE-2023-6907](https://cve.now/CVE-2023-6907.md): codelyfe Stupid Simple CMS Deletion Interface delete.php improper authentication (CVSS 5.4, codelyfe Stupid Simple CMS)
- [CVE-2023-6909](https://cve.now/CVE-2023-6909.md): Path Traversal: '\\..\\filename' in mlflow/mlflow (CVSS 7.5, mlflow/mlflow · mlflow)
- [CVE-2023-6906](https://cve.now/CVE-2023-6906.md): Totolink A7100RU HTTP POST Request main buffer overflow (CVSS 9.8, Totolink A7100RU)
- [CVE-2023-48795](https://cve.now/CVE-2023-48795.md): The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypas (CVSS 5.9, russh · golang.org/x/crypto +1)
- [CVE-2023-50979](https://cve.now/CVE-2023-50979.md): Crypto++ (aka cryptopp) through 8.9.0 has a Marvin side channel during decryption with PKCS#1 v1.5 padding. (no CVSS)
- [CVE-2023-50980](https://cve.now/CVE-2023-50980.md): gf2n.cpp in Crypto++ (aka cryptopp) through 8.9.0 allows attackers to cause a denial of service (application crash) via DER public-key data (no CVSS)
- [CVE-2023-50981](https://cve.now/CVE-2023-50981.md): ModularSquareRoot in Crypto++ (aka cryptopp) through 8.9.0 allows attackers to cause a denial of service (infinite loop) via crafted DER pub (CVSS 7.5)
- [CVE-2023-51384](https://cve.now/CVE-2023-51384.md): In ssh-agent in OpenSSH before 9.6, certain destination constraints can be incompletely applied. (CVSS 5.5)
- [CVE-2023-51385](https://cve.now/CVE-2023-51385.md): In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is refere (CVSS 6.5)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-12-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.