CVEs published December 19, 2023
117 CVEs were published on December 19, 2023: 20 critical, 31 high.
- Published
- 117
- Critical
- 20
- High
- 31
- Medium
- 40
- Low
- 1
- Unrated
- 25
- Now in CISA KEV
- 0
- Fix available
- 38
Most affected products
- Ivanti Avalanche
- 19
- Mozilla Firefox
- 8
- Mozilla Firefox ESR · Mozilla Thunderbird +1
- 8
- EFACEC UC
- 4
- IBM UrbanCode Deploy
- 4
- Apache Software Foundation Apache Superset · apache-superset
- 3
- EuroTel ETL3100
- 3
- Ivanti Wavelink
- 3
- EFACEC BCU
- 2
- Linux Kernel
- 2
Critical 20
- CVE-2023-50707Uncontrolled Resource Consumption in EFACEC BCU 500EFACEC BCU
- CVE-2023-6930Improper Access Control in EuroTel ETL3100EuroTel ETL3100
- CVE-2023-6928Improper Restriction of Excessive Authentication AttemptsEuroTel ETL3100
- CVE-2023-48738WordPress Porto Theme - Functionality Plugin < 2.12.1 is vulnerable to SQL InjectionPorto Theme - Functionality
- CVE-2023-49750WordPress Couponis Demo Plugin < 2.2 is vulnerable to SQL InjectionSpoonthemes Couponis - Affiliate & Submitting Coupons WordP…
- CVE-2023-46220An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial ofIvanti Avalanche
- CVE-2023-46261An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial ofIvanti Avalanche
- CVE-2023-46258An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial ofIvanti Avalanche
- CVE-2023-46224An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial ofIvanti Avalanche
- CVE-2023-46221An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial ofIvanti Avalanche
- CVE-2023-46216An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial ofIvanti Wavelink
- CVE-2023-46222An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial ofIvanti Avalanche
- CVE-2023-41727An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial ofIvanti Wavelink
- CVE-2023-46217An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial ofIvanti Wavelink
- CVE-2023-46257An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial ofIvanti Avalanche
- CVE-2023-46225An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial ofIvanti Avalanche
- CVE-2023-46259An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial ofIvanti Avalanche
- CVE-2023-46223An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial ofIvanti Avalanche
- CVE-2023-6730Deserialization of Untrusted Data in huggingface/transformershuggingface/transformers · transformers
- CVE-2023-6940Command Injectionmlflow/mlflow · mlflow
High 31
- CVE-2023-6689Cross-Site Request Forgery in EFACEC BCU 500EFACEC BCU
- CVE-2023-6929Authorization Bypass Through User-Controlled Key in EuroTel ETL3100EuroTel ETL3100
- CVE-2023-38126Softing edgeAggregator Restore Configuration Directory Traversal Remote Code Execution VulnerabilitySofting edgeAggregator
- CVE-2023-48327WordPress WC Vendors Marketplace Plugin <= 2.4.7 is vulnerable to SQL InjectionWC Vendors – WooCommerce Multi-Vendor, WooCommerce Marketpl…
- CVE-2023-48741WordPress ChatBot Plugin <= 4.7.8 is vulnerable to SQL InjectionQuantumCloud AI ChatBot
- CVE-2023-48764WordPress WordPress Brute Force Protection – Stop Brute Force Attacks Plugin <= 2.2.5 is vulnerable to SQL InjectionGuardGiant Brute Force Protection WordPress Brute Force Pro…
- CVE-2023-49764WordPress Advanced Database Cleaner Plugin <= 3.1.2 is vulnerable to SQL InjectionYounes JFR. Advanced Database Cleaner
- CVE-2023-43826Apache Guacamole: Integer overflow in handling of VNC image buffersApache Software Foundation Apache Guacamole
- CVE-2023-34027WordPress Recently Viewed Products Plugin <= 1.0.0 is vulnerable to PHP Object InjectionRajnish Arora Recently Viewed Products
- CVE-2023-37390WordPress Themesflat Addons For Elementor Plugin <= 2.0.0 is vulnerable to PHP Object InjectionThemesflat Addons For Elementor
- CVE-2023-46260An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial ofIvanti Avalanche
- CVE-2023-46266An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a resource-based DoS attack.Ivanti Avalanche
- CVE-2023-46803An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial ofIvanti Avalanche
- CVE-2023-46264An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.4.1 and below that could allow an attacker tIvanti Avalanche
- CVE-2023-46262An unauthenticated attacked could send a specifically crafted web request causing a Server-Side Request Forgery (SSRF) in Ivanti Avalanche RIvanti Avalanche
- CVE-2023-46804An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial ofIvanti Avalanche
- CVE-2023-46263An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.4.1 and below that could allow an attacker tIvanti Avalanche
- CVE-2021-22962An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a resource-based DoS attack.Ivanti Avalanche
- CVE-2023-50272A potential security vulnerability has been identified in HPE Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 6 (iLO 6).Hewlett Packard Enterprise (HPE) HPE Integrated Lights-out…
- CVE-2023-43870When installing the Net2 software a root certificate is installed into the trusted store.Paxton Net2
- CVE-2023-6280XML External Entity Reference on 52North WPS52North WPS
- CVE-2023-6913Session Hijacking on Imou Life appImou Life app
- CVE-2023-1514A vulnerability exists in the component RTU500 Scripting interface.Hitachi Energy RTU500 Scripting Interface
- CVE-2023-6932Use-after-free in Linux kernel's ipv4: igmp componentLinux Kernel
- CVE-2023-6931Out-of-bounds write in Linux kernel's Performance Events system componentLinux Kernel
- CVE-2023-6866TypedArrays can be fallible and lacked proper exception handling.Mozilla Firefox
- CVE-2023-6858Firefox was susceptible to a heap buffer overflow in `nsTextFragment` due to insufficient OOM handling.Mozilla Firefox ESR · Mozilla Thunderbird +1
- CVE-2023-49734Apache Superset: Privilege Escalation VulnerabilityApache Software Foundation Apache Superset · apache-superset
- CVE-2023-50376WordPress Simple Membership Plugin <= 4.3.8 is vulnerable to Unauth. Reflected Cross Site Scripting (XSS)smp7, wp.insider Simple Membership
- CVE-2023-6315Out-of-bouds read vulnerability in FPWin Pro version 7.7.0.0 and all previous versions may allow attackers to execute arbitrary code via a sPanasonic Control FPWIN Pro
- CVE-2023-6314Stack-based buffer overflow in FPWin Pro version 7.7.0.0 and all previous versions may allow attackers to execute arbitrary code via a speciPanasonic Control FPWIN Pro
Medium, low and unrated 66
- CVE-2023-47161IBM UrbanCode Deploy denial of serviceIBM UrbanCode Deploy
- CVE-2023-42012IBM UrbanCode Deploy denial of serviceIBM UrbanCode Deploy
- CVE-2023-50706 Improper Access Control in EFACEC UC 500EEFACEC UC
- CVE-2023-42013IBM UrbanCode Deploy information disclosureIBM UrbanCode Deploy
- CVE-2023-50705Exposure of Sensitive Information to an Unauthorized Actor in EFACEC UC 500EEFACEC UC
- CVE-2023-50704URL Redirection to Untrusted Site ('Open Redirect') in EFACEC UC 500EEFACEC UC
- CVE-2023-50703 Cleartext Transmission of Sensitive Information in EFACEC UC 500EEFACEC UC
- CVE-2023-45172IBM AIX denial of serviceIBM AIX
- CVE-2023-47146IBM QRadar SIEM information disclosureIBM QRadar SIEM
- CVE-2023-50835WordPress Advanced Category Template Plugin <= 0.1 is vulnerable to Cross Site Request Forgery (CSRF)Praveen Goswami Advanced Category Template
- CVE-2023-49164WordPress Ocean Extra Plugin <= 2.2.2 is vulnerable to Cross Site Request Forgery (CSRF)OceanWP Ocean Extra
- CVE-2023-46624WordPress Parcel Pro Plugin <= 1.6.11 is vulnerable to Open RedirectionParcel Pro
- CVE-2022-43450WordPress Stream Plugin <= 3.9.2 is vulnerable to Insecure Direct Object References (IDOR)XWP Stream
- CVE-2023-42940A session rendering issue was addressed with improved session tracking.Apple macOS
- CVE-2023-49812WordPress WP Photo Album Plus Plugin <= 8.5.02.005 is vulnerable to Insecure Direct Object References (IDOR)J.N. Breetvelt a.k.a. OpaJaap WP Photo Album Plus
- CVE-2023-35883WordPress Core Web Vitals & PageSpeed Booster Plugin <= 1.0.12 is vulnerable to Open RedirectionMagazine3 Core Web Vitals & PageSpeed Booster
- CVE-2023-37982WordPress Integration for Contact Form 7 and Salesforce Plugin <= 1.3.3 is vulnerable to Open RedirectionCRM Perks Integration for Salesforce and Contact Form 7, WP…
- CVE-2023-38478WordPress Integration for WooCommerce and QuickBooks Plugin <= 1.2.3 is vulnerable to Open RedirectionCRM Perks Integration for WooCommerce and QuickBooks
- CVE-2023-38481WordPress Integration for WooCommerce and Zoho CRM Plugin < 1.3.7 is vulnerable to Open RedirectionCRM Perks Integration for WooCommerce and Zoho CRM, Books,…
- CVE-2023-40602WordPress Doofinder for WooCommerce Plugin <= 1.5.49 is vulnerable to Open RedirectionDoofinder WP & WooCommerce Search
- CVE-2023-41648WordPress Login and Logout Redirect Plugin <= 2.0.3 is vulnerable to Open RedirectionSwapnil V. Patil Login and Logout Redirect
- CVE-2023-45105WordPress affiliate-toolkit – WordPress Affiliate Plugin Plugin <= 3.3.9 is vulnerable to Open RedirectionSERVIT Software Solutions affiliate-toolkit – WordPress Aff…
- CVE-2023-34382WordPress Dokan Plugin <= 3.7.19 is vulnerable to PHP Object InjectionweDevs Dokan – Best WooCommerce Multivendor Marketplace Sol…
- CVE-2023-46265An unauthenticated could abuse a XXE vulnerability in the Smart Device Server to leak data or perform a Server-Side Request Forgery (SSRF).Ivanti Avalanche
- CVE-2023-25715WordPress GamiPress Plugin <= 2.5.6 is vulnerable to Broken Access ControlGamiPress – The #1 gamification plugin to reward points, ac…
- CVE-2023-44991WordPress Media File Renamer Plugin <= 5.6.9 is vulnerable to Sensitive Data ExposureJordy Meow Media File Renamer: Rename Files
- CVE-2023-44983WordPress Aruba HiSpeed Cache Plugin <= 2.0.6 is vulnerable to Sensitive Data ExposureAruba.it Aruba HiSpeed Cache
- CVE-2023-6711Vulnerability exists in SCI IEC 60870-5-104 and HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below.Hitachi Energy RTU500 series CMU Firmware
- CVE-2023-6873Memory safety bugs present in Firefox 120.Mozilla Firefox
- CVE-2023-6872Browser tab titles were being leaked by GNOME to system logs.Mozilla Firefox
- CVE-2023-6871Under certain conditions, Firefox did not display a warning when a user attempted to navigate to a new protocol handler.Mozilla Firefox
- CVE-2023-6870Applications which spawn a Toast notification in a background thread may have obscured fullscreen notifications displayed by Firefox.Mozilla Firefox
- CVE-2023-6869A `<dialog>` element could have been manipulated to paint content outside of a sandboxed iframe.Mozilla Firefox
- CVE-2023-6868In some instances, the user-agent would allow push requests which lacked a valid VAPID even though the push manager subscription defined oneMozilla Firefox
- CVE-2023-6867The timing of a button click causing a popup to disappear was approximately the same length as the anti-clickjacking delay on permission proMozilla Firefox ESR · Mozilla Firefox
- CVE-2023-6865`EncryptingOutputStream` was susceptible to exposing uninitialized data.Mozilla Firefox ESR · Mozilla Firefox
- CVE-2023-6135Multiple NSS NIST curves were susceptible to a side-channel attack known as "Minerva".Mozilla Firefox
- CVE-2023-6864Memory safety bugs present in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5.Mozilla Firefox ESR · Mozilla Thunderbird +1
- CVE-2023-6863The `ShutdownObserver()` was susceptible to potentially undefined behavior due to its reliance on a dynamic type that lacked a virtual destrMozilla Firefox ESR · Mozilla Thunderbird +1
- CVE-2023-6862A use-after-free was identified in the `nsDNSService::Init`.Mozilla Firefox ESR · Mozilla Thunderbird
- CVE-2023-6861The `nsWindow::PickerOpen(void)` method was susceptible to a heap buffer overflow when running in headless mode.Mozilla Firefox ESR · Mozilla Thunderbird +1
- CVE-2023-6860The `VideoBridge` allowed any content process to use textures produced by remote decoders.Mozilla Firefox ESR · Mozilla Thunderbird +1
- CVE-2023-6859A use-after-free condition affected TLS socket creation when under memory pressure.Mozilla Firefox ESR · Mozilla Thunderbird +1
- CVE-2023-6857When resolving a symlink, a race may occur where the buffer passed to `readlink` may actually be smaller than necessary.Mozilla Firefox ESR · Mozilla Thunderbird +1
- CVE-2023-6856The WebGL `DrawElementsInstanced` method was susceptible to a heap buffer overflow when used on systems with the Mesa VM driver.Mozilla Firefox ESR · Mozilla Thunderbird +1
- CVE-2023-50761The signature of a digitally signed S/MIME email message may optionally specify the signature creation date and time.Mozilla Thunderbird
- CVE-2023-50762When processing a PGP/MIME payload that contains digitally signed text, the first paragraph of the text was never shown to the user.Mozilla Thunderbird
- CVE-2019-25158pedroetb tts-api app.js onSpeechDone os command injectionpedroetb tts-api · tts-api
- CVE-2023-6945SourceCodester Online Student Management System edit-student-detail.php cross site scriptingSourceCodester Online Student Management System
- CVE-2023-49736Apache Superset: SQL Injection on where_in JINJA macroApache Software Foundation Apache Superset · apache-superset
- CVE-2023-46104Apache Superset: Allows for uncontrolled resource consumption via a ZIP bombApache Software Foundation Apache Superset · apache-superset
- CVE-2023-5432Jquery news ticker <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodegopiplushotmailcom Jquery news ticker
- CVE-2023-5413Image horizontal reel scroll slideshow <= 13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodegopiplus Image horizontal reel scroll slideshow
- CVE-2023-42015IBM UrbanCode Deploy HTML injectionIBM UrbanCode Deploy
- CVE-2019-25157Ethex Contracts Monthly Jackpot EthexJackpot.sol access controlEthex Contracts
- CVE-2014-125107Corveda PHPSandbox String protection mechanismCorveda PHPSandbox · corveda/phpsandbox
- CVE-2023-6488WP Shortcodes Plugin — Shortcodes Ultimate <= 7.0.0 - Authenticated (Contributor+) Stored Cross-Site Scriptinggn_themes WP Shortcodes Plugin — Shortcodes Ultimate
- CVE-2023-44982WordPress WP Retina 2x Plugin <= 6.4.5 is vulnerable to Sensitive Data ExposureJordy Meow Perfect Images
- CVE-2023-45887DS Wireless Communication (DWC) with DWC_VERSION_3 and DWC_VERSION_11 allows remote attackers to execute arbitrary code on a game-playing cl
- CVE-2023-47267An issue discovered in TheGreenBow Windows Enterprise Certified VPN Client 6.52, Windows Standard VPN Client 6.87, and Windows Enterprise VP
- CVE-2023-49004An issue in D-Link DIR-850L v.B1_FW223WWb01 allows a remote attacker to execute arbitrary code via a crafted script to the en parameter.
- CVE-2023-49006Cross Site Request Forgery (CSRF) vulnerability in Phpsysinfo version 3.4.3 allows a remote attacker to obtain sensitive information via a cphpsysinfo/phpsysinfo
- CVE-2023-49147An issue was discovered in PDF24 Creator 11.14.0.
- CVE-2023-49489Reflective Cross Site Scripting (XSS) vulnerability in KodExplorer version 4.51, allows attackers to obtain sensitive information and escala
- CVE-2023-49706Defective request context handling in Self Service in LinOTP 3.x before 3.2.5 allows remote unauthenticated attackers to escalate privileges
- CVE-2023-50466An authenticated command injection vulnerability in Weintek cMT2078X easyweb Web Version v2.1.3, OS v20220215 allows attackers to execute ar