CVEs published December 21, 2023
125 CVEs were published on December 21, 2023: 17 critical, 25 high. 1 is now in CISA KEV.
- Published
- 125
- Critical
- 17
- High
- 25
- Medium
- 60
- Low
- 8
- Unrated
- 15
- Now in CISA KEV
- 1
- Fix available
- 24
Most affected products
- GitHub Enterprise Server
- 13
- Projectworlds Pvt. Limited Online Examination System
- 7
- Apache Software Foundation Apache Airflow · apache-airflow
- 4
- Kashipara Group Job Portal
- 4
- Projectworlds Pvt. Limited Student Result Management System
- 4
- Tongda OA
- 4
- Projectworlds Pvt. Limited Railway Reservation System
- 3
- automad
- 2
- automad · automad/automad
- 2
- cacti
- 2
Critical 17
- CVE-2023-49689Job Portal v1.0 - Multiple Unauthenticated SQL Injections (SQLi)Kashipara Group Job Portal
- CVE-2023-49688Job Portal v1.0 - Multiple Unauthenticated SQL Injections (SQLi)Kashipara Group Job Portal
- CVE-2023-49681Job Portal v1.0 - Multiple Unauthenticated SQL Injections (SQLi)Kashipara Group Job Portal
- CVE-2023-49677Job Portal v1.0 - Multiple Unauthenticated SQL Injections (SQLi)Kashipara Group Job Portal
- CVE-2023-48722Student Result Management System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)Projectworlds Pvt. Limited Student Result Management System
- CVE-2023-48720Student Result Management System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)Projectworlds Pvt. Limited Student Result Management System
- CVE-2023-48718Student Result Management System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)Projectworlds Pvt. Limited Student Result Management System
- CVE-2023-48716Student Result Management System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)Projectworlds Pvt. Limited Student Result Management System
- CVE-2023-48689Railway Reservation System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)Projectworlds Pvt. Limited Railway Reservation System
- CVE-2023-48687Railway Reservation System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)Projectworlds Pvt. Limited Railway Reservation System
- CVE-2023-48685Railway Reservation System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)Projectworlds Pvt. Limited Railway Reservation System
- CVE-2023-6145SQLi in Softomi E-commerce Softwareİstanbul Soft Informatics and Consultancy Limited Company S…
- CVE-2023-32242WordPress Woodmart Core Plugin <= 1.0.36 is vulnerable to PHP Object InjectionxTemos WoodMart - Multipurpose WooCommerce Theme
- CVE-2023-49778WordPress Sayfa Sayaç Plugin <= 2.6 is vulnerable to PHP Object InjectionHakan Demiray Sayfa Sayac
- CVE-2023-29486An issue was discovered in Heimdal Thor agent versions 3.4.2 and before 3.7.0 on Windows, allows attackers to bypass USB access restrictions
- CVE-2023-51051S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the A_textauth parameter at /admin/ajax.php.
- CVE-2023-51052S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the A_formauth parameter at /admin/ajax.php.
High 25
- CVE-2023-49084Local File Inclusion (RCE) in Cacticacti
- CVE-2023-7024Heap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a remote attacker to potentially exploit heap corruption viaGoogle Chrome
- CVE-2023-37520HCL BigFix Platform is affected by Unathenticated Stored Cross-Site Scripting (XSS)HCL Software HCL BigFix Platform
- CVE-2023-37519HCL BigFix Platform is affected by Unathenticated Stored Cross-Site Scripting (XSS)HCL Software HCL BigFix Platform
- CVE-2023-6847Improper Authentication in GitHub Enterprise Server leading to Authentication Bypass for Public Repository DataGitHub Enterprise Server
- CVE-2023-46648Insufficient Entropy in GitHub Enterprise Server Management Console Invitation TokenGitHub Enterprise Server
- CVE-2023-6802Sensitive Information in Log File in GitHub Enterprise Server GitHub Enterprise Server
- CVE-2023-6746Sensitive Information in Log File in GitHub Enterprise Server GitHub Enterprise Server
- CVE-2023-46647Improper Privilege Management in GitHub Enterprise Server management console leads to privilege escalation GitHub Enterprise Server
- CVE-2023-6546Kernel: gsm multiplexing race condition leads to privilege escalationRed Hat Enterprise Linux · Red Hat Virtualization 4 for… +1
- CVE-2023-50732Velocity execution without script right through tree macroxwiki-platform · org.xwiki.platform:xwiki-platform-index-tr…
- CVE-2023-44482Leave Management System Project v1.0 - Multiple Authenticated SQL Injections (SQLi)Projectworlds Pvt. Limited Leave Management System Project
- CVE-2023-44481Leave Management System Project v1.0 - Multiple Authenticated SQL Injections (SQLi)Projectworlds Pvt. Limited Leave Management System Project
- CVE-2023-45121Online Examination System v1.0 - Multiple Authenticated SQL Injections (SQLi)Projectworlds Pvt. Limited Online Examination System
- CVE-2023-45120Online Examination System v1.0 - Multiple Authenticated SQL Injections (SQLi)Projectworlds Pvt. Limited Online Examination System
- CVE-2023-45119Online Examination System v1.0 - Multiple Authenticated SQL Injections (SQLi)Projectworlds Pvt. Limited Online Examination System
- CVE-2023-45118Online Examination System v1.0 - Multiple Authenticated SQL Injections (SQLi)Projectworlds Pvt. Limited Online Examination System
- CVE-2023-45117Online Examination System v1.0 - Multiple Authenticated SQL Injections (SQLi)Projectworlds Pvt. Limited Online Examination System
- CVE-2023-45116Online Examination System v1.0 - Multiple Authenticated SQL Injections (SQLi)Projectworlds Pvt. Limited Online Examination System
- CVE-2023-45115Online Examination System v1.0 - Multiple Authenticated SQL Injections (SQLi)Projectworlds Pvt. Limited Online Examination System
- CVE-2023-51442Authentication bypass vulnerability in navidrome's subsonic endpointnavidrome · github.com/navidrome/navidrome
- CVE-2023-48288WordPress WordPress Job Board and Recruitment Plugin – JobWP Plugin <= 2.1 is vulnerable to Sensitive Data ExposureHM Plugin WordPress Job Board and Recruitment Plugin – JobWP
- CVE-2023-49826WordPress Soledad Theme <= 8.4.1 is vulnerable to PHP Object InjectionPenciDesign Soledad – Multipurpose, Newspaper, Blog & WooCo…
- CVE-2023-5594Improper following of a certificate's chain of trust in ESET security productsESET, spol. s r.o. ESET NOD32 Antivirus · ESET, spol. s… +10
- CVE-2023-7025KylinSoft hedron-domain-hook DBus init_kcm access controlKylinSoft hedron-domain-hook
Medium, low and unrated 83
- CVE-2023-49086Cacti is vulnerable to cross-Site scripting (XSS) DOMcacti
- CVE-2023-48308Calendar app returns full stacktrace when an error happens while editing appointmentnextcloud security-advisories
- CVE-2023-48298Integer underflow leading to stack overflow in FPC codec decompressionClickHouse
- CVE-2023-7051PHPGurukul Online Notes Sharing System manage-notes.php cross-site request forgeryPHPGurukul Online Notes Sharing System
- CVE-2023-7050PHPGurukul Online Notes Sharing System profile.php cross site scriptingPHPGurukul Online Notes Sharing System
- CVE-2023-27319 CVE-2023-27319 Information Disclosure Vulnerability in ONTAP MediatorNetApp ONTAP Mediator
- CVE-2023-51380Incorrect Authorization allows Read Access to Issue Comments in GitHub Enterprise ServerGitHub Enterprise Server
- CVE-2023-51379Incorrect Authorization for Issue Comments in GitHub Enterprise Server GitHub Enterprise Server
- CVE-2023-46649Race Condition allows Administrative Access on Organization RepositoriesGitHub Enterprise Server
- CVE-2023-6804Improper Privilege Management allows for arbitrary workflows to be runGitHub Enterprise Server
- CVE-2023-6803Race Condition allows Unauthorized Outside CollaboratorGitHub Enterprise Server
- CVE-2023-46645Path traversal in GitHub Enterprise Server leading to arbitrary file reading when building a GitHub Pages siteGitHub Enterprise Server
- CVE-2023-6690A race condition in GitHub Enterprise Server allowed an existing admin to maintain permissions on transferred repositories by making a GraphGitHub Enterprise Server
- CVE-2023-46646Improper access control in all versions of GitHub Enterprise Server allows unauthorized users to view private repository names via the "Get GitHub Enterprise Server
- CVE-2023-41097Potential Timing vulnerability in CBC PKCS7 padding calculationssilabs.com GSDK
- CVE-2023-7042Kernel: null pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()Red Hat Enterprise Linux
- CVE-2023-7041codelyfe Stupid Simple CMS rename.php path traversalcodelyfe Stupid Simple CMS
- CVE-2023-7040codelyfe Stupid Simple CMS rename.php path traversalcodelyfe Stupid Simple CMS
- CVE-2023-7039Byzoro S210 importexport.php injectionByzoro S210
- CVE-2023-49765WordPress Rate my Post – WP Rating System Plugin <= 3.4.1 is vulnerable to Insecure Direct Object References (IDOR)Blaz K. Rate my Post – WP Rating System
- CVE-2023-47191WordPress Youzify Plugin <= 1.2.2 is vulnerable to Insecure Direct Object References (IDOR)KaineLabs Youzify – BuddyPress Community, User Profile, Soc…
- CVE-2023-32799WordPress WooCommerce Ship to Multiple Addresses Plugin <= 3.8.3 is vulnerable to Insecure Direct Object References (IDOR)WooCommerce Shipping Multiple Addresses
- CVE-2023-32747WordPress WooCommerce Bookings Plugin <= 1.15.78 is vulnerable to Insecure Direct Object References (IDOR)WooCommerce Bookings
- CVE-2023-50834WordPress WooCommerce Menu Extension Plugin <= 1.6.2 is vulnerable to Cross Site Scripting (XSS)August Infotech WooCommerce Menu Extension
- CVE-2023-50833WordPress Colibri Page Builder Plugin <= 1.0.239 is vulnerable to Cross Site Scripting (XSS)ExtendThemes Colibri Page Builder
- CVE-2023-7038automad User Creation cross-site request forgeryautomad · automad/automad
- CVE-2023-50832WordPress Multi Step Form Plugin <= 1.7.13 is vulnerable to Cross Site Scripting (XSS)Mondula Multi Step Form
- CVE-2023-50831WordPress CURCY Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS)VillaTheme CURCY – Multi Currency for WooCommerce
- CVE-2023-50830WordPress Seos Contact Form Plugin <= 1.8.0 is vulnerable to Cross Site Scripting (XSS)Seosbg Seos Contact Form
- CVE-2023-50829WordPress Loan Repayment Calculator and Application Form Plugin <= 2.9.3 is vulnerable to Cross Site Scripting (XSS)Aerin Loan Repayment Calculator and Application Form
- CVE-2023-7037automad FileController.php import server-side request forgeryautomad · automad/automad
- CVE-2023-40058Sensitive Information Disclosure Vulnerability SolarWinds Access Rights Manager
- CVE-2023-4255W3m: out-of-bounds write in function checktype() in etc.c (incomplete fix for cve-2022-38223)w3m · Fedora
- CVE-2023-4256Tcpreplay: tcprewrite: double free in tcpedit_dlt_cleanup() in plugins/dlt_plugins.ctcpreplay · Fedora Extra Packages for Enterprise Linux +1
- CVE-2023-7036automad Content Type FileCollectionController.php upload unrestricted uploadautomad
- CVE-2023-50724Resque vulnerable to reflected cross site scripting through pathname resque
- CVE-2023-50828WordPress Ultimate Dashboard Plugin <= 3.7.11 is vulnerable to Cross Site Scripting (XSS)David Vongries Ultimate Dashboard – Custom WordPress Dashbo…
- CVE-2023-50827WordPress Accredible Certificates & Open Badges Plugin <= 1.4.8 is vulnerable to Cross Site Scripting (XSS)Accredible Certificates & Open Badges
- CVE-2023-50826WordPress Menu Image, Icons made easy Plugin <= 3.10 is vulnerable to Cross Site Scripting (XSS)Freshlight Lab Menu Image, Icons made easy
- CVE-2023-50825WordPress iframe Shortcode Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)Terrier Tenacity iframe Shortcode
- CVE-2023-7047 Inadequate validation of permissions when employing remote tools and macros via the context menu within Devolutions Remote Desktop ManagerDevolutions Remote Desktop Manager
- CVE-2023-50824WordPress Insert or Embed Articulate Content into WordPress Plugin <= 4.3000000021 is vulnerable to Cross Site Scripting (XSS)Brian Batt Insert or Embed Articulate Content into WordPress
- CVE-2023-50823WordPress CSS & JavaScript Toolbox Plugin <= 11.7 is vulnerable to Cross Site Scripting (XSS)Wipeout Media CSS & JavaScript Toolbox
- CVE-2023-50822WordPress Currency Converter Widget Plugin <= 3.0.2 is vulnerable to Cross Site Scripting (XSS)Currency.Wiki Currency Converter Widget – Exchange Rates
- CVE-2023-7035automad Setting post.php cross site scriptingautomad
- CVE-2023-50377WordPress Simple Counter Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)AB-WP Simple Counter
- CVE-2023-47527WordPress WP Edit Username Plugin <= 1.0.5 is vulnerable to Cross Site Scripting (XSS)Sajjad Hossain Sagor WP Edit Username
- CVE-2023-47525WordPress Event Management Tickets Booking Plugin <= 1.3.2 is vulnerable to Cross Site Scripting (XSS)A WP Life Event Monster – Event Management, Tickets Booking…
- CVE-2023-22674WordPress Dashicons + Custom Post Types Plugin <= 1.0.2 is vulnerable to Broken Access ControlHal Gatewood Dashicons + Custom Post Types
- CVE-2023-28421WordPress WordPress Email Marketing Plugin – WP Email Capture Plugin <= 3.10 is vulnerable to Sensitive Data ExposureWinwar Media WordPress Email Marketing Plugin – WP Email Ca…
- CVE-2023-2487WordPress WP Ultimate Exporter Plugin <= 2.4.1 is vulnerable to Sensitive Data ExposureSmackcoders Export All Posts, Products, Orders, Refunds & U…
- CVE-2023-49162WordPress BigCommerce Plugin <= 5.0.6 is vulnerable to Sensitive Data ExposureBigCommerce For WordPress
- CVE-2023-6122Reflected XSS in Softomi E-commerce Softwareİstanbul Soft Informatics and Consultancy Limited Company S…
- CVE-2023-49762WordPress AppMySite Plugin <= 3.11.0 is vulnerable to Sensitive Data ExposureAppMySite – Create an app with the Best Mobile App Builder
- CVE-2022-45377WordPress Drag and Drop Multiple File Upload for WooCommerce Plugin <= 1.0.8 is vulnerable to Multiple VulnerabilitiesGlen Don L. Mongaya Drag and Drop Multiple File Upload for…
- CVE-2023-51656Apache IoTDB: Unsafe deserialize map in Sync ToolApache Software Foundation Apache IoTDB · org.apache.iotdb:…
- CVE-2023-51655In JetBrains IntelliJ IDEA before 2023.3.2 code execution was possible in Untrusted Project mode via a malicious plugin repository specifiedJetBrains IntelliJ IDEA
- CVE-2023-5989Stored XSS in Uyumsoft ERPUyumsoft Information System and Technologies LioXERP
- CVE-2023-5988Reflected XSS in Uyumsoft ERPUyumsoft Information System and Technologies LioXERP
- CVE-2023-48291Apache Airflow: Improper access control to DAG resourcesApache Software Foundation Apache Airflow · apache-airflow
- CVE-2023-50783Apache Airflow: Improper access control vulnerability on the "varimport" endpointApache Software Foundation Apache Airflow · apache-airflow
- CVE-2023-47265Apache Airflow: DAG Params alllow to embed unchecked JavascriptApache Software Foundation Apache Airflow · apache-airflow
- CVE-2023-49920Apache Airflow: Missing CSRF protection on DAG/triggerApache Software Foundation Apache Airflow · apache-airflow
- CVE-2023-2585Keycloak: client access via device auth request spoofRed Hat Single Sign-On · Red Hat RHEL-8 based Middleware… +2
- CVE-2023-7026Lightxun IPTV Gateway web_upload_template.html unrestricted uploadLightxun IPTV Gateway
- CVE-2023-7023Tongda OA 2017 delete.php sql injectionTongda OA
- CVE-2023-7022Tongda OA 2017 delete_all.php sql injectionTongda OA
- CVE-2023-28025An HTML injection vulnerability can affect HCL BigFix Mobile / Modern Client Management HCL Software HCL BigFix Mobile / Modern Client Management
- CVE-2023-7021Tongda OA 2017 delete_search.php sql injectionTongda OA
- CVE-2023-45700HCL Launch is susceptible to an HTML injection vulnerabilityHCL Software HCL Launch
- CVE-2023-7020Tongda OA 2017 view.php sql injectionTongda OA
- CVE-2023-29485An issue was discovered in Heimdal Thor agent versions 3.4.2 and before on Windows and 2.6.9 and before on macOS, allows attackers to bypass
- CVE-2023-29487An issue was discovered in Heimdal Thor agent versions 3.4.2 and before on Windows and 2.6.9 and before on macOS, allows attackers to cause
- CVE-2023-48114SmarterTools SmarterMail 8495 through 8664 before 8747 allows stored XSS by using image/svg+xml and an uploaded SVG document.
- CVE-2023-48115SmarterTools SmarterMail 8495 through 8664 before 8747 allows stored DOM XSS because an XSS protection mechanism is skipped when messageHTML
- CVE-2023-48116SmarterTools SmarterMail 8495 through 8664 before 8747 allows stored XSS via a crafted description of a Calendar appointment.
- CVE-2023-50473Cross-Site Scripting (XSS) vulnerability in bill-ahmed qbit-matUI version 1.16.4, allows remote attackers to obtain sensitive information vi
- CVE-2023-50475An issue was discovered in bcoin-org bcoin version 2.2.0, allows remote attackers to obtain sensitive information via weak hashing algorithmbsock
- CVE-2023-50477An issue was discovered in nos client version 0.6.6, allows remote attackers to escalate privileges via getRPCEndpoint.js.
- CVE-2023-50481An issue was discovered in blinksocks version 3.3.8, allows remote attackers to obtain sensitive information via weak encryption algorithms blinksocks
- CVE-2023-51048S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the A_newsauth parameter at /admin/ajax.php.
- CVE-2023-51049S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the A_bbsauth parameter at /admin/ajax.php.
- CVE-2023-51050S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the A_productauth parameter at /admin/ajax.php.