# CVEs published 2023-12-21

125 CVEs were published on December 21, 2023: 17 critical, 25 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2023-49086](https://cve.now/CVE-2023-49086.md): Cacti is vulnerable to cross-Site scripting (XSS) DOM (CVSS 5.4, cacti)
- [CVE-2023-49689](https://cve.now/CVE-2023-49689.md): Job Portal v1.0 - Multiple Unauthenticated SQL Injections (SQLi) (CVSS 9.8, Kashipara Group Job Portal)
- [CVE-2023-49688](https://cve.now/CVE-2023-49688.md): Job Portal v1.0 - Multiple Unauthenticated SQL Injections (SQLi) (CVSS 9.8, Kashipara Group Job Portal)
- [CVE-2023-48308](https://cve.now/CVE-2023-48308.md): Calendar app returns full stacktrace when an error happens while editing appointment (CVSS 3.5, nextcloud security-advisories)
- [CVE-2023-48298](https://cve.now/CVE-2023-48298.md): Integer underflow leading to stack overflow in FPC codec decompression (CVSS 5.9, ClickHouse)
- [CVE-2023-49681](https://cve.now/CVE-2023-49681.md): Job Portal v1.0 - Multiple Unauthenticated SQL Injections (SQLi) (CVSS 9.8, Kashipara Group Job Portal)
- [CVE-2023-49084](https://cve.now/CVE-2023-49084.md): Local File Inclusion (RCE) in Cacti (CVSS 8.1, cacti)
- [CVE-2023-49677](https://cve.now/CVE-2023-49677.md): Job Portal v1.0 - Multiple Unauthenticated SQL Injections (SQLi) (CVSS 9.8, Kashipara Group Job Portal)
- [CVE-2023-7024](https://cve.now/CVE-2023-7024.md): Heap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a remote attacker to potentially exploit heap corruption via (CVSS 8.8, KEV, Google Chrome)
- [CVE-2023-37520](https://cve.now/CVE-2023-37520.md): HCL BigFix Platform is affected by Unathenticated Stored Cross-Site Scripting (XSS) (CVSS 7.7, HCL Software HCL BigFix Platform)
- [CVE-2023-7051](https://cve.now/CVE-2023-7051.md): PHPGurukul Online Notes Sharing System manage-notes.php cross-site request forgery (CVSS 4.3, PHPGurukul Online Notes Sharing System)
- [CVE-2023-37519](https://cve.now/CVE-2023-37519.md): HCL BigFix Platform is affected by Unathenticated Stored Cross-Site Scripting (XSS) (CVSS 7.7, HCL Software HCL BigFix Platform)
- [CVE-2023-7050](https://cve.now/CVE-2023-7050.md): PHPGurukul Online Notes Sharing System profile.php cross site scripting (CVSS 3.5, PHPGurukul Online Notes Sharing System)
- [CVE-2023-27319](https://cve.now/CVE-2023-27319.md): CVE-2023-27319 Information Disclosure Vulnerability in ONTAP Mediator (CVSS 5.3, NetApp ONTAP Mediator)
- [CVE-2023-48722](https://cve.now/CVE-2023-48722.md): Student Result Management System v1.0 - Multiple Unauthenticated SQL Injections (SQLi) (CVSS 9.8, Projectworlds Pvt. Limited Student Result Management System)
- [CVE-2023-48720](https://cve.now/CVE-2023-48720.md): Student Result Management System v1.0 - Multiple Unauthenticated SQL Injections (SQLi) (CVSS 9.8, Projectworlds Pvt. Limited Student Result Management System)
- [CVE-2023-48718](https://cve.now/CVE-2023-48718.md): Student Result Management System v1.0 - Multiple Unauthenticated SQL Injections (SQLi) (CVSS 9.8, Projectworlds Pvt. Limited Student Result Management System)
- [CVE-2023-48716](https://cve.now/CVE-2023-48716.md): Student Result Management System v1.0 - Multiple Unauthenticated SQL Injections (SQLi) (CVSS 9.8, Projectworlds Pvt. Limited Student Result Management System)
- [CVE-2023-48689](https://cve.now/CVE-2023-48689.md): Railway Reservation System v1.0 - Multiple Unauthenticated SQL Injections (SQLi) (CVSS 9.8, Projectworlds Pvt. Limited Railway Reservation System)
- [CVE-2023-6847](https://cve.now/CVE-2023-6847.md): Improper Authentication in GitHub Enterprise Server leading to Authentication Bypass for Public Repository Data (CVSS 7.5, GitHub Enterprise Server)
- [CVE-2023-51380](https://cve.now/CVE-2023-51380.md): Incorrect Authorization allows Read Access to Issue Comments in GitHub Enterprise Server (CVSS 2.7, GitHub Enterprise Server)
- [CVE-2023-51379](https://cve.now/CVE-2023-51379.md): Incorrect Authorization for Issue Comments in GitHub Enterprise Server (CVSS 4.9, GitHub Enterprise Server)
- [CVE-2023-46648](https://cve.now/CVE-2023-46648.md): Insufficient Entropy in GitHub Enterprise Server Management Console Invitation Token (CVSS 8.3, GitHub Enterprise Server)
- [CVE-2023-46649](https://cve.now/CVE-2023-46649.md): Race Condition allows Administrative Access on Organization Repositories (CVSS 6.3, GitHub Enterprise Server)
- [CVE-2023-6804](https://cve.now/CVE-2023-6804.md): Improper Privilege Management allows for arbitrary workflows to be run (CVSS 6.5, GitHub Enterprise Server)
- [CVE-2023-6803](https://cve.now/CVE-2023-6803.md): Race Condition allows Unauthorized Outside Collaborator (CVSS 5.8, GitHub Enterprise Server)
- [CVE-2023-6802](https://cve.now/CVE-2023-6802.md): Sensitive Information in Log File in GitHub Enterprise Server (CVSS 7.2, GitHub Enterprise Server)
- [CVE-2023-6746](https://cve.now/CVE-2023-6746.md): Sensitive Information in Log File in GitHub Enterprise Server (CVSS 8.1, GitHub Enterprise Server)
- [CVE-2023-46645](https://cve.now/CVE-2023-46645.md): Path traversal in GitHub Enterprise Server leading to arbitrary file reading when building a GitHub Pages site (CVSS 6.8, GitHub Enterprise Server)
- [CVE-2023-6690](https://cve.now/CVE-2023-6690.md): A race condition in GitHub Enterprise Server allowed an existing admin to maintain permissions on transferred repositories by making a Graph (CVSS 3.9, GitHub Enterprise Server)
- [CVE-2023-46647](https://cve.now/CVE-2023-46647.md): Improper Privilege Management in GitHub Enterprise Server management console leads to privilege escalation (CVSS 8.0, GitHub Enterprise Server)
- [CVE-2023-46646](https://cve.now/CVE-2023-46646.md): Improper access control in all versions of GitHub Enterprise Server allows unauthorized users to view private repository names via the "Get (CVSS 5.3, GitHub Enterprise Server)
- [CVE-2023-48687](https://cve.now/CVE-2023-48687.md): Railway Reservation System v1.0 - Multiple Unauthenticated SQL Injections (SQLi) (CVSS 9.8, Projectworlds Pvt. Limited Railway Reservation System)
- [CVE-2023-41097](https://cve.now/CVE-2023-41097.md): Potential Timing vulnerability in CBC PKCS7 padding calculations (CVSS 4.6, silabs.com GSDK)
- [CVE-2023-48685](https://cve.now/CVE-2023-48685.md): Railway Reservation System v1.0 - Multiple Unauthenticated SQL Injections (SQLi) (CVSS 9.8, Projectworlds Pvt. Limited Railway Reservation System)
- [CVE-2023-7042](https://cve.now/CVE-2023-7042.md): Kernel: null pointer dereference in ath10k\_wmi\_tlv\_op\_pull\_mgmt\_tx\_compl\_ev() (CVSS 4.4, Red Hat Enterprise Linux)
- [CVE-2023-6546](https://cve.now/CVE-2023-6546.md): Kernel: gsm multiplexing race condition leads to privilege escalation (CVSS 7.0, Red Hat Enterprise Linux · Red Hat Virtualization 4 for… +1)
- [CVE-2023-7041](https://cve.now/CVE-2023-7041.md): codelyfe Stupid Simple CMS rename.php path traversal (CVSS 5.4, codelyfe Stupid Simple CMS)
- [CVE-2023-50732](https://cve.now/CVE-2023-50732.md): Velocity execution without script right through tree macro (CVSS 8.3, xwiki-platform · org.xwiki.platform:xwiki-platform-index-tr…)
- [CVE-2023-7040](https://cve.now/CVE-2023-7040.md): codelyfe Stupid Simple CMS rename.php path traversal (CVSS 4.3, codelyfe Stupid Simple CMS)
- [CVE-2023-44482](https://cve.now/CVE-2023-44482.md): Leave Management System Project v1.0 - Multiple Authenticated SQL Injections (SQLi) (CVSS 8.8, Projectworlds Pvt. Limited Leave Management System Project)
- [CVE-2023-44481](https://cve.now/CVE-2023-44481.md): Leave Management System Project v1.0 - Multiple Authenticated SQL Injections (SQLi) (CVSS 8.8, Projectworlds Pvt. Limited Leave Management System Project)
- [CVE-2023-7039](https://cve.now/CVE-2023-7039.md): Byzoro S210 importexport.php injection (CVSS 6.3, Byzoro S210)
- [CVE-2023-49765](https://cve.now/CVE-2023-49765.md): WordPress Rate my Post – WP Rating System Plugin \<= 3.4.1 is vulnerable to Insecure Direct Object References (IDOR) (CVSS 4.3, Blaz K. Rate my Post – WP Rating System)
- [CVE-2023-47191](https://cve.now/CVE-2023-47191.md): WordPress Youzify Plugin \<= 1.2.2 is vulnerable to Insecure Direct Object References (IDOR) (CVSS 6.5, KaineLabs Youzify – BuddyPress Community, User Profile, Soc…)
- [CVE-2023-32799](https://cve.now/CVE-2023-32799.md): WordPress WooCommerce Ship to Multiple Addresses Plugin \<= 3.8.3 is vulnerable to Insecure Direct Object References (IDOR) (CVSS 6.5, WooCommerce Shipping Multiple Addresses)
- [CVE-2023-32747](https://cve.now/CVE-2023-32747.md): WordPress WooCommerce Bookings Plugin \<= 1.15.78 is vulnerable to Insecure Direct Object References (IDOR) (CVSS 5.4, WooCommerce Bookings)
- [CVE-2023-50834](https://cve.now/CVE-2023-50834.md): WordPress WooCommerce Menu Extension Plugin \<= 1.6.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, August Infotech WooCommerce Menu Extension)
- [CVE-2023-50833](https://cve.now/CVE-2023-50833.md): WordPress Colibri Page Builder Plugin \<= 1.0.239 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, ExtendThemes Colibri Page Builder)
- [CVE-2023-7038](https://cve.now/CVE-2023-7038.md): automad User Creation cross-site request forgery (CVSS 4.3, automad · automad/automad)
- [CVE-2023-50832](https://cve.now/CVE-2023-50832.md): WordPress Multi Step Form Plugin \<= 1.7.13 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Mondula Multi Step Form)
- [CVE-2023-50831](https://cve.now/CVE-2023-50831.md): WordPress CURCY Plugin \<= 2.2.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, VillaTheme CURCY – Multi Currency for WooCommerce)
- [CVE-2023-50830](https://cve.now/CVE-2023-50830.md): WordPress Seos Contact Form Plugin \<= 1.8.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Seosbg Seos Contact Form)
- [CVE-2023-50829](https://cve.now/CVE-2023-50829.md): WordPress Loan Repayment Calculator and Application Form Plugin \<= 2.9.3 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Aerin Loan Repayment Calculator and Application Form)
- [CVE-2023-7037](https://cve.now/CVE-2023-7037.md): automad FileController.php import server-side request forgery (CVSS 6.3, automad · automad/automad)
- [CVE-2023-45121](https://cve.now/CVE-2023-45121.md): Online Examination System v1.0 - Multiple Authenticated SQL Injections (SQLi) (CVSS 8.8, Projectworlds Pvt. Limited Online Examination System)
- [CVE-2023-45120](https://cve.now/CVE-2023-45120.md): Online Examination System v1.0 - Multiple Authenticated SQL Injections (SQLi) (CVSS 8.8, Projectworlds Pvt. Limited Online Examination System)
- [CVE-2023-40058](https://cve.now/CVE-2023-40058.md): Sensitive Information Disclosure Vulnerability (CVSS 6.5, SolarWinds Access Rights Manager)
- [CVE-2023-4255](https://cve.now/CVE-2023-4255.md): W3m: out-of-bounds write in function checktype() in etc.c (incomplete fix for cve-2022-38223) (CVSS 5.5, w3m · Fedora)
- [CVE-2023-45119](https://cve.now/CVE-2023-45119.md): Online Examination System v1.0 - Multiple Authenticated SQL Injections (SQLi) (CVSS 8.8, Projectworlds Pvt. Limited Online Examination System)
- [CVE-2023-4256](https://cve.now/CVE-2023-4256.md): Tcpreplay: tcprewrite: double free in tcpedit\_dlt\_cleanup() in plugins/dlt\_plugins.c (CVSS 5.5, tcpreplay · Fedora Extra Packages for Enterprise Linux +1)
- [CVE-2023-7036](https://cve.now/CVE-2023-7036.md): automad Content Type FileCollectionController.php upload unrestricted upload (CVSS 4.7, automad)
- [CVE-2023-45118](https://cve.now/CVE-2023-45118.md): Online Examination System v1.0 - Multiple Authenticated SQL Injections (SQLi) (CVSS 8.8, Projectworlds Pvt. Limited Online Examination System)
- [CVE-2023-45117](https://cve.now/CVE-2023-45117.md): Online Examination System v1.0 - Multiple Authenticated SQL Injections (SQLi) (CVSS 8.8, Projectworlds Pvt. Limited Online Examination System)
- [CVE-2023-45116](https://cve.now/CVE-2023-45116.md): Online Examination System v1.0 - Multiple Authenticated SQL Injections (SQLi) (CVSS 8.8, Projectworlds Pvt. Limited Online Examination System)
- [CVE-2023-45115](https://cve.now/CVE-2023-45115.md): Online Examination System v1.0 - Multiple Authenticated SQL Injections (SQLi) (CVSS 8.8, Projectworlds Pvt. Limited Online Examination System)
- [CVE-2023-51442](https://cve.now/CVE-2023-51442.md): Authentication bypass vulnerability in navidrome's subsonic endpoint (CVSS 8.6, navidrome · github.com/navidrome/navidrome)
- [CVE-2023-50724](https://cve.now/CVE-2023-50724.md): Resque vulnerable to reflected cross site scripting through pathname (CVSS 6.3, resque)
- [CVE-2023-50828](https://cve.now/CVE-2023-50828.md): WordPress Ultimate Dashboard Plugin \<= 3.7.11 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, David Vongries Ultimate Dashboard – Custom WordPress Dashbo…)
- [CVE-2023-50827](https://cve.now/CVE-2023-50827.md): WordPress Accredible Certificates & Open Badges Plugin \<= 1.4.8 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Accredible Certificates & Open Badges)
- [CVE-2023-50826](https://cve.now/CVE-2023-50826.md): WordPress Menu Image, Icons made easy Plugin \<= 3.10 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Freshlight Lab Menu Image, Icons made easy)
- [CVE-2023-50825](https://cve.now/CVE-2023-50825.md): WordPress iframe Shortcode Plugin \<= 2.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Terrier Tenacity iframe Shortcode)
- [CVE-2023-7047](https://cve.now/CVE-2023-7047.md): Inadequate validation of permissions when employing remote tools and macros via the context menu within Devolutions Remote Desktop Manager (no CVSS, Devolutions Remote Desktop Manager)
- [CVE-2023-50824](https://cve.now/CVE-2023-50824.md): WordPress Insert or Embed Articulate Content into WordPress Plugin \<= 4.3000000021 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Brian Batt Insert or Embed Articulate Content into WordPress)
- [CVE-2023-50823](https://cve.now/CVE-2023-50823.md): WordPress CSS & JavaScript Toolbox Plugin \<= 11.7 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Wipeout Media CSS & JavaScript Toolbox)
- [CVE-2023-50822](https://cve.now/CVE-2023-50822.md): WordPress Currency Converter Widget Plugin \<= 3.0.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Currency.Wiki Currency Converter Widget – Exchange Rates)
- [CVE-2023-7035](https://cve.now/CVE-2023-7035.md): automad Setting post.php cross site scripting (CVSS 4.8, automad)
- [CVE-2023-50377](https://cve.now/CVE-2023-50377.md): WordPress Simple Counter Plugin \<= 1.0.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, AB-WP Simple Counter)
- [CVE-2023-47527](https://cve.now/CVE-2023-47527.md): WordPress WP Edit Username Plugin \<= 1.0.5 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Sajjad Hossain Sagor WP Edit Username)
- [CVE-2023-47525](https://cve.now/CVE-2023-47525.md): WordPress Event Management Tickets Booking Plugin \<= 1.3.2 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, A WP Life Event Monster – Event Management, Tickets Booking…)
- [CVE-2023-22674](https://cve.now/CVE-2023-22674.md): WordPress Dashicons + Custom Post Types Plugin \<= 1.0.2 is vulnerable to Broken Access Control (CVSS 5.4, Hal Gatewood Dashicons + Custom Post Types)
- [CVE-2023-28421](https://cve.now/CVE-2023-28421.md): WordPress WordPress Email Marketing Plugin – WP Email Capture Plugin \<= 3.10 is vulnerable to Sensitive Data Exposure (CVSS 5.3, Winwar Media WordPress Email Marketing Plugin – WP Email Ca…)
- [CVE-2023-2487](https://cve.now/CVE-2023-2487.md): WordPress WP Ultimate Exporter Plugin \<= 2.4.1 is vulnerable to Sensitive Data Exposure (CVSS 5.9, Smackcoders Export All Posts, Products, Orders, Refunds & U…)
- [CVE-2023-48288](https://cve.now/CVE-2023-48288.md): WordPress WordPress Job Board and Recruitment Plugin – JobWP Plugin \<= 2.1 is vulnerable to Sensitive Data Exposure (CVSS 7.5, HM Plugin WordPress Job Board and Recruitment Plugin – JobWP)
- [CVE-2023-6145](https://cve.now/CVE-2023-6145.md): SQLi in Softomi E-commerce Software (CVSS 9.8, İstanbul Soft Informatics and Consultancy Limited Company S…)
- [CVE-2023-49162](https://cve.now/CVE-2023-49162.md): WordPress BigCommerce Plugin \<= 5.0.6 is vulnerable to Sensitive Data Exposure (CVSS 5.3, BigCommerce For WordPress)
- [CVE-2023-6122](https://cve.now/CVE-2023-6122.md): Reflected XSS in Softomi E-commerce Software (CVSS 6.1, İstanbul Soft Informatics and Consultancy Limited Company S…)
- [CVE-2023-49762](https://cve.now/CVE-2023-49762.md): WordPress AppMySite Plugin \<= 3.11.0 is vulnerable to Sensitive Data Exposure (CVSS 5.3, AppMySite – Create an app with the Best Mobile App Builder)
- [CVE-2022-45377](https://cve.now/CVE-2022-45377.md): WordPress Drag and Drop Multiple File Upload for WooCommerce Plugin \<= 1.0.8 is vulnerable to Multiple Vulnerabilities (CVSS 6.5, Glen Don L. Mongaya Drag and Drop Multiple File Upload for…)
- [CVE-2023-32242](https://cve.now/CVE-2023-32242.md): WordPress Woodmart Core Plugin \<= 1.0.36 is vulnerable to PHP Object Injection (CVSS 9.8, xTemos WoodMart - Multipurpose WooCommerce Theme)
- [CVE-2023-49778](https://cve.now/CVE-2023-49778.md): WordPress Sayfa Sayaç Plugin \<= 2.6 is vulnerable to PHP Object Injection (CVSS 10.0, Hakan Demiray Sayfa Sayac)
- [CVE-2023-49826](https://cve.now/CVE-2023-49826.md): WordPress Soledad Theme \<= 8.4.1 is vulnerable to PHP Object Injection (CVSS 8.1, PenciDesign Soledad – Multipurpose, Newspaper, Blog & WooCo…)
- [CVE-2023-51656](https://cve.now/CVE-2023-51656.md): Apache IoTDB: Unsafe deserialize map in Sync Tool (low (no CVSS), Apache Software Foundation Apache IoTDB · org.apache.iotdb:…)
- [CVE-2023-5594](https://cve.now/CVE-2023-5594.md): Improper following of a certificate's chain of trust in ESET security products (CVSS 7.5, ESET, spol. s r.o. ESET NOD32 Antivirus · ESET, spol. s… +10)
- [CVE-2023-51655](https://cve.now/CVE-2023-51655.md): In JetBrains IntelliJ IDEA before 2023.3.2 code execution was possible in Untrusted Project mode via a malicious plugin repository specified (CVSS 6.3, JetBrains IntelliJ IDEA)
- [CVE-2023-5989](https://cve.now/CVE-2023-5989.md): Stored XSS in Uyumsoft ERP (CVSS 6.1, Uyumsoft Information System and Technologies LioXERP)
- [CVE-2023-5988](https://cve.now/CVE-2023-5988.md): Reflected XSS in Uyumsoft ERP (CVSS 6.1, Uyumsoft Information System and Technologies LioXERP)
- [CVE-2023-48291](https://cve.now/CVE-2023-48291.md): Apache Airflow: Improper access control to DAG resources (no CVSS, Apache Software Foundation Apache Airflow · apache-airflow)
- [CVE-2023-50783](https://cve.now/CVE-2023-50783.md): Apache Airflow: Improper access control vulnerability on the "varimport" endpoint (low (no CVSS), Apache Software Foundation Apache Airflow · apache-airflow)
- [CVE-2023-47265](https://cve.now/CVE-2023-47265.md): Apache Airflow: DAG Params alllow to embed unchecked Javascript (low (no CVSS), Apache Software Foundation Apache Airflow · apache-airflow)
- [CVE-2023-49920](https://cve.now/CVE-2023-49920.md): Apache Airflow: Missing CSRF protection on DAG/trigger (no CVSS, Apache Software Foundation Apache Airflow · apache-airflow)
- [CVE-2023-2585](https://cve.now/CVE-2023-2585.md): Keycloak: client access via device auth request spoof (CVSS 3.5, Red Hat Single Sign-On · Red Hat RHEL-8 based Middleware… +2)
- [CVE-2023-7026](https://cve.now/CVE-2023-7026.md): Lightxun IPTV Gateway web\_upload\_template.html unrestricted upload (CVSS 4.3, Lightxun IPTV Gateway)
- [CVE-2023-7025](https://cve.now/CVE-2023-7025.md): KylinSoft hedron-domain-hook DBus init\_kcm access control (CVSS 7.8, KylinSoft hedron-domain-hook)
- [CVE-2023-7023](https://cve.now/CVE-2023-7023.md): Tongda OA 2017 delete.php sql injection (CVSS 6.3, Tongda OA)
- [CVE-2023-7022](https://cve.now/CVE-2023-7022.md): Tongda OA 2017 delete\_all.php sql injection (CVSS 6.3, Tongda OA)
- [CVE-2023-28025](https://cve.now/CVE-2023-28025.md): An HTML injection vulnerability can affect HCL BigFix Mobile / Modern Client Management (CVSS 6.6, HCL Software HCL BigFix Mobile / Modern Client Management)
- [CVE-2023-7021](https://cve.now/CVE-2023-7021.md): Tongda OA 2017 delete\_search.php sql injection (CVSS 6.3, Tongda OA)
- [CVE-2023-45700](https://cve.now/CVE-2023-45700.md): HCL Launch is susceptible to an HTML injection vulnerability (CVSS 4.3, HCL Software HCL Launch)
- [CVE-2023-7020](https://cve.now/CVE-2023-7020.md): Tongda OA 2017 view.php sql injection (CVSS 6.3, Tongda OA)
- [CVE-2023-29485](https://cve.now/CVE-2023-29485.md): An issue was discovered in Heimdal Thor agent versions 3.4.2 and before on Windows and 2.6.9 and before on macOS, allows attackers to bypass (no CVSS)
- [CVE-2023-29486](https://cve.now/CVE-2023-29486.md): An issue was discovered in Heimdal Thor agent versions 3.4.2 and before 3.7.0 on Windows, allows attackers to bypass USB access restrictions (CVSS 9.8)
- [CVE-2023-29487](https://cve.now/CVE-2023-29487.md): An issue was discovered in Heimdal Thor agent versions 3.4.2 and before on Windows and 2.6.9 and before on macOS, allows attackers to cause (no CVSS)
- [CVE-2023-48114](https://cve.now/CVE-2023-48114.md): SmarterTools SmarterMail 8495 through 8664 before 8747 allows stored XSS by using image/svg+xml and an uploaded SVG document. (no CVSS)
- [CVE-2023-48115](https://cve.now/CVE-2023-48115.md): SmarterTools SmarterMail 8495 through 8664 before 8747 allows stored DOM XSS because an XSS protection mechanism is skipped when messageHTML (no CVSS)
- [CVE-2023-48116](https://cve.now/CVE-2023-48116.md): SmarterTools SmarterMail 8495 through 8664 before 8747 allows stored XSS via a crafted description of a Calendar appointment. (no CVSS)
- [CVE-2023-50473](https://cve.now/CVE-2023-50473.md): Cross-Site Scripting (XSS) vulnerability in bill-ahmed qbit-matUI version 1.16.4, allows remote attackers to obtain sensitive information vi (no CVSS)
- [CVE-2023-50475](https://cve.now/CVE-2023-50475.md): An issue was discovered in bcoin-org bcoin version 2.2.0, allows remote attackers to obtain sensitive information via weak hashing algorithm (no CVSS, bsock)
- [CVE-2023-50477](https://cve.now/CVE-2023-50477.md): An issue was discovered in nos client version 0.6.6, allows remote attackers to escalate privileges via getRPCEndpoint.js. (no CVSS)
- [CVE-2023-50481](https://cve.now/CVE-2023-50481.md): An issue was discovered in blinksocks version 3.3.8, allows remote attackers to obtain sensitive information via weak encryption algorithms (no CVSS, blinksocks)
- [CVE-2023-51048](https://cve.now/CVE-2023-51048.md): S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the A\_newsauth parameter at /admin/ajax.php. (no CVSS)
- [CVE-2023-51049](https://cve.now/CVE-2023-51049.md): S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the A\_bbsauth parameter at /admin/ajax.php. (no CVSS)
- [CVE-2023-51050](https://cve.now/CVE-2023-51050.md): S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the A\_productauth parameter at /admin/ajax.php. (no CVSS)
- [CVE-2023-51051](https://cve.now/CVE-2023-51051.md): S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the A\_textauth parameter at /admin/ajax.php. (CVSS 9.8)
- [CVE-2023-51052](https://cve.now/CVE-2023-51052.md): S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the A\_formauth parameter at /admin/ajax.php. (CVSS 9.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-12-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.