CVEs published December 22, 2023
79 CVEs were published on December 22, 2023: 4 critical, 19 high.
- Published
- 79
- Critical
- 4
- High
- 19
- Medium
- 22
- Low
- 7
- Unrated
- 27
- Now in CISA KEV
- 0
- Fix available
- 28
Most affected products
- cacti
- 4
- PHPGurukul Online Notes Sharing System
- 4
- dromara hertzbeat
- 3
- nextcloud security-advisories
- 3
- awslabs sandbox-accounts-for-events
- 2
- code-projects Faculty Management System
- 2
- Dell CPG BIOS
- 2
- pymedusa Medusa
- 2
- resque
- 2
- yiisoft yii2-authclient · yiisoft/yii2-authclient
- 2
Critical 4
- CVE-2023-50731MindsDB has arbitrary file write in file.pymindsdb
- CVE-2023-50254Deepin Reader RCE vulnerability due to a design flawlinuxdeepin developer-center
- CVE-2023-51018TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘opmode’ parameter of the setWiFiA
- CVE-2023-51707MotionPro in Array ArrayOS AG before 9.4.0.505 on AG and vxAG allows remote command execution via crafted packets.
High 19
- CVE-2023-51386Sandbox Accounts for Events vulnerable to privilege escalation to read running events dataawslabs sandbox-accounts-for-events
- CVE-2023-50928 sandbox-accounts-for-events security misconfiguration leads to budget exceedawslabs sandbox-accounts-for-events
- CVE-2023-51650Unauthorized access vulnerability on three interfacesdromara hertzbeat
- CVE-2023-51387Expression Injection Vulnerability in Hertzbeatdromara hertzbeat
- CVE-2023-50924Stored XSS in Overview and Output fieldsengelsystem
- CVE-2023-50730Grackle has StackOverflowError in GraphQL query processingtypelevel grackle · org.typelevel:grackle-core_2.13 +11
- CVE-2023-43088 Dell Client BIOS contains a pre-boot direct memory access (DMA) vulnerability.Dell CPG BIOS
- CVE-2023-51448SQL Injection vulnerability when managing SNMP Notification Receiverscacti
- CVE-2023-49085Cacti SQL Injection vulnerabilitycacti
- CVE-2023-42017IBM Planning Analytics file uploadIBM Planning Analytics
- CVE-2023-48670 Dell SupportAssist for Home PCs version 3.14.1 and prior versions contain a privilege escalation vulnerability in the installer.Dell SupportAssist Client Consumer
- CVE-2023-48704Unauthenticated heap buffer overflow in Gorrila codec decompressionClickHouse
- CVE-2022-39337Permission bypass due to incorrect configuration in github.com/dromara/hertzbeatdromara hertzbeat
- CVE-2023-51661Filesystem sandbox not enforced in wasmer-cliwasmerio wasmer · wasmer-cli
- CVE-2023-49356A stack buffer overflow vulnerability in MP3Gain v1.6.2 allows an attacker to cause a denial of service via the WriteMP3GainAPETag function
- CVE-2023-49391An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service (DoS) on Agithub.com/free5gc/amf
- CVE-2023-51014TOTOLINK EX1800T V9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanSecDns parameter’ of the setLan
- CVE-2023-51025TOTOlink EX1800T V9.1.0cu.2112_B20220316 is vulnerable to an unauthorized arbitrary command execution in the ‘admuser’ parameter of the setP
- CVE-2023-51034TOTOlink EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary command execution via the cstecgi.cgi UploadFirmwareFile interface.
Medium, low and unrated 56
- CVE-2023-51651Potential URI resolution path traversal in the AWS SDK for PHPaws-sdk-php · github.com/beam-cloud/beta9 +1
- CVE-2023-51451SSRF in symbolicator via invalid protocolgetsentry symbolicator
- CVE-2023-51449Make the `/file` secure against file traversal attacksgradio-app gradio · gradio
- CVE-2023-50727Resque vulnerable to reflected XSS in Queue Endpointresque
- CVE-2023-50725Resque vulnerable to reflected XSS in resque-web failed and queues listsresque
- CVE-2023-50712Improper Neutralization of Alternate XSS Syntax in iris-web dfir-iris iris-web
- CVE-2023-50714The Oauth2 PKCE implementation is vulnerableyiisoft yii2-authclient · yiisoft/yii2-authclient
- CVE-2023-50708yii2-authclient vulnerable to possible timing attack on string comparison in OAuth1, OAuth2 and OpenID Connect implementationyiisoft yii2-authclient · yiisoft/yii2-authclient
- CVE-2023-39251 Dell BIOS contains an Improper Input Validation vulnerability.Dell CPG BIOS
- CVE-2023-50259Blind SSRF in /home/testslack endpoint pymedusa Medusa
- CVE-2023-50258Blind SSRF in `/home/testdiscord` endpointpymedusa Medusa
- CVE-2023-51649Nautobot missing object-level permissions enforcement when running Job Buttonsnautobot
- CVE-2023-50250Cross-Site Scripting vulnerability when Import xml template filecacti
- CVE-2023-49792Bruteforce protection can be bypassed with misconfigured proxynextcloud security-advisories
- CVE-2023-51662Snowflake Connector .NET does not properly check the Certificate Revocation List (CRL)snowflakedb snowflake-connector-net · Snowflake.Data
- CVE-2023-49791Workflows do not require password confirmation on API levelnextcloud security-advisories
- CVE-2023-49790App PIN code can be bypassed in Nextcloud Files iOSnextcloud security-advisories
- CVE-2023-49088Cacti has incomplete fix for CVE-2023-39515cacti
- CVE-2023-45165IBM AIX denial of serviceIBM AIX
- CVE-2023-7076slawkens MyAAC bugtracker.php cross site scriptingslawkens MyAAC
- CVE-2023-7075code-projects Point of Sales and Inventory Management System checkout.php cross site scriptingcode-projects Point of Sales and Inventory Management System
- CVE-2023-7059SourceCodester School Visitor Log e-Book log-book.php cross site scriptingSourceCodester School Visitor Log e-Book
- CVE-2023-7058SourceCodester Simple Student Attendance System path traversalSourceCodester Simple Student Attendance System
- CVE-2023-7057code-projects Faculty Management System yearlevel.php cross site scriptingcode-projects Faculty Management System
- CVE-2023-7056code-projects Faculty Management System subjects.php cross site scriptingcode-projects Faculty Management System
- CVE-2023-7055PHPGurukul Online Notes Sharing System Contact Information profile.php access controlPHPGurukul Online Notes Sharing System
- CVE-2023-7054PHPGurukul Online Notes Sharing System add-notes.php unrestricted uploadPHPGurukul Online Notes Sharing System
- CVE-2023-7053PHPGurukul Online Notes Sharing System signup.php weak passwordPHPGurukul Online Notes Sharing System
- CVE-2023-7052PHPGurukul Online Notes Sharing System profile.php cross-site request forgeryPHPGurukul Online Notes Sharing System
- CVE-2022-47532FileRun 20220519 allows SQL Injection via the "dir" parameter in a /?module=users§ion=cpanel&page=list request.
- CVE-2023-24609Matrix SSL 4.x through 4.6.0 and Rambus TLS Toolkit have a length-subtraction integer overflow for Client Hello Pre-Shared Key extension par
- CVE-2023-42465Sudo before 1.9.15 might allow row hammer attacks (for authentication bypass or privilege escalation) because application logic sometimes is
- CVE-2023-43116A symbolic link following vulnerability in Buildkite Elastic CI for AWS versions prior to 6.7.1 and 5.22.5 allows the buildkite-agent user tgithub.com/buildkite/elastic-ci-stack-for-aws/v6
- CVE-2023-43741A time-of-check-time-of-use race condition vulnerability in Buildkite Elastic CI for AWS versions prior to 6.7.1 and 5.22.5 allows the buildgithub.com/buildkite/elastic-ci-stack-for-aws/v6 · githu… +1
- CVE-2023-45957A stored cross-site scripting (XSS) vulnerability in the component admin/AdminRequestSqlController.php of thirty bees before 1.5.0 allows at
- CVE-2023-50147There is an arbitrary command execution vulnerability in the setDiagnosisCfg function of the cstecgi .cgi of the TOTOlink A3700R router devi
- CVE-2023-51011TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanPriDns parameter’ of the setLan
- CVE-2023-51012TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanGateway parameter’ of the setLa
- CVE-2023-51013TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanNetmask parameter’ of the setLa
- CVE-2023-51015TOTOLINX EX1800T v9.1.0cu.2112_B20220316 is vulnerable to arbitrary command execution in the ‘enable parameter’ of the setDmzCfg interface o
- CVE-2023-51016TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the setRebootScheCfg interface of the
- CVE-2023-51017TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanIp parameter’ of the setLanConf
- CVE-2023-51019TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘key5g’ parameter of the setWiFiEx
- CVE-2023-51020TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘langType’ parameter of the setLan
- CVE-2023-51021TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘merge’ parameter of the setRptWiz
- CVE-2023-51022TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘langFlag’ parameter of the setLan
- CVE-2023-51023TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to arbitrary command execution in the ‘host_time’ parameter of the NTPSyncWithHost in
- CVE-2023-51024TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘tz’ parameter of the setNtpCfg in
- CVE-2023-51026TOTOlink EX1800T V9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘hour’ parameter of the setRebootS
- CVE-2023-51027TOTOlink EX1800T V9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘apcliAuthMode’ parameter of the s
- CVE-2023-51028TOTOLINK EX1800T 9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the apcliChannel parameter of the setWi
- CVE-2023-51033TOTOlink EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary command execution via the cstecgi.cgi setOpModeCfg interface.
- CVE-2023-51035TOTOLINK EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary command execution on the cstecgi.cgi NTPSyncWithHost interface.
- CVE-2023-51704An issue was discovered in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2.
- CVE-2023-51708Bentley eB System Management Console applications within Assetwise Integrity Information Server allow an unauthenticated user to view config
- CVE-2023-51713make_ftp_cmd in main.c in ProFTPD before 1.3.8a has a one-byte out-of-bounds read, and daemon crash, because of mishandling of quote/backsla