CVEs published December 23, 2023
12 CVEs were published on December 23, 2023: 1 critical, 4 high.
- Published
- 12
- Critical
- 1
- High
- 4
- Medium
- 6
- Low
- 1
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- inisev BackupBliss – Backup & Migration with Free Cloud Sto…
- 2
- Moxa ioLogik E1200 Series
- 2
- Deis Workflow Manager · github.com/deis/workflow-manager
- 1
- Elegant Themes Divi
- 1
- instipod DuoUniversalKeycloakAuthenticator
- 1
- kevinlangleyjr Widget Settings Importer/Exporter
- 1
- migrate Backup Migration
- 1
- Red Hat Enterprise Linux · Red Hat Cryostat
- 1
- sudo · Red Hat Enterprise Linux +1
- 1
- w3c online-spellchecker-py
- 1
Critical 1
High 4
- CVE-2020-36769Widget Settings Importer/Exporter Plugin <= 1.5.3 - Unauthorized Widget Import to Stored Cross-Site Scriptingkevinlangleyjr Widget Settings Importer/Exporter
- CVE-2023-5961ioLogik E1200 Series: Cross-Site Request Forgery (CSRF) VulnerabilityMoxa ioLogik E1200 Series
- CVE-2023-7002Backup Migration <= 1.3.9 - Authenticated (Admin+) OS Command Injection via urlinisev BackupBliss – Backup & Migration with Free Cloud Sto…
- CVE-2023-6971The Backup Migration plugin for WordPress is vulnerable to Remote File Inclusion in versions 1.0.8 to 1.3.9 via the 'content-dir' HTTP heademigrate Backup Migration
Medium, low and unrated 7
- CVE-2023-7090Sudo: improper handling of ipa_hostname leads to privilege mismanagementsudo · Red Hat Enterprise Linux +1
- CVE-2023-49594An information disclosure vulnerability exists in the challenge functionality of instipod DuoUniversalKeycloakAuthenticator 1.0.7 plugin.instipod DuoUniversalKeycloakAuthenticator
- CVE-2016-15036Deis Workflow Manager race conditionDeis Workflow Manager · github.com/deis/workflow-manager
- CVE-2014-125108w3c online-spellchecker-py spellchecker cross site scriptingw3c online-spellchecker-py
- CVE-2023-7008Systemd-resolved: unsigned name response in signed zone is not refused when dnssec=yesRed Hat Enterprise Linux · Red Hat Cryostat
- CVE-2023-6744Divi <= 4.23.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeElegant Themes Divi
- CVE-2023-5962ioLogik E1200 Series: Weak Cryptographic Algorithm VulnerabilityMoxa ioLogik E1200 Series