# CVEs published 2023-12-25

66 CVEs were published on December 25, 2023: 6 critical, 10 high. Days are UTC.

- [CVE-2023-7107](https://cve.now/CVE-2023-7107.md): code-projects E-Commerce Website user\_signup.php sql injection (CVSS 7.3, code-projects E-Commerce Website)
- [CVE-2023-7106](https://cve.now/CVE-2023-7106.md): code-projects E-Commerce Website sql injection (CVSS 6.3, code-projects E-Commerce Website)
- [CVE-2023-7105](https://cve.now/CVE-2023-7105.md): code-projects E-Commerce Website index\_search.php sql injection (CVSS 4.7, code-projects E-Commerce Website)
- [CVE-2023-7104](https://cve.now/CVE-2023-7104.md): SQLite SQLite3 make alltest sqlite3session.c sessionReadRecord heap-based overflow (CVSS 5.5, SQLite3 · sqlite)
- [CVE-2023-7100](https://cve.now/CVE-2023-7100.md): PHPGurukul Restaurant Table Booking System bwdates-report-details.php sql injection (CVSS 5.3, PHPGurukul Restaurant Table Booking System)
- [CVE-2023-7099](https://cve.now/CVE-2023-7099.md): PHPGurukul Nipah Virus Testing Management System bwdates-report-result.php sql injection (CVSS 6.3, PHPGurukul Nipah Virus Testing Management System)
- [CVE-2023-49880](https://cve.now/CVE-2023-49880.md): IBM Financial Transaction Manager for SWIFT Services data manipulation (CVSS 7.5, IBM Financial Transaction Manager for SWIFT Services)
- [CVE-2021-38927](https://cve.now/CVE-2021-38927.md): IBM Aspera Console cross-site scripting (CVSS 7.2, IBM Aspera Console)
- [CVE-2023-43064](https://cve.now/CVE-2023-43064.md): IBM i code execution (CVSS 7.0, IBM i)
- [CVE-2023-7098](https://cve.now/CVE-2023-7098.md): icret EasyImages hide.php path traversal (CVSS 3.1, icret EasyImages)
- [CVE-2023-7097](https://cve.now/CVE-2023-7097.md): code-projects Water Billing System addbill.php sql injection (CVSS 6.3, code-projects Water Billing System)
- [CVE-2023-7096](https://cve.now/CVE-2023-7096.md): code-projects Faculty Management System crud.php sql injection (CVSS 5.1, code-projects Faculty Management System)
- [CVE-2023-7095](https://cve.now/CVE-2023-7095.md): Totolink A7100RU HTTP POST Request main buffer overflow (CVSS 9.8, Totolink A7100RU)
- [CVE-2023-7094](https://cve.now/CVE-2023-7094.md): Netentsec NS-ASG Application Security Gateway nsasg6.0.tgz information disclosure (CVSS 5.3, Netentsec NS-ASG Application Security Gateway)
- [CVE-2022-34267](https://cve.now/CVE-2022-34267.md): An issue was discovered in RWS WorldServer before 11.7.3. (no CVSS)
- [CVE-2022-34268](https://cve.now/CVE-2022-34268.md): An issue was discovered in RWS WorldServer before 11.7.3. (CVSS 9.8)
- [CVE-2022-34269](https://cve.now/CVE-2022-34269.md): An issue was discovered in RWS WorldServer before 11.7.3. (CVSS 8.8)
- [CVE-2022-34270](https://cve.now/CVE-2022-34270.md): An issue was discovered in RWS WorldServer before 11.7.3. (CVSS 9.8)
- [CVE-2022-39818](https://cve.now/CVE-2022-39818.md): In NOKIA NFM-T R19.9, an OS Command Injection vulnerability occurs in /cgi-bin/R19.9/log.pl of the VM Manager WebUI via the cmd HTTP GET par (no CVSS)
- [CVE-2022-39820](https://cve.now/CVE-2022-39820.md): In Network Element Manager in NOKIA NFM-T R19.9, an Unprotected Storage of Credentials vulnerability occurs under /root/RestUploadManager.xm (no CVSS)
- [CVE-2022-39822](https://cve.now/CVE-2022-39822.md): In NOKIA NFM-T R19.9, a SQL Injection vulnerability occurs in /cgi-bin/R19.9/easy1350.pl of the VM Manager WebUI via the id or host HTTP GET (CVSS 8.8)
- [CVE-2022-41760](https://cve.now/CVE-2022-41760.md): An issue was discovered in NOKIA NFM-T R19.9. (no CVSS)
- [CVE-2022-41761](https://cve.now/CVE-2022-41761.md): An issue was discovered in NOKIA NFM-T R19.9. (no CVSS)
- [CVE-2022-41762](https://cve.now/CVE-2022-41762.md): An issue was discovered in NOKIA NFM-T R19.9. (no CVSS)
- [CVE-2022-43675](https://cve.now/CVE-2022-43675.md): An issue was discovered in NOKIA NFM-T R19.9. (no CVSS)
- [CVE-2023-27151](https://cve.now/CVE-2023-27151.md): openCRX 5.2.0 was discovered to contain an HTML injection vulnerability for Search Criteria-Activity Number (in the Saved Search Activity) v (CVSS 6.1)
- [CVE-2023-28872](https://cve.now/CVE-2023-28872.md): Support Assistant in NCP Secure Enterprise Client before 13.10 allows attackers to execute DLL files with SYSTEM privileges by creating a sy (no CVSS)
- [CVE-2023-30451](https://cve.now/CVE-2023-30451.md): In TYPO3 11.5.24, the filelist component allows attackers (who have access to the administrator panel) to read arbitrary files via directory (no CVSS, typo3/cms-core)
- [CVE-2023-31224](https://cve.now/CVE-2023-31224.md): There is broken access control during authentication in Jamf Pro Server before 10.46.1. (no CVSS)
- [CVE-2023-31289](https://cve.now/CVE-2023-31289.md): Pexip Infinity before 31.2 has Improper Input Validation for signalling, allowing remote attackers to trigger an abort. (no CVSS)
- [CVE-2023-31297](https://cve.now/CVE-2023-31297.md): An issue was discovered in SESAMI planfocus CPTO (Cash Point & Transport Optimizer) 6.3.8.6 718. (no CVSS)
- [CVE-2023-31455](https://cve.now/CVE-2023-31455.md): Pexip Infinity before 31.2 has Improper Input Validation for RTCP, allowing remote attackers to trigger an abort. (no CVSS)
- [CVE-2023-34198](https://cve.now/CVE-2023-34198.md): In Stormshield Network Security (SNS) 1.0.0 through 3.7.36 before 3.7.37, 3.8.0 through 3.11.24 before 3.11.25, 4.0.0 through 4.3.18 before (no CVSS)
- [CVE-2023-36485](https://cve.now/CVE-2023-36485.md): The workflow-engine of ILIAS before 7.23 and 8 before 8.3 allows remote authenticated users to run arbitrary system commands on the applicat (no CVSS)
- [CVE-2023-36486](https://cve.now/CVE-2023-36486.md): The workflow-engine of ILIAS before 7.23 and 8 before 8.3 allows remote authenticated users to run arbitrary system commands on the applicat (no CVSS)
- [CVE-2023-37185](https://cve.now/CVE-2023-37185.md): C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the function zfp\_prec\_decompress at zfp/blosc2-zfp.c. (no CVSS)
- [CVE-2023-37186](https://cve.now/CVE-2023-37186.md): C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference in ndlz/ndlz8x8.c via a NULL pointer to memset. (no CVSS)
- [CVE-2023-37187](https://cve.now/CVE-2023-37187.md): C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the zfp/blosc2-zfp.c zfp\_acc\_decompress. (no CVSS)
- [CVE-2023-37188](https://cve.now/CVE-2023-37188.md): C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the function zfp\_rate\_decompress at zfp/blosc2-zfp.c. (no CVSS)
- [CVE-2023-37225](https://cve.now/CVE-2023-37225.md): Pexip Infinity before 32 allows Webapp1 XSS via preconfigured links. (no CVSS)
- [CVE-2023-38321](https://cve.now/CVE-2023-38321.md): OpenNDS, as used in Sierra Wireless ALEOS before 4.17.0.12 and other products, allows remote attackers to cause a denial of service (NULL po (no CVSS)
- [CVE-2023-38826](https://cve.now/CVE-2023-38826.md): A Cross Site Scripting (XSS) vulnerability exists in Follet Learning Solutions Destiny through 20.0\_1U. (no CVSS)
- [CVE-2023-40236](https://cve.now/CVE-2023-40236.md): In Pexip VMR self-service portal before 3, the same SSH host key is used across different customers' installations, which allows authenticat (CVSS 5.3)
- [CVE-2023-41165](https://cve.now/CVE-2023-41165.md): An issue was discovered in Stormshield Network Security (SNS) 3.7.0 through 3.7.38 before 3.7.39, 3.10.0 through 3.11.26 before 3.11.27, 4.0 (no CVSS)
- [CVE-2023-47091](https://cve.now/CVE-2023-47091.md): An issue was discovered in Stormshield Network Security (SNS) SNS 4.3.13 through 4.3.22 before 4.3.23, SNS 4.6.0 through 4.6.9 before 4.6.10 (CVSS 7.5)
- [CVE-2023-47247](https://cve.now/CVE-2023-47247.md): In SysAid On-Premise before 23.3.34, there is an edge case in which an end user is able to delete a Knowledge Base article, aka bug 15102. (no CVSS)
- [CVE-2023-48650](https://cve.now/CVE-2023-48650.md): Concrete CMS before 8.5.14 and 9 before 9.2.3 is vulnerable to an admin adding a stored XSS payload via the Layout Preset name. (no CVSS, concrete5/concrete5)
- [CVE-2023-48651](https://cve.now/CVE-2023-48651.md): Concrete CMS 9 before 9.2.3 is vulnerable to Cross Site Request Forgery (CSRF) at /ccm/system/dialogs/file/delete/1/submit. (no CVSS, concrete5/concrete5)
- [CVE-2023-48652](https://cve.now/CVE-2023-48652.md): Concrete CMS 9 before 9.2.3 is vulnerable to Cross Site Request Forgery (CSRF) via /ccm/system/dialogs/logs/delete\_all/submit. (no CVSS, concrete5/concrete5)
- [CVE-2023-48653](https://cve.now/CVE-2023-48653.md): Concrete CMS before 8.5.14 and 9 before 9.2.3 allows Cross Site Request Forgery (CSRF) via ccm/calendar/dialogs/event/delete/submit. (no CVSS, concrete5/concrete5)
- [CVE-2023-48654](https://cve.now/CVE-2023-48654.md): One Identity Password Manager before 5.13.1 allows Kiosk Escape. (no CVSS)
- [CVE-2023-49226](https://cve.now/CVE-2023-49226.md): An issue was discovered in Peplink Balance Two before 8.4.0. (no CVSS)
- [CVE-2023-49328](https://cve.now/CVE-2023-49328.md): On a Wolters Kluwer B.POINT 23.70.00 server running Linux on premises, during the authentication phase, a validated system user can achieve (no CVSS)
- [CVE-2023-49337](https://cve.now/CVE-2023-49337.md): Concrete CMS before 9.2.3 allows Stored XSS on the Admin Dashboard via /dashboard/system/basics/name. (CVSS 2.4, concrete5/concrete5)
- [CVE-2023-49944](https://cve.now/CVE-2023-49944.md): The Challenge Response feature of BeyondTrust Privilege Management for Windows (PMfW) before 2023-07-14 allows local administrators to bypas (no CVSS)
- [CVE-2023-49954](https://cve.now/CVE-2023-49954.md): The CRM Integration in 3CX before 18.0.9.23 and 20 before 20.0.0.1494 allows SQL Injection via a first name, search string, or email address (CVSS 9.8)
- [CVE-2023-50658](https://cve.now/CVE-2023-50658.md): The jose2go component before 1.6.0 for Go allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) (no CVSS, github.com/dvsekhvalnov/jose2go)
- [CVE-2023-51771](https://cve.now/CVE-2023-51771.md): In MicroHttpServer (aka Micro HTTP Server) through a8ab029, \_ParseHeader in lib/server.c allows a one-byte recv buffer overflow via a long U (CVSS 9.8)
- [CVE-2023-51772](https://cve.now/CVE-2023-51772.md): One Identity Password Manager before 5.13.1 allows Kiosk Escape. (CVSS 8.8)
- [CVE-2023-51773](https://cve.now/CVE-2023-51773.md): BACnet Stack before 1.3.2 has a decode function APDU buffer over-read in bacapp\_decode\_application\_data in bacapp.c. (CVSS 9.1)
- [CVE-2023-51774](https://cve.now/CVE-2023-51774.md): The json-jwt (aka JSON::JWT) gem 1.16.3 for Ruby sometimes allows bypass of identity checks via a sign/encryption confusion attack. (CVSS 8.4, json-jwt)
- [CVE-2023-51775](https://cve.now/CVE-2023-51775.md): The jose4j component before 0.9.4 for Java allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) (CVSS 6.5, org.bitbucket.b\_c:jose4j)
- [CVE-2023-51779](https://cve.now/CVE-2023-51779.md): bt\_sock\_recvmsg in net/bluetooth/af\_bluetooth.c in the Linux kernel through 6.6.8 has a use-after-free because of a bt\_sock\_ioctl race condi (CVSS 7.0)
- [CVE-2023-51780](https://cve.now/CVE-2023-51780.md): An issue was discovered in the Linux kernel before 6.6.8. (no CVSS)
- [CVE-2023-51781](https://cve.now/CVE-2023-51781.md): An issue was discovered in the Linux kernel before 6.6.8. (no CVSS)
- [CVE-2023-51782](https://cve.now/CVE-2023-51782.md): An issue was discovered in the Linux kernel before 6.6.8. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-12-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.