CVEs published December 29, 2023
160 CVEs were published on December 29, 2023: 26 critical, 25 high.
- Published
- 160
- Critical
- 26
- High
- 25
- Medium
- 70
- Low
- 20
- Unrated
- 19
- Now in CISA KEV
- 0
- Fix available
- 44
Most affected products
- Honor Magic OS
- 11
- Honor Magic UI
- 7
- gopeak MasterLab
- 5
- Pandora FMS
- 5
- Honor NTH-AN00
- 4
- Honor LGE-AN00
- 3
- Poly Trio · Poly CCX +10
- 3
- AAM Advanced Access Manager – Restricted Content, Users & R…
- 2
- Cloudflare wrangler · wrangler
- 2
- code-projects Client Details System
- 2
Critical 26
- CVE-2023-52139Misskey vulnerable to improper authorization when accessing with third-party applicationmisskey-dev misskey
- CVE-2023-4675SQLi i GM Informatics MDOGM Information Technologies MDO
- CVE-2023-4541SQLi in Weens Admin PanelWeen Software Admin Panel
- CVE-2023-51410WordPress WP Mail Log Plugin <= 1.1.2 is vulnerable to Arbitrary File UploadWPVibes WP Mail Log
- CVE-2023-51411WordPress Frontend Admin by DynamiApps Plugin <= 3.18.3 is vulnerable to Arbitrary File UploadShabti Kaplan Frontend Admin by DynamiApps
- CVE-2023-51412WordPress Piotnet Forms Plugin <= 1.0.25 is vulnerable to Arbitrary File UploadPiotnet Forms
- CVE-2023-51417WordPress JVM rich text icons Plugin <= 1.2.3 is vulnerable to Arbitrary File UploadJoris van Montfort JVM Gutenberg Rich Text Icons
- CVE-2023-51419WordPress BERTHA AI Plugin <= 1.11.10.7 is vulnerable to Arbitrary File UploadBertha.ai BERTHA AI. Your AI co-pilot for WordPress and Chr…
- CVE-2023-51421WordPress Verge3D Plugin <= 4.5.2 is vulnerable to Arbitrary File UploadSoft8Soft Verge3D Publishing and E-Commerce
- CVE-2023-51468WordPress Rencontre – Dating Site Plugin <= 3.10.1 is vulnerable to Arbitrary File UploadJacques Malgrange Rencontre – Dating Site
- CVE-2023-51473WordPress TerraClassifieds Plugin <= 2.0.3 is vulnerable to Arbitrary File UploadPixelemu TerraClassifieds – Simple Classifieds Plugin
- CVE-2023-51475WordPress WP MLM Unilevel Plugin <= 4.0 is vulnerable to Arbitrary File UploadIOSS WP MLM SOFTWARE PLUGIN
- CVE-2023-51414WordPress EnvíaloSimple Plugin <= 2.1 is vulnerable to PHP Object InjectionEnvialoSimple EnvíaloSimple: Email Marketing y Newsletters
- CVE-2023-51422WordPress WebinarIgnition Plugin <= 3.05.0 is vulnerable to PHP Object InjectionSaleswonder Team Webinar Plugin: Create live/evergreen/auto…
- CVE-2023-51470WordPress Rencontre – Dating Site Plugin <= 3.11.1 is vulnerable to PHP Object InjectionJacques Malgrange Rencontre – Dating Site
- CVE-2023-51505WordPress Active Products Tables for WooCommerce Plugin <= 1.0.6 is vulnerable to PHP Object Injectionrealmag777 Active Products Tables for WooCommerce. Professi…
- CVE-2023-51545WordPress Job Manager & Career Plugin <= 1.4.4 is vulnerable to Cross Site Request Forgery (CSRF) leading to PHP Object InjectionThemeHigh Job Manager & Career – Manage job board listings,…
- CVE-2023-51420WordPress Verge3D Plugin <= 4.5.2 is vulnerable to Remote Code Execution (RCE)Soft8Soft Verge3D Publishing and E-Commerce
- CVE-2023-49830WordPress Astra Pro Plugin <= 4.3.1 is vulnerable to Remote Code Execution (RCE)Brainstorm Force Astra Pro
- CVE-2023-47840WordPress Qode Essential Addons Plugin <= 1.5.2 is vulnerable to Remote Code Execution (RCE)Qode Interactive Qode Essential Addons
- CVE-2023-46623WordPress WP EXtra Plugin <= 6.2 is vulnerable to Remote Code Execution (RCE)TienCOP WP EXtra
- CVE-2023-45751WordPress Nexter Extension Plugin <= 2.0.3 is vulnerable to Remote Code Execution (RCE)POSIMYTH Nexter Extension
- CVE-2023-40606WordPress Kanban Boards for WordPress Plugin <= 2.5.21 is vulnerable to Arbitrary Code ExecutionKanban for WordPress Kanban Boards for WordPress
- CVE-2023-32095WordPress Rename Media Files Plugin <= 1.0.1 is vulnerable to Remote Code Execution (RCE)Milan Dinić Rename Media Files
- CVE-2023-25054WordPress RSVPMarker Plugin <= 10.6.6 is vulnerable to Remote Code Execution (RCE)David F. Carr RSVPMaker
- CVE-2023-51434 Some Honor products are affected by buffer overflow vulnerability, successful exploitation could cause code execution.Honor Magic UI
High 25
- CVE-2023-52137GitHub Action tj-actions/verify-changed-files is vulnerable to command injection in output filenamestj-actions verify-changed-files
- CVE-2020-17163Visual Studio Code Python Extension Remote Code Execution VulnerabilityMicrosoft Python extension for Visual Studio Code
- CVE-2023-7114Mattermost version 2.10.0 and earlier fails to sanitize deeplink paths, which allows an attacker to perform CSRF attacks against the server.Mattermost
- CVE-2023-7080Arbitrary remote code execution within wrangler dev Workers sandboxCloudflare wrangler · wrangler
- CVE-2023-7078Server-Side Request Forgery (SSRF) in MiniflareCloudflare miniflare · miniflare
- CVE-2023-41815XSS in File managerPandora FMS
- CVE-2023-50837WordPress Login Lockdown Plugin <= 2.06 is vulnerable to SQL InjectionWebFactory Login Lockdown – Protect Login Form
- CVE-2023-50892WordPress TheGem Theme <= 5.9.1 is vulnerable to Cross Site Scripting (XSS)CodexThemes TheGem - Creative Multi-Purpose & WooCommerce W…
- CVE-2023-50893WordPress UpSolution Core Plugin <= 8.17.4 is vulnerable to Cross Site Scripting (XSS)UpSolution Impreza – WordPress Website and WooCommerce Buil…
- CVE-2023-50901WordPress HT Mega Plugin <= 2.3.8 is vulnerable to Cross Site Scripting (XSS)HasThemes HT Mega – Absolute Addons For Elementor
- CVE-2023-51373WordPress Google Photos Gallery with Shortcodes Plugin <= 4.0.2 is vulnerable to Cross Site Scripting (XSS)Ian Kennerley Google Photos Gallery with Shortcodes
- CVE-2023-52135WordPress WS Form LITE Plugin <= 1.9.170 is vulnerable to SQL InjectionWS Form LITE – Drag & Drop Contact Form Builder for WordPre…
- CVE-2022-44589WordPress miniOrange's Google Authenticator Plugin <= 5.6.1 is vulnerable to Sensitive Data ExposureminiOrange's Google Authenticator – WordPress Two Factor Au…
- CVE-2023-4464Poly VVX 601 Diagnostic Telnet Mode os command injectionPoly Trio · Poly CCX +10
- CVE-2023-22677WordPress WP Booklet Plugin <= 2.1.8 is vulnerable to Remote Code Execution (RCE)BinaryStash WP Booklet
- CVE-2023-7161Netentsec NS-ASG Application Security Gateway Login sql injectionNetentsec NS-ASG Application Security Gateway
- CVE-2023-7158MicroPython objslice.c slice_indices heap-based overflowMicroPython
- CVE-2023-7156Campcodes Online College Library System Search index.php sql injectionCampcodes Online College Library System
- CVE-2023-51435 Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.Honor Magic UI
- CVE-2023-51431 Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptcom.hihonor.phoneservice
- CVE-2023-23436 Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwritHonor Magic OS
- CVE-2023-23431 Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwritHonor NTH-AN00
- CVE-2023-23432 Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwritHonor NTH-AN00
- CVE-2023-31300An issue was discovered in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attackers to obtain sensitiv
- CVE-2023-50071Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customer_support/ajax.php?action=save_department v
Medium, low and unrated 109
- CVE-2023-7171Novel-Plus Friendly Link FriendLinkController.java cross site scriptingNovel-Plus
- CVE-2023-51663Hail authentication can be bypassed by changing email addresshail-is hail · hail
- CVE-2023-51527WordPress GPT3 AI Content Writer Plugin <= 1.8.2 is vulnerable to Sensitive Data ExposureSenol Sahin AI Power: Complete AI Pack – Powered by GPT-4
- CVE-2023-51688WordPress eCommerce Product Catalog Plugin <= 3.3.26 is vulnerable to Sensitive Data ExposureimpleCode eCommerce Product Catalog Plugin for WordPress
- CVE-2023-51687WordPress Product Catalog Simple Plugin <= 1.7.6 is vulnerable to Sensitive Data ExposureimpleCode Product Catalog Simple
- CVE-2023-51517WordPress Calculated Fields Form Plugin <= 1.2.28 is vulnerable to Open RedirectionCodePeople Calculated Fields Form
- CVE-2023-4674SQLi in Yazteks E-Commerce SoftwareYaztek Software Technologies and Computer Systems E-Commerc…
- CVE-2023-47804Apache OpenOffice: Macro URL arbitrary script executionApache Software Foundation Apache OpenOffice
- CVE-2023-51675WordPress Advanced Access Manager Plugin <= 6.9.18 is vulnerable to Open RedirectionAAM Advanced Access Manager – Restricted Content, Users & R…
- CVE-2023-7113Mattermost version 8.1.6 and earlier fails to sanitize channel mention data in posts, which allows an attacker to inject markup in the web cMattermost · github.com/mattermost/mattermost/server/v8 +3
- CVE-2023-51676WordPress Happy Addons for Elementor Plugin <= 3.9.1.1 is vulnerable to Server Side Request Forgery (SSRF)Leevio Happy Addons for Elementor
- CVE-2023-50878WordPress MStore API Plugin <= 4.10.1 is vulnerable to Cross Site Request Forgery (CSRF)InspireUI MStore API
- CVE-2023-50902WordPress New User Approve Plugin <= 2.5.1 is vulnerable to Cross Site Request Forgery (CSRF)WPExpertsio New User Approve
- CVE-2023-51354WordPress Webba Booking Plugin <= 4.5.33 is vulnerable to Cross Site Request Forgery (CSRF)WebbaPlugins Appointment & Event Booking Calendar Plugin –…
- CVE-2023-51358WordPress Block IPs for Gravity Forms Plugin <= 1.0.1 is vulnerable to Cross Site Request Forgery (CSRF)Bright Plugins Block IPs for Gravity Forms
- CVE-2023-51378WordPress Rise Blocks Plugin <= 3.1 is vulnerable to Cross Site Request Forgery (CSRF)Rise Themes Rise Blocks – A Complete Gutenberg Page Builder
- CVE-2023-51402WordPress Ultimate Addons for WPBakery Page Builder Plugin <= 3.19.17 is vulnerable to Cross Site Request Forgery (CSRF)Brain Storm Force Ultimate Addons for WPBakery Page Builder
- CVE-2023-7079Arbitrary remote file read in Wrangler dev serverCloudflare wrangler · wrangler
- CVE-2023-44089XSS in Visual ConsolePandora FMS
- CVE-2023-44088SQL Injection in Visual ConsolePandora FMS
- CVE-2023-41814XSS Vulnerability MessagesPandora FMS
- CVE-2023-41813User notification settings editionPandora FMS
- CVE-2023-50879WordPress WordPress.com Editing Toolkit Plugin <= 3.78784 is vulnerable to Cross Site Scripting (XSS)Automattic WordPress.com Editing Toolkit
- CVE-2023-50880WordPress BuddyPress Plugin <= 11.3.1 is vulnerable to Cross Site Scripting (XSS)The BuddyPress Community BuddyPress
- CVE-2023-50881WordPress Advanced Access Manager Plugin <= 6.9.15 is vulnerable to Cross Site Scripting (XSS)AAM Advanced Access Manager – Restricted Content, Users & R…
- CVE-2023-50889WordPress Beaver Builder Plugin <= 2.7.2 is vulnerable to Cross Site Scripting (XSS)The Beaver Builder Team Beaver Builder – WordPress Page Bui…
- CVE-2023-50891WordPress Zoho Forms Plugin <= 3.0.1 is vulnerable to Cross Site Scripting (XSS)Form plugin for WordPress – Zoho Forms
- CVE-2023-50896WordPress weForms Plugin <= 1.6.17 is vulnerable to Cross Site Scripting (XSS)weForms – Easy Drag & Drop Contact Form Builder For WordPre…
- CVE-2023-51361WordPress Sticky Chat Widget Plugin <= 1.1.8 is vulnerable to Cross Site Scripting (XSS)Ginger Plugins Sticky Chat Widget: Click to chat, SMS, Emai…
- CVE-2023-51371WordPress Bit Assist Plugin <= 1.1.9 is vulnerable to Cross Site Scripting (XSS)Bit Assist Chat Widget: WhatsApp Chat, Facebook Messenger C…
- CVE-2023-51372WordPress HashBar – WordPress Notification Bar Plugin <= 1.4.1 is vulnerable to Cross Site Scripting (XSS)HasThemes HashBar – WordPress Notification Bar
- CVE-2023-51374WordPress ZeroBounce Email Verification & Validation Plugin <= 1.0.11 is vulnerable to Cross Site Scripting (XSS)ZeroBounce Email Verification & Validation
- CVE-2023-51396WordPress Brizy – Page Builder Plugin <= 2.4.29 is vulnerable to Cross Site Scripting (XSS)Brizy.io Brizy – Page Builder
- CVE-2023-51397WordPress WP Remote Site Search Plugin <= 1.0.4 is vulnerable to Cross Site Scripting (XSS)Brainstorm Force WP Remote Site Search
- CVE-2023-51399WordPress Back Button Widget Plugin <= 1.6.3 is vulnerable to Cross Site Scripting (XSS)WPFactory Back Button Widget
- CVE-2023-51541WordPress Stock Ticker Plugin <= 3.23.4 is vulnerable to Cross Site Scripting (XSS)Aleksandar Urošević Stock Ticker
- CVE-2023-32517WordPress MailChimp Subscribe Forms Plugin <= 4.0.9.3 is vulnerable to Open RedirectionPluginOps MailChimp Subscribe Form, Optin Builder, PopUp Bu…
- CVE-2023-32101WordPress Library Viewer Plugin <= 2.0.6 is vulnerable to Open RedirectionPexle Chris Library Viewer
- CVE-2023-31237WordPress Zephyr Project Manager Plugin <= 3.3.9 is vulnerable to Open RedirectionDylan James Zephyr Project Manager
- CVE-2023-31229WordPress WP Directory Kit Plugin <= 1.1.9 is vulnerable to Open RedirectionWP Directory Kit
- CVE-2023-31095WordPress Integration for Contact Form 7 HubSpot Plugin <= 1.2.8 is vulnerable to Open RedirectionCRM Perks Integration for HubSpot and Contact Form 7, WPFor…
- CVE-2023-28786WordPress Solid Security Plugin <= 8.1.4 is vulnerable to Open RedirectionSolidWP Solid Security – Password, Two Factor Authenticatio…
- CVE-2023-4468Poly Trio 8500/Trio 8800/Trio C60 Poly Lens Management Cloud Registration authorizationPoly Trio
- CVE-2023-4467Poly Trio 8800 Test Automation Mode backdoorPoly Trio
- CVE-2023-4466Poly CCX 400/CCX 600/Trio 8800/Trio C60 Web Interface protection mechanismPoly CCX · Poly Trio
- CVE-2023-4465Poly VVX 601 Configuration File Import unverified password changePoly Trio · Poly CCX +10
- CVE-2023-4463Poly CCX 400/CCX 600/Trio 8800/Trio C60 HTTP Header denial of servicePoly CCX · Poly Trio
- CVE-2023-4462Poly VVX 601 Web Configuration Application random valuesPoly Trio · Poly CCX +10
- CVE-2023-7166Novel-Plus HTTP POST Request updateUserInfo cross site scriptingNovel-Plus
- CVE-2023-22676WordPress Advanced Custom Fields: Image Crop Add-on Plugin <= 1.4.12 is vulnerable to Broken Access ControlAnders Thorborg
- CVE-2023-7160SourceCodester Engineers Online Portal Add Engineer cross site scriptingSourceCodester Engineers Online Portal
- CVE-2023-7159gopeak MasterLab User.php update unrestricted uploadgopeak MasterLab
- CVE-2023-7157SourceCodester Free and Open Source Inventory Management System sell_return_data.php sql injectionSourceCodester Free and Open Source Inventory Management Sy…
- CVE-2023-7155SourceCodester Free and Open Source Inventory Management System edit_product.php sql injectionSourceCodester Free and Open Source Inventory Management Sy…
- CVE-2023-7152MicroPython modselect.c poll_set_add_fd use after freeMicroPython · micropython-os +3
- CVE-2023-7150Campcodes Chic Beauty Salon Product product-list.php unrestricted uploadCampcodes Chic Beauty Salon
- CVE-2023-51433 Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.Honor Magic UI
- CVE-2023-51432 Some Honor products are affected by out of bounds read vulnerability, successful exploitation could cause information leak.Honor Magic UI
- CVE-2023-51430 Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.Honor Magic UI
- CVE-2023-51429 Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.Honor Magic OS
- CVE-2023-51428 Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.Honor Magic OS
- CVE-2023-7149code-projects QR Code Generator cross site scriptingcode-projects QR Code Generator
- CVE-2023-51427 Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.Honor Magic OS
- CVE-2023-51426 Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.Honor Magic OS
- CVE-2023-6939 Some Honor products are affected by type confusion vulnerability, successful exploitation could cause denial of service.Honor Magic UI
- CVE-2023-23443 Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.Honor Magic OS
- CVE-2023-23442 Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.Honor Magic OS
- CVE-2023-23441 Some Honor products are affected by out of bounds read vulnerability, successful exploitation could cause information leak.Honor Magic UI
- CVE-2023-23430 Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptcom.hihonor.magichome
- CVE-2023-23429 Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptHonor Magic OS
- CVE-2023-23428 Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptHonor Magic OS
- CVE-2023-7148ShifuML shifu Java Expression Language DataPurifier.java code injectionShifuML shifu · ml.shifu:shifu
- CVE-2023-23427 Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptHonor Magic OS
- CVE-2023-23426 Some Honor products are affected by file writing vulnerability, successful exploitation could cause information disclosure.Honor FRI-AN00
- CVE-2023-23424 Some Honor products are affected by file writing vulnerability, successful exploitation could cause code execution Honor NTH-AN00
- CVE-2023-23440 Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.Honor LGE-AN00
- CVE-2023-23439 Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.Honor LGE-AN00
- CVE-2023-7147gopeak MasterLab User.php base64ImageContent unrestricted uploadgopeak MasterLab
- CVE-2023-23438 Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptHonor LGE-AN00
- CVE-2023-23437 Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak com.hihonor.vmall
- CVE-2023-23435 Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwritHonor Magic OS
- CVE-2023-23434 Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.HonorBoardApp
- CVE-2023-7146gopeak MasterLab HTTP POST Request Feature.php sqlInjectDelete sql injectiongopeak MasterLab
- CVE-2023-23433 Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwritHonor NTH-AN00
- CVE-2023-7145gopeak MasterLab HTTP POST Request Framework.php sqlInject sql injectiongopeak MasterLab
- CVE-2023-7144gopeak MasterLab HTTP POST Request Feature.php sqlInject sql injectiongopeak MasterLab
- CVE-2023-7143code-projects Client Details System regester.php cross site scriptingcode-projects Client Details System
- CVE-2023-7142code-projects Client Details System clientview.php sql injectioncode-projects Client Details System
- CVE-2023-52085Winter CMS Local File Inclusion through Server Side Template Injection wintercms winter · winter/wn-backend-module
- CVE-2023-23634SQL Injection vulnerability in Documize version 5.4.2, allows remote attackers to execute arbitrary code via the user parameter of the /api/
- CVE-2023-31292An issue was discovered in Sesami Cash Point & Transport Optimizer (CPTO) 6.3.8.6 (#718), allows local attackers to obtain sensitive informa
- CVE-2023-31293An issue was discovered in Sesami Cash Point & Transport Optimizer (CPTO) 6.3.8.6 (#718), allows remote attackers to obtain sensitive inform
- CVE-2023-31294CSV Injection vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attackers to obtain sens
- CVE-2023-31295CSV Injection vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attackers to obtain sens
- CVE-2023-31296CSV Injection vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows attackers to obtain sensitive i
- CVE-2023-31298Cross Site Scripting (XSS) vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attackers t
- CVE-2023-31299Cross Site Scripting (XSS) vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attackers t
- CVE-2023-31301Stored Cross Site Scripting (XSS) Vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote atta
- CVE-2023-31302Cross Site Scripting (XSS) vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) 6.3.8.6 (#718), allows remote attackers to execut
- CVE-2023-50035PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection on the Users login panel because of "password" parameter is directly used in the SQL
- CVE-2023-50069WireMock with GUI versions 3.2.0.0 through 3.0.4.0 are vulnerable to stored cross-site scripting (SXSS) through the recording feature.
- CVE-2023-50070Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customer_support/ajax.php?action=save_ticket via d
- CVE-2023-50559An issue was discovered in XiangShan v2.1, allows local attackers to obtain sensitive information via the L1D cache.
- CVE-2023-50570An issue in the component IPAddressBitsDivision of IPAddress v5.1.0 leads to an infinite loop.
- CVE-2023-50571easy-rules-mvel v4.1.0 was discovered to contain a remote code execution (RCE) vulnerability via the component MVELRule.org.jeasy:easy-rules-mvel
- CVE-2023-50572An issue in the component GroovyEngine.execute of jline-groovy v3.24.1 allows attackers to cause an OOM (OutofMemory) error.org.jline:jline-parent
- CVE-2023-52173XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3ADBD0.
- CVE-2023-52174XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3125D6.
- CVE-2023-52240The Kantega SAML SSO OIDC Kerberos Single Sign-on apps before 6.20.0 for Atlassian products allow XSS if SAML POST Binding is enabled.