Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: December 2023

162 records · 9 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 2 of 2

  • CVE-2023-46220
    42Plan

    An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of

    CriticalCVSS 9.8No exploitEPSS 11%

    ivanti · avalancheDec 19, 2023

  • CVE-2023-46225
    42Plan

    An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of

    CriticalCVSS 9.8No exploitEPSS 11%

    ivanti · avalancheDec 19, 2023

  • CVE-2023-46257
    42Plan

    An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of

    CriticalCVSS 9.8No exploitEPSS 11%

    ivanti · avalancheDec 19, 2023

  • CVE-2023-46259
    42Plan

    An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of

    CriticalCVSS 9.8No exploitEPSS 11%

    ivanti · avalancheDec 19, 2023

  • CVE-2023-46261
    42Plan

    An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of

    CriticalCVSS 9.8No exploitEPSS 11%

    ivanti · avalancheDec 19, 2023

  • CVE-2023-46262
    55Plan

    An unauthenticated attacked could send a specifically crafted web request causing a Server-Side Request Forgery (SSRF) in Ivanti Avalanche R

    HighCVSS 7.5No exploitEPSS 82%

    ivanti · avalancheDec 19, 2023

  • CVE-2023-46263
    64This week

    An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.4.1 and below that could allow an attacker t

    CriticalCVSS 9.8No exploitEPSS 81%

    ivanti · avalancheDec 19, 2023

  • CVE-2023-46264
    66This week

    An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.4.1 and below that could allow an attacker t

    CriticalCVSS 9.8No exploitEPSS 90%

    ivanti · avalancheDec 19, 2023

  • CVE-2023-6931
    28Monitor

    Out-of-bounds write in Linux kernel's Performance Events system component

    HighCVSS 7.0Proof of conceptEPSS 0%

    linux · linux kernelDec 19, 2023

  • CVE-2023-38126
    49Plan

    Softing edgeAggregator Restore Configuration Directory Traversal Remote Code Execution Vulnerability

    HighCVSS 7.2No exploitEPSS 71%

    softing · edgeaggregatorDec 19, 2023

  • CVE-2023-6977
    31Monitor

    Path Traversal: '\..\filename'

    HighCVSS 7.5Proof of conceptEPSS 3%

    lfprojects · mlflowDec 20, 2023

  • CVE-2023-32590
    31Monitor

    WordPress Subscribe to Category Plugin <= 2.7.4 is vulnerable to SQL Injection

    HighCVSS 7.5Proof of conceptEPSS 1%

    subscribe to category project · subscribe to categoryDec 20, 2023

  • CVE-2023-29384
    39Monitor

    WordPress WordPress Job Board and Recruitment Plugin – JobWP Plugin <= 2.0 is vulnerable to Arbitrary File Upload

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    hmplugin · jobwpDec 20, 2023

  • CVE-2023-7039
    43Plan

    Byzoro S210 importexport.php injection

    CriticalCVSS 9.8No exploitEPSS 14%

    byzoro · smart s210 firmwareDec 21, 2023

  • CVE-2023-6546
    28Monitor

    Kernel: gsm multiplexing race condition leads to privilege escalation

    HighCVSS 7.0Proof of conceptEPSS 0%

    linux · linux kernelDec 21, 2023

  • CVE-2023-49084
    54Plan

    Local File Inclusion (RCE) in Cacti

    HighCVSS 8.8WeaponizedEPSS 64%

    cacti · cactiDec 21, 2023

  • CVE-2023-7024
    67This week

    Heap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a remote attacker to potentially exploit heap corruption via

    HighCVSS 8.8KEVWeaponizedEPSS 6%

    google · chromeDec 21, 2023

  • CVE-2023-51707
    39Monitor

    MotionPro in Array ArrayOS AG before 9.4.0.505 on AG and vxAG allows remote command execution via crafted packets.

    CriticalCVSS 9.8No exploitEPSS 1%

    arraynetworks · arrayos agDec 21, 2023

  • CVE-2023-51713
    31Monitor

    make_ftp_cmd in main.c in ProFTPD before 1.3.8a has a one-byte out-of-bounds read, and daemon crash, because of mishandling of quote/backsla

    HighCVSS 7.5Proof of conceptEPSS 4%

    proftpd · proftpdDec 21, 2023

  • CVE-2023-49085
    57Plan

    Cacti SQL Injection vulnerability

    HighCVSS 8.8WeaponizedEPSS 74%

    cacti · cactiDec 22, 2023

  • CVE-2023-49792
    39Monitor

    Bruteforce protection can be bypassed with misconfigured proxy

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    nextcloud · nextcloud serverDec 22, 2023

  • CVE-2023-50254
    32Monitor

    Deepin Reader RCE vulnerability due to a design flaw

    HighCVSS 7.8Proof of conceptEPSS 2%

    deepin · deepin readerDec 22, 2023

  • CVE-2023-51448
    55Plan

    SQL Injection vulnerability when managing SNMP Notification Receivers

    HighCVSS 8.8No exploitEPSS 67%

    cacti · cactiDec 22, 2023

  • CVE-2023-51449
    39Monitor

    Make the `/file` secure against file traversal attacks

    HighCVSS 7.5Proof of conceptEPSS 28%

    gradio project · gradioDec 22, 2023

  • CVE-2023-6972
    39Monitor

    Backup Migration <= 1.3.9 - Unauthenticated Path Traversal to Arbitrary File Deletion

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    backupbliss · backup migrationDec 22, 2023

  • CVE-2023-7002
    37Monitor

    Backup Migration <= 1.3.9 - Authenticated (Admin+) OS Command Injection via url

    HighCVSS 7.2No exploitEPSS 30%

    backupbliss · backup migrationDec 22, 2023

  • CVE-2023-5961
    35Monitor

    ioLogik E1200 Series: Cross-Site Request Forgery (CSRF) Vulnerability

    HighCVSS 8.8Proof of conceptEPSS 0%

    moxa · iologik e1210 firmwareDec 23, 2023

  • CVE-2023-51764
    22Monitor

    Postfix through 3.8.5 allows SMTP smuggling unless configured with smtpd_data_restrictions=reject_unauth_pipelining and smtpd_discard_ehlo_k

    MediumCVSS 5.3Proof of conceptEPSS 2%

    postfix · postfixDec 24, 2023

  • CVE-2023-7101
    67This week

    Arbitrary Code Execution (ACE) Vulnerability

    HighCVSS 7.8KEVWeaponizedEPSS 18%

    jmcnamara · spreadsheet\Dec 24, 2023

  • CVE-2023-7102
    60This week

    Remote Code Execution (RCE) Vulnerability

    CriticalCVSS 9.8WeaponizedEPSS 44%

    barracuda · email security gateway 300 firmwareDec 24, 2023

  • CVE-2023-7095
    43Plan

    Totolink A7100RU HTTP POST Request main buffer overflow

    CriticalCVSS 9.8No exploitEPSS 13%

    totolink · a7100ru firmwareDec 24, 2023

  • CVE-2022-34267
    52Plan

    An issue was discovered in RWS WorldServer before 11.7.3.

    CriticalCVSS 9.8Proof of conceptEPSS 42%

    rws · worldserverDec 25, 2023

  • CVE-2023-49954
    40Plan

    The CRM Integration in 3CX before 18.0.9.23 and 20 before 20.0.0.1494 allows SQL Injection via a first name, search string, or email address

    CriticalCVSS 9.8Proof of conceptEPSS 2%

    3cx · 3cxDec 25, 2023

  • CVE-2023-5180
    31Monitor

    Out-of-bounds Write vulnerability exists in ODA Drawings SDK before 2024.12

    HighCVSS 7.8Proof of conceptEPSS 0%

    opendesign · drawings sdkDec 26, 2023

  • CVE-2023-50968
    49Plan

    Apache OFBiz: Arbitrary file properties reading and SSRF attack

    HighCVSS 7.5Proof of conceptEPSS 63%

    apache · ofbizDec 26, 2023

  • CVE-2023-51467
    68This week

    Apache OFBiz: Pre-authentication Remote Code Execution (RCE) vulnerability

    CriticalCVSS 9.8WeaponizedEPSS 96%

    apache · ofbizDec 26, 2023

  • CVE-2023-51092
    43Plan

    Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function upgrade.

    CriticalCVSS 9.8No exploitEPSS 12%

    tenda · m3 firmwareDec 26, 2023

  • CVE-2023-5203
    31Monitor

    WP Sessions Time Monitoring Full Automatic < 1.0.9 - Unauthenticated SQL injection

    HighCVSS 7.5Proof of conceptEPSS 2%

    swit · wp sessions time monitoring full automaticDec 26, 2023

  • CVE-2023-5674
    38Monitor

    WP Mail Log < 1.1.3 – Contributor+ SQL Injection in wml_logs/send_mail endpoint

    HighCVSS 8.8No exploitEPSS 10%

    wpvibes · wp mail logDec 26, 2023

  • CVE-2023-5991
    40Plan

    Hotel Booking Lite < 4.8.5 - Unauthenticated Arbitrary File Download & Deletion

    CriticalCVSS 9.8Proof of conceptEPSS 3%

    motopress · hotel booking liteDec 26, 2023

  • CVE-2023-6114
    39Monitor

    Duplicator < 1.5.7.1; Duplicator Pro < 4.5.14.2 - Unauthenticated Sensitive Data Exposure

    HighCVSS 7.5Proof of conceptEPSS 30%

    awesomemotive · duplicatorDec 26, 2023

  • CVE-2023-49438
    24Monitor

    An open redirect vulnerability in the python package Flask-Security-Too <=5.3.2 allows attackers to redirect unsuspecting users to malicious

    MediumCVSS 6.1Proof of conceptEPSS 1%

    flask-security-too project · flask-security-tooDec 26, 2023

  • CVE-2023-7116
    42Plan

    WeiYe-Jing datax-web HTTP POST Request killJob os command injection

    CriticalCVSS 9.8Proof of conceptEPSS 9%

    datax-web project · datax-webDec 27, 2023

  • CVE-2023-43481
    39Monitor

    An issue in Shenzhen TCL Browser TV Web BrowseHere (aka com.tcl.browser) 6.65.022_dab24cc6_231221_gp allows a remote attacker to execute arb

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    tcl · browser tv web - browsehereDec 27, 2023

  • CVE-2023-43955
    39Monitor

    The com.phlox.tvwebbrowser TV Bro application through 2.0.0 for Android mishandles external intents through WebView.

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    fedirtsapana · tv broDec 27, 2023

  • CVE-2023-47882
    28Monitor

    The Kami Vision YI IoT com.yunyi.smartcamera application through 4.1.9_20231127 for Android allows a remote attacker to execute arbitrary Ja

    HighCVSS 7.1Proof of conceptEPSS 0%

    kamivision · yi iotDec 27, 2023

  • CVE-2023-47883
    40Plan

    The com.altamirano.fabricio.tvbrowser TV browser application through 4.5.1 for Android is vulnerable to JavaScript code execution via an exp

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    vladymix · tv browserDec 27, 2023

  • CVE-2023-49002
    30Monitor

    An issue in Xenom Technologies (sinous) Phone Dialer-voice Call Dialer v.1.2.5 allows an attacker to bypass intended access restrictions via

    HighCVSS 7.5Proof of conceptEPSS 0%

    xenomtechnologies · phone dialer-voice call dialerDec 27, 2023

  • CVE-2023-49003
    21Monitor

    An issue in simplemobiletools Simple Dialer 5.18.1 allows an attacker to bypass intended access restrictions via interaction with com.simple

    MediumCVSS 5.3Proof of conceptEPSS 0%

    simplemobiletools · simple dialerDec 27, 2023

  • CVE-2023-49230
    36Monitor

    An issue was discovered in Peplink Balance Two before 8.4.0.

    HighCVSS 8.8Proof of conceptEPSS 2%

    peplink · balance two firmwareDec 28, 2023

  • CVE-2023-50445
    40Plan

    Shell Injection vulnerability GL.iNet A1300 v4.4.6, AX1800 v4.4.6, AXT1800 v4.4.6, MT3000 v4.4.6, MT2500 v4.4.6, MT6000 v4.5.0, MT1300 v4.3.

    HighCVSS 7.8WeaponizedEPSS 9%

    gl-inet · gl-mt1300 firmwareDec 28, 2023

  • CVE-2023-50839
    40Plan

    WordPress JS Help Desk – Best Help Desk & Support Plugin <= 2.8.1 is vulnerable to SQL Injection

    CriticalCVSS 9.8Proof of conceptEPSS 2%

    wiselyhub · js help deskDec 28, 2023

  • CVE-2023-7137
    40Plan

    code-projects Client Details System HTTP POST Request sql injection

    HighCVSS 8.8No exploitEPSS 17%

    fabian · client details systemDec 28, 2023

  • CVE-2023-52085
    30Monitor

    Winter CMS Local File Inclusion through Server Side Template Injection

    MediumCVSS 5.4Proof of conceptEPSS 30%

    wintercms · winterDec 28, 2023

  • CVE-2023-47840
    35Monitor

    WordPress Qode Essential Addons Plugin <= 1.5.2 is vulnerable to Remote Code Execution (RCE)

    HighCVSS 8.8Proof of conceptEPSS 1%

    qodeinteractive · qode essential addonsDec 29, 2023

  • CVE-2023-49830
    35Monitor

    WordPress Astra Pro Plugin <= 4.3.1 is vulnerable to Remote Code Execution (RCE)

    HighCVSS 8.8No exploitEPSS 0%

    brainstormforce · astraDec 29, 2023

  • CVE-2023-44088
    35Monitor

    SQL Injection in Visual Console

    HighCVSS 8.8Proof of conceptEPSS 0%

    pandorafms · pandora fmsDec 29, 2023

  • CVE-2023-50070
    35Monitor

    Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customer_support/ajax.php?action=save_ticket via d

    HighCVSS 8.8Proof of conceptEPSS 0%

    oretnom23 · customer support systemDec 29, 2023

  • CVE-2023-50071
    39Monitor

    Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customer_support/ajax.php?action=save_department v

    HighCVSS 8.8Proof of conceptEPSS 13%

    customer support system project · customer support systemDec 29, 2023

  • CVE-2023-7172
    28Monitor

    PHPGurukul Hospital Management System Admin Dashboard sql injection

    HighCVSS 7.2Proof of conceptEPSS 1%

    phpgurukul · hospital management systemDec 30, 2023

  • CVE-2023-7173
    21Monitor

    PHPGurukul Hospital Management System registration.php cross site scripting

    MediumCVSS 5.4Proof of conceptEPSS 1%

    phpgurukul · hospital management systemDec 30, 2023

  • CVE-2023-50578
    40Plan

    Mingsoft MCMS v5.2.9 was discovered to contain a SQL injection vulnerability via the categoryType parameter at /content/list.do.

    CriticalCVSS 9.8Proof of conceptEPSS 2%

    mingsoft · mcmsDec 30, 2023