Archive

12 December 2023

Vulnerabilities first published on this day (UTC), newest first.

← November 2023 2023 / December /12 January 2024 →

All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

Medium 5.4

CVE-2023-6710 Public exploit

Mod_cluster/mod_proxy_cluster: stored cross site scripting

A flaw was found in the mod_proxy_cluster in the Apache server. This issue may allow a malicious user to add a script in the 'alias' parameter in the URL to trigger the stored cross-site scripting (XSS) vulnerability. By adding a script on the alias parameter…

Red Hat Red Hat Enterprise Linux 9 Red Hat JBoss Core Services JBoss Core Services for RHEL 8 Linux

Dec 12, 2023
Medium 6.5

CVE-2023-35636 Public exploit EPSS 18%

Microsoft Outlook Information Disclosure Vulnerability

Microsoft Outlook Information Disclosure Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office 2019

Dec 12, 2023
Medium 6.7

CVE-2023-36003 Public exploit

XAML Diagnostics Elevation of Privilege Vulnerability

XAML Diagnostics Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 12, 2023
Medium 5.0

CVE-2023-5536 Public exploit

A feature in LXD (LP#1829071), affects the default configuration of Ubuntu Server which allows privileged users in the …

Canonical Ubuntu Server cloud-init subiquity Ubuntu

Dec 12, 2023
High 7.5

CVE-2023-28465 Public exploit

HL7 FHIR Partial Path Zip Slip due to bypass of CVE-2023-24057

The package-decompression feature in HL7 (Health Level 7) FHIR Core Libraries before 5.6.106 allows attackers to copy arbitrary files to certain directories via directory traversal, if an allowed directory name is a substring of the directory name chosen by t…

ca.uhn.hapi.fhir:org.hl7.fhir.validation ca.uhn.hapi.fhir:org.hl7.fhir.r5 ca.uhn.hapi.fhir:org.hl7.fhir.r4b ca.uhn.hapi.fhir:org.hl7.fhir.utilities Maven

Dec 12, 2023
Unscored —

CVE-2023-46454 Public exploit EPSS 23%

In GL.iNET GL-AR300M routers with firmware v4.3.7, it is possible to inject arbitrary shell commands through a crafted …

Dec 12, 2023
Unscored —

CVE-2023-41623 Public exploit

Emlog version pro2.1.14 was discovered to contain a SQL injection vulnerability via the uid parameter at /admin/media.p…

Dec 12, 2023
Critical 9.8

CVE-2023-43364 Public exploit

Searchor CLI's Search vulnerable to Arbitrary Code using Eval

main.py in Searchor before 2.4.2 uses eval on CLI input, which may cause unexpected code execution.

searchor PyPI

Dec 12, 2023