Archive

12 December 2023

Vulnerabilities first published on this day (UTC), newest first.

← November 2023 2023 / December /12 January 2024 →

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

Medium 5.4

CVE-2023-6710 Public exploit

Mod_cluster/mod_proxy_cluster: stored cross site scripting

A flaw was found in the mod_proxy_cluster in the Apache server. This issue may allow a malicious user to add a script in the 'alias' parameter in the URL to trigger the stored cross-site scripting (XSS) vulnerability. By adding a script on the alias parameter…

Red Hat Red Hat Enterprise Linux 9 Red Hat JBoss Core Services JBoss Core Services for RHEL 8 Linux

Dec 12, 2023
Medium 6.5

CVE-2023-35636 Public exploit EPSS 18%

Microsoft Outlook Information Disclosure Vulnerability

Microsoft Outlook Information Disclosure Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office 2019

Dec 12, 2023
Medium 6.7

CVE-2023-36003 Public exploit

XAML Diagnostics Elevation of Privilege Vulnerability

XAML Diagnostics Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Dec 12, 2023
Medium 5.0

CVE-2023-5536 Public exploit

A feature in LXD (LP#1829071), affects the default configuration of Ubuntu Server which allows privileged users in the …

Canonical Ubuntu Server cloud-init subiquity Ubuntu

Dec 12, 2023