Skip to content

CyberSecBulletin

CVEs published on December 11, 2023

12 vulnerabilities, ordered with the most urgent first.

8.8 High severity
Alfresco Content Services: Improper Neutralization of Special Elements in Output Used by a Downstream Component
CVE-2023-49964Dec 11, 2023HylandEPSS 34.7%
9.8 Critical severity
openexr-viewer: Buffer Copy without Checking Size of Input
CVE-2023-50245Dec 11, 2023AfichetEPSS 1.05%
8.8 High severity
LibreOffice: Improper Preservation of Permissions
CVE-2023-6186Dec 11, 2023The Document Foundation
8.8 High severity
uptime-kuma: Origin Validation Error
CVE-2023-49805Dec 11, 2023Louislam
8.8 High severity
OPEN JOURNAL SYSTEMS: Cross-Site Request Forgery
CVE-2023-6671Dec 11, 2023OPEN JOURNAL SYSTEMS
7.8 High severity
uptime-kuma: Session Fixation
CVE-2023-49804Dec 11, 2023Louislam
8.8 High severity
FDS102 for FAdC/FAdCi: Improper Control of Generation of Code
CVE-2023-5500Dec 11, 2023Frauscher
8.8 High severity
EazyDocs: Improper Neutralization of Special Elements used in an SQL Command
CVE-2023-6035Dec 11, 2023EazyDocs
7.5 High severity
cors: Origin Validation Error
CVE-2023-49803Dec 11, 2023KoaJS
7.1 High severity
Eclipse Memory Analyzer (tools.mat): Improper Restriction of XML External Entity Reference
CVE-2023-6194Dec 11, 2023Eclipse Foundation
7.5 High severity
Jq: Out-of-bounds Write
CVE-2023-49355Dec 11, 2023JqlangEPSS 1.17%
7.5 High severity
Web-Based Student Clearance System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2023-6659Dec 11, 2023CampCodes