CVEs published in December 2023
13 tracked CVEs from 6 vendors had their first vendor advisory published in December 2023: 2 critical, 5 high, 1 in CISA KEV. Newest first.
25 more from this month are covered only by Red Hat's per-package records, listed on the Red Hat vendor page.
- Added
CVE-2023-3955High
Kubernetes Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2023-48795Critical
pfSense: The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products
Veeam, pfSense · 2 advisories - Added
CVE-2023-3904Medium
Improper Validation of Specified Type of Input in GitLab
GitLab · 1 advisory - Added
CVE-2023-47565HighCISA KEV
QNAP VioStor NVR OS Command Injection Vulnerability
QNAP · 1 advisory - Added
CVE-2023-32975Medium
QTS: buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions
QNAP · 1 advisory - Added
CVE-2023-32968Medium
QTS: buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions
QNAP · 1 advisory - Added
CVE-2023-23372Medium
QTS: cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions.
QNAP · 1 advisory - Added
CVE-2023-48123High
issue in Netgate pfSense Plus v.23.05.1 and before and pfSense CE v.2.7.0 allows a remote attacker to execute arbitrary code
pfSense · 1 advisory - Added
CVE-2023-22524Critical
Certain versions of the Atlassian Companion App for MacOS were affected by a remote code execution vulnerability.
Atlassian · 1 advisory - Added
CVE-2023-22523High
This vulnerability, if exploited
Atlassian · 1 advisory - Added
CVE-2023-22522High
Confluence Data Center: This Template Injection vulnerability
Atlassian · 1 advisory - Added
Incorrect Authorization in GitLab
GitLab · 1 advisory - Added
CVE-2023-5226Medium
Improper Control of Generation of Code ('Code Injection') in GitLab
GitLab · 1 advisory