Month: December 2023

Apache StreamPark (incubating) command execution | CVE-2023-49898

December 19, 2023

NAME__________Apache StreamPark (incubating) command executionPlatforms Affected:Apache StreamPark (incubating) 2.0.0 Apache StreamPark (incubating) 2.1.1Risk Level:2.2Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Apache StreamPark (incubating) could allow...

Guest Author Plugin for WordPress cross-site scripting | CVE-2023-49747

December 19, 2023

NAME__________Guest Author Plugin for WordPress cross-site scriptingPlatforms Affected:WordPress Guest Author Plugin for WordPress 2.3Risk Level:5.9Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Guest Author Plugin for...

Gift Up Gift Cards for WordPress and WooCommerce Plugin for WordPress cross-site request forgery | CVE-2023-49744

December 19, 2023

NAME__________Gift Up Gift Cards for WordPress and WooCommerce Plugin for WordPress cross-site request forgeryPlatforms Affected:WordPress Gift Up Gift Cards for...

Asterisk denial of service | CVE-2023-49786

December 19, 2023

NAME__________Asterisk denial of servicePlatforms Affected:Asterisk Asterisk 18.20.0 Asterisk Asterisk 20.5.0 Asterisk Asterisk 21.0.0 Asterisk Certified Asterisk 18.9-cert5Risk Level:7.5Exploitability:UnprovenConsequences:Denial of Service...

Jq denial of service | CVE-2023-50268

December 19, 2023

NAME__________Jq denial of servicePlatforms Affected:jq jq 1.7Risk Level:5.5Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Jq is vulnerable to a denial of service, caused by...

Jq denial of service | CVE-2023-50246

December 19, 2023

IBM MQ Appliance information disclosure | CVE-2023-46177

December 19, 2023

NAME__________IBM MQ Appliance information disclosurePlatforms Affected:IBM MQ Appliance 9.3 CD IBM MQ Appliance 9.3 LTSRisk Level:6.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________IBM MQ Appliance...

IBM i information disclosure | CVE-2023-47741

December 19, 2023

NAME__________IBM i information disclosurePlatforms Affected:IBM i 7.3 IBM i 7.4 IBM Db2 Mirror for i 7.4 IBM i 7.5 IBM...

3CX SQL injection | CVE-2023-49954

December 19, 2023

NAME__________3CX SQL injectionPlatforms Affected:3CX 3CX 15.5.8801.3 3CX 3CX 18.0.9.23Risk Level:6.5Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________3CX is vulnerable to SQL injection. A remote attacker...

OpenSSH machine-in-the-middle | CVE-2023-48795

December 19, 2023

NAME__________OpenSSH machine-in-the-middlePlatforms Affected:OpenSSH OpenSSH 9.5Risk Level:5.9Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________OpenSSH is vulnerable to a machine-in-the-middle attack, caused by a flaw in the...

SureTriggers Plugin for WordPress cross-site request forgery | CVE-2023-49749

December 19, 2023

NAME__________SureTriggers Plugin for WordPress cross-site request forgeryPlatforms Affected:WordPress SureTriggers plugin for WordPress 1.0.23Risk Level:4.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________SureTriggers Plugin for WordPress is...