2023-12-24 - CVE Archive

CVE-2023-51766 Dec 24, 06:15 MEDIUM POC PATCH This Month

Exim before 4.97.1 allows SMTP smuggling in certain PIPELINING/CHUNKING configurations. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Authentication Bypass Debian Debian Linux Fedora Exim +2

NVD GitHub VulDB

CVSS 3.1

5.3

EPSS

1.1%

CVE-2023-51765 Dec 24, 06:15 MEDIUM POC PATCH This Month

sendmail through 8.17.2 allows SMTP smuggling in certain configurations. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Authentication Bypass Red Hat Enterprise Linux Freebsd Sendmail

NVD GitHub

CVSS 3.1

5.3

EPSS

1.1%

CVE-2023-51764 Dec 24, 05:15 MEDIUM POC This Month

Postfix through 3.8.5 allows SMTP smuggling unless configured with smtpd_data_restrictions=reject_unauth_pipelining and smtpd_discard_ehlo_keywords=chunking (or certain other options that exist in. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Red Hat Enterprise Linux Fedora Postfix +1

NVD GitHub VulDB

CVSS 3.1

5.3

EPSS

2.6%

CVE-2023-7092 Dec 24, 23:15 MEDIUM POC This Month

A vulnerability was found in Uniway UW-302VP 2.0. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CSRF Uw 302Vp Firmware Uniwayinfo

NVD VulDB

CVSS 3.1

4.3

EPSS

0.4%