Skip to content
OpenAdvisories

Archive

31 October 2023

Vulnerabilities first published on this day (UTC), newest first.

← September 2023 2023 / October /31 November 2023 →
  1. 18
  2. 281
  3. 3138
  4. 4107
  5. 562
  6. 672
  7. 72
  8. 824
  9. 985
  10. 10256
  11. 11111
  12. 1288
  13. 1364
  14. 1430
  15. 1511
  16. 16168
  17. 17163
  18. 1874
  19. 19105
  20. 20125
  21. 2115
  22. 2226
  23. 2353
  24. 24122
  25. 25213
  26. 2690
  27. 2797
  28. 2813
  29. 2918
  30. 30171
  31. 31121
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 10.0
    CVE-2023-22518 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authori…

    Atlassian Confluence Data Center Confluence Server Web / CMS
    KEV Nov 7, 2023
  • Unscored —
    CVE-2023-5360 Public exploit Scanner template EPSS 86%

    Royal Elementor Addons and Templates < 1.3.79 - Unauthenticated Arbitrary File Upload

    The Royal Elementor Addons and Templates WordPress plugin before 1.3.79 does not properly validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as PHP and achieve RCE.

    Web / CMS
  • High 8.8
    CVE-2023-5412 Public exploit

    Image horizontal reel scroll slideshow <= 13.2 - Authenticated (Subscriber+) SQL Injection via Shortcode

    The Image horizontal reel scroll slideshow plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 13.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on …

    Gopiplus Image horizontal reel scroll slideshow Web / CMS
  • Unscored —
    CVE-2023-46451 Public exploit

    Best Courier Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in the change username field.