Skip to content
OpenAdvisories

Archive

2 November 2023

Vulnerabilities first published on this day (UTC), newest first.

← October 2023 2023 / November /2 December 2023 →
  1. 1144
  2. 296
  3. 3108
  4. 48
  5. 57
  6. 6118
  7. 7163
  8. 8111
  9. 9100
  10. 1039
  11. 115
  12. 1236
  13. 1382
  14. 14339
  15. 1575
  16. 16131
  17. 1773
  18. 1844
  19. 191
  20. 2075
  21. 2162
  22. 22168
  23. 2350
  24. 2417
  25. 25 
  26. 269
  27. 2795
  28. 2872
  29. 2957
  30. 30205
All Critical High Medium Low Exploited only Public exploit

96 results · Feed

  • Unscored —
    CVE-2023-39050

    An information leak in Daiky-value.Fukueten v13.6.1 allows attackers to obtain the channel access token and send crafte…

  • Unscored —
    CVE-2023-39057

    An information leak in hirochanKAKIwaiting v13.6.1 allows attackers to obtain the channel access token and send crafted…

  • Unscored —
    CVE-2023-39048

    An information leak in Tokudaya.honten v13.6.1 allows attackers to obtain the channel access token and send crafted mes…

  • Unscored —
    CVE-2023-39284

    An issue was discovered in IhisiServicesSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. There are arbitrary calls …

  • Unscored —
    CVE-2023-39051

    An information leak in VISION MEAT WORKS Track Diner 10/10mbl v13.6.1 allows attackers to obtain the channel access tok…

  • High 7.5
    CVE-2023-31579

    Dromara Lamp-Cloud Use of Hard-coded Cryptographic Key

    Dromara Lamp-Cloud before v3.8.1 was discovered to use a hardcoded cryptographic key when creating and verifying a Json Web Token. This vulnerability allows attackers to authenticate to the application via a crafted JWT token.

    top.tangyh.basic:lamp-core top.tangyh.basic:lamp-util Maven
  • High 7.5
    CVE-2023-46352

    In the module "Pixel Plus: Events + CAPI + Pixel Catalog for Facebook Module" (facebookconversiontrackingplus) up to ve…

  • Critical 9.8
    CVE-2023-46958

    An issue in lmxcms v.1.41 allows a remote attacker to execute arbitrary code via a crafted script to the admin.php file.

  • Medium 4.8
    CVE-2023-46925

    Reportico Cross-site Scripting vulnerability

    Reportico 7.1.21 is vulnerable to Cross Site Scripting (XSS).

    reportico-web/reportico Packagist
  • High 7.5
    CVE-2023-46695 EPSS 53%

    Django potential denial of service vulnerability in UsernameField on Windows

    An issue was discovered in Django 3.2 before 3.2.23, 4.1 before 4.1.13, and 4.2 before 4.2.7. The NFKC normalization is slow on Windows. As a consequence, django.contrib.auth.forms.UsernameField is subject to a potential DoS (denial of service) attack via cer…

    django PyPI
  • Unscored —
    CVE-2023-46475

    A Stored Cross-Site Scripting vulnerability was discovered in ZenTao 18.3 where a user can create a project, and in the…

  • Unscored —
    CVE-2023-42299

    Buffer Overflow vulnerability in OpenImageIO oiio v.2.4.12.0 allows a remote attacker to execute arbitrary code and cau…

    openimageio openimageio Debian Ubuntu
  • Unscored —
    CVE-2023-43194

    Submitty before v22.06.00 is vulnerable to Incorrect Access Control. An attacker can delete any post in the forum by mo…

  • Unscored —
    CVE-2023-43336

    Sangoma Technologies FreePBX before cdr 15.0.18, 16.0.40, 15.0.16, and 16.0.17 was discovered to contain an access cont…

  • Unscored —
    CVE-2023-43193

    Submitty before v22.06.00 is vulnerable to Cross Site Scripting (XSS). An attacker can create a malicious link in the f…

  • Critical 9.8
    CVE-2023-47204

    transmute-core unsafe YAML deserialization vulnerability

    Unsafe YAML deserialization in yaml.Loader in transmute-core before 1.13.5 allows attackers to execute arbitrary Python code.

    transmute-core PyPI