Skip to content
OpenAdvisories

Archive

3 November 2023

Vulnerabilities first published on this day (UTC), newest first.

← October 2023 2023 / November /3 December 2023 →
  1. 1144
  2. 296
  3. 3108
  4. 48
  5. 57
  6. 6118
  7. 7163
  8. 8111
  9. 9100
  10. 1039
  11. 115
  12. 1236
  13. 1382
  14. 14339
  15. 1575
  16. 16131
  17. 1773
  18. 1844
  19. 191
  20. 2075
  21. 2162
  22. 22168
  23. 2350
  24. 2417
  25. 25 
  26. 269
  27. 2795
  28. 2872
  29. 2957
  30. 30205
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 8.8
    CVE-2022-44569 Public exploit

    A locally authenticated attacker with low privileges can bypass authentication due to insecure inter-process communicat…

    ivanti Automation Network devices
  • Medium 5.1
    CVE-2022-3172 Public exploit

    Kubernetes - API server - Aggregated API server can cause clients to be redirected (SSRF)

    A security issue was discovered in kube-apiserver that allows an aggregated API server to redirect client traffic to any URL. This could lead to the client performing unexpected actions as well as forwarding the client's API server credentials to third partie…

    Kubernetes kube-apiserver kubernetes Debian
  • High 8.2
    CVE-2023-41652 Public exploit

    WordPress RSVPMarker Plugin <= 10.6.6 is vulnerable to SQL Injection

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David F. Carr RSVPMaker rsvpmaker allows SQL Injection.This issue affects RSVPMaker: from n/a through 10.6.6.

    David F. Carr RSVPMaker
  • High 8.8
    CVE-2023-41348 Public exploit

    ASUS RT-AX55 - command injection - 4

    ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its code-authentication module. An authenticated remote attacker can exploit this vulnerability to perform a Command Injection attack to …

    ASUS RT-AX55
  • High 8.8
    CVE-2023-41346 Public exploit

    ASUS RT-AX55 - command injection - 2

    ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its token-refresh module. An authenticated remote attacker can exploit this vulnerability to perform a Command Injection attack to execut…

    ASUS RT-AX55
  • Critical 9.9
    CVE-2023-46404 Public exploit

    PCRS <= 3.11 (d0de1e) “Questions” page and “Code editor” page are vulnerable to remote code execution (RCE) by escaping…

  • Critical 9.8
    CVE-2023-46954 Public exploit

    SQL Injection vulnerability in Relativity ODA LLC RelativityOne v.12.1.537.3 Patch 2 and earlier allows a remote attack…

  • Critical 9.8
    CVE-2023-46980 Public exploit

    An issue in Best Courier Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate privil…