Skip to content
OpenAdvisories

Archive

3 November 2023

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • High 8.8
    CVE-2022-44569 Public exploit

    A locally authenticated attacker with low privileges can bypass authentication due to insecure inter-process communicat…

  • High 8.2
    CVE-2023-41652 Public exploit

    WordPress RSVPMarker Plugin <= 10.6.6 is vulnerable to SQL Injection

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David F. Carr RSVPMaker rsvpmaker allows SQL Injection.This issue affects RSVPMaker: from n/a through 10.6.6.

  • High 8.8
    CVE-2023-41348 Public exploit

    ASUS RT-AX55 - command injection - 4

    ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its code-authentication module. An authenticated remote attacker can exploit this vulnerability to perform a Command Injection attack to …

  • High 8.8
    CVE-2023-41346 Public exploit

    ASUS RT-AX55 - command injection - 2

    ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its token-refresh module. An authenticated remote attacker can exploit this vulnerability to perform a Command Injection attack to execut…