Skip to content
OpenAdvisories

Archive

7 November 2023

Vulnerabilities first published on this day (UTC), newest first.

← October 2023 2023 / November /7 December 2023 →
  1. 1144
  2. 296
  3. 3108
  4. 48
  5. 57
  6. 6118
  7. 7163
  8. 8111
  9. 9100
  10. 1039
  11. 115
  12. 1236
  13. 1382
  14. 14339
  15. 1575
  16. 16131
  17. 1773
  18. 1844
  19. 191
  20. 2075
  21. 2162
  22. 22168
  23. 2350
  24. 2417
  25. 25 
  26. 269
  27. 2795
  28. 2872
  29. 2957
  30. 30205
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.4
    CVE-2023-4842 Public exploit

    Social Sharing Plugin - Social Warfare <= 4.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    The Social Sharing Plugin - Social Warfare plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'social_warfare' shortcode in versions up to, and including, 4.4.3 due to insufficient input sanitization and output escaping on user supplied att…

    Warfare Plugins Social Sharing Plugin – Social Warfare Web / CMS
  • Medium 6.1
    CVE-2023-46998 Public exploit

    Bootbox.js Cross Site Scripting vulnerability

    Cross Site Scripting vulnerability in BootBox Bootbox.js v.3.2 through 6.0 allows a remote attacker to execute arbitrary code via a crafted payload to alert(), confirm(), prompt() functions.

    bootbox libjs-bootbox libjs-bootbox Debian Ubuntu npm
  • Critical 9.1
    CVE-2023-46501 Public exploit

    An issue in BoltWire v.6.03 allows a remote attacker to obtain sensitive information via a crafted payload to the view …

  • Medium 6.1
    CVE-2023-41425 Public exploit EPSS 65%

    Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary cod…

  • Unscored —
    CVE-2023-42284 Public exploit

    Blind SQL injection in api_version parameter in Tyk Gateway version 5.0.3 allows attacker to access and dump the databa…

  • Unscored —
    CVE-2023-42283 Public exploit

    Blind SQL injection in api_id parameter in Tyk Gateway version 5.0.3 allows attacker to access and dump the database vi…

  • Medium 5.3
    CVE-2023-47102 Public exploit

    UrBackup Server 2.5.31 allows brute-force enumeration of user accounts because a failure message confirms that a userna…