Skip to content
OpenAdvisories

Archive

7 November 2023

Vulnerabilities first published on this day (UTC), newest first.

← October 2023 2023 / November /7 December 2023 →
  1. 1144
  2. 296
  3. 3108
  4. 48
  5. 57
  6. 6118
  7. 7163
  8. 8111
  9. 9100
  10. 1039
  11. 115
  12. 1236
  13. 1382
  14. 14339
  15. 1575
  16. 16131
  17. 1773
  18. 1844
  19. 191
  20. 2075
  21. 2162
  22. 22168
  23. 2350
  24. 2417
  25. 25 
  26. 269
  27. 2795
  28. 2872
  29. 2957
  30. 30205
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Low —
    GHSA-j57r-4qw6-58r3

    rusty_paseto vulnerable to private key extraction due to ed25519-dalek dependency

    ## Impact The vulnerability, known as RUSTSEC-2022-0093, impacts the `ed25519-dalek` crate, which is a dependency of the `rusty-paseto` crate. This issue arises from a "Double Public Key Signing Function Oracle Attack" affecting versions of `ed25519-dalek` pr…

    rusty-paseto crates.io
  • Low 3.1
    CVE-2023-46737

    Possible endless data attack from attacker-controlled registry in cosign

    Cosign is a sigstore signing tool for OCI containers. Cosign is susceptible to a denial of service by an attacker controlled registry. An attacker who controls a remote registry can return a high number of attestations and/or signatures to Cosign and cause Co…

    sigstore cosign kubescape skaffold Alpine Wolfi Go
  • Low 3.0
    CVE-2022-45350

    WordPress Simple History Plugin <= 3.3.1 is vulnerable to CSV Injection

    Improper Neutralization of Formula Elements in a CSV File vulnerability in Pär Thernström Simple History – user activity log, audit tool.This issue affects Simple History – user activity log, audit tool: from n/a through 3.3.1.

    Pär Thernström Simple History – user activity log, audit tool
  • Low 3.5
    CVE-2021-4431

    msyk FMDataAPI FMDataAPI_Sample.php cross site scripting

    A vulnerability classified as problematic has been found in msyk FMDataAPI up to 22. Affected is an unknown function of the file FMDataAPI_Sample.php. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to v…

    msyk FMDataAPI
  • Low 3.3
    CVE-2023-42542

    Improper access control vulnerability in Samsung Push Service prior to 3.4.10 allows local attackers to get register ID…

    Samsung Mobile Samsung Push Service
  • Low 3.5
    CVE-2019-25156

    dstar2018 Agency search.php cross site scripting

    A vulnerability classified as problematic was found in dstar2018 Agency up to 61. Affected by this vulnerability is an unknown functionality of the file search.php. The manipulation of the argument QSType/QuickSearch leads to cross site scripting. The attack …

    dstar2018 Agency