Skip to content
OpenAdvisories

Archive

7 November 2023

Vulnerabilities first published on this day (UTC), newest first.

95 results · Clear filters · Feed

  • Medium 4.3
    CVE-2023-41723 EPSS 13%

    A vulnerability in Veeam ONE allows a user with the Veeam ONE Read-Only User role to view the Dashboard Schedule. Note:…

  • Medium 6.6

    Buffer Over-read in WLAN HOST

    Memory corruption in WLAN HOST while processing the WLAN scan descriptor list.

  • Medium 6.7

    Buffer Copy without Checking Size of Input in Audio

    Memory corruption while processing audio effects.

  • Medium 6.1

    Buffer Over-read in WLAN HAL

    Information disclosure in WLAN HAL while handling command through WMI interfaces.

  • Medium 6.1

    Buffer Over-read in WLAN HAL

    Information disclosure in WLAN HAL when reception status handler is called.

  • Medium 6.1

    Buffer Over-read in WLAN HAL

    Information disclosure in WLAN HAL while handling the WMI state info command.

  • Medium 6.1

    Buffer Over-read in IOE Firmware

    Information disclosure in IOE Firmware while handling WMI command.

  • Medium 6.1

    Buffer Over-read in Qualcomm IPC

    Information Disclosure in Qualcomm IPC while reading values from shared memory in VM.

  • Medium 6.1

    Buffer Over-read in WLAN Host

    Information Disclosure in WLAN Host when processing WMI event command.

  • Medium 5.5

    The improper privilege management vulnerability in the Zyxel GS1900-24EP switch firmware version V2.70(ABTO.5) could al…

  • Medium 4.6

    Improper Access Control in microweber/microweber

    Improper Access Control in GitHub repository microweber/microweber prior to 2.0.

  • Medium 5.5

    Buffer Overflow vulnerability in gpac MP4Box v.2.3-DEV-rev573-g201320819-master allows a local attacker to cause a deni…

  • Medium 6.1
    CVE-2023-46998 Public exploit

    Bootbox.js Cross Site Scripting vulnerability

    Cross Site Scripting vulnerability in BootBox Bootbox.js v.3.2 through 6.0 allows a remote attacker to execute arbitrary code via a crafted payload to alert(), confirm(), prompt() functions.

  • Medium 6.1
    CVE-2023-41425 Public exploit EPSS 64%

    Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary cod…

  • Medium 5.3
    CVE-2023-47102 Public exploit

    UrBackup Server 2.5.31 allows brute-force enumeration of user accounts because a failure message confirms that a userna…