Skip to content
OpenAdvisories

Archive

9 November 2023

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2023-5546 Public exploit

    Moodle: stored xss in quiz grading report via user id number

    ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS risk.

  • Critical 9.8
    CVE-2023-47248 Public exploit Scanner template EPSS 13%

    PyArrow, PyArrow: Arbitrary code execution when loading a malicious data file

    Deserialization of untrusted data in IPC and Parquet readers in PyArrow versions 0.14.0 to 14.0.0 allows arbitrary code execution. An application is vulnerable if it reads Arrow IPC, Feather or Parquet data from untrusted sources (for example user-supplied in…