Skip to content
OpenAdvisories

Archive

9 November 2023

Vulnerabilities first published on this day (UTC), newest first.

← October 2023 2023 / November /9 December 2023 →
  1. 1144
  2. 296
  3. 3108
  4. 48
  5. 57
  6. 6118
  7. 7163
  8. 8111
  9. 9100
  10. 1039
  11. 115
  12. 1236
  13. 1382
  14. 14339
  15. 1575
  16. 16131
  17. 1773
  18. 1844
  19. 191
  20. 2075
  21. 2162
  22. 22168
  23. 2350
  24. 2417
  25. 25 
  26. 269
  27. 2795
  28. 2872
  29. 2957
  30. 30205
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • High 7.1
    CVE-2023-36024

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

    Microsoft Microsoft Edge (Chromium-based) Microsoft Edge (Chromium-based) Extended Stable Browsers
  • High 7.3
    CVE-2023-36014

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

    Microsoft Microsoft Edge (Chromium-based) Browsers
  • High 8.1
    CVE-2023-4379

    Incorrect Authorization in GitLab

    An issue has been discovered in GitLab EE affecting all versions starting from 15.3 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1. Code owner approval was not removed from merge requests when the target branch was updated.

    GitLab GitLab Web / CMS
  • High 7.5
    CVE-2023-39198

    Kernel: qxl: race condition leading to use-after-free in qxl_mode_dumb_create()

    A race condition was found in the QXL driver in the Linux kernel. The qxl_mode_dumb_create() function dereferences the qobj returned by the qxl_gem_object_create_with_handle(), but the handle is the only one holding a reference to it. This flaw allows an atta…

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  • High 8.1
    CVE-2023-47610

    A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists in Telit Cinterion EHS5/6/8 that could allow…

    Telit Cinterion EHS6 EHS8 EHS5
  • High 7.4
    CVE-2023-46743

    The same file cannot be opened with different rights

    application-collabora is an integration of Collabora Online in XWiki. As part of the application use cases, depending on the rights that a user has over a document, they should be able to open the office attachments files in view or edit mode. Currently, if a…

    xwikisas application-collabora
  • High 8.0
    CVE-2023-41137

    Symmetric encryption used to protect messages between the AppsAnywhere server and client can be broken by reverse engin…

    AppsAnywhere AppsAnywhere Client
  • High 8.0
    CVE-2023-40055

    SolarWinds Network Configuration Manager Directory Traversal Remote Code Execution Vulnerability

    The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows a low-level user to perform the actions with SYSTEM privileges. We found this issue was not resolved in CVE-2023-33227

    SolarWinds Network Configuration Manager
  • High 8.0
    CVE-2023-40054

    SolarWinds Network Configuration Manager Directory Traversal Remote Code Execution Vulnerability

    The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows a low-level user to perform the actions with SYSTEM privileges. We found this issue was not resolved in CVE-2023-33226

    SolarWinds Network Configuration Manager
  • High 7.5
    CVE-2023-41138

    The AppsAnywhere macOS client-privileged helper can be tricked into executing arbitrary commands with elevated permissi…

    AppsAnywhere AppsAnywhere Client
  • High 7.5
    CVE-2023-46894

    esptool allows attackers to view sensitive information via weak cryptographic algorithm

    An issue discovered in esptool 4.6.2 allows attackers to view sensitive information via weak cryptographic algorithm.

    esptool esptool Ubuntu PyPI