Skip to content
OpenAdvisories

Archive

9 November 2023

Vulnerabilities first published on this day (UTC), newest first.

← October 2023 2023 / November /9 December 2023 →
  1. 1144
  2. 296
  3. 3108
  4. 48
  5. 57
  6. 6118
  7. 7163
  8. 8111
  9. 9100
  10. 1039
  11. 115
  12. 1236
  13. 1382
  14. 14339
  15. 1575
  16. 16131
  17. 1773
  18. 1844
  19. 191
  20. 2075
  21. 2162
  22. 22168
  23. 2350
  24. 2417
  25. 25 
  26. 269
  27. 2795
  28. 2872
  29. 2957
  30. 30205
All Critical High Medium Low Exploited only Public exploit

100 results · Feed

  • Medium 4.4
    CVE-2023-47613

    A CWE-23: Relative Path Traversal vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinteri…

    Telit Cinterion EHS6 EHS8 PDS8
  • Medium 5.6
    CVE-2023-26156

    chromedriver Command Injection vulnerability

    Versions of the package chromedriver before 119.0.1 are vulnerable to Command Injection when setting the chromedriver.path to an arbitrary system binary. This could lead to unauthorized access and potentially malicious actions on the host system. **Note:** An…

    chromedriver npm
  • Medium 5.9
    CVE-2023-20902

    Timing attack risk in Harbor

    A timing condition in Harbor 2.6.x and below, Harbor 2.7.2 and below,  Harbor 2.8.2 and below, and Harbor 1.10.17 and below allows an attacker with network access to create jobs/stop job tasks and retrieve job task information.

    Harbor Project github.com/goharbor/harbor Go
  • Unscored —
    CVE-2023-29975

    An issue discovered in Pfsense CE version 2.6.0 allows attackers to change the password of any user without verificatio…

  • Unscored —
    CVE-2023-46492

    Cross Site Scripting vulnerability in MLDB.ai v.2017.04.17.0 allows a remote attacker to execute arbitrary code via a c…

  • High 7.5
    CVE-2023-46894

    esptool allows attackers to view sensitive information via weak cryptographic algorithm

    An issue discovered in esptool 4.6.2 allows attackers to view sensitive information via weak cryptographic algorithm.

    esptool esptool Ubuntu PyPI
  • Medium 5.4
    CVE-2023-45885

    NASA Open MCT Cross Site Scripting vulnerability

    Cross Site Scripting (XSS) vulnerability in NASA Open MCT (aka openmct) through 3.1.0 allows attackers to run arbitrary code via the new component feature in the flexibleLayout plugin.

    openmct npm
  • Medium 6.5
    CVE-2023-45884

    NASA Open MCT Cross Site Request Forgery (CSRF) vulnerability

    Cross Site Request Forgery (CSRF) vulnerability in NASA Open MCT (aka openmct) through 3.1.0 allows attackers to view sensitive information via the flexibleLayout plugin.

    openmct npm
  • Unscored —
    CVE-2023-47370

    The leakage of channel access token in bluetrick Line 13.6.1 allows remote attackers to send malicious notifications to…

  • Unscored —
    CVE-2023-47367

    The leakage of channel access token in platinum clinic Line 13.6.1 allows remote attackers to send malicious notificati…

  • Unscored —
    CVE-2023-47366

    The leakage of channel access token in craft_members Line 13.6.1 allows remote attackers to send malicious notification…

  • Unscored —
    CVE-2023-47489

    CSV injection in export as csv in Combodo iTop v.3.1.0-2-11973 allows a local attacker to execute arbitrary code via a …

  • Unscored —
    CVE-2023-47372

    The leakage of channel access token in UPDATESALON C-LOUNGE Line 13.6.1 allows remote attackers to send malicious notif…

  • Unscored —
    CVE-2023-47368

    The leakage of channel access token in taketorinoyu Line 13.6.1 allows remote attackers to send malicious notifications…

  • Unscored —
    CVE-2023-47365

    The leakage of channel access token in Lil.OFF-PRICE STORE Line 13.6.1 allows remote attackers to send malicious notifi…

  • Medium 6.1
    CVE-2023-47488

    Cross Site Scripting vulnerability in Combodo iTop v.3.1.0-2-11973 allows a local attacker to obtain sensitive informat…

  • Unscored —
    CVE-2023-47369

    The leakage of channel access token in best_training_member Line 13.6.1 allows remote attackers to send malicious notif…

  • Unscored —
    CVE-2023-47364

    The leakage of channel access token in nagaoka taxi Line 13.6.1 allows remote attackers to send malicious notifications…

  • Unscored —
    CVE-2023-47363

    The leakage of channel access token in F.B.P members Line 13.6.1 allows remote attackers to send malicious notification…

  • Unscored —
    CVE-2023-47373

    The leakage of channel access token in DRAGON FAMILY Line 13.6.1 allows remote attackers to send malicious notification…