Skip to content
OpenAdvisories

Archive

10 November 2023

Vulnerabilities first published on this day (UTC), newest first.

← October 2023 2023 / November /10 December 2023 →
  1. 1144
  2. 296
  3. 3108
  4. 48
  5. 57
  6. 6118
  7. 7163
  8. 8111
  9. 9100
  10. 1039
  11. 115
  12. 1236
  13. 1382
  14. 14339
  15. 1575
  16. 16131
  17. 1773
  18. 1844
  19. 191
  20. 2075
  21. 2162
  22. 22168
  23. 2350
  24. 2417
  25. 25 
  26. 269
  27. 2795
  28. 2872
  29. 2957
  30. 30205
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • High 7.1
    CVE-2023-36027

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

    Microsoft Microsoft Edge (Chromium-based) Microsoft Edge (Chromium-based) Extended Stable Browsers
  • High 8.4
    CVE-2023-47129 Public exploit

    Statamic CMS remote code execution via front-end form uploads

    Statmic is a core Laravel content management system Composer package. Prior to versions 3.4.13 and 4.33.0, on front-end forms with an asset upload field, PHP files crafted to look like images may be uploaded. This only affects forms using the "Forms" feature …

    statamic cms statamic/cms Packagist
  • High 7.5
    CVE-2023-47108 Public exploit

    DoS vulnerability in otelgrpc (uncontrolled resource consumption) due to unbound cardinality metrics

    OpenTelemetry-Go Contrib is a collection of third-party packages for OpenTelemetry-Go. Starting in version 0.37.0 and prior to version 0.46.0, the grpc Unary Server Interceptor out of the box adds labels `net.peer.sock.addr` and `net.peer.sock.port` that have…

    open-telemetry opentelemetry-go-contrib kubescape k3s Ubuntu Azure Linux Wolfi Go
  • High 8.1
    CVE-2023-4949

    Memory Corruption Vulnerability in Grub-Legacy's XFS Implementation

    An attacker with local access to a system (either through a disk or external drive) can present a modified XFS partition to grub-legacy in such a way to exploit a memory corruption in grub’s XFS file system implementation.

    Free Software Foundation Grub-Legacy grub Debian
  • High 7.8
    CVE-2023-47611

    A CWE-269: Improper Privilege Management vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit …

    Telit Cinterion EHS6 EHS8 PDS8
  • High 7.4
    CVE-2023-41285

    QuMagie

    A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: QuMagie 2.1.4 and later

    QNAP Systems QuMagie
  • High 7.4
    CVE-2023-41284

    QuMagie

    A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: QuMagie 2.1.4 and later

    QNAP Systems QuMagie
  • High 8.8
    CVE-2023-39295

    QuMagie

    An OS command injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following version: QuMagie 2.1.3 and l…

    QNAP Systems QuMagie
  • High 7.5
    CVE-2023-47120

    Discourse DoS through Onebox favicon URL

    Discourse is an open source platform for community discussion. In versions 3.1.0 through 3.1.2 of the `stable` branch and versions 3.1.0,beta6 through 3.2.0.beta2 of the `beta` and `tests-passed` branches, Redis memory can be depleted by crafting a site with …

    Discourse Discourse