Skip to content
OpenAdvisories

Archive

16 November 2023

Vulnerabilities first published on this day (UTC), newest first.

← October 2023 2023 / November /16 December 2023 →
  1. 1144
  2. 296
  3. 3108
  4. 48
  5. 57
  6. 6118
  7. 7163
  8. 8111
  9. 9100
  10. 1039
  11. 115
  12. 1236
  13. 1382
  14. 14339
  15. 1575
  16. 16131
  17. 1773
  18. 1844
  19. 191
  20. 2075
  21. 2162
  22. 22168
  23. 2350
  24. 2417
  25. 25 
  26. 269
  27. 2795
  28. 2872
  29. 2957
  30. 30205
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.5
    CVE-2023-6020 Public exploit Scanner template EPSS 15%

    Ray Static File Local File Include

    LFI in Ray's /static/ directory allows attackers to read any file on the server without authentication.

    ray-project ray-project/ray ray PyPI
  • High 8.0
    CVE-2023-46214 Public exploit EPSS 89%

    Remote code execution (RCE) in Splunk Enterprise through Insecure XML Parsing

    In Splunk Enterprise versions below 9.0.7 and 9.1.2, Splunk Enterprise does not safely sanitize extensible stylesheet language transformations (XSLT) that users supply. This means that an attacker can upload malicious XSLT which can result in remote code exec…

    Splunk Splunk Enterprise Splunk Cloud
  • Critical 9.8
    CVE-2023-6019 Public exploit EPSS 75%

    Ray Command Injection in cpu_profile Parameter

    A command injection existed in Ray's cpu_profile URL parameter allowing attackers to execute os commands on the system running the ray dashboard remotely without authentication. The issue is fixed in version 2.8.1+. Ray maintainers' response can be found here…

    ray-project ray-project/ray ray PyPI
  • Unscored —
    CVE-2023-43757 Public exploit

    Inadequate encryption strength vulnerability in multiple routers provided by ELECOM CO.,LTD. and LOGITEC CORPORATION al…

    ELECOM WRC-F1167ACF WRH-300WH-H WRC-1750GHBK