Skip to content
OpenAdvisories

Archive

18 November 2023

Vulnerabilities first published on this day (UTC), newest first.

← October 2023 2023 / November /18 December 2023 →
  1. 1144
  2. 296
  3. 3108
  4. 48
  5. 57
  6. 6118
  7. 7163
  8. 8111
  9. 9100
  10. 1039
  11. 115
  12. 1236
  13. 1382
  14. 14339
  15. 1575
  16. 16131
  17. 1773
  18. 1844
  19. 191
  20. 2075
  21. 2162
  22. 22168
  23. 2350
  24. 2417
  25. 25 
  26. 269
  27. 2795
  28. 2872
  29. 2957
  30. 30205
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.1
    CVE-2023-40363

    IBM InfoSphere Information Server privilege escalation

    IBM InfoSphere Information Server 11.7 could allow an authenticated user to change installation files due to incorrect file permission settings. IBM X-Force ID: 263332.

    IBM InfoSphere Information Server
  • High 7.5
    CVE-2023-6187 EPSS 51%

    Paid Memberships Pro <= 2.12.3 - Authenticated (Subscriber+) Arbitrary File Upload

    The Paid Memberships Pro plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'pmpro_paypalexpress_session_vars_for_user_fields' function in versions up to, and including, 2.12.3. This makes it possible …

    Stranger Studios Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions Web / CMS
  • High 8.1
    CVE-2023-4214

    AppPresser <= 4.2.5 - Insecure Password Reset Mechanism

    The AppPresser plugin for WordPress is vulnerable to unauthorized password resets in versions up to, and including 4.2.5. This is due to the plugin generating too weak a reset code, and the code used to reset the password has no attempt or time limit.

    scottopolis AppPresser – Mobile App Framework Web / CMS