Skip to content
OpenAdvisories

Archive

20 November 2023

Vulnerabilities first published on this day (UTC), newest first.

← October 2023 2023 / November /20 December 2023 →
  1. 1144
  2. 296
  3. 3108
  4. 48
  5. 57
  6. 6118
  7. 7163
  8. 8111
  9. 9100
  10. 1039
  11. 115
  12. 1236
  13. 1382
  14. 14339
  15. 1575
  16. 16131
  17. 1773
  18. 1844
  19. 191
  20. 2075
  21. 2162
  22. 22168
  23. 2350
  24. 2417
  25. 25 
  26. 269
  27. 2795
  28. 2872
  29. 2957
  30. 30205
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • High 7.4
    CVE-2021-22636

    Texas Instruments TI-RTOS Integer Overflow or Wraparound

    Texas Instruments TI-RTOS, when configured to use HeapMem heap(default), malloc returns a valid pointer to a small buffer on extremely large values, which can trigger an integer overflow vulnerability in 'HeapMem_allocUnprotected' and result in code execution.

    Texas Instruments SimpleLink MSP432E4XX SimpleLink-CC26XX CC32XX
  • High 7.4
    CVE-2021-27429

    Texas Instruments TI-RTOS Integer Overflow or Wraparound

    Texas Instruments TI-RTOS returns a valid pointer to a small buffer on extremely large values. This can trigger an integer overflow vulnerability in 'HeapTrack_alloc' and result in code execution.

    Texas Instruments CC32XX SimpleLink-CC13XX SimpleLink-CC32XX
  • High 8.8
    CVE-2023-48293

    XWiki Admin Tools Application CSRF with QueryOnXWiki allows arbitrary database queries

    The XWiki Admin Tools Application provides tools to help the administration of XWiki. Prior to version 4.5.1, a cross-site request forgery vulnerability in the query on XWiki tool allows executing arbitrary database queries on the database of the XWiki instal…

    xwiki-contrib application-admintools org.xwiki.contrib:xwiki-application-admintools Maven
  • High 7.5
    CVE-2023-48241 Scanner template EPSS 73%

    XWiki exposed whole content of all documents of all wikis to anybody with view right on Solr suggest service

    XWiki Platform is a generic wiki platform. Starting in version 6.3-milestone-2 and prior to versions 14.10.15, 15.5.1, and 15.6RC1, the Solr-based search suggestion provider that also duplicates as generic JavaScript API for search results in XWiki exposes th…

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-search-solr-query Maven
  • High 7.3
    CVE-2023-48221

    wire-avs remote format string vulnerability

    wire-avs provides Audio, Visual, and Signaling (AVS) functionality sure the secure messaging software Wire. Prior to versions 9.2.22 and 9.3.5, a remote format string vulnerability could potentially allow an attacker to cause a denial of service or possibly e…

    wireapp wire-avs
  • High 8.8
    CVE-2023-6196

    Audio Merchant <= 5.0.4 - Cross-Site Request Forgery to Arbitrary File Upload

    The Audio Merchant plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.0.4. This is due to missing or incorrect nonce validation on the function audio_merchant_add_audio_file function. This makes it possibl…

    Audio Merchant Audio Merchant Web / CMS
  • High 7.8
    CVE-2023-5593

    The out-of-bounds write vulnerability in the Windows-based SecuExtender SSL VPN Client software version 4.0.4.0 could a…

    Zyxel SecuExtender SSL VPN Client Network devices
  • High 8.4
    CVE-2023-43612

    Hiview has an improper preservation of permissions vulnerability

    in OpenHarmony v3.2.2 and prior versions allow a local attacker arbitrary file read and write through improper preservation of permissions.

    OpenHarmony OpenHarmony
  • High 7.3
    CVE-2023-3116

    Liteos-A has a incorrect default permissions vulnerability

    in OpenHarmony v3.2.2 and prior versions allow a local attacker get confidential information or rewrite sensitive file through incorrect default permissions.

    OpenHarmony OpenHarmony
  • High 8.8
    CVE-2023-38885

    OpenSIS Classic Community Edition version 9.0 lacks cross-site request forgery (CSRF) protection throughout the whole a…

  • High 7.5
    CVE-2023-48110

    Tenda AX1803 v1.0.0.1 was discovered to contain a heap overflow via the urls parameter in the function saveParentContro…

  • High 7.5
    CVE-2023-48051

    upydev has weak encryption padding

    An issue in /upydev/keygen.py in upydev v0.4.3 allows attackers to decrypt sensitive information via weak encryption padding.

    upydev PyPI
  • High 7.5
    CVE-2023-48111

    Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the time parameter in the function saveParentContr…