Skip to content
OpenAdvisories

Archive

21 November 2023

Vulnerabilities first published on this day (UTC), newest first.

← October 2023 2023 / November /21 December 2023 →
  1. 1144
  2. 296
  3. 3108
  4. 48
  5. 57
  6. 6118
  7. 7163
  8. 8111
  9. 9100
  10. 1039
  11. 115
  12. 1236
  13. 1382
  14. 14339
  15. 1575
  16. 16131
  17. 1773
  18. 1844
  19. 191
  20. 2075
  21. 2162
  22. 22168
  23. 2350
  24. 2417
  25. 25 
  26. 269
  27. 2795
  28. 2872
  29. 2957
  30. 30205
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 10.0
    CVE-2023-6248

    Data leakage and arbitrary remote code execution in Syrus cloud devices

    The Syrus4 IoT gateway utilizes an unsecured MQTT server to download and execute arbitrary commands, allowing a remote unauthenticated attacker to execute code on any Syrus4 device connected to the cloud service. The MQTT server also leaks the location, video…

    Digital Communications Technologies Syrus4 IoT Telematics Gateway
  • Critical 9.8
    CVE-2023-4149

    WAGO: OS Command Injection Vulnerability in Managed Switch

    A vulnerability in the web-based management allows an unauthenticated remote attacker to inject arbitrary system commands and gain full system control. Those commands are executed with root privileges. The vulnerability is located in the user request handling…

    WAGO Industrial Managed Switch (0852-0602) Industrial Managed Switch (0852-1605) Industrial Managed Switch (0852-0603) ICS / OT
  • Critical 10.0
    CVE-2023-42770

    Red Lion Controls Sixnet RTU Authentication Bypass Using An Alternative Path Or Channel

    Red Lion SixTRAK and VersaTRAK Series RTUs with authenticated users enabled (UDR-A) any Sixnet UDR message will meet an authentication challenge over UDP/IP. When the same message is received over TCP/IP the RTU will simply accept the message with no authenti…

    Red Lion Controls ST-IPm-6350 VT-mIPm-245-D VT-IPm2m-113-D
  • Critical 10.0
    CVE-2023-40151

    Red Lion Controls Sixnet RTU Exposed Dangerous Method Or Function

    When user authentication is not enabled the shell can execute commands with the highest privileges. Red Lion SixTRAK and VersaTRAK Series RTUs with authenticated users enabled (UDR-A) any Sixnet UDR message will meet an authentication challenge over UDP/IP. W…

    Red Lion Controls ST-IPm-6350 VT-mIPm-245-D VT-IPm2m-113-D
  • Critical 10.0
    CVE-2023-49103 Exploited Public exploit Scanner template EPSS 78%

    An issue was discovered in ownCloud owncloud/graphapi 0.2.x before 0.2.1 and 0.3.x before 0.3.1. The graphapi app relie…

    KEV Nov 30, 2023
  • Critical 9.8
    CVE-2023-49105 Exploited Public exploit EPSS 43%

    An issue was discovered in ownCloud owncloud/core before 10.13.1. An attacker can access, modify, or delete any file wi…

    KEV Aug 27, 2026