Skip to content
OpenAdvisories

Archive

21 November 2023

Vulnerabilities first published on this day (UTC), newest first.

← October 2023 2023 / November /21 December 2023 →
  1. 1144
  2. 296
  3. 3108
  4. 48
  5. 57
  6. 6118
  7. 7163
  8. 8111
  9. 9100
  10. 1039
  11. 115
  12. 1236
  13. 1382
  14. 14339
  15. 1575
  16. 16131
  17. 1773
  18. 1844
  19. 191
  20. 2075
  21. 2162
  22. 22168
  23. 2350
  24. 2417
  25. 25 
  26. 269
  27. 2795
  28. 2872
  29. 2957
  30. 30205
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Low 3.5
    CVE-2023-48307

    Nextcloud Mail app vulnerable to Server-Side Request Forgery

    Nextcloud Mail is the mail app for Nextcloud, a self-hosted productivity platform. Starting in version 1.13.0 and prior to version 2.2.8 and 3.3.0, an attacker can use an unprotected endpoint in the Mail app to perform a SSRF attack. Nextcloud Mail app versio…

    Nextcloud security-advisories
  • Low 2.4
    CVE-2023-48303

    Nextcloud Server admins can change authentication details of user configured external storage

    Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.11, 26.0.6, and 27.1.0 of Nextcloud Server and Nextcloud Enterprise Server, admins can change authentication details of …

    Nextcloud security-advisories
  • Low 3.5
    CVE-2023-48302

    Nextcloud Server vulnerable to Self XSS when pasting HTML into Text app with Ctrl+Shift+V

    Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.13, 26.0.8, and 27.1.3 of Nextcloud Server and Nextcloud Enterprise Server, when a user is tricked into copy pasting HTM…

    Nextcloud security-advisories
  • Low 3.5
    CVE-2023-48301

    Nextcloud Server HTML injection in search UI when selecting a circle with HTML in the display name

    Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.13, 26.0.8, and 27.1.3 of Nextcloud Server and Nextcloud Enterprise Server, an attacker could insert links into circles …

    Nextcloud security-advisories
  • Low 3.1
    CVE-2023-47643 Scanner template

    SuiteCRM has Unauthenticated Graphql Introspection Enabled

    SuiteCRM is a Customer Relationship Management (CRM) software application. Prior to version 8.4.2, Graphql Introspection is enabled without authentication, exposing the scheme defining all object types, arguments, and functions. An attacker can obtain the Gra…

    salesagility SuiteCRM-Core
  • Low 2.5
    CVE-2023-5275

    Improper Input Validation vulnerability in simulation function of GX Works2 allows an attacker to cause a denial-of-ser…

    Mitsubishi Electric GX Works2 ICS / OT
  • Low 2.5
    CVE-2023-5274

    Improper Input Validation vulnerability in simulation function of GX Works2 allows an attacker to cause a denial-of-ser…

    Mitsubishi Electric GX Works2 ICS / OT