Skip to content
OpenAdvisories

Archive

23 November 2023

Vulnerabilities first published on this day (UTC), newest first.

← October 2023 2023 / November /23 December 2023 →
  1. 1144
  2. 296
  3. 3108
  4. 48
  5. 57
  6. 6118
  7. 7163
  8. 8111
  9. 9100
  10. 1039
  11. 115
  12. 1236
  13. 1382
  14. 14339
  15. 1575
  16. 16131
  17. 1773
  18. 1844
  19. 191
  20. 2075
  21. 2162
  22. 22168
  23. 2350
  24. 2417
  25. 25 
  26. 269
  27. 2795
  28. 2872
  29. 2957
  30. 30205
All Critical High Medium Low Exploited only Public exploit

50 results · Feed

  • Medium 5.3
    CVE-2023-47668 Public exploit

    WordPress Restrict Content Plugin <= 3.2.7 is vulnerable to Sensitive Data Exposure

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in StellarWP Membership Plugin – Restrict Content plugin <= 3.2.7 versions.

    stellarwp Membership Plugin – Restrict Content
  • Medium 5.5
    CVE-2023-33202

    Bouncy Castle Denial of Service (DoS)

    Bouncy Castle for Java before 1.73 contains a potential Denial of Service (DoS) issue within the Bouncy Castle org.bouncycastle.openssl.PEMParser class. This class parses OpenSSL PEM encoded streams containing X.509 certificates, PKCS8 encoded keys, and PKCS7…

    bouncycastle bouncycastle gradle-8 gradle-stage0 Debian Ubuntu Wolfi Maven
  • Unscored —
    CVE-2023-49214

    Usedesk before 1.7.57 allows chat template injection.

  • Critical 9.8
    CVE-2023-49210

    openssl npm package vulnerable to command execution

    The openssl (aka node-openssl) NPM package through 2.0.0 was characterized as "a nonsense wrapper with no real purpose" by its author, and accepts an opts argument that contains a verb field (used for command execution). NOTE: This vulnerability only affects …

    openssl npm
  • Unscored —
    CVE-2023-49213

    The API endpoints in Ironman PowerShell Universal 3.0.0 through 4.2.0 allow remote attackers to execute arbitrary comma…

  • Unscored —
    CVE-2023-49215

    Usedesk before 1.7.57 allows filter reflected XSS.

  • Unscored —
    CVE-2023-49216

    Usedesk before 1.7.57 allows profile stored XSS.

  • Critical 9.8
    CVE-2023-49208

    scheme/webauthn.c in Glewlwyd SSO server before 2.7.6 has a possible buffer overflow during FIDO2 credentials validatio…

    glewlwyd glewlwyd Debian Ubuntu
  • Unscored —
    CVE-2022-44011

    An issue was discovered in ClickHouse before 22.9.1.2603. An authenticated user (with the ability to load data) could c…

    clickhouse clickhouse Debian Ubuntu
  • Unscored —
    CVE-2022-44010

    An issue was discovered in ClickHouse before 22.9.1.2603. An attacker could send a crafted HTTP request to the HTTP End…

    clickhouse clickhouse Debian Ubuntu