Skip to content
OpenAdvisories

Archive

27 November 2023

Vulnerabilities first published on this day (UTC), newest first.

← October 2023 2023 / November /27 December 2023 →
  1. 1144
  2. 296
  3. 3108
  4. 48
  5. 57
  6. 6118
  7. 7163
  8. 8111
  9. 9100
  10. 1039
  11. 115
  12. 1236
  13. 1382
  14. 14339
  15. 1575
  16. 16131
  17. 1773
  18. 1844
  19. 191
  20. 2075
  21. 2162
  22. 22168
  23. 2350
  24. 2417
  25. 25 
  26. 269
  27. 2795
  28. 2872
  29. 2957
  30. 30205
All Critical High Medium Low Exploited only Public exploit

15 results · Clear filters · Feed

  • High 7.9
    CVE-2023-49145

    Apache NiFi: Improper Neutralization of Input in Advanced User Interface for Jolt

    Apache NiFi 0.7.0 through 1.23.2 include the JoltTransformJSON Processor, which provides an advanced configuration user interface that is vulnerable to DOM-based cross-site scripting. If an authenticated user, who is authorized to configure a JoltTransformJSO…

    Apache Software Foundation Apache NiFi org.apache.nifi:nifi-jolt-transform-json-ui Maven
  • High 8.6
    CVE-2022-41951

    OroPlatform vulnerable to path traversal during temporary file manipulations

    OroPlatform is a PHP Business Application Platform (BAP) designed to make development of custom business applications easier and faster. Path Traversal is possible in `Oro\Bundle\GaufretteBundle\FileManager::getTemporaryFileName`. With this method, an attacke…

    oroinc platform oro/platform Packagist
  • High 8.8
    CVE-2023-31275

    An uninitialized pointer use vulnerability exists in the functionality of WPS Office 11.2.0.11537 that handles Data ele…

    WPS WPS Office
  • High 8.8
    CVE-2023-39542

    A code execution vulnerability exists in the Javascript saveAs API of Foxit Reader 12.1.3.15356. A specially crafted ma…

    Foxit Foxit Reader
  • High 8.8
    CVE-2023-35985 Public exploit

    An arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit Reader 12.1.3.15356 due…

    Foxit Foxit Reader
  • High 8.8
    CVE-2023-40194

    An arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit Reader 12.1.3.15356 due…

    Foxit Foxit Reader
  • High 8.8
    CVE-2023-32616

    A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15356 handles 3D annotations. A specially crafted …

    Foxit Foxit Reader
  • High 8.8
    CVE-2023-41257

    A type confusion vulnerability exists in the way Foxit Reader 12.1.2.15356 handles field value properties. A specially …

    Foxit Foxit Reader
  • High 8.8
    CVE-2023-38573

    A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15356 handles a signature field. A specially craft…

    Foxit Foxit Reader
  • High 7.3
    CVE-2023-4590 Public exploit

    Buffer Overflow vulnerability in Frhed

    Buffer overflow vulnerability in Frhed hex editor, affecting version 1.6.0. This vulnerability could allow an attacker to execute arbitrary code via a long filename argument through the Structured Exception Handler (SEH) registers.

    Frhed Frhed
  • High 8.4
    CVE-2023-5607

    An improper limitation of a path name to a restricted directory (path traversal) vulnerability in the TACC ePO extensio…

    Trellix Trellix Application and Change Control (TACC)
  • High 8.1
    CVE-2023-6254

    Password is send back to client

    A Vulnerability in OTRS AgentInterface and ExternalInterface allows the reading of plain text passwords which are send back to the client in the server response- This issue affects OTRS: from 8.0.X through 8.0.37.

    OTRS OTRS
  • High 7.2
    CVE-2023-6304

    Tecno 4G Portable WiFi TR118 Ping Tool goform_get_cmd_process os command injection

    A vulnerability was found in Tecno 4G Portable WiFi TR118 TR118-M30E-RR-D-EnFrArSwHaPo-OP-V008-20220830. It has been declared as critical. This vulnerability affects unknown code of the file /goform/goform_get_cmd_process of the component Ping Tool. The manip…

    TECNO 4G Portable WiFi TR118
  • High 7.5
    CVE-2023-49316

    Phpseclib needs guardrails on large binaryfield integers

    In Math/BinaryField.php in phpseclib 3 before 3.0.34, excessively large degrees can lead to a denial of service.

    php-phpseclib3 phpseclib/phpseclib php-phpseclib3 Debian Ubuntu Packagist
  • High 7.5
    CVE-2023-49030

    SQL Injection vulnerability in32ns KLive v.2019-1-19 and before allows a remote attacker to obtain sensitive informatio…