Skip to content
OpenAdvisories

Archive

27 November 2023

Vulnerabilities first published on this day (UTC), newest first.

← October 2023 2023 / November /27 December 2023 →
  1. 1144
  2. 296
  3. 3108
  4. 48
  5. 57
  6. 6118
  7. 7163
  8. 8111
  9. 9100
  10. 1039
  11. 115
  12. 1236
  13. 1382
  14. 14339
  15. 1575
  16. 16131
  17. 1773
  18. 1844
  19. 191
  20. 2075
  21. 2162
  22. 22168
  23. 2350
  24. 2417
  25. 25 
  26. 269
  27. 2795
  28. 2872
  29. 2957
  30. 30205
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Low 3.3
    CVE-2023-6287

    Backup password in GET parameter

    Sensitive data exposure in Webconf in Tribe29 Checkmk Appliance before 1.6.8 allows local attacker to retrieve passwords via reading log files.

    Checkmk Checkmk Appliance check-mk Ubuntu
  • Low 3.1
    CVE-2023-35075

    HTML injection via channel autocomplete

    Mattermost fails to use  innerText / textContent when setting the channel name in the webapp during autocomplete, allowing an attacker to inject HTML to a victim's page by create a channel name that is valid HTML. No XSS is possible though. 

    Mattermost Mattermost github.com/mattermost/mattermost-server/v6 github.com/mattermost/mattermost/server/v8 Go
  • Low 3.5
    CVE-2023-6313

    SourceCodester URL Shortener Long URL cross site scripting

    A vulnerability was found in SourceCodester URL Shortener 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Long URL Handler. The manipulation leads to cross site scripting. The attack can be…

    SourceCodester URL Shortener
  • Low 2.4
    CVE-2023-6303

    CSZCMS Site Settings Page cross site scripting

    A vulnerability was found in CSZCMS 1.3.0. It has been classified as problematic. This affects an unknown part of the file /admin/settings/ of the component Site Settings Page. The manipulation of the argument Additional Meta Tag with the input <svg><animate …