Skip to content
OpenAdvisories

Archive

28 November 2023

Vulnerabilities first published on this day (UTC), newest first.

← October 2023 2023 / November /28 December 2023 →
  1. 1144
  2. 296
  3. 3108
  4. 48
  5. 57
  6. 6118
  7. 7163
  8. 8111
  9. 9100
  10. 1039
  11. 115
  12. 1236
  13. 1382
  14. 14339
  15. 1575
  16. 16131
  17. 1773
  18. 1844
  19. 191
  20. 2075
  21. 2162
  22. 22168
  23. 2350
  24. 2417
  25. 25 
  26. 269
  27. 2795
  28. 2872
  29. 2957
  30. 30205
All Critical High Medium Low Exploited only Public exploit

20 results · Clear filters · Feed

  • High 8.0
    CVE-2023-40056

    SolarWinds Platform SQL Injection Remote Code Execution Vulnerability

    SQL Injection Remote Code Vulnerability was found in the SolarWinds Platform. This vulnerability can be exploited with a low privileged account.

    SolarWinds SolarWinds Platform
  • High 7.5
    CVE-2023-46589

    Apache Tomcat: HTTP request smuggling via malformed trailer headers

    Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.1.15, from 9.0.0-M1 through 9.0.82 and from 8.5.0 through 8.5.95 did not correctly parse HTTP trailer headers. A trailer header that e…

    Apache Software Foundation Apache Tomcat tomcat9 tomcat8 Debian Ubuntu Maven
  • High 8.8
    CVE-2022-41678 Public exploit Scanner template EPSS 86%

    Apache ActiveMQ: Insufficient API restrictions on Jolokia allow authenticated users to perform RCE

    Once an user is authenticated on Jolokia, he can potentially trigger arbitrary code execution.  In details, in ActiveMQ configurations, jetty allows org.jolokia.http.AgentServlet to handler request to /api/jolokia org.jolokia.http.HttpRequestHandler#handlePos…

    Apache Software Foundation Apache ActiveMQ activemq activemq Debian Ubuntu Maven
  • High 8.8
    CVE-2023-6201

    Command Injection in Univera Panorama Framework

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Univera Computer System Panorama allows Command Injection. This issue affects Panorama: before 8.0.

    Univera Computer System Panorama
  • High 8.0
    CVE-2023-42004

    IBM Security Guardium CSV injection

    IBM Security Guardium 11.3, 11.4, and 11.5 is potentially vulnerable to CSV injection. A remote attacker could execute malicious commands due to improper validation of csv file contents. IBM X-Force ID: 265262.

    IBM Security Guardium
  • High 7.5
    CVE-2023-6151

    Information Disclosure in Eskom E-municipality

    Incorrect Use of Privileged APIs vulnerability in ESKOM Computer e-municipality module allows Collect Data as Provided by Users. This issue affects e-municipality module: before v.105.

    ESKOM Computer e-municipality module
  • High 7.5
    CVE-2023-6150

    Information Disclosure in Eskom E-municipality

    Incorrect Use of Privileged APIs vulnerability in ESKOM Computer e-municipality module allows Collect Data as Provided by Users. This issue affects e-municipality module: before v.105.

    ESKOM Computer e-municipality module
  • High 8.1
    CVE-2023-4667

    Stored Cross Site Scripting in webserver administration

    The web interface of the PAC Device allows the device administrator user profile to store malicious scripts in some fields. The stored malicious script is then executed when the GUI is opened by any users of the webserver administration interface.  The root c…

    IDEMIA SIGMA Extreme VisionPass SIGMA Wide
  • High 8.8
    CVE-2023-4225

    Chamilo LMS File Upload Functionality Remote Code Execution

    Unrestricted file upload in `/main/inc/ajax/exercise.ajax.php` in Chamilo LMS <= v1.11.24 allows authenticated attackers with learner role to obtain remote code execution via uploading of PHP files.

    chamilo Chamilo
  • High 8.8
    CVE-2023-4226 Public exploit

    Chamilo LMS File Upload Functionality Remote Code Execution

    Unrestricted file upload in `/main/inc/ajax/work.ajax.php` in Chamilo LMS <= v1.11.24 allows authenticated attackers with learner role to obtain remote code execution via uploading of PHP files.

    chamilo Chamilo
  • High 8.8
    CVE-2023-4224

    Chamilo LMS File Upload Functionality Remote Code Execution

    Unrestricted file upload in `/main/inc/ajax/dropbox.ajax.php` in Chamilo LMS <= v1.11.24 allows authenticated attackers with learner role to obtain remote code execution via uploading of PHP files.

    chamilo Chamilo
  • High 8.8
    CVE-2023-4223

    Chamilo LMS File Upload Functionality Remote Code Execution

    Unrestricted file upload in `/main/inc/ajax/document.ajax.php` in Chamilo LMS <= v1.11.24 allows authenticated attackers with learner role to obtain remote code execution via uploading of PHP files.

    chamilo Chamilo
  • High 7.2
    CVE-2023-4222

    Chamilo LMS Learning Path PPT2LP Command Injection Vulnerability

    Command injection in `main/lp/openoffice_text_document.class.php` in Chamilo LMS <= v1.11.24 allows users permitted to upload Learning Paths to obtain remote code execution via improper neutralisation of special characters.

    chamilo Chamilo
  • High 7.2
    CVE-2023-4221

    Chamilo LMS Learning Path PPT2LP Command Injection Vulnerability

    Command injection in `main/lp/openoffice_presentation.class.php` in Chamilo LMS <= v1.11.24 allows users permitted to upload Learning Paths to obtain remote code execution via improper neutralisation of special characters.

    chamilo Chamilo
  • High 8.1
    CVE-2023-4220 Public exploit Scanner template EPSS 76%

    Chamilo LMS Unauthenticated Big Upload File Remote Code Execution

    Unrestricted file upload in big file upload functionality in `/main/inc/lib/javascript/bigupload/inc/bigUpload.php` in Chamilo LMS <= v1.11.24 allows unauthenticated attackers to perform stored cross-site scripting attacks and obtain remote code execution via…

    chamilo Chamilo
  • High 8.5
    CVE-2023-49075

    Pimcore Admin UI has Two Factor Authentication disabled for non admin security firewalls

    The Admin Classic Bundle provides a Backend UI for Pimcore. `AdminBundle\Security\PimcoreUserTwoFactorCondition` introduced in v11 disable the two factor authentication for all non-admin security firewalls. An authenticated user can access the system without …

    pimcore admin-ui-classic-bundle pimcore/admin-ui-classic-bundle Packagist
  • High 7.2
    CVE-2023-6219

    BookingPress <= 1.0.76 - Authenticated (Administrator+) Arbitrary File Upload

    The BookingPress plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file validation on the 'bookingpress_process_upload' function in versions up to, and including, 1.0.76. This makes it possible for authenticated attackers with a…

    Repute InfoSystems Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress Web / CMS
  • High 7.5
    CVE-2023-4398

    An integer overflow vulnerability in the source code of the QuickSec IPSec toolkit used in the VPN feature of the Zyxel…

    Zyxel USG FLEX series firmware ATP series firmware VPN series Firmware Network devices
  • High 7.5
    CVE-2023-48848

    ureport arbitrary file read vulnerability

    An arbitrary file read vulnerability in ureport v2.2.9 allows a remote attacker to arbitrarily read files on the server by inserting a crafted path.

    com.bstek.ureport:ureport2-core Maven
  • High 8.2
    CVE-2023-45539 Public exploit

    HAProxy before 2.8.2 accepts # as part of the URI component, which might allow remote attackers to obtain sensitive inf…

    haproxy haproxy haproxy Debian Ubuntu Azure Linux