Skip to content
OpenAdvisories

Archive

29 November 2023

Vulnerabilities first published on this day (UTC), newest first.

← October 2023 2023 / November /29 December 2023 →
  1. 1144
  2. 296
  3. 3108
  4. 48
  5. 57
  6. 6118
  7. 7163
  8. 8111
  9. 9100
  10. 1039
  11. 115
  12. 1236
  13. 1382
  14. 14339
  15. 1575
  16. 16131
  17. 1773
  18. 1844
  19. 191
  20. 2075
  21. 2162
  22. 22168
  23. 2350
  24. 2417
  25. 25 
  26. 269
  27. 2795
  28. 2872
  29. 2957
  30. 30205
All Critical High Medium Low Exploited only Public exploit

57 results · Feed

  • Unscored —
    CVE-2023-48949

    An issue in the box_add function in openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service …

    virtuoso-opensource virtuoso-opensource Debian Ubuntu
  • Unscored —
    CVE-2023-48882

    A stored cross-site scripting (XSS) vulnerability in EyouCMS v1.6.4-UTF8-SP1 allows attackers to execute arbitrary web …

  • High 7.5
    CVE-2023-48945

    A stack overflow in openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafte…

    virtuoso-opensource virtuoso-opensource Debian Ubuntu
  • High 8.8
    CVE-2023-48951

    An issue in the box_equal function in openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Servic…

    virtuoso-opensource virtuoso-opensource Debian Ubuntu
  • Unscored —
    CVE-2023-48880

    A stored cross-site scripting (XSS) vulnerability in EyouCMS v1.6.4-UTF8-SP1 allows attackers to execute arbitrary web …

  • Unscored —
    CVE-2023-48881

    A stored cross-site scripting (XSS) vulnerability in EyouCMS v1.6.4-UTF8-SP1 allows attackers to execute arbitrary web …

  • Critical 9.1
    CVE-2023-46886

    Dreamer CMS before version 4.0.1 is vulnerable to Directory Traversal. Background template management allows arbitrary …

  • Unscored —
    CVE-2023-46887

    In Dreamer CMS before 4.0.1, the backend attachment management office has an Arbitrary File Download vulnerability.

  • Unscored —
    CVE-2023-45483

    Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the time parameter in t…

  • Unscored —
    CVE-2023-45480

    Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the src parameter in th…

  • Unscored —
    CVE-2023-45484

    Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the shareSpeed paramete…

  • Unscored —
    CVE-2023-45482

    Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the urls parameter in t…

  • Unscored —
    CVE-2023-45479

    Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the list parameter in t…

  • Critical 9.8
    CVE-2023-45481

    Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the firewallEn paramete…

  • Unscored —
    CVE-2023-23324

    Zumtobel Netlink CCD Onboard 3.74 - Firmware 3.80 was discovered to contain hardcoded credentials for the Administrator…

  • Unscored —
    CVE-2023-23325

    Zumtobel Netlink CCD Onboard 3.74 - Firmware 3.80 was discovered to contain a command injection vulnerability via the N…

  • Unscored —
    CVE-2023-47462

    Insecure Permissions vulnerability in GL.iNet AX1800 v.3.215 and before allows a remote attacker to execute arbitrary c…