Skip to content
OpenAdvisories

Archive

30 November 2023

Vulnerabilities first published on this day (UTC), newest first.

← October 2023 2023 / November /30 December 2023 →
  1. 1144
  2. 296
  3. 3108
  4. 48
  5. 57
  6. 6118
  7. 7163
  8. 8111
  9. 9100
  10. 1039
  11. 115
  12. 1236
  13. 1382
  14. 14339
  15. 1575
  16. 16131
  17. 1773
  18. 1844
  19. 191
  20. 2075
  21. 2162
  22. 22168
  23. 2350
  24. 2417
  25. 25 
  26. 269
  27. 2795
  28. 2872
  29. 2957
  30. 30205
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.6
    CVE-2023-6360 Public exploit Scanner template EPSS 63%

    The 'My Calendar' WordPress Plugin, version < 3.4.22 is affected by an unauthenticated SQL injection vulnerability in t…

    Web / CMS
  • Medium 5.3
    CVE-2023-40600 Public exploit Scanner template

    WordPress EWWW Image Optimizer Plugin <= 7.2.0 is vulnerable to Sensitive Data Exposure

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Exactly WWW EWWW Image Optimizer. It works only when debug.log is turned on.This issue affects EWWW Image Optimizer: from n/a through 7.2.0.

    Exactly WWW EWWW Image Optimizer
  • Medium 5.3
    CVE-2023-6401 Public exploit

    NotePad++ dbghelp.exe uncontrolled search path

    A vulnerability classified as problematic was found in NotePad++ up to 8.1. Affected by this vulnerability is an unknown functionality of the file dbghelp.exe. The manipulation leads to uncontrolled search path. An attack has to be approached locally. The ide…

  • Medium 4.7
    CVE-2023-5966 Public exploit

    Unrestricted Upload of File with Dangerous Type in EspoCRM

    An authenticated privileged attacker could upload a specially crafted zip to the EspoCRM server in version 7.2.5, via the extension deployment form, which could lead to arbitrary PHP code execution.

    espocrm espocrm
  • Medium 4.7
    CVE-2023-5965 Public exploit

    Unrestricted Upload of File with Dangerous Type in EspoCRM

    An authenticated privileged attacker could upload a specially crafted zip to the EspoCRM server in version 7.2.5, via the update form, which could lead to arbitrary PHP code execution.

    espocrm espocrm
  • Unscored —
    CVE-2023-47464 Public exploit EPSS 23%

    Insecure Permissions vulnerability in GL.iNet AX1800 version 4.0.0 before 4.5.0 allows a remote attacker to execute arb…

  • High 8.8
    CVE-2023-49052 Public exploit

    Microweber file upload vulnerability

    File Upload vulnerability in Microweber v.2.0.4 allows a remote attacker to execute arbitrary code via a crafted script to the file upload function in the created forms component.

    microweber/microweber Packagist