Skip to content
OpenAdvisories

Archive

1 December 2023

Vulnerabilities first published on this day (UTC), newest first.

← November 2023 2023 / December /1 January 2024 →
  1. 158
  2. 210
  3. 39
  4. 4243
  5. 5131
  6. 656
  7. 7140
  8. 883
  9. 924
  10. 1024
  11. 1140
  12. 12192
  13. 13155
  14. 14157
  15. 15290
  16. 1619
  17. 1727
  18. 18106
  19. 19119
  20. 20116
  21. 21126
  22. 2280
  23. 2312
  24. 2411
  25. 2566
  26. 2669
  27. 2730
  28. 2874
  29. 29160
  30. 3036
  31. 3134
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Low 3.5
    CVE-2023-6463

    SourceCodester User Registration and Login System add-user.php cross site scripting

    A vulnerability has been found in SourceCodester User Registration and Login System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /endpoint/add-user.php. The manipulation of the argument first_name l…

    SourceCodester User Registration and Login System
  • Low 3.5
    CVE-2023-6462

    SourceCodester User Registration and Login System delete-user.php cross site scripting

    A vulnerability, which was classified as problematic, was found in SourceCodester User Registration and Login System 1.0. Affected is an unknown function of the file /endpoint/delete-user.php. The manipulation of the argument user leads to cross site scriptin…

    SourceCodester User Registration and Login System
  • Low 3.3
    CVE-2023-28896

    Weak encoding for password in UDS services

    Access to critical Unified Diagnostics Services (UDS) of the Modular Infotainment Platform 3 (MIB3) infotainment is transmitted via Controller Area Network (CAN) bus in a form that can be easily decoded by attackers with physical access to the vehicle. Vulner…

    JOYNEXT MIB3 Infotainment Unit
  • Low 3.5
    CVE-2023-28895

    Hard-coded password for access to power controller chip memory

    The password for access to the debugging console of the PoWer Controller chip (PWC) of the MIB3 infotainment is hard-coded in the firmware. The console allows attackers with physical access to the MIB3 unit to gain full control over the PWC chip. Vulnerabilit…

    JOYNEXT MIB3 Infotainment Unit
  • Low 3.1
    CVE-2023-3443

    Incorrect Authorization in GitLab

    An issue has been discovered in GitLab affecting all versions starting from 12.1 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1. It was possible for a Guest user to add an emoji on confidential work…

    GitLab GitLab Web / CMS
  • Low 3.1
    CVE-2023-4658

    Incorrect Authorization in GitLab

    An issue has been discovered in GitLab EE affecting all versions starting from 8.13 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1. It was possible for an attacker to abuse the `Allowed to merge` pe…

    GitLab GitLab Web / CMS
  • Low 2.6
    CVE-2023-4912

    Allocation of Resources Without Limits or Throttling in GitLab

    An issue has been discovered in GitLab EE affecting all versions starting from 10.5 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1. It was possible for an attacker to cause a client-side denial of s…

    GitLab GitLab Web / CMS