1 December 2023

58 results · Feed

• Medium 4.8
  CVE-2023-5226

  Improper Control of Generation of Code ('Code Injection') in GitLab

  An issue has been discovered in GitLab affecting all versions before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1. Under certain circumstances, a malicious actor bypass prohibited branch checks using a s…

  GitLab GitLab gitlab Web / CMS Ubuntu
  Dec 1, 2023
• High 8.7
  CVE-2023-6033

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

  Improper neutralization of input in Jira integration configuration in GitLab CE/EE, affecting all versions from 15.10 prior to 16.6.1, 16.5 prior to 16.5.3, and 16.4 prior to 16.4.3 allows attacker to execute javascript in victim's browser.

  GitLab GitLab gitlab Web / CMS Ubuntu
  Dec 1, 2023
• Medium 4.4
  CVE-2023-5995

  Incorrect Authorization in GitLab

  An issue has been discovered in GitLab EE affecting all versions starting from 16.2 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions starting from 16.6 before 16.6.1. It was possible for an attacker to abuse the policy bot to gain ac…

  GitLab GitLab Web / CMS
  Dec 1, 2023
• Unscored —
  CVE-2023-5915

  A vulnerability of Uncontrolled Resource Consumption has been identified in STARDOM provided by Yokogawa Electric Corpo…

  Yokogawa Electric STARDOM ICS / OT
  Dec 1, 2023
• Medium 4.4
  CVE-2023-43089

  Dell Rugged Control Center, version prior to 4.7, contains insufficient protection for the Policy folder. A local malic…

  Dell Dell Rugged Control Center
  Dec 1, 2023
• Unscored —
  CVE-2023-48016

  Restaurant Table Booking System V1.0 is vulnerable to SQL Injection in rtbs/admin/index.php via the username parameter.

  Dec 1, 2023
• Critical 9.8
  CVE-2023-48842 Public exploit

  D-Link Go-RT-AC750 revA_v101b03 was discovered to contain a command injection vulnerability via the service parameter a…

  Dec 1, 2023
• Unscored —
  CVE-2023-48813

  Senayan Library Management Systems (Slims) 9 Bulian v9.6.1 is vulnerable to SQL Injection via admin/modules/reporting/c…

  Dec 1, 2023
• Unscored —
  CVE-2023-48893

  SLiMS (aka SENAYAN Library Management System) through 9.6.1 allows admin/modules/reporting/customs/staff_act.php SQL In…

  Dec 1, 2023
• Critical 9.8
  CVE-2023-48886

  A deserialization vulnerability in NettyRpc v1.2 allows attackers to execute arbitrary commands via sending a crafted R…

  Dec 1, 2023
• Unscored —
  CVE-2023-48801

  In TOTOLINK X6000R_Firmware V9.4.0cu.852_B20230719, the shttpd file sub_415534 function obtains fields from the front-e…

  Dec 1, 2023
• Critical 9.8
  CVE-2023-48887

  Jupiter allows attackers to execute arbitrary commands via sending a crafted RPC request

  A deserialization vulnerability in Jupiter v1.3.1 allows attackers to execute arbitrary commands via sending a crafted RPC request.

  org.jupiter-rpc:jupiter-rpc Maven
  Dec 1, 2023
• Unscored —
  CVE-2023-45252

  DLL Hijacking vulnerability in Huddly HuddlyCameraService before version 8.0.7, not including version 7.99, due to the …

  Dec 1, 2023
• Unscored —
  CVE-2023-45253

  An issue was discovered in Huddly HuddlyCameraService before version 8.0.7, not including version 7.99, allows attacker…

  Dec 1, 2023
• Unscored —
  CVE-2023-43454

  An issue in TOTOLINK X6000R V9.4.0cu.652_B20230116 and V9.4.0cu.852_B20230719 allows a remote attacker to execute arbit…

  Dec 1, 2023
• Unscored —
  CVE-2023-43453

  An issue in TOTOLINK X6000R V9.4.0cu.652_B20230116 and V9.4.0cu.852_B20230719 allows a remote attacker to execute arbit…

  Dec 1, 2023
• Unscored —
  CVE-2023-43455

  An issue in TOTOLINK X6000R V9.4.0cu.652_B20230116 and V9.4.0cu.852_B20230719 allows a remote attacker to execute arbit…

  Dec 1, 2023
• Critical 9.8
  CVE-2023-49371

  RuoYi vulnerable to SQL injection vulnerability

  RuoYi up to v4.6 was discovered to contain a SQL injection vulnerability via /system/dept/edit.

  com.ruoyi:ruoyi Maven
  Dec 1, 2023