Skip to content
OpenAdvisories

Archive

3 December 2023

Vulnerabilities first published on this day (UTC), newest first.

← November 2023 2023 / December /3 January 2024 →
  1. 158
  2. 210
  3. 39
  4. 4243
  5. 5131
  6. 656
  7. 7140
  8. 883
  9. 924
  10. 1024
  11. 1140
  12. 12192
  13. 13155
  14. 14157
  15. 15290
  16. 1619
  17. 1727
  18. 18106
  19. 19119
  20. 20116
  21. 21126
  22. 2280
  23. 2312
  24. 2411
  25. 2566
  26. 2669
  27. 2730
  28. 2874
  29. 29160
  30. 3036
  31. 3134
All Critical High Medium Low Exploited only Public exploit

9 results · Feed

  • Medium 5.9
    CVE-2023-40692

    IBM Db2 denial of service

    IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, 11.5 is vulnerable to denial of service under extreme stress conditions. IBM X-Force ID: 264807.

    IBM DB2 for Linux, UNIX and Windows Linux Windows
  • Low 3.5
    CVE-2022-4957

    librespeed speedtest stats.php cross site scripting

    A vulnerability was found in librespeed speedtest up to 5.2.4. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file results/stats.php. The manipulation of the argument id leads to cross site scripting. Th…

    librespeed speedtest
  • Medium 6.5
    CVE-2023-45178

    IBM Db2 denial of service

    IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5 CLI is vulnerable to a denial of service when a specially crafted request is used. IBM X-Force ID: 268073.

    IBM DB2 for Linux, UNIX and Windows Linux Windows
  • High 7.3
    CVE-2020-36768

    rl-institut NESP2 database.py sql injection

    A vulnerability was found in rl-institut NESP2 Initial Release/1.0. It has been classified as critical. Affected is an unknown function of the file app/database.py. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exp…

    rl-institut NESP2
  • Low 3.5
    CVE-2018-25094

    ระบบบัญชีออนไลน์ Online Accounting System image.php path traversal

    A vulnerability was found in ระบบบัญชีออนไลน์ Online Accounting System up to 1.4.0 and classified as problematic. This issue affects some unknown processing of the file ckeditor/filemanager/browser/default/image.php. The manipulation of the argument fid with …

  • Unscored —
    CVE-2023-49926

    app/Lib/Tools/EventTimelineTool.php in MISP before 2.4.179 allows XSS in the event timeline widget.

  • Unscored —
    CVE-2023-49948

    Forgejo before 1.20.5-1 allows remote attackers to test for the existence of private user accounts by appending .rss (o…

  • Unscored —
    CVE-2023-49946

    In Forgejo before 1.20.5-1, certain endpoints do not check whether an object belongs to a repository for which permissi…

  • Unscored —
    CVE-2023-49947

    Forgejo before 1.20.5-1 allows 2FA bypass when docker login uses Basic Authentication.