Skip to content
OpenAdvisories

Archive

6 December 2023

Vulnerabilities first published on this day (UTC), newest first.

← November 2023 2023 / December /6 January 2024 →
  1. 158
  2. 210
  3. 39
  4. 4243
  5. 5131
  6. 656
  7. 7140
  8. 883
  9. 924
  10. 1024
  11. 1140
  12. 12192
  13. 13155
  14. 14157
  15. 15290
  16. 1619
  17. 1727
  18. 18106
  19. 19119
  20. 20116
  21. 21126
  22. 2280
  23. 2312
  24. 2411
  25. 2566
  26. 2669
  27. 2730
  28. 2874
  29. 29160
  30. 3036
  31. 3134
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • High 7.7
    CVE-2023-49096

    Argument Injection in FFmpeg codec parameters in Jellyfin

    Jellyfin is a Free Software Media System for managing and streaming media. In affected versions there is an argument injection in the VideosController, specifically the `/Videos/<itemId>/stream` and `/Videos/<itemId>/stream.<container>` endpoints which are pr…

    jellyfin jellyfin
  • High 7.5
    CVE-2023-39538

    Failure when uploading a Logo image file

    AMI AptioV contains a vulnerability in BIOS where a User may cause an unrestricted upload of a BMP Logo file with dangerous type by Local access. A successful exploit of this vulnerability may lead to a loss of Confidentiality, Integrity, and/or Availability. 

    AMI AptioV
  • High 7.5
    CVE-2023-39539 Public exploit

    Failure when uploading a Logo image file

    AMI AptioV contains a vulnerability in BIOS where a User may cause an unrestricted upload of a PNG Logo file with dangerous type by Local access. A successful exploit of this vulnerability may lead to a loss of Confidentiality, Integrity, and/or Availability. 

    AMI AptioV
  • High 7.2
    CVE-2023-32268

    Administrator equivalent Filr user can access proxy administrator credentials

    Exposure of Proxy Administrator Credentials An authenticated administrator equivalent Filr user can access the credentials of proxy administrators.

    OpenText Filr
  • High 7.5
    CVE-2023-49246

    Unauthorized access vulnerability in the card management module. Successful exploitation of this vulnerability may affe…

    Huawei HarmonyOS EMUI Network devices
  • High 7.5
    CVE-2023-44113

    Vulnerability of missing permission verification for APIs in the Designed for Reliability (DFR) module. Successful expl…

    Huawei HarmonyOS EMUI Network devices
  • High 8.8
    CVE-2023-6514

    The Bluetooth module of some Huawei Smart Screen products has an identity authentication bypass vulnerability. Successf…

    Huawei AJMD-370S Network devices
  • High 7.1
    CVE-2023-6458

    Client side path traversal due to lack of route parameters validation

    Mattermost webapp fails to validate route parameters in/<TEAM_NAME>/channels/<CHANNEL_NAME> allowing an attacker to perform a client-side path traversal.

    Mattermost Mattermost github.com/mattermost/mattermost-server/v6 github.com/mattermost/mattermost/server/v8 Go
  • High 8.8
    CVE-2023-49897 Exploited EPSS 50%

    An OS command injection vulnerability exists in AE1021PE firmware version 2.0.9 and earlier and AE1021 firmware version…

    FXC AE1021PE AE1021
    KEV Dec 21, 2023