Skip to content
OpenAdvisories

Archive

6 December 2023

Vulnerabilities first published on this day (UTC), newest first.

← November 2023 2023 / December /6 January 2024 →
  1. 158
  2. 210
  3. 39
  4. 4243
  5. 5131
  6. 656
  7. 7140
  8. 883
  9. 924
  10. 1024
  11. 1140
  12. 12192
  13. 13155
  14. 14157
  15. 15290
  16. 1619
  17. 1727
  18. 18106
  19. 19119
  20. 20116
  21. 21126
  22. 2280
  23. 2312
  24. 2411
  25. 2566
  26. 2669
  27. 2730
  28. 2874
  29. 29160
  30. 3036
  31. 3134
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Medium 5.3
    CVE-2023-6393

    Quarkus: potential invalid reuse of context when @cacheresult on a uni is used

    A flaw was found in the Quarkus Cache Runtime. When request processing utilizes a Uni cached using @CacheResult and the cached Uni reuses the initial "completion" context, the processing switches to the cached Uni instead of the request context. This is a pro…

    Red Hat Red Hat build of Quarkus io.quarkus:quarkus-cache Maven
  • Medium 5.3
    CVE-2023-6273

    Permission management vulnerability in the module for disabling Sound Booster. Successful exploitation of this vulnerab…

    Huawei HarmonyOS EMUI Network devices
  • Medium 4.3
    CVE-2023-45210

    Pleasanter 1.3.47.0 and earlier contains an improper access control vulnerability, which may allow a remote authenticat…

    Implem Pleasanter
  • Medium 5.3
    CVE-2023-6459

    Public endpoint /metrics of Calls plugin reveals channel IDs

    Mattermost is grouping calls in the /metrics endpoint by id and reports that id in the response. Since this id is the channelID, the public /metrics endpoint is revealing channelIDs.

    Mattermost Mattermost github.com/mattermost/mattermost-server/v6 github.com/mattermost/mattermost/server/v8 Go
  • Medium 6.0
    CVE-2023-2861

    Qemu: 9pfs: improper access control on special files

    A flaw was found in the 9p passthrough filesystem (9pfs) implementation in QEMU. The 9pfs server did not prohibit opening special files on the host side, potentially allowing a malicious client to escape from the exported 9p tree by creating and opening a dev…

    qemu qemu qemu qemu Virtualization Debian Ubuntu Azure Linux Alpine
  • Medium 5.9
    CVE-2023-26154

    pubnub Insufficient Entropy vulnerability

    Versions of the package pubnub before 7.4.0; all versions of the package com.pubnub:pubnub; versions of the package pubnub before 6.19.0; all versions of the package github.com/pubnub/go; versions of the package github.com/pubnub/go/v7 before 7.2.0; versions …

    github.com/pubnub/go github.com/pubnub/go/v5 pubnub com.pubnub:pubnub-kotlin npm Packagist Maven PyPI Go crates.io NuGet RubyGems SwiftURL Pub
  • Medium 6.1
    CVE-2023-6527

    Email Subscription Popup <= 1.2.18 - Reflected Cross-Site Scripting

    The Email Subscription Popup plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the HTTP_REFERER header in all versions up to, and including, 1.2.18 due to insufficient input sanitization and output escaping. This makes it possible for u…

    nik00726 Email Subscription Popup Web / CMS
  • Medium 5.3
    CVE-2023-41268

    Possible stack overflow due to insufficient input validation

    Improper input validation vulnerability in Samsung Open Source Escargot allows stack overflow and segmentation fault. This issue affects Escargot: from 3.0.0 through 4.0.0.

    Samsung Open Source escargot
  • Medium 5.0
    CVE-2023-40053

    HTML injection Vulnerability in Serv-U 15.4

    A vulnerability has been identified within Serv-U 15.4 that allows an authenticated actor to insert content on the file share function feature of Serv-U, which could be used maliciously.

    SolarWinds Serv-U
  • Medium 6.5
    CVE-2023-6512

    Inappropriate implementation in Web Browser UI in Google Chrome prior to 120.0.6099.62 allowed a remote attacker to pot…

    Google Chrome chromium Browsers Debian
  • Medium 6.4
    CVE-2021-27795

    License forgery in Brocade Fabric OS (FOS) hardware platforms running any version of Brocade Fabric OS software,

    Brocade Fabric OS (FOS) hardware platforms running any version of Brocade Fabric OS software, which supports the license string format; contain cryptographic issues that could allow for the installation of forged or fraudulent license keys. This would allow a…

    Brocade Brocade Switches