6 December 2023

56 results · Feed

• Unscored —
  CVE-2023-6511

  Inappropriate implementation in Autofill in Google Chrome prior to 120.0.6099.62 allowed a remote attacker to bypass Au…

  Google Chrome chromium Browsers Debian
  Dec 6, 2023
• Unscored —
  CVE-2023-6510

  Use after free in Media Capture in Google Chrome prior to 120.0.6099.62 allowed a remote attacker who convinced a user …

  Google Chrome chromium qt6-qtwebengine Browsers Debian Alpine
  Dec 6, 2023
• Unscored —
  CVE-2023-6508

  Use after free in Media Stream in Google Chrome prior to 120.0.6099.62 allowed a remote attacker to potentially exploit…

  Google Chrome chromium Browsers Debian
  Dec 6, 2023
• Unscored —
  CVE-2023-6509

  Use after free in Side Panel Search in Google Chrome prior to 120.0.6099.62 allowed a remote attacker who convinced a u…

  Google Chrome chromium Browsers Debian
  Dec 6, 2023
• Medium 6.4
  CVE-2021-27795

  License forgery in Brocade Fabric OS (FOS) hardware platforms running any version of Brocade Fabric OS software,

  Brocade Fabric OS (FOS) hardware platforms running any version of Brocade Fabric OS software, which supports the license string format; contain cryptographic issues that could allow for the installation of forged or fraudulent license keys. This would allow a…

  Brocade Brocade Switches
  Dec 6, 2023
• Unscored —
  CVE-2023-28876

  A Broken Access Control issue in comments to uploaded files in Filerun through Update 20220202 allows attackers to dele…

  Dec 6, 2023
• Unscored —
  CVE-2023-28875

  A Stored XSS issue in shared files download terms in Filerun Update 20220202 allows attackers to inject JavaScript code…

  Dec 6, 2023
• Critical 9.8
  CVE-2023-36655

  The login REST API in ProLion CryptoSpike 3.0.15P2 (when LDAP or Active Directory is used as the users store) allows a …

  Dec 6, 2023
• Unscored —
  CVE-2023-48930

  xinhu xinhuoa 2.2.1 contains a File upload vulnerability.

  Dec 6, 2023
• Unscored —
  CVE-2023-48849 Public exploit

  Ruijie EG Series Routers version EG_3.0(1)B11P216 and before allows unauthenticated attackers to remotely execute arbit…

  Dec 6, 2023
• Unscored —
  CVE-2023-48940

  A stored cross-site scripting (XSS) vulnerability in /admin.php of DaiCuo v2.5.15 allows attackers to execute arbitrary…

  Dec 6, 2023
• Unscored —
  CVE-2023-48123 Public exploit EPSS 68%

  An issue in Netgate pfSense Plus v.23.05.1 and before and pfSense CE v.2.7.0 allows a remote attacker to execute arbitr…

  Dec 6, 2023
• Unscored —
  CVE-2023-48859

  TOTOLINK A3002RU version 2.0.0-B20190902.1958 has a post-authentication RCE due to incorrect access control, allows att…

  Dec 6, 2023
• Unscored —
  CVE-2023-46354

  In the module "Orders (CSV, Excel) Export PRO" (ordersexport) < 5.2.0 from MyPrestaModules for PrestaShop, a guest can …

  Dec 6, 2023
• Unscored —
  CVE-2023-46353

  In the module "Product Tag Icons Pro" (ticons) before 1.8.4 from MyPresta.eu for PrestaShop, a guest can perform SQL in…

  Dec 6, 2023
• Unscored —
  CVE-2023-46751

  An issue was discovered in the function gdev_prn_open_printer_seekable() in Artifex Ghostscript through 10.02.0 allows …

  ghostscript ghostscript ghostscript Debian Ubuntu Wolfi
  Dec 6, 2023