Skip to content
OpenAdvisories

Archive

8 December 2023

Vulnerabilities first published on this day (UTC), newest first.

← November 2023 2023 / December /8 January 2024 →
  1. 158
  2. 210
  3. 39
  4. 4243
  5. 5131
  6. 656
  7. 7140
  8. 883
  9. 924
  10. 1024
  11. 1140
  12. 12192
  13. 13155
  14. 14157
  15. 15290
  16. 1619
  17. 1727
  18. 18106
  19. 19119
  20. 20116
  21. 21126
  22. 2280
  23. 2312
  24. 2411
  25. 2566
  26. 2669
  27. 2730
  28. 2874
  29. 29160
  30. 3036
  31. 3134
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Low —
    GHSA-99jv-8292-2hpm

    eventing-gitlab vulnerable to denial of service, caused by improper enforcement of the timeout on individual read operations

    ### Impact The eventing-gitlab cluster-local server doesn't set `ReadHeaderTimeout`‬‭ which could lead do a DDoS‬ ‭attack, where a large group of users send requests to the server causing the server to hang‬ ‭for long enough to deny it from being available to…

    knative.dev/eventing-gitlab Go
  • Low 3.5
    CVE-2023-6616

    SourceCodester Simple Student Attendance System index.php cross site scripting

    A vulnerability was found in SourceCodester Simple Student Attendance System 1.0 and classified as problematic. This issue affects some unknown processing of the file index.php. The manipulation of the argument page leads to cross site scripting. The attack m…

    SourceCodester Simple Student Attendance System
  • Low 3.5
    CVE-2023-6615

    Typecho manage-users.php information disclosure

    A vulnerability, which was classified as problematic, has been found in Typecho 1.2.1. Affected by this issue is some unknown functionality of the file /admin/manage-users.php. The manipulation of the argument page leads to information disclosure. The exploit…

  • Low 2.7
    CVE-2023-6614

    Typecho Page manage-pages.php backdoor

    A vulnerability classified as problematic was found in Typecho 1.2.1. Affected by this vulnerability is an unknown functionality of the file /admin/manage-pages.php of the component Page Handler. The manipulation leads to backdoor. The attack can be launched …

  • Low 3.2
    GHSA-j4g3-3q8x-jxqp

    dbt-core's secret env vars written to package-lock.json in plaintext

    ### Impact When used to pull source code from a private repository using a Personal Access Token (PAT), some versions of dbt-core write a URL with the PAT in plaintext to the `package-lock.yml` file. ### Patches The bug has been fixed in [dbt-core v1.7.3](htt…

    dbt-core PyPI
  • Low 2.4
    CVE-2023-6613

    Typecho Logo options-theme.php cross site scripting

    A vulnerability classified as problematic has been found in Typecho 1.2.1. Affected is an unknown function of the file /admin/options-theme.php of the component Logo Handler. The manipulation leads to cross site scripting. It is possible to launch the attack …

  • Low 3.5
    CVE-2023-6609

    osCommerce all-products cross site scripting

    A vulnerability was found in osCommerce 4. It has been classified as problematic. This affects an unknown part of the file /b2b-supermarket/catalog/all-products. The manipulation of the argument keywords with the input %27%22%3E%3Cimg%2Fsrc%3D1+onerror%3Daler…

  • Low 3.1
    CVE-2023-6599

    Missing Standardized Error Handling Mechanism in microweber/microweber

    Missing Standardized Error Handling Mechanism in GitHub repository microweber/microweber prior to 2.0.

    microweber microweber/microweber microweber/microweber Packagist