Skip to content
OpenAdvisories

Archive

9 December 2023

Vulnerabilities first published on this day (UTC), newest first.

← November 2023 2023 / December /9 January 2024 →
  1. 158
  2. 210
  3. 39
  4. 4243
  5. 5131
  6. 656
  7. 7140
  8. 883
  9. 924
  10. 1024
  11. 1140
  12. 12192
  13. 13155
  14. 14157
  15. 15290
  16. 1619
  17. 1727
  18. 18106
  19. 19119
  20. 20116
  21. 21126
  22. 2280
  23. 2312
  24. 2411
  25. 2566
  26. 2669
  27. 2730
  28. 2874
  29. 29160
  30. 3036
  31. 3134
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 4.1
    CVE-2023-6120

    Welcart e-Commerce <= 2.9.6 - Authenticated (Administrator+) Directory Traversal

    The Welcart e-Commerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.9.6 via the upload_certificate_file function. This makes it possible for administrators to upload .pem or .crt files to arbitrary location…

    uscnanbu Welcart e-Commerce Web / CMS
  • Medium 5.4
    CVE-2023-5756

    Digital Publications by Supsystic <= 1.7.6 - Cross-Site Request Forgery via AJAX action

    The Digital Publications by Supsystic plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.6. This is due to missing or incorrect nonce validation on the AJAX action handler. This makes it possible for unauthe…

    supsysticcom WordPress Flipbook by Supsystic Web / CMS
  • Medium 6.2
    CVE-2023-47722

    IBM API Connect information disclosure

    IBM API Connect V10.0.5.3 and V10.0.6.0 stores user credentials in browser cache which can be read by a local user. IBM X-Force ID: 271912.

    IBM API Connect
  • Medium 6.2
    CVE-2023-28526

    IBM Informix Dynamic Server buffer overflow

    IBM Informix Dynamic Server 12.10 and 14.10 archecker is vulnerable to a heap buffer overflow, caused by improper bounds checking which could allow a local user to cause a segmentation fault. IBM X-Force ID: 251204.

    IBM Informix Dynamic Server
  • Medium 6.2
    CVE-2023-28527

    IBM Informix Dynamic Server buffer overflow

    IBM Informix Dynamic Server 12.10 and 14.10 cdr is vulnerable to a heap buffer overflow, caused by improper bounds checking which could allow a local user to cause a segmentation fault. IBM X-Force ID: 251206.

    IBM Informix Dynamic Server
  • Medium 5.9
    CVE-2020-25835

    Micro Focus ArcSight Management Center Remote Vulnerability

    A potential vulnerability has been identified in Micro Focus ArcSight Management Center. The vulnerability could be remotely exploited resulting in stored Cross-Site Scripting (XSS).

    Micro Focus ArcSight Management Center