Skip to content
OpenAdvisories

Archive

13 December 2023

Vulnerabilities first published on this day (UTC), newest first.

← November 2023 2023 / December /13 January 2024 →
  1. 158
  2. 210
  3. 39
  4. 4243
  5. 5131
  6. 656
  7. 7140
  8. 883
  9. 924
  10. 1024
  11. 1140
  12. 12192
  13. 13155
  14. 14157
  15. 15290
  16. 1619
  17. 1727
  18. 18106
  19. 19119
  20. 20116
  21. 21126
  22. 2280
  23. 2312
  24. 2411
  25. 2566
  26. 2669
  27. 2730
  28. 2874
  29. 29160
  30. 3036
  31. 3134
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Low 3.5
    CVE-2023-6775

    CodeAstro POS and Inventory Management System item_con cross site scripting

    A vulnerability was found in CodeAstro POS and Inventory Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /item/item_con. The manipulation of the argument item_name leads to cross site scripting. It is pos…

    CodeAstro POS and Inventory Management System
  • Low 2.7
    CVE-2023-6793

    PAN-OS: XML API Keys Revoked by Read-Only PAN-OS Administrator

    An improper privilege management vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-only administrator to revoke active XML API keys from the firewall and disrupt XML API usage.

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
  • Low 3.3
    CVE-2023-6381

    Improper input validation in Newsletter Software SuperMailer

    Improper input validation vulnerability in Newsletter Software SuperMailer affecting version 11.20.0.2204. An attacker could exploit this vulnerability by sending a malicious configuration file (file with SMB extension) to a user via a link or email attachmen…

    SuperMailer Newsletter Software
  • Low 2.8
    CVE-2023-47536

    An improper access control vulnerability [CWE-284] in FortiOS version 7.2.0, version 7.0.13 and below, version 6.4.14 a…

    Fortinet FortiOS FortiProxy Network devices
  • Low 3.4
    CVE-2023-41844

    A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiS…

    Fortinet FortiSandbox Network devices
  • Low 3.4
    CVE-2023-45587

    An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet Forti…

    Fortinet FortiSandbox Network devices