Skip to content
OpenAdvisories

Archive

16 December 2023

Vulnerabilities first published on this day (UTC), newest first.

← November 2023 2023 / December /16 January 2024 →
  1. 158
  2. 210
  3. 39
  4. 4243
  5. 5131
  6. 656
  7. 7140
  8. 883
  9. 924
  10. 1024
  11. 1140
  12. 12192
  13. 13155
  14. 14157
  15. 15290
  16. 1619
  17. 1727
  18. 18106
  19. 19119
  20. 20116
  21. 21126
  22. 2280
  23. 2312
  24. 2411
  25. 2566
  26. 2669
  27. 2730
  28. 2874
  29. 29160
  30. 3036
  31. 3134
All Critical High Medium Low Exploited only Public exploit

19 results · Feed

  • Medium 5.5
    CVE-2023-6885

    Tongda OA 2017 delete.php sql injection

    A vulnerability was found in Tongda OA 2017 up to 11.10. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file general/vote/manage/delete.php. The manipulation of the argument DELETE_STR leads to sql injectio…

    Tongda OA 2017
  • High 7.5
    CVE-2023-6559

    MW WP Form <= 5.0.3 - Improper Limitation of File Name to Unauthenticated Arbitrary File Deletion

    The MW WP Form plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including, 5.0.3. This is due to the plugin not properly validating the path of an uploaded file prior to deleting it. This makes it possible for unauthent…

    inc2734 MW WP Form Web / CMS
  • Medium 6.3
    CVE-2023-6853

    kalcaddle KodExplorer app.php index server-side request forgery

    A vulnerability classified as critical was found in kalcaddle KodExplorer up to 4.51.03. Affected by this vulnerability is the function index of the file plugins/officeLive/app.php. The manipulation of the argument path leads to server-side request forgery. T…

    kalcaddle KodExplorer
  • Medium 6.3
    CVE-2023-6852

    kalcaddle KodExplorer app.php server-side request forgery

    A vulnerability classified as critical has been found in kalcaddle KodExplorer up to 4.51.03. Affected is an unknown function of the file plugins/webodf/app.php. The manipulation leads to server-side request forgery. It is possible to launch the attack remote…

    kalcaddle KodExplorer
  • Medium 6.3
    CVE-2023-6851

    kalcaddle KodExplorer ZIP Archive app.php unzipList code injection

    A vulnerability was found in kalcaddle KodExplorer up to 4.51.03. It has been rated as critical. This issue affects the function unzipList of the file plugins/zipView/app.php of the component ZIP Archive Handler. The manipulation leads to code injection. The …

    kalcaddle KodExplorer
  • Medium 5.4
    CVE-2023-6890

    Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

    Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.17.

    thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  • Medium 5.4
    CVE-2023-6889

    Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

    Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.17.

    thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  • Medium 6.3
    CVE-2023-6850

    kalcaddle KodExplorer API Endpoint unrestricted upload

    A vulnerability was found in kalcaddle KodExplorer up to 4.51.03. It has been declared as critical. This vulnerability affects unknown code of the file /index.php?pluginApp/to/yzOffice/getFile of the component API Endpoint Handler. The manipulation of the arg…

    kalcaddle KodExplorer
  • High 7.3
    CVE-2023-6849

    kalcaddle kodbox app.php cover server-side request forgery

    A vulnerability was found in kalcaddle kodbox up to 1.48. It has been rated as critical. Affected by this issue is the function cover of the file plugins/fileThumb/app.php. The manipulation of the argument path leads to server-side request forgery. The attack…

    kalcaddle kodbox
  • High 7.3
    CVE-2023-6848

    kalcaddle kodbox index.class.php check command injection

    A vulnerability was found in kalcaddle kodbox up to 1.48. It has been declared as critical. Affected by this vulnerability is the function check of the file plugins/officeViewer/controller/libreOffice/index.class.php. The manipulation of the argument soffice …

    kalcaddle kodbox
  • High 7.5
    CVE-2023-39340

    A vulnerability exists on all versions of Ivanti Connect Secure below 22.6R2 where an attacker can send a specific requ…

    ivanti Connect Secure Network devices
  • Unscored —
    CVE-2020-17485

    A Remote Code Execution vulnerability exist in Uffizio's GPS Tracker all versions. The web server can be compromised by…

  • Unscored —
    CVE-2020-17484

    An Open Redirection vulnerability exists in Uffizio's GPS Tracker all versions allows an attacker to construct a URL wi…

  • Unscored —
    CVE-2020-17483

    An improper access control vulnerability exists in Uffizio's GPS Tracker all versions that lead to sensitive informatio…

  • Unscored —
    CVE-2023-50784

    A buffer overflow in websockets in UnrealIRCd 6.1.0 through 6.1.3 before 6.1.4 allows an unauthenticated remote attacke…

  • Unscored —
    CVE-2022-24351

    TOCTOU race-condition vulnerability in Insyde InsydeH2O with Kernel 5.2 before version 05.27.29, Kernel 5.3 before vers…

  • Unscored —
    CVE-2021-42797

    Path traversal vulnerability in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior allows an unauthenti…

  • Medium 5.3
    CVE-2021-42794

    An issue was discovered in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior. The application allows a…

  • Critical 9.8
    CVE-2021-42796

    An issue was discovered in ExecuteCommand() in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior that …