Skip to content
OpenAdvisories

Archive

24 December 2023

Vulnerabilities first published on this day (UTC), newest first.

← November 2023 2023 / December /24 January 2024 →
  1. 158
  2. 210
  3. 39
  4. 4243
  5. 5131
  6. 656
  7. 7140
  8. 883
  9. 924
  10. 1024
  11. 1140
  12. 12192
  13. 13155
  14. 14157
  15. 15290
  16. 1619
  17. 1727
  18. 18106
  19. 19119
  20. 20116
  21. 21126
  22. 2280
  23. 2312
  24. 2411
  25. 2566
  26. 2669
  27. 2730
  28. 2874
  29. 29160
  30. 3036
  31. 3134
All Critical High Medium Low Exploited only Public exploit

11 results · Feed

  • Medium 5.3
    CVE-2023-7093

    KylinSoft kylin-system-updater com.kylin.systemupgrade Service UpgradeStrategiesDbus.py os command injection

    A vulnerability classified as critical has been found in KylinSoft kylin-system-updater up to 2.0.5.16-0k2.33. Affected is an unknown function of the file /usr/share/kylin-system-updater/SystemUpdater/UpgradeStrategiesDbus.py of the component com.kylin.system…

    KylinSoft kylin-system-updater
  • Medium 4.3
    CVE-2023-7092

    Uniway UW-302VP Admin Web Interface wlan_basic_set.cgi cross-site request forgery

    A vulnerability was found in Uniway UW-302VP 2.0. It has been rated as problematic. This issue affects some unknown processing of the file /boaform/wlan_basic_set.cgi of the component Admin Web Interface. The manipulation of the argument wlanssid/password lea…

    Uniway UW-302VP
  • Unscored —
    CVE-2023-7102 Public exploit EPSS 45%

    Remote Code Execution (RCE) Vulnerability

    Use of a Third Party library produced a vulnerability in Barracuda Networks Inc. Barracuda ESG Appliance which allowed Parameter Injection.This issue affected Barracuda ESG Appliance, from 5.1.3.001 through 9.2.1.001, until Barracuda removed the vulnerable lo…

    Barracuda Networks Barracuda ESG Appliance
  • High 7.8
    CVE-2023-7101 Exploited Public exploit EPSS 19%

    Arbitrary Code Execution (ACE) Vulnerability

    Spreadsheet::ParseExcel version 0.65 is a Perl module used for parsing Excel files. Spreadsheet::ParseExcel is vulnerable to an arbitrary code execution (ACE) vulnerability due to passing unvalidated input from a file into a string-type “eval”. Specifically, …

    Douglas Wilson Spreadsheet::ParseExcel perl-spreadsheet-parseexcel libspreadsheet-parseexcel-perl Debian Ubuntu Alpine
    KEV Jan 2, 2024
  • Medium 6.3
    CVE-2023-7091

    Dreamer CMS uploadFile unrestricted upload

    A vulnerability was found in Dreamer CMS 4.1.3. It has been declared as problematic. This vulnerability affects unknown code of the file /upload/uploadFile. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remote…

    Dreamer CMS
  • Unscored —
    CVE-2023-51765

    sendmail through 8.17.2 allows SMTP smuggling in certain configurations. Remote attackers can use a published exploitat…

    sendmail sendmail sendmail Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2023-51764 Public exploit

    Postfix through 3.8.5 allows SMTP smuggling unless configured with smtpd_data_restrictions=reject_unauth_pipelining and…

    postfix postfix postfix Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2023-51766

    Exim before 4.97.1 allows SMTP smuggling in certain PIPELINING/CHUNKING configurations. Remote attackers can use a publ…

    exim4 exim4 exim exim Debian Ubuntu Alpine Wolfi
  • Medium 5.2
    CVE-2023-51763

    ActiveAdmin CSV Injection leading to sensitive information disclosure

    csv_builder.rb in ActiveAdmin (aka Active Admin) before 3.2.0 allows CSV injection.

    activeadmin RubyGems
  • High 7.0
    CVE-2023-51767

    OpenSSH through 10.0, when common types of DRAM are used, might allow row hammer attacks (for authentication bypass) be…

    openssh openssh Alpine Wolfi
  • Unscored —
    CVE-2023-51714

    An issue was discovered in the HTTP2 implementation in Qt before 5.15.17, 6.x before 6.2.11, 6.3.x through 6.5.x before…

    qtbase-opensource-src qtbase-opensource-src qt6-base qt6-base Debian Ubuntu Azure Linux