Skip to content
OpenAdvisories

Archive

25 December 2023

Vulnerabilities first published on this day (UTC), newest first.

← November 2023 2023 / December /25 January 2024 →
  1. 158
  2. 210
  3. 39
  4. 4243
  5. 5131
  6. 656
  7. 7140
  8. 883
  9. 924
  10. 1024
  11. 1140
  12. 12192
  13. 13155
  14. 14157
  15. 15290
  16. 1619
  17. 1727
  18. 18106
  19. 19119
  20. 20116
  21. 21126
  22. 2280
  23. 2312
  24. 2411
  25. 2566
  26. 2669
  27. 2730
  28. 2874
  29. 29160
  30. 3036
  31. 3134
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • High 7.3
    CVE-2023-7107

    code-projects E-Commerce Website user_signup.php sql injection

    A vulnerability was found in code-projects E-Commerce Website 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file user_signup.php. The manipulation of the argument firstname/middlename/email/address/contact/use…

    code-projects E-Commerce Website
  • High 7.5
    CVE-2023-49880

    IBM Financial Transaction Manager for SWIFT Services data manipulation

    In the Message Entry and Repair (MER) facility of IBM Financial Transaction Manager for SWIFT Services 3.2.4 the sending address and the message type of FIN messages are assumed to be immutable. However, an attacker might modify these elements of a business t…

    IBM Financial Transaction Manager for SWIFT Services
  • High 7.2
    CVE-2021-38927

    IBM Aspera Console cross-site scripting

    IBM Aspera Console 3.4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. I…

    IBM Aspera Console
  • High 7.0
    CVE-2023-43064

    IBM i code execution

    Facsimile Support for IBM i 7.2, 7.3, 7.4, and 7.5 could allow a local user to gain elevated privileges due to an unqualified library call. A malicious actor could cause arbitrary code to run with the privilege of the user invoking the facsimile support. IBM …

    IBM i
  • High 7.0
    CVE-2023-51779

    bt_sock_recvmsg in net/bluetooth/af_bluetooth.c in the Linux kernel through 6.6.8 has a use-after-free because of a bt_…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  • High 8.4
    CVE-2023-51774

    json-jwt allows bypass of identity checks via a sign/encryption confusion attack

    The json-jwt (aka JSON::JWT) gem 1.16.3 for Ruby sometimes allows bypass of identity checks via a sign/encryption confusion attack. For example, JWE can sometimes be used to bypass JSON::JWT.decode.

    kube-fluentd-operator kube-fluentd-operator-oci-entrypoint kube-fluentd-operator-default-config kube-fluentd-operator-compat Ubuntu Wolfi RubyGems
  • High 8.8
    CVE-2023-51772

    One Identity Password Manager before 5.13.1 allows Kiosk Escape. This product enables users to reset their Active Direc…

  • High 7.5
    CVE-2023-47091

    An issue was discovered in Stormshield Network Security (SNS) SNS 4.3.13 through 4.3.22 before 4.3.23, SNS 4.6.0 throug…

  • High 8.8
    CVE-2022-34269

    An issue was discovered in RWS WorldServer before 11.7.3. An authenticated, remote attacker can perform a ws-legacy/loa…

  • High 8.8
    CVE-2022-39822

    In NOKIA NFM-T R19.9, a SQL Injection vulnerability occurs in /cgi-bin/R19.9/easy1350.pl of the VM Manager WebUI via th…