Skip to content
OpenAdvisories

Archive

25 December 2023

Vulnerabilities first published on this day (UTC), newest first.

← November 2023 2023 / December /25 January 2024 →
  1. 158
  2. 210
  3. 39
  4. 4243
  5. 5131
  6. 656
  7. 7140
  8. 883
  9. 924
  10. 1024
  11. 1140
  12. 12192
  13. 13155
  14. 14157
  15. 15290
  16. 1619
  17. 1727
  18. 18106
  19. 19119
  20. 20116
  21. 21126
  22. 2280
  23. 2312
  24. 2411
  25. 2566
  26. 2669
  27. 2730
  28. 2874
  29. 29160
  30. 3036
  31. 3134
All Critical High Medium Low Exploited only Public exploit

66 results · Feed

  • Unscored —
    CVE-2023-51782

    An issue was discovered in the Linux kernel before 6.6.8. rose_ioctl in net/rose/af_rose.c has a use-after-free because…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  • Critical 9.1
    CVE-2023-51773

    BACnet Stack before 1.3.2 has a decode function APDU buffer over-read in bacapp_decode_application_data in bacapp.c.

  • High 8.8
    CVE-2023-51772

    One Identity Password Manager before 5.13.1 allows Kiosk Escape. This product enables users to reset their Active Direc…

  • Unscored —
    CVE-2023-37185

    C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the function zfp_prec_decompress at zfp/…

    blosc Azure Linux
  • Unscored —
    CVE-2023-37187

    C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the zfp/blosc2-zfp.c zfp_acc_decompress.…

    blosc Azure Linux
  • Unscored —
    CVE-2023-37225

    Pexip Infinity before 32 allows Webapp1 XSS via preconfigured links.

  • Unscored —
    CVE-2023-37188

    C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the function zfp_rate_decompress at zfp/…

    blosc Azure Linux
  • Unscored —
    CVE-2023-37186

    C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference in ndlz/ndlz8x8.c via a NULL pointer to mems…

    blosc Azure Linux
  • Unscored —
    CVE-2023-47247

    In SysAid On-Premise before 23.3.34, there is an edge case in which an end user is able to delete a Knowledge Base arti…

  • High 7.5
    CVE-2023-47091

    An issue was discovered in Stormshield Network Security (SNS) SNS 4.3.13 through 4.3.22 before 4.3.23, SNS 4.6.0 throug…

  • Low 2.4
    CVE-2023-49337

    Concrete CMS Stored XSS

    Concrete CMS before 9.2.3 allows Stored XSS on the Admin Dashboard via /dashboard/system/basics/name. (8.5 and earlier are unaffected.)

    concrete5/concrete5 Packagist
  • Unscored —
    CVE-2023-49328

    On a Wolters Kluwer B.POINT 23.70.00 server running Linux on premises, during the authentication phase, a validated sys…

  • Critical 9.8
    CVE-2023-49954 Public exploit

    The CRM Integration in 3CX before 18.0.9.23 and 20 before 20.0.0.1494 allows SQL Injection via a first name, search str…

  • Unscored —
    CVE-2023-49944

    The Challenge Response feature of BeyondTrust Privilege Management for Windows (PMfW) before 2023-07-14 allows local ad…

  • Unscored —
    CVE-2023-49226

    An issue was discovered in Peplink Balance Two before 8.4.0. Command injection in the traceroute feature of the adminis…

  • Critical 9.8
    CVE-2022-34268

    An issue was discovered in RWS WorldServer before 11.7.3. /clientLogin deserializes Java objects without authentication…

  • Unscored —
    CVE-2022-34267 Scanner template EPSS 42%

    An issue was discovered in RWS WorldServer before 11.7.3. Adding a token parameter with the value of 02 bypasses all au…

  • Critical 9.8
    CVE-2022-34270

    An issue was discovered in RWS WorldServer before 11.7.3. Regular users can create users with the Administrator role vi…

  • High 8.8
    CVE-2022-34269

    An issue was discovered in RWS WorldServer before 11.7.3. An authenticated, remote attacker can perform a ws-legacy/loa…

  • High 8.8
    CVE-2022-39822

    In NOKIA NFM-T R19.9, a SQL Injection vulnerability occurs in /cgi-bin/R19.9/easy1350.pl of the VM Manager WebUI via th…

  • Unscored —
    CVE-2022-39820

    In Network Element Manager in NOKIA NFM-T R19.9, an Unprotected Storage of Credentials vulnerability occurs under /root…

  • Unscored —
    CVE-2022-39818

    In NOKIA NFM-T R19.9, an OS Command Injection vulnerability occurs in /cgi-bin/R19.9/log.pl of the VM Manager WebUI via…

  • Unscored —
    CVE-2022-41761

    An issue was discovered in NOKIA NFM-T R19.9. An Absolute Path Traversal vulnerability exists under /cgi-bin/R19.9/view…

  • Unscored —
    CVE-2022-41760

    An issue was discovered in NOKIA NFM-T R19.9. Relative Path Traversal can occur under /oms1350/data/cpb/log of the Netw…

  • Unscored —
    CVE-2022-41762

    An issue was discovered in NOKIA NFM-T R19.9. Multiple Reflected XSS vulnerabilities exist in the Network Element Manag…

  • Unscored —
    CVE-2022-43675

    An issue was discovered in NOKIA NFM-T R19.9. Reflected XSS in the Network Element Manager exists via /oms1350/pages/ot…