Skip to content
OpenAdvisories

Archive

26 December 2023

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Unscored —
    CVE-2023-51467 Public exploit Scanner template EPSS 96%

    Apache OFBiz: Pre-authentication Remote Code Execution (RCE) vulnerability

    The vulnerability permits attackers to circumvent authentication processes, enabling them to remotely execute arbitrary code

  • High 7.8
    CVE-2023-5180 Public exploit

    Out-of-bounds Write vulnerability exists in ODA Drawings SDK before 2024.12

    An issue was discovered in Open Design Alliance Drawings SDK before 2024.12. A corrupted value of number of sectors used by the Fat structure in a crafted DGN file leads to an out-of-bounds write. An attacker can leverage this vulnerability to execute code in…

  • Medium 6.1
    CVE-2023-49438 Public exploit Scanner template

    Open redirect vulnerability in Flask-Security-Too

    An open redirect vulnerability in the python package Flask-Security-Too <=5.3.2 allows attackers to redirect unsuspecting users to malicious sites via a crafted URL by abusing the ?next parameter on the /login and /register routes.