Skip to content
OpenAdvisories

Archive

26 December 2023

Vulnerabilities first published on this day (UTC), newest first.

← November 2023 2023 / December /26 January 2024 →
  1. 158
  2. 210
  3. 39
  4. 4243
  5. 5131
  6. 656
  7. 7140
  8. 883
  9. 924
  10. 1024
  11. 1140
  12. 12192
  13. 13155
  14. 14157
  15. 15290
  16. 1619
  17. 1727
  18. 18106
  19. 19119
  20. 20116
  21. 21126
  22. 2280
  23. 2312
  24. 2411
  25. 2566
  26. 2669
  27. 2730
  28. 2874
  29. 29160
  30. 3036
  31. 3134
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 7.6
    CVE-2023-5644

    WP Mail Log < 1.1.3 – Incorrect Authorization in REST API Endpoints

    The WP Mail Log WordPress plugin before 1.1.3 does not correctly authorize its REST API endpoints, allowing users with the Contributor role to view and delete data that should only be accessible to Admin users.

    Web / CMS
  • High 7.5
    CVE-2023-5203 Scanner template

    WP Sessions Time Monitoring Full Automatic < 1.0.9 - Unauthenticated SQL injection

    The WP Sessions Time Monitoring Full Automatic WordPress plugin before 1.0.9 does not sanitize the request URL or query parameters before using them in an SQL query, allowing unauthenticated attackers to extract sensitive data from the database via blind time…

    Web / CMS
  • High 7.8
    CVE-2023-5180 Public exploit

    Out-of-bounds Write vulnerability exists in ODA Drawings SDK before 2024.12

    An issue was discovered in Open Design Alliance Drawings SDK before 2024.12. A corrupted value of number of sectors used by the Fat structure in a crafted DGN file leads to an out-of-bounds write. An attacker can leverage this vulnerability to execute code in…

    Open Design Alliance ODA Drawings SDK - All Versions < 2024.12
  • High 7.3
    CVE-2023-7110

    code-projects Library Management System login.php sql injection

    A vulnerability, which was classified as critical, has been found in code-projects Library Management System 2.0. This issue affects some unknown processing of the file login.php. The manipulation of the argument student leads to sql injection. The attack may…

    code-projects Library Management System
  • High 7.3
    CVE-2023-7109

    code-projects Library Management System login.php sql injection

    A vulnerability classified as critical was found in code-projects Library Management System 2.0. This vulnerability affects unknown code of the file /admin/login.php. The manipulation of the argument username leads to sql injection. The attack can be initiate…

    code-projects Library Management System
  • High 8.8
    CVE-2023-51092 EPSS 13%

    Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function upgrade.

  • High 7.5
    CVE-2023-51107

    A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in functon compute_col…

    mupdf mupdf Debian Ubuntu
  • High 7.5
    CVE-2023-51104

    A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in function pnm_binary…

    mupdf mupdf Debian Ubuntu