Skip to content
OpenAdvisories

Archive

27 December 2023

Vulnerabilities first published on this day (UTC), newest first.

← November 2023 2023 / December /27 January 2024 →
  1. 158
  2. 210
  3. 39
  4. 4243
  5. 5131
  6. 656
  7. 7140
  8. 883
  9. 924
  10. 1024
  11. 1140
  12. 12192
  13. 13155
  14. 14157
  15. 15290
  16. 1619
  17. 1727
  18. 18106
  19. 19119
  20. 20116
  21. 21126
  22. 2280
  23. 2312
  24. 2411
  25. 2566
  26. 2669
  27. 2730
  28. 2874
  29. 29160
  30. 3036
  31. 3134
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 6.3
    CVE-2023-7123

    SourceCodester Medicine Tracking System sql injection

    A vulnerability, which was classified as critical, has been found in SourceCodester Medicine Tracking System 1.0. This issue affects some unknown processing of the file /classes/Master.php? f=save_medicine. The manipulation of the argument id/name/description…

    SourceCodester Medicine Tracking System
  • Medium 6.4
    CVE-2023-51700

    WP-Mobile-BankID-Integration WordPress Database Deserialization: Potential for Object Injection

    Unofficial Mobile BankID Integration for WordPress lets users employ Mobile BankID to authenticate themselves on your WordPress site. Prior to 1.0.1, WP-Mobile-BankID-Integration is affected by a vulnerability classified as a Deserialization of Untrusted Data…

    jamieblomerus WP-Mobile-BankID-Integration
  • Medium 4.3
    CVE-2023-51665

    Audiobookshelf vulnerable to Blind SSRF in `Auth.js`

    Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.7.0, Audiobookshelf is vulnerable to unauthenticated blind server-side request (SSRF) vulnerability in Auth.js. This vulnerability has been addressed in version 2.7.0. There are no known…

    advplyr audiobookshelf
  • Medium 4.3
    CVE-2023-51697

    Audiobookshelf vulnerable to Blind SSRF in `podcastUtils.js`

    Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.7.0, Audiobookshelf is vulnerable to unauthenticated blind server-side request (SSRF) vulnerability in `podcastUtils.js`. This vulnerability has been addressed in version 2.7.0. There ar…

    advplyr audiobookshelf
  • Medium 4.7
    CVE-2023-4641

    Shadow-utils: possible password leak during passwd(1) change

    A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second attempt, shadow-utils fails in cleaning the buffer used to store the first entry. This may allow an attacker with enoug…

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  • Medium 6.3
    CVE-2023-7116 Scanner template

    WeiYe-Jing datax-web HTTP POST Request killJob os command injection

    A vulnerability, which was classified as critical, has been found in WeiYe-Jing datax-web 2.1.2. Affected by this issue is some unknown functionality of the file /api/log/killJob of the component HTTP POST Request Handler. The manipulation of the argument pro…

    WeiYe-Jing datax-web
  • Medium 5.3
    CVE-2023-51074

    json-path Out-of-bounds Write vulnerability

    json-path v2.8.0 was discovered to contain a stack overflow via the Criteria.parse() method.

    trino trino-plugin-opensearch trino-plugin-pinot trino-plugin-lakehouse Ubuntu Wolfi Maven
  • Medium 5.3
    CVE-2023-51079

    mvel2 TimeOut error exists in the ParseTools.subCompileExpression method

    A long execution time can occur in the ParseTools.subCompileExpression method in MVEL 2.5.0.Final because of many Java class lookups. NOTE: the vendor disputes this because "the only thing that you could expect is that the parser will take a crazy amount of t…

    org.mvel:mvel2 Maven