Skip to content
OpenAdvisories

Archive

December 2023

Vulnerabilities first published in this month (UTC), newest first.

← November 2023 2023 / December January 2024 →
  1. 158
  2. 210
  3. 39
  4. 4243
  5. 5131
  6. 656
  7. 7140
  8. 883
  9. 924
  10. 1024
  11. 1140
  12. 12192
  13. 13155
  14. 14157
  15. 15290
  16. 1619
  17. 1727
  18. 18106
  19. 19119
  20. 20116
  21. 21126
  22. 2280
  23. 2312
  24. 2411
  25. 2566
  26. 2669
  27. 2730
  28. 2874
  29. 29160
  30. 3036
  31. 3134
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • High 7.8
    CVE-2023-7101 Exploited Public exploit EPSS 19%

    Arbitrary Code Execution (ACE) Vulnerability

    Spreadsheet::ParseExcel version 0.65 is a Perl module used for parsing Excel files. Spreadsheet::ParseExcel is vulnerable to an arbitrary code execution (ACE) vulnerability due to passing unvalidated input from a file into a string-type “eval”. Specifically, …

    Douglas Wilson Spreadsheet::ParseExcel libspreadsheet-parseexcel-perl libspreadsheet-parseexcel-perl Debian Ubuntu Alpine
    KEV Jan 2, 2024
  • High 8.8
    CVE-2023-7024 Exploited Public exploit

    Heap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a remote attacker to potentially exploi…

    Google Chrome chromium qt6-qtwebengine Browsers Debian Alpine
    KEV Jan 2, 2024
  • High 8.0
    CVE-2023-47565 Exploited EPSS 73%

    Legacy VioStor NVR

    An OS command injection vulnerability has been found to affect legacy QNAP VioStor NVR models running QVR Firmware 4.x. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability …

    QNAP Systems VioStor NVR
    KEV Dec 21, 2023
  • High 8.8
    CVE-2023-49897 Exploited EPSS 50%

    An OS command injection vulnerability exists in AE1021PE firmware version 2.0.9 and earlier and AE1021 firmware version…

    FXC AE1021PE AE1021
    KEV Dec 21, 2023
  • High 7.2
    CVE-2023-44221 Exploited EPSS 76%

    Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated at…

    SonicWall SMA100 Network devices
    KEV May 1, 2025
  • Critical 9.8
    CVE-2023-6448 Exploited

    Unitronics VisiLogic uses a default administrative password

    Unitronics VisiLogic before version 9.9.00, used in Vision and Samba PLCs and HMIs, uses a default administrative password. An unauthenticated attacker with network access can take administrative control of a vulnerable system.

    Unitronics VisiLogic
    KEV Dec 11, 2023
  • High 8.4
    CVE-2023-33107 Exploited Public exploit

    Integer Overflow or Wraparound in Graphics Linux

    Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.

    Qualcomm Snapdragon
    KEV Dec 5, 2023
  • High 8.4
    CVE-2023-33106 Exploited

    Use of Out-of-range Pointer Offset in Graphics

    Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.

    Qualcomm Snapdragon
    KEV Dec 5, 2023
  • High 7.8
    CVE-2023-33063 Exploited

    Use After Free in DSP Services

    Memory corruption in DSP Services during a remote call from HLOS to DSP.

    Qualcomm Snapdragon
    KEV Dec 5, 2023