CVEs published November 4, 2023
8 CVEs were published on November 4, 2023: 0 critical, 1 high.
- Published
- 8
- Critical
- 0
- High
- 1
- Medium
- 0
- Low
- 0
- Unrated
- 7
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- Hillstone Next Generation FireWall SG-6000-E3960
- 1
High 1
Medium, low and unrated 7
- CVE-2023-40922kerawen before v2.5.1 was discovered to contain a SQL injection vulnerability via the ocs_id_cart parameter at KerawenDeliveryModuleFrontCon
- CVE-2023-46381LOYTEC LINX-151, LINX-212, LVIS-3ME12-A1, LIOB-586, LIOB-580 V2, LIOB-588, L-INX Configurator devices (all versions) lack authentication for
- CVE-2023-46382LOYTEC LINX-151, LINX-212, LVIS-3ME12-A1, LIOB-586, LIOB-580 V2, LIOB-588, L-INX Configurator devices (all versions) use cleartext HTTP for
- CVE-2023-46963An issue in Beijing Yunfan Internet Technology Co., Ltd, Yunfan Learning Examination System v.6.5 allows a remote attacker to obtain sensiti
- CVE-2023-46964Cross Site Scripting (XSS) vulnerability in Hillstone Next Generation FireWall SG-6000-e3960 v.5.5 allows a remote attacker to execute arbitHillstone Next Generation FireWall SG-6000-E3960
- CVE-2023-46981SQL injection vulnerability in Novel-Plus v.4.2.0 allows a remote attacker to execute arbitrary code via a crafted script to the sort parame
- CVE-2023-47249In International Color Consortium DemoIccMAX 79ecb74, a CIccXmlArrayType:::ParseText function (for unsigned short) in IccUtilXml.cpp in libI