CVEs published November 5, 2023
7 CVEs were published on November 5, 2023: 0 critical, 0 high.
- Published
- 7
- Critical
- 0
- High
- 0
- Medium
- 2
- Low
- 1
- Unrated
- 4
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- Magnesium-PHP · floriangaerber/magnesium
- 1
- Vaerys-Dawn DiscordSailv2
- 1
Medium, low and unrated 7
- CVE-2018-25092Vaerys-Dawn DiscordSailv2 Command Mention access controlVaerys-Dawn DiscordSailv2
- CVE-2017-20187Magnesium-PHP Base.php formatEmailString injectionMagnesium-PHP · floriangaerber/magnesium
- CVE-2023-47258Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS in a Markdown formatter.
- CVE-2023-47259Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS in the Textile formatter.
- CVE-2023-47260Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS via thumbnails.
- CVE-2023-47271PKP-WAL (aka PKP Web Application Library or pkp-lib) before 3.3.0-16, as used in Open Journal Systems (OJS) and other products, does not ver
- CVE-2023-47272Roundcube 1.5.x before 1.5.6 and 1.6.x before 1.6.5 allows XSS via a Content-Type or Content-Disposition header (used for attachment preview