# CVEs published 2023-11-11

5 CVEs were published on November 11, 2023: 0 critical, 1 high. Days are UTC.

- [CVE-2023-43057](https://cve.now/CVE-2023-43057.md): IBM QRadar SIEM cross-site scripting (CVSS 4.6, IBM QRadar SIEM)
- [CVE-2023-5959](https://cve.now/CVE-2023-5959.md): Byzoro Smart S85F Management Platform login.php password recovery (CVSS 4.3, Byzoro Smart S85F Management Platform)
- [CVE-2023-46850](https://cve.now/CVE-2023-46850.md): Use after free in OpenVPN version 2.6.0 to 2.6.6 may lead to undefined behavoir, leaking memory buffers or remote execution when sending net (no CVSS, OpenVPN)
- [CVE-2023-46849](https://cve.now/CVE-2023-46849.md): Using the --fragment option in certain configuration setups OpenVPN version 2.6.0 to 2.6.6 allows an attacker to trigger a divide by zero be (CVSS 7.5, OpenVPN)
- [CVE-2023-47390](https://cve.now/CVE-2023-47390.md): Headscale through 0.22.3 writes bearer tokens to info-level logs. (no CVSS, github.com/juanfont/headscale)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-11-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.