# CVEs published 2023-11-16

130 CVEs were published on November 16, 2023: 11 critical, 42 high. Days are UTC.

- [CVE-2023-48231](https://cve.now/CVE-2023-48231.md): Use-After-Free in win\_close() in vim (CVSS 3.9, vim)
- [CVE-2023-48232](https://cve.now/CVE-2023-48232.md): Floating point Exception in adjust\_plines\_for\_skipcol() in vim (CVSS 3.9, vim)
- [CVE-2023-48233](https://cve.now/CVE-2023-48233.md): overflow with count for :s command in vim (CVSS 2.8, vim)
- [CVE-2023-48234](https://cve.now/CVE-2023-48234.md): overflow in nv\_z\_get\_count in vim (CVSS 2.8, vim)
- [CVE-2023-48235](https://cve.now/CVE-2023-48235.md): overflow in ex address parsing in vim (CVSS 2.8, vim)
- [CVE-2023-48236](https://cve.now/CVE-2023-48236.md): overflow in get\_number in vim (CVSS 2.8, vim)
- [CVE-2023-48237](https://cve.now/CVE-2023-48237.md): overflow in shift\_line in vim (CVSS 2.8, vim)
- [CVE-2023-47686](https://cve.now/CVE-2023-47686.md): WordPress Arigato Autoresponder and Newsletter Plugin \<= 2.7.2.2 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Kiboko Labs Arigato Autoresponder and Newsletter)
- [CVE-2023-47687](https://cve.now/CVE-2023-47687.md): WordPress Woo Custom and Sequential Order Number Plugin \<= 2.6.0 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, VJInfotech Woo Custom and Sequential Order Number)
- [CVE-2023-47688](https://cve.now/CVE-2023-47688.md): WordPress Youtube SpeedLoad Plugin \<= 0.6.3 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3, Alexufo Youtube SpeedLoad)
- [CVE-2023-47112](https://cve.now/CVE-2023-47112.md): Authenticated users can view job names and groups they do not have authorization to view in Rundeck (CVSS 4.3, rundeck · org.rundeck:rundeckapp)
- [CVE-2023-48222](https://cve.now/CVE-2023-48222.md): Authenticated users can view or delete jobs they do not have authorization for in Rundeck (CVSS 8.1, rundeck · org.rundeck:rundeck)
- [CVE-2023-47642](https://cve.now/CVE-2023-47642.md): Stream description leaks to ex-subscribers in Zulip (CVSS 4.3, zulip)
- [CVE-2023-40314](https://cve.now/CVE-2023-40314.md): Cross-site scripting in bootstrap.jsp (CVSS 5.8, The OpenNMS Group Horizon · The OpenNMS Group Meridian +1)
- [CVE-2023-6014](https://cve.now/CVE-2023-6014.md): MLflow Authentication Bypass (CVSS 9.1, mlflow/mlflow · mlflow)
- [CVE-2023-6020](https://cve.now/CVE-2023-6020.md): Ray Static File Local File Include (CVSS 7.5, ray-project/ray · ray)
- [CVE-2023-46213](https://cve.now/CVE-2023-46213.md): Cross-site Scripting (XSS) on “Show Syntax Highlighted” View in Search Page (CVSS 4.8, Splunk Enterprise · Splunk Cloud)
- [CVE-2023-46214](https://cve.now/CVE-2023-46214.md): Remote code execution (RCE) in Splunk Enterprise through Insecure XML Parsing (CVSS 8.0, Splunk Enterprise · Splunk Cloud)
- [CVE-2023-32796](https://cve.now/CVE-2023-32796.md): WordPress WooCommerce Product Enquiry Plugin \<= 2.3.4 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, MingoCommerce WooCommerce Product Enquiry)
- [CVE-2023-32957](https://cve.now/CVE-2023-32957.md): WordPress Team Members Showcase Plugin \<= 1.3.4 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Dazzlersoft Team Members Showcase)
- [CVE-2023-36008](https://cve.now/CVE-2023-36008.md): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (CVSS 6.6, Microsoft Edge)
- [CVE-2023-36026](https://cve.now/CVE-2023-36026.md): Microsoft Edge (Chromium-based) Spoofing Vulnerability (CVSS 4.3, Microsoft Edge)
- [CVE-2023-34375](https://cve.now/CVE-2023-34375.md): WordPress Seo By 10Web Plugin \<= 1.2.9 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, SEO by 10Web)
- [CVE-2023-39926](https://cve.now/CVE-2023-39926.md): WordPress Under Construction / Maintenance Mode from Acurax Plugin \<= 2.6 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Under Construction / Maintenance Mode from Acurax)
- [CVE-2023-28621](https://cve.now/CVE-2023-28621.md): WordPress Raise Mag Theme \<= 1.0.7 and Wishful Blog theme \<= 2.0.1 are vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Wishfulthemes Raise Mag · Wishfulthemes Wishful Blog)
- [CVE-2023-47239](https://cve.now/CVE-2023-47239.md): WordPress Easy PayPal Shopping Cart Plugin \<= 1.1.10 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Scott Paterson Easy PayPal Shopping Cart)
- [CVE-2023-47240](https://cve.now/CVE-2023-47240.md): WordPress CBX Map for Google Map & OpenStreetMap Plugin \<= 1.1.11 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Codeboxr CBX Map for Google Map & OpenStreetMap)
- [CVE-2023-47242](https://cve.now/CVE-2023-47242.md): WordPress ANAC XML Bandi di Gara Plugin \<= 7.5 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.5, Marco Milesi ANAC XML Bandi di Gara)
- [CVE-2023-47245](https://cve.now/CVE-2023-47245.md): WordPress ANAC XML Viewer Plugin \<= 1.7 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, Marco Milesi ANAC XML Viewer)
- [CVE-2023-47508](https://cve.now/CVE-2023-47508.md): WordPress Master Slider Pro Plugin \<= 3.6.5 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Averta Master Slider Pro)
- [CVE-2023-47509](https://cve.now/CVE-2023-47509.md): WordPress Edit WooCommerce Templates Plugin \<= 1.1.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, ioannup Edit WooCommerce Templates)
- [CVE-2023-47511](https://cve.now/CVE-2023-47511.md): WordPress Pinyin Slugs Plugin \<= 2.3.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9, SO WP Pinyin Slugs)
- [CVE-2023-47512](https://cve.now/CVE-2023-47512.md): WordPress Product Enquiry for WooCommerce Plugin \<= 3.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, Gravity Master Product Enquiry for WooCommerce)
- [CVE-2023-47514](https://cve.now/CVE-2023-47514.md): WordPress Star CloudPRNT for WooCommerce Plugin \<= 2.0.3 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1, lawrenceowen, gcubero, acunnningham, fmahmood Star CloudPRN…)
- [CVE-2023-6176](https://cve.now/CVE-2023-6176.md): Kernel: local dos vulnerability in scatterwalk\_copychunks (CVSS 4.7, Red Hat Enterprise Linux)
- [CVE-2023-47056](https://cve.now/CVE-2023-47056.md): ZDI-CAN-21763: Adobe Premiere Pro MP4 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, Adobe Premiere Pro)
- [CVE-2023-47060](https://cve.now/CVE-2023-47060.md): ZDI-CAN-21792: Adobe Premiere Pro MP4 File Uninitialized Variable Information Disclosure Vulnerability (CVSS 3.3, Adobe Premiere Pro)
- [CVE-2023-47058](https://cve.now/CVE-2023-47058.md): ZDI-CAN-21766: Adobe Premiere Pro MP4 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, Adobe Premiere Pro)
- [CVE-2023-47059](https://cve.now/CVE-2023-47059.md): ZDI-CAN-21767: Adobe Premiere Pro MP4 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, Adobe Premiere Pro)
- [CVE-2023-47055](https://cve.now/CVE-2023-47055.md): ZDI-CAN-21765: Adobe Premiere Pro M4A File Parsing Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Adobe Premiere Pro)
- [CVE-2023-47057](https://cve.now/CVE-2023-47057.md): ZDI-CAN-21764: Adobe Premiere Pro MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, Adobe Premiere Pro)
- [CVE-2023-6019](https://cve.now/CVE-2023-6019.md): Ray Command Injection in cpu\_profile Parameter (CVSS 9.8, ray-project/ray · ray)
- [CVE-2023-6021](https://cve.now/CVE-2023-6021.md): Ray Log File Local File Include (CVSS 7.5, ray-project/ray · ray)
- [CVE-2023-6022](https://cve.now/CVE-2023-6022.md): Cross-Site Request Forgery (CSRF) in prefecthq/prefect (CVSS 8.8, prefecthq/prefect · prefect)
- [CVE-2023-6013](https://cve.now/CVE-2023-6013.md): H2O Local File Include (CVSS 9.3, h2oai/h2o-3)
- [CVE-2023-6017](https://cve.now/CVE-2023-6017.md): H2O S3 Bucket Takeover (CVSS 8.7, h2oai/h2o-3)
- [CVE-2023-6038](https://cve.now/CVE-2023-6038.md): Local File Inclusion in h2oai/h2o-3 (CVSS 9.3, h2oai/h2o-3 · ai.h2o:h2o-core)
- [CVE-2023-6016](https://cve.now/CVE-2023-6016.md): H2O Remote Code Execution via POJO Model Import (CVSS 10.0, h2oai/h2o-3)
- [CVE-2023-6015](https://cve.now/CVE-2023-6015.md): MLflow Arbitrary File Upload (CVSS 10.0, mlflow/mlflow · mlflow)
- [CVE-2023-6018](https://cve.now/CVE-2023-6018.md): MLflow Arbitrary File Write (CVSS 10.0, mlflow/mlflow · mlflow)
- [CVE-2023-6023](https://cve.now/CVE-2023-6023.md): ModelDB Local File Include (CVSS 8.6, vertaai/modeldb)
- [CVE-2023-26368](https://cve.now/CVE-2023-26368.md): Adobe InCopy Out-of-Bounds Read Vulnerability v1.0 (CVSS 7.8, Adobe InCopy)
- [CVE-2023-47047](https://cve.now/CVE-2023-47047.md): ZDI-CAN-21685: Adobe Audition MP4 File Parsing Uninitialized Variable Remote Code Execution Vulnerability (CVSS 5.5, Adobe Audition)
- [CVE-2023-47053](https://cve.now/CVE-2023-47053.md): ZDI-CAN-21689: Adobe Audition MP4 File Parsing Uninitialized Variable Information Disclosure Vulnerability (CVSS 5.5, Adobe Audition)
- [CVE-2023-47046](https://cve.now/CVE-2023-47046.md): ZDI-CAN-21684: Adobe Audition MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 5.5, Adobe Audition)
- [CVE-2023-47049](https://cve.now/CVE-2023-47049.md): ZDI-CAN-21690: Adobe Audition MP4 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 5.5, Adobe Audition)
- [CVE-2023-47048](https://cve.now/CVE-2023-47048.md): ZDI-CAN-21688: Adobe Audition MP4 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 5.5, Adobe Audition)
- [CVE-2023-47050](https://cve.now/CVE-2023-47050.md): ZDI-CAN-21686: Adobe Audition M4A File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 5.5, Adobe Audition)
- [CVE-2023-47054](https://cve.now/CVE-2023-47054.md): ZDI-CAN-21782: Adobe Audition MP4 File Parsing Uninitialized Variable Information Disclosure Vulnerability (CVSS 5.5, Adobe Audition)
- [CVE-2023-47051](https://cve.now/CVE-2023-47051.md): ZDI-CAN-21683: Adobe Audition MP4 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 5.5, Adobe Audition)
- [CVE-2023-47052](https://cve.now/CVE-2023-47052.md): ZDI-CAN-21687: Adobe Audition MP4 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 5.5, Adobe Audition)
- [CVE-2023-6121](https://cve.now/CVE-2023-6121.md): Kernel: nvme: info leak due to out-of-bounds read in nvmet\_ctrl\_find\_get (CVSS 4.3, Red Hat Enterprise Linux)
- [CVE-2023-47044](https://cve.now/CVE-2023-47044.md): ZDI-CAN-21789: Adobe Media Encoder MP4 File Uninitialized Variable Information Disclosure Vulnerability (CVSS 5.5, Adobe Media Encoder)
- [CVE-2023-47040](https://cve.now/CVE-2023-47040.md): ZDI-CAN-21698: Adobe Media Encoder MP4 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, Adobe Media Encoder)
- [CVE-2023-47042](https://cve.now/CVE-2023-47042.md): ZDI-CAN-21696: Adobe Media Encoder MP4 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, Adobe Media Encoder)
- [CVE-2023-47041](https://cve.now/CVE-2023-47041.md): ZDI-CAN-21697: Adobe Media Encoder MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, Adobe Media Encoder)
- [CVE-2023-47043](https://cve.now/CVE-2023-47043.md): ZDI-CAN-21699: Adobe Media Encoder MP4 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, Adobe Media Encoder)
- [CVE-2023-44329](https://cve.now/CVE-2023-44329.md): ZDI-CAN-21798: Adobe Bridge MP4 File Parsing Uninitialized Variable Information Disclosure Vulnerability (CVSS 5.5, Adobe Bridge)
- [CVE-2023-44328](https://cve.now/CVE-2023-44328.md): ZDI-CAN-21797: Adobe Bridge MP4 File Parsing Use-After-Free Information Disclosure Vulnerability (CVSS 5.5, Adobe Bridge)
- [CVE-2023-44327](https://cve.now/CVE-2023-44327.md): ZDI-CAN-21793: Adobe Bridge MP4 File Uninitialized Variable Information Disclosure Vulnerability (CVSS 5.5, Adobe Bridge)
- [CVE-2023-44332](https://cve.now/CVE-2023-44332.md): Adobe Photoshop 2023 CC 24.7 Memory Corruption Vulnerability II. (CVSS 5.5, Adobe Photoshop Desktop)
- [CVE-2023-44333](https://cve.now/CVE-2023-44333.md): Adobe Photoshop 2023 CC 24.7 Memory Corruption Vulnerability V. (CVSS 5.5, Adobe Photoshop Desktop)
- [CVE-2023-44331](https://cve.now/CVE-2023-44331.md): Adobe Photoshop 2023 CC 24.7 Memory Corruption Vulnerability IV. (CVSS 5.5, Adobe Photoshop Desktop)
- [CVE-2023-44335](https://cve.now/CVE-2023-44335.md): Adobe Photoshop 2023 CC 24.7 Memory Corruption Vulnerability I. (CVSS 5.5, Adobe Photoshop Desktop)
- [CVE-2023-44334](https://cve.now/CVE-2023-44334.md): Adobe Photoshop 2023 CC 24.7 Memory Corruption Vulnerability VI. (CVSS 5.5, Adobe Photoshop Desktop)
- [CVE-2023-44330](https://cve.now/CVE-2023-44330.md): Adobe Photoshop 2023 CC 24.7 Memory Corruption Vulnerability III. (CVSS 7.8, Adobe Photoshop Desktop)
- [CVE-2023-4771](https://cve.now/CVE-2023-4771.md): Cross-Site Scripting vulnerability in CKSource CKEditor (CVSS 6.1, CKSource CKEditor · ckeditor4)
- [CVE-2023-6174](https://cve.now/CVE-2023-6174.md): Out-of-bounds Read in Wireshark (CVSS 6.3, Wireshark Foundation Wireshark)
- [CVE-2023-44345](https://cve.now/CVE-2023-44345.md): Adobe InDesign CC 2023 Memory Corruption Vulnerability VII. (CVSS 5.5, Adobe InDesign Desktop)
- [CVE-2023-44344](https://cve.now/CVE-2023-44344.md): Adobe InDesign CC 2023 Memory Corruption Vulnerability V. (CVSS 5.5, Adobe InDesign Desktop)
- [CVE-2023-44341](https://cve.now/CVE-2023-44341.md): Adobe InDesign CC 2023 Memory Corruption Vulnerability I (CVSS 5.5, Adobe InDesign Desktop)
- [CVE-2023-44346](https://cve.now/CVE-2023-44346.md): Adobe InDesign CC 2023 Memory Corruption Vulnerability VIII. (CVSS 5.5, Adobe InDesign Desktop)
- [CVE-2023-44347](https://cve.now/CVE-2023-44347.md): Adobe InDesign CC 2023 Memory Corruption Vulnerability IX. (CVSS 5.5, Adobe InDesign Desktop)
- [CVE-2023-44343](https://cve.now/CVE-2023-44343.md): Adobe InDesign CC 2023 Memory Corruption Vulnerability III. (CVSS 5.5, Adobe InDesign Desktop)
- [CVE-2023-44342](https://cve.now/CVE-2023-44342.md): Adobe InDesign CC 2023 Memory Corruption Vulnerability II. (CVSS 5.5, Adobe InDesign Desktop)
- [CVE-2023-44357](https://cve.now/CVE-2023-44357.md): ZDI-CAN-21930: Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 5.5, Adobe Acrobat Reader)
- [CVE-2023-44348](https://cve.now/CVE-2023-44348.md): ZDI-CAN-21925: (bypass of VULN-24891) Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 5.5, Adobe Acrobat Reader)
- [CVE-2023-44356](https://cve.now/CVE-2023-44356.md): ZDI-CAN-21956: Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 5.5, Adobe Acrobat Reader)
- [CVE-2023-44360](https://cve.now/CVE-2023-44360.md): ZDI-CAN-21882: Adobe Acrobat Reader DC PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 5.5, Adobe Acrobat Reader)
- [CVE-2023-44359](https://cve.now/CVE-2023-44359.md): ZDI-CAN-21936: Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Adobe Acrobat Reader)
- [CVE-2023-44366](https://cve.now/CVE-2023-44366.md): ZDI-CAN-21928: Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, Adobe Acrobat Reader)
- [CVE-2023-44340](https://cve.now/CVE-2023-44340.md): ZDI-CAN-21424: Adobe Acrobat Reader DC PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 5.5, Adobe Acrobat Reader)
- [CVE-2023-44338](https://cve.now/CVE-2023-44338.md): ZDI-CAN-21493: Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, Adobe Acrobat Reader)
- [CVE-2023-44361](https://cve.now/CVE-2023-44361.md): ZDI-CAN-22041: Adobe Acrobat Reader DC AcroForm Doc Object Use-After-Free Information Disclosure Vulnerability (CVSS 5.5, Adobe Acrobat Reader)
- [CVE-2023-44371](https://cve.now/CVE-2023-44371.md): ZDI-CAN-21998: Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Adobe Acrobat Reader)
- [CVE-2023-44358](https://cve.now/CVE-2023-44358.md): ZDI-CAN-21971: Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 5.5, Adobe Acrobat Reader)
- [CVE-2023-44339](https://cve.now/CVE-2023-44339.md): ZDI-CAN-21422: Adobe Acrobat Reader DC AcroForm value Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 5.5, Adobe Acrobat Reader)
- [CVE-2023-44336](https://cve.now/CVE-2023-44336.md): TALOS-2023-1794 - Adobe Acrobat Reader Thermometer use-after-free vulnerability (CVSS 7.8, Adobe Acrobat Reader)
- [CVE-2023-44365](https://cve.now/CVE-2023-44365.md): ZDI-CAN-21931: Adobe Acrobat Reader DC Font Parsing Uninitialized Variable Remote Code Execution Vulnerability (CVSS 7.8, Adobe Acrobat Reader)
- [CVE-2023-44367](https://cve.now/CVE-2023-44367.md): ZDI-CAN-21929: Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, Adobe Acrobat Reader)
- [CVE-2023-44337](https://cve.now/CVE-2023-44337.md): ZDI-CAN-21509: Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, Adobe Acrobat Reader)
- [CVE-2023-44372](https://cve.now/CVE-2023-44372.md): TALOS-2023-1842 - Adobe Acrobat Reader U3D page event use-after-free vulnerability (CVSS 7.8, Adobe Acrobat Reader)
- [CVE-2023-6119](https://cve.now/CVE-2023-6119.md): An Improper Privilege Management vulnerability in Trellix GetSusp prior to version 5.0.0.27 allows a local, low privilege attacker to gain (CVSS 6.5, Trellix GetSusp)
- [CVE-2023-44292](https://cve.now/CVE-2023-44292.md): Dell Repository Manager, 3.4.3 and prior, contains an Improper Access Control vulnerability in its installation module. (CVSS 6.7, Dell Repository Manager)
- [CVE-2023-44282](https://cve.now/CVE-2023-44282.md): Dell Repository Manager, 3.4.3 and prior, contains an Improper Access Control vulnerability in its installation module. (CVSS 6.7, Dell Repository Manager)
- [CVE-2023-39259](https://cve.now/CVE-2023-39259.md): Dell OS Recovery Tool, versions 2.2.4013, 2.3.7012.0, and 2.3.7515.0 contain an Improper Access Control Vulnerability. (CVSS 7.3, Dell OS Recovery Tool)
- [CVE-2023-39246](https://cve.now/CVE-2023-39246.md): Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server version prior to 11.8.1 contain an Insecure O (CVSS 4.6, Dell Encryption, Dell Endpoint Security Suite Enterprise, D…)
- [CVE-2023-26031](https://cve.now/CVE-2023-26031.md): Privilege escalation in Apache Hadoop Yarn container-executor binary on Linux systems (CVSS 7.5, Apache Software Foundation Apache Hadoop · org.apache.hadoo…)
- [CVE-2023-32469](https://cve.now/CVE-2023-32469.md): Dell Precision Tower BIOS contains an Improper Input Validation vulnerability. (CVSS 7.5, Dell Precision 5820 Tower, Dell Precision 7820 Tower, Dell…)
- [CVE-2023-44296](https://cve.now/CVE-2023-44296.md): Dell ELab-Navigator, version 3.1.9 contains a hard-coded credential vulnerability. (CVSS 8.4, Dell Mobility - E-Lab Navigator)
- [CVE-2023-47213](https://cve.now/CVE-2023-47213.md): First Corporation's DVRs use a hard-coded password, which may allow a remote unauthenticated attacker to rewrite or obtain the configuration (CVSS 9.8, First Co. CFR-904E, CFR-908E, CFR-916E · First Co. CFR-4… +9)
- [CVE-2023-47674](https://cve.now/CVE-2023-47674.md): Missing authentication for critical function vulnerability in First Corporation's DVRs allows a remote unauthenticated attacker to rewrite o (CVSS 9.8, First Co. CFR-904E, CFR-908E, CFR-916E · First Co. CFR-4… +9)
- [CVE-2023-43752](https://cve.now/CVE-2023-43752.md): OS command injection vulnerability in WRC-X3000GS2-W v1.05 and earlier, WRC-X3000GS2-B v1.05 and earlier, and WRC-X3000GS2A-B v1.05 and earl (no CVSS, ELECOM CO. WRC-X3000GS2-W · ELECOM CO. WRC-X3000GS2-B +1)
- [CVE-2023-43757](https://cve.now/CVE-2023-43757.md): Inadequate encryption strength vulnerability in multiple routers provided by ELECOM CO.,LTD. (no CVSS, ELECOM CO. WRC-2533GHBK2-T · ELECOM CO. WRC-2533GHBK-I +32)
- [CVE-2021-35437](https://cve.now/CVE-2021-35437.md): SQL injection vulnerability in LMXCMS v.1.4 allows attacker to execute arbitrary code via the TagsAction.class. (no CVSS)
- [CVE-2023-43275](https://cve.now/CVE-2023-43275.md): Cross-Site Request Forgery (CSRF) vulnerability in DedeCMS v5.7 in 110 backend management interface via /catalog\_add.php, allows attackers t (CVSS 8.8)
- [CVE-2023-47003](https://cve.now/CVE-2023-47003.md): An issue in RedisGraph v.2.12.10 allows an attacker to execute arbitrary code and cause a denial of service via a crafted string in DataBloc (CVSS 9.8)
- [CVE-2023-47025](https://cve.now/CVE-2023-47025.md): An issue in Free5gc v.3.3.0 allows a local attacker to cause a denial of service via the free5gc-compose component. (no CVSS, github.com/free5gc/free5gc)
- [CVE-2023-47263](https://cve.now/CVE-2023-47263.md): Certain WithSecure products allow a Denial of Service (DoS) in the antivirus engine when scanning a fuzzed PE32 file. (no CVSS)
- [CVE-2023-47264](https://cve.now/CVE-2023-47264.md): Certain WithSecure products have a buffer over-read whereby processing certain fuzz file types may cause a denial of service (DoS). (no CVSS)
- [CVE-2023-47335](https://cve.now/CVE-2023-47335.md): Insecure permissions in the setNFZEnable function of Autel Robotics EVO Nano drone v1.6.5 allows attackers to breach the geo-fence and fly i (CVSS 6.5)
- [CVE-2023-47470](https://cve.now/CVE-2023-47470.md): Buffer Overflow vulnerability in Ffmpeg before github commit 4565747056a11356210ed8edcecb920105e40b60 allows a remote attacker to achieve an (no CVSS)
- [CVE-2023-47471](https://cve.now/CVE-2023-47471.md): Buffer Overflow vulnerability in strukturag libde265 v1.10.12 allows a local attacker to cause a denial of service via the slice\_segment\_hea (no CVSS)
- [CVE-2023-48052](https://cve.now/CVE-2023-48052.md): Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in (CVSS 7.4, httpie)
- [CVE-2023-48053](https://cve.now/CVE-2023-48053.md): Archery v1.10.0 uses a non-random or static IV for Cipher Block Chaining (CBC) mode in AES encryption. (no CVSS)
- [CVE-2023-48054](https://cve.now/CVE-2023-48054.md): Missing SSL certificate validation in localstack v2.3.2 allows attackers to eavesdrop on communications between the host and server via a ma (no CVSS, localstack)
- [CVE-2023-48055](https://cve.now/CVE-2023-48055.md): SuperAGI v0.0.13 was discovered to use a hardcoded key for encryption operations. (no CVSS)
- [CVE-2023-48056](https://cve.now/CVE-2023-48056.md): PyPinkSign v0.5.1 uses a non-random or static IV for Cipher Block Chaining (CBC) mode in AES encryption. (no CVSS, pypinksign)
- [CVE-2023-48078](https://cve.now/CVE-2023-48078.md): SQL Injection vulnerability in add.php in Simple CRUD Functionality v1.0 allows attackers to run arbitrary SQL commands via the 'title' para (CVSS 9.8)
- [CVE-2023-48134](https://cve.now/CVE-2023-48134.md): nagayama\_copabowl Line 13.6.1 is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor. (CVSS 7.5)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-11-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.