# CVEs published 2023-11-21

61 CVEs were published on November 21, 2023: 6 critical, 17 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2023-48701](https://cve.now/CVE-2023-48701.md): Statamic CMS vulnerable to Cross-site Scripting via uploaded assets (CVSS 7.5, statamic cms · statamic/cms)
- [CVE-2023-48700](https://cve.now/CVE-2023-48700.md): Clear Text Credentials Exposed via Onboarding Task (CVSS 5.7, nautobot-plugin-device-onboarding · nautobot-device-onboard…)
- [CVE-2023-48699](https://cve.now/CVE-2023-48699.md): fastbots Eval Injection vulnerability (CVSS 8.4, ubertidavide fastbots · fastbots)
- [CVE-2023-48307](https://cve.now/CVE-2023-48307.md): Nextcloud Mail app vulnerable to Server-Side Request Forgery (CVSS 3.5, nextcloud security-advisories)
- [CVE-2023-48306](https://cve.now/CVE-2023-48306.md): Nextcloud Server DNS pin middleware can be tricked into DNS rebinding allowing SSRF (CVSS 5.0, nextcloud security-advisories)
- [CVE-2023-48305](https://cve.now/CVE-2023-48305.md): Nextcloud Server user\_ldap app logs user passwords in the log file on level debug (CVSS 4.2, nextcloud security-advisories)
- [CVE-2023-48304](https://cve.now/CVE-2023-48304.md): Nextcloud Server vulnerable to attacker enabling/disabling birthday calendar for any user (CVSS 4.3, nextcloud security-advisories)
- [CVE-2023-48303](https://cve.now/CVE-2023-48303.md): Nextcloud Server admins can change authentication details of user configured external storage (CVSS 2.4, nextcloud security-advisories)
- [CVE-2023-48302](https://cve.now/CVE-2023-48302.md): Nextcloud Server vulnerable to Self XSS when pasting HTML into Text app with Ctrl+Shift+V (CVSS 3.5, nextcloud security-advisories)
- [CVE-2023-6248](https://cve.now/CVE-2023-6248.md): Data leakage and arbitrary remote code execution in Syrus cloud devices (CVSS 10.0, Digital Communications Technologies Syrus4 IoT Telematics G…)
- [CVE-2023-48301](https://cve.now/CVE-2023-48301.md): Nextcloud Server HTML injection in search UI when selecting a circle with HTML in the display name (CVSS 3.5, nextcloud security-advisories)
- [CVE-2023-48239](https://cve.now/CVE-2023-48239.md): Nextcloud Server users can make external storage mount points inaccessible for other users (CVSS 8.5, nextcloud security-advisories)
- [CVE-2023-48299](https://cve.now/CVE-2023-48299.md): TorchServe ZipSlip (CVSS 5.3, pytorch serve · torchserve)
- [CVE-2023-48230](https://cve.now/CVE-2023-48230.md): Cap'n Proto WebSocket message can cause crash (CVSS 5.9, capnproto)
- [CVE-2023-48228](https://cve.now/CVE-2023-48228.md): OAuth2: PKCE can be fully circumvented (CVSS 7.5, goauthentik authentik)
- [CVE-2023-6238](https://cve.now/CVE-2023-6238.md): Kernel: nvme: memory corruption via unprivileged user passthrough (CVSS 6.7, kernel · Red Hat Enterprise Linux +1)
- [CVE-2023-48226](https://cve.now/CVE-2023-48226.md): OpenReplay HTML Injection vulnerability (CVSS 6.5, openreplay)
- [CVE-2023-47643](https://cve.now/CVE-2023-47643.md): SuiteCRM has Unauthenticated Graphql Introspection Enabled (CVSS 3.1, salesagility SuiteCRM-Core)
- [CVE-2023-20274](https://cve.now/CVE-2023-20274.md): A vulnerability in the installer script of Cisco AppDynamics PHP Agent could allow an authenticated, local attacker to elevate privileges on (CVSS 6.3, Cisco AppDynamics)
- [CVE-2023-20272](https://cve.now/CVE-2023-20272.md): A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to upl (CVSS 6.7, Cisco Identity Services Engine Software)
- [CVE-2023-20208](https://cve.now/CVE-2023-20208.md): A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to conduct an XSS attack ag (CVSS 4.8, Cisco Identity Services Engine Software)
- [CVE-2023-20265](https://cve.now/CVE-2023-20265.md): A vulnerability in the web-based management interface of a small subset of Cisco IP Phones could allow an authenticated, remote attacker to (CVSS 5.5, Cisco IP Phones with Multiplatform Firmware · Cisco Session…)
- [CVE-2021-38405](https://cve.now/CVE-2021-38405.md): Siemens Solid Edge, JT2Go, and Teamcenter Visualization Improper Restriction of Operations within the Bounds of a Memory Buffer (CVSS 7.8, Siemens JT2Go · Siemens Teamcenter Visualization)
- [CVE-2023-5055](https://cve.now/CVE-2023-5055.md): L2CAP: Possible Stack based buffer overflow in le\_ecred\_reconf\_req() (CVSS 8.3, zephyrproject-rtos Zephyr)
- [CVE-2023-22516](https://cve.now/CVE-2023-22516.md): This High severity RCE (Remote Code Execution) vulnerability was introduced in versions 8.1.0, 8.2.0, 9.0.0, 9.1.0, 9.2.0, and 9.3.0 of Bamb (CVSS 8.5, Atlassian Bamboo Data Center · Atlassian Bamboo Server)
- [CVE-2023-22521](https://cve.now/CVE-2023-22521.md): This High severity RCE (Remote Code Execution) vulnerability was introduced in version 3.4.6 of Crowd Data Center and Server. (CVSS 8.0, Atlassian Crowd Data Center · Atlassian Crowd Server)
- [CVE-2021-27504](https://cve.now/CVE-2021-27504.md): Texas Instruments FREERTOS Integer Overflow or Wraparound (CVSS 7.4, Texas Instruments CC32XX · Texas Instruments SimpleLink… +3)
- [CVE-2021-27502](https://cve.now/CVE-2021-27502.md): Texas Instruments TI-RTOS Integer Overflow or Wraparound (CVSS 7.4, Texas Instruments CC32XX · Texas Instruments SimpleLink… +3)
- [CVE-2023-49061](https://cve.now/CVE-2023-49061.md): An attacker could have performed HTML template injection via Reader Mode and exfiltrated user information. (no CVSS, Mozilla Firefox for iOS)
- [CVE-2023-49060](https://cve.now/CVE-2023-49060.md): An attacker could have accessed internal pages or data by ex-filtrating a security key from ReaderMode via the \`referrerpolicy\` attribute. (no CVSS, Mozilla Firefox for iOS)
- [CVE-2023-6213](https://cve.now/CVE-2023-6213.md): Memory safety bugs present in Firefox 119. (no CVSS, Mozilla Firefox)
- [CVE-2023-6212](https://cve.now/CVE-2023-6212.md): Memory safety bugs present in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4. (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2023-6211](https://cve.now/CVE-2023-6211.md): If an attacker needed a user to load an insecure http: page and knew that user had enabled HTTPS-only mode, the attacker could have tricked (no CVSS, Mozilla Firefox)
- [CVE-2023-6210](https://cve.now/CVE-2023-6210.md): When an https: web page created a pop-up from a "javascript:" URL, that pop-up was incorrectly allowed to load blockable content such as ifr (no CVSS, Mozilla Firefox)
- [CVE-2023-6209](https://cve.now/CVE-2023-6209.md): Relative URLs starting with three slashes were incorrectly parsed, and a path-traversal "/../" part in the path could be used to override th (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2023-6208](https://cve.now/CVE-2023-6208.md): When using X11, text selected by the page using the Selection API was erroneously copied into the primary selection, a temporary storage not (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2023-6207](https://cve.now/CVE-2023-6207.md): Ownership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects Firefox \< 120, Firefox ESR \< 115.5.0, and (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2023-6206](https://cve.now/CVE-2023-6206.md): The black fade animation when exiting fullscreen is roughly the length of the anti-clickjacking delay on permission prompts. (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2023-6205](https://cve.now/CVE-2023-6205.md): It was possible to cause the use of a MessagePort after it had already been freed, which could potentially have led to an exploitable crash. (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2023-6204](https://cve.now/CVE-2023-6204.md): On some systems—depending on the graphics settings and drivers—it was possible to force an out-of-bounds read and leak memory data into the (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2023-6235](https://cve.now/CVE-2023-6235.md): Arbitrary code execution in Duet Display (CVSS 7.8, Duet Display for Windows 10+)
- [CVE-2023-28802](https://cve.now/CVE-2023-28802.md): Disable Zscaler using machine tunnel restart (CVSS 4.9, Zscaler Client Connector)
- [CVE-2023-5598](https://cve.now/CVE-2023-5598.md): Stored Cross-site Scripting (XSS) vulnerabilities affecting 3DSwym in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2023x (CVSS 5.4, Dassault Systèmes 3DSwymer)
- [CVE-2023-5599](https://cve.now/CVE-2023-5599.md): Stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2023x (CVSS 5.4, Dassault Systèmes 3DSwymer)
- [CVE-2023-5776](https://cve.now/CVE-2023-5776.md): Post Meta Data Manager \<= 1.2.1 - Cross-Site Request Forgery to Post, Term, and User Meta Deletion (CVSS 4.3, gandhihitesh9 Post Meta Data Manager)
- [CVE-2023-4149](https://cve.now/CVE-2023-4149.md): WAGO: OS Command Injection Vulnerability in Managed Switch (CVSS 9.8, WAGO Industrial Managed Switch)
- [CVE-2023-5553](https://cve.now/CVE-2023-5553.md): During internal Axis Security Development Model (ASDM) threat-modelling, a flaw was found in the protection for device tampering (commonly k (CVSS 7.6, Axis Communications AB AXIS OS)
- [CVE-2023-21418](https://cve.now/CVE-2023-21418.md): Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API irissetup.cgi was vulnerable to path traversal attacks (CVSS 7.1, Axis Communications AB AXIS OS)
- [CVE-2023-21417](https://cve.now/CVE-2023-21417.md): Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API manageoverlayimage.cgi was vulnerable to path traversa (CVSS 7.1, Axis Communications AB AXIS OS)
- [CVE-2023-21416](https://cve.now/CVE-2023-21416.md): Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API dynamicoverlay.cgi was vulnerable to a Denial-of-Servic (CVSS 7.1, Axis Communications AB AXIS OS)
- [CVE-2023-4424](https://cve.now/CVE-2023-4424.md): bt: hci: DoS and possible RCE (CVSS 8.3, zephyrproject-rtos Zephyr)
- [CVE-2023-5275](https://cve.now/CVE-2023-5275.md): Improper Input Validation vulnerability in simulation function of GX Works2 allows an attacker to cause a denial-of-service (DoS) condition (CVSS 2.5, Mitsubishi Electric GX Works2)
- [CVE-2023-5274](https://cve.now/CVE-2023-5274.md): Improper Input Validation vulnerability in simulation function of GX Works2 allows an attacker to cause a denial-of-service (DoS) condition (CVSS 2.5, Mitsubishi Electric GX Works2)
- [CVE-2023-42770](https://cve.now/CVE-2023-42770.md): Red Lion Controls Sixnet RTU Authentication Bypass Using An Alternative Path Or Channel (CVSS 10.0, Red Lion Controls ST-IPm-8460 · Red Lion Controls ST-IPm… +4)
- [CVE-2023-40151](https://cve.now/CVE-2023-40151.md): Red Lion Controls Sixnet RTU Exposed Dangerous Method Or Function (CVSS 10.0, Red Lion Controls ST-IPm-8460 · Red Lion Controls ST-IPm… +4)
- [CVE-2023-45886](https://cve.now/CVE-2023-45886.md): The BGP daemon (bgpd) in IP Infusion ZebOS through 7.10.6 allow remote attackers to cause a denial of service by sending crafted BGP update (no CVSS)
- [CVE-2023-46935](https://cve.now/CVE-2023-46935.md): eyoucms v1.6.4 is vulnerable Cross Site Scripting (XSS), which can lead to stealing sensitive information of logged-in users. (CVSS 5.4)
- [CVE-2023-48124](https://cve.now/CVE-2023-48124.md): Cross Site Scripting in SUP Online Shopping v.1.0 allows a remote attacker to execute arbitrary code via the Name, Email and Address paramet (no CVSS)
- [CVE-2023-49103](https://cve.now/CVE-2023-49103.md): An issue was discovered in ownCloud owncloud/graphapi 0.2.x before 0.2.1 and 0.3.x before 0.3.1. (CVSS 10.0, KEV)
- [CVE-2023-49104](https://cve.now/CVE-2023-49104.md): An issue was discovered in ownCloud owncloud/oauth2 before 0.6.1, when Allow Subdomains is enabled. (CVSS 8.7)
- [CVE-2023-49105](https://cve.now/CVE-2023-49105.md): An issue was discovered in ownCloud owncloud/core before 10.13.1. (CVSS 9.8, KEV)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-11-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.