CVEs published November 26, 2023
9 CVEs were published on November 26, 2023: 0 critical, 0 high.
- Published
- 9
- Critical
- 0
- High
- 0
- Medium
- 4
- Low
- 2
- Unrated
- 3
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- Apryse iText
- 2
- SourceCodester Best Courier Management System
- 2
- osCommerce
- 1
- PHPGurukul Nipah Virus Testing Management System
- 1
Medium, low and unrated 9
- CVE-2023-6301SourceCodester Best Courier Management System GET Parameter parcel_list.php cross site scriptingSourceCodester Best Courier Management System
- CVE-2023-6300SourceCodester Best Courier Management System cross site scriptingSourceCodester Best Courier Management System
- CVE-2023-6299Apryse iText Reference Table PdfDocument.java memory leakApryse iText
- CVE-2023-6298Apryse iText PdfDocument.java main array indexApryse iText
- CVE-2023-6297PHPGurukul Nipah Virus Testing Management System Search Report Page patient-search-report.php cross site scriptingPHPGurukul Nipah Virus Testing Management System
- CVE-2023-6296osCommerce Instant Message compare cross site scriptingosCommerce
- CVE-2023-49312Precision Bridge PrecisionBridge.exe (aka the thick client) before 7.3.21 allows an integrity violation in which the same license key is use
- CVE-2023-49321Certain WithSecure products allow a Denial of Service because scanning a crafted file takes a long time, and causes the scanner to hang.
- CVE-2023-49322Certain WithSecure products allow a Denial of Service because there is an unpack handler crash that can lead to a scanning engine crash.