# CVEs published 2023-11-26

9 CVEs were published on November 26, 2023: 0 critical, 0 high. Days are UTC.

- [CVE-2023-6301](https://cve.now/CVE-2023-6301.md): SourceCodester Best Courier Management System GET Parameter parcel\_list.php cross site scripting (CVSS 3.5, SourceCodester Best Courier Management System)
- [CVE-2023-6300](https://cve.now/CVE-2023-6300.md): SourceCodester Best Courier Management System cross site scripting (CVSS 3.5, SourceCodester Best Courier Management System)
- [CVE-2023-6299](https://cve.now/CVE-2023-6299.md): Apryse iText Reference Table PdfDocument.java memory leak (CVSS 4.3, Apryse iText)
- [CVE-2023-6298](https://cve.now/CVE-2023-6298.md): Apryse iText PdfDocument.java main array index (CVSS 4.3, Apryse iText)
- [CVE-2023-6297](https://cve.now/CVE-2023-6297.md): PHPGurukul Nipah Virus Testing Management System Search Report Page patient-search-report.php cross site scripting (CVSS 4.3, PHPGurukul Nipah Virus Testing Management System)
- [CVE-2023-6296](https://cve.now/CVE-2023-6296.md): osCommerce Instant Message compare cross site scripting (CVSS 4.3, osCommerce)
- [CVE-2023-49312](https://cve.now/CVE-2023-49312.md): Precision Bridge PrecisionBridge.exe (aka the thick client) before 7.3.21 allows an integrity violation in which the same license key is use (no CVSS)
- [CVE-2023-49321](https://cve.now/CVE-2023-49321.md): Certain WithSecure products allow a Denial of Service because scanning a crafted file takes a long time, and causes the scanner to hang. (no CVSS)
- [CVE-2023-49322](https://cve.now/CVE-2023-49322.md): Certain WithSecure products allow a Denial of Service because there is an unpack handler crash that can lead to a scanning engine crash. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-11-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.