CVEs published November 27, 2023
92 CVEs were published on November 27, 2023: 8 critical, 14 high.
- Published
- 92
- Critical
- 8
- High
- 14
- Medium
- 30
- Low
- 4
- Unrated
- 36
- Now in CISA KEV
- 0
- Fix available
- 38
Most affected products
- Mattermost · github.com/mattermost/mattermost/server/v8 +1
- 9
- Foxit Reader
- 6
- Apache Software Foundation Apache Superset · apache-superset
- 3
- Arcserve UDP
- 3
- SourceCodester Loan Management System
- 3
- CSZCMS
- 2
- Mmm Simple File List
- 2
- SourceCodester Free and Open Source Inventory Management Sy…
- 2
- WordPress Backup & Migration
- 2
- wpb-show-core
- 2
Critical 8
- CVE-2023-42000Arcserve UDP Agent Unauthenticated Path Traversal File Upload Arcserve UDP
- CVE-2023-41999Arcserve UDP Management Authentication Bypass Arcserve UDP
- CVE-2023-41998Arcserve UDP Unauthenticated RCEArcserve UDP
- CVE-2023-6329Control iD iDSecure passwordCustom Authentication BypassControl iD iDSecure
- CVE-2023-5604Asgaros Forum < 2.7.1 - Unauthenticated Arbitrary File UploadAsgaros Forum
- CVE-2023-46480An issue in OwnCast v.0.1.1 allows a remote attacker to execute arbitrary code and obtain sensitive information via the authHost parameter ogithub.com/owncast/owncast
- CVE-2023-48188SQL injection vulnerability in PrestaShop opartdevis v.4.5.18 thru v.4.6.12 allows a remote attacker to execute arbitrary code via a crafted
- CVE-2023-49040An issue in Tneda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the adslPwd parameter in the form_fast_setting_int
High 14
- CVE-2023-49145Apache NiFi: Improper Neutralization of Input in Advanced User Interface for JoltApache Software Foundation Apache NiFi · org.apache.nifi:ni…
- CVE-2022-41951OroPlatform vulnerable to path traversal during temporary file manipulationsoroinc platform · oro/platform
- CVE-2023-31275An uninitialized pointer use vulnerability exists in the functionality of WPS Office 11.2.0.11537 that handles Data elements in an Excel filWPS Office
- CVE-2023-39542A code execution vulnerability exists in the Javascript saveAs API of Foxit Reader 12.1.3.15356.Foxit Reader
- CVE-2023-40194An arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit Reader 12.1.3.15356 due to mistreatment of wFoxit Reader
- CVE-2023-35985An arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit Reader 12.1.3.15356 due to a failure to propFoxit Reader
- CVE-2023-32616A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15356 handles 3D annotations.Foxit Reader
- CVE-2023-41257A type confusion vulnerability exists in the way Foxit Reader 12.1.2.15356 handles field value properties.Foxit Reader
- CVE-2023-38573A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15356 handles a signature field.Foxit Reader
- CVE-2023-4590Buffer Overflow vulnerability in FrhedFrhed
- CVE-2023-5607 An improper limitation of a path name to a restricted directory (path traversal) vulnerability in the TACC ePO extension, for on-premises eTrellix Application and Change Control
- CVE-2023-6254Password is send back to clientOTRS AG OTRS
- CVE-2023-6304Tecno 4G Portable WiFi TR118 Ping Tool goform_get_cmd_process os command injectionTecno 4G Portable WiFi TR118
- CVE-2023-49030SQL Injection vulnerability in32ns KLive v.2019-1-19 and before allows a remote attacker to obtain sensitive information via a crafted scrip
Medium, low and unrated 70
- CVE-2023-5885Franklin Electric Fueling Systems Colibri Path TraversalFranklin Electric Fueling Systems Colibri
- CVE-2023-32062OroCalendarBundle has incorrect system calendar events visibilityoroinc crm · oro/calendar-bundle
- CVE-2023-5620Webpushr < 4.35.0 - Unauthenticated Stored XSSWeb Push Notifications
- CVE-2023-5525Limit Login Attempts Reloaded < 2.25.26 - Admin+ Missing Authorization to Toggle Plugin Auto-UpdateLimit Login Attempts Reloaded
- CVE-2023-5641Martins Free & Easy SEO Link buildings < 1.2.30 - Reflected XSSMartins Free & Easy SEO BackLink Link Building Network
- CVE-2023-555910Web Booster < 2.24.18 - Unauthenticated Arbitrary Option Deletion10Web Booster
- CVE-2023-5611Seraphinite Accelerator < 2.20.32 - Unauthorised Settings Reset/ImportSeraphinite Accelerator
- CVE-2023-2707Appointment booking addon for Gravity Forms <= 1.9.5.1 - Admin+ Stored XSSgAppointments
- CVE-2023-5942Medialist < 1.4.1 - Contributor+ Stored XSSMedialist
- CVE-2023-5738WordPress Backup & Migration < 1.4.5 - Subscriber+ Stored XSSWordPress Backup & Migration
- CVE-2023-4514Mmm Simple File List <= 2.3 - Contributor+ Stored XSSMmm Simple File List
- CVE-2023-5958POST SMTP Mailer < 2.7.1 - Unauthenticated Cross-site ScriptingPOST SMTP Mailer
- CVE-2023-4922WPB Show Core <= 2.2 - Unauthenticated Local File Inclusionwpb-show-core
- CVE-2023-5325Woocommerce Vietnam Checkout < 2.0.6 - Unauthenticated Stored XSS Woocommerce Vietnam Checkout
- CVE-2023-5974WPB Show Core <= 2.2 - Unauthenticated Server Side Request Forgerywpb-show-core
- CVE-2023-5737WordPress Backup & Migration < 1.4.4 - Subscriber+ Plugin Settings UpdateWordPress Backup & Migration
- CVE-2023-5845Simple Social Buttons < 5.1.1 - Unauthenticated Password Protected Post AccessSimple Social Media Share Buttons
- CVE-2023-4297Mmm Simple File List <= 2.3 - Subscriber+ Arbitrary Directory ListingMmm Simple File List
- CVE-2023-5653WassUp Real Time Analytics <= 1.9.4.5 - Unauthenticated Stored XSSWassUp Real Time Analytics
- CVE-2023-5239Security & Malware scan by CleanTalk < 2.121 - IP SpoofingSecurity & Malware scan by CleanTalk
- CVE-2023-5560WP-UserOnline < 2.88.3 - Unauthenticated Stored XSSWP-UserOnline
- CVE-2023-4252EventPrime <= 3.2.9 - Booking Pricing BypassEventPrime
- CVE-2023-5906Job Manager & Career < 1.4.4 - Directory listing to Sensitive Data ExposureJob Manager & Career
- CVE-2023-5209Bookly < 22.5 - Admin+ Stored XSSWordPress Online Booking and Scheduling Plugin
- CVE-2023-4642kk Star Ratings < 5.4.6 - Rating Tampering via Race Conditionkk Star Ratings
- CVE-2023-4931Uncontrolled search path element vulnerability in PleskPlesk Installer
- CVE-2023-6287Backup password in GET parameterCheckmk Appliance
- CVE-2023-5871Libnbd: malicious nbd server may crash libnbdRed Hat Enterprise Linux
- CVE-2023-43701Apache Superset: Stored XSS on API endpointApache Software Foundation Apache Superset · apache-superset
- CVE-2023-42501Apache Superset: Unnecessary read permissions within the Gamma roleApache Software Foundation Apache Superset · apache-superset
- CVE-2023-40610Apache Superset: Privilege escalation with default examples databaseApache Software Foundation Apache Superset · apache-superset
- CVE-2023-49068Apache DolphinScheduler: Information Leakage VulnerabilityApache Software Foundation Apache DolphinScheduler · org.ap…
- CVE-2023-47168Open redirect in /oauth/<service>/mobile_login?redirect_to=Mattermost · github.com/mattermost/mattermost/server/v8 +1
- CVE-2023-6202Insecure Direct Object Reference in /plugins/focalboard/ api/v2/users of Mattermost BoardsMattermost · github.com/mattermost/mattermost/server/v8 +1
- CVE-2023-43754Permalink previews displayed for posts in archived channels even if users are disallowed to view archived channelsMattermost · github.com/mattermost/mattermost/server/v8 +1
- CVE-2023-48369Log Flooding due to specially crafted requests in different endpointsMattermost · github.com/mattermost/mattermost/server/v8 +1
- CVE-2023-35075HTML injection via channel autocompleteMattermost · github.com/mattermost/mattermost/server/v8 +1
- CVE-2023-40703Denial of Service via specially crafted block fields in Mattermost BoardsMattermost · github.com/mattermost/mattermost/server/v8 +1
- CVE-2023-48268Denial of Service via Board Import Zip BombMattermost · github.com/mattermost/mattermost/server/v8 +1
- CVE-2023-45223Users full name disclosure through Mattermost Boards with Show Full Name Option disabledMattermost · github.com/mattermost/mattermost/server/v8 +1
- CVE-2023-47865Username and Icon override can be used by members when Hardened Mode is enabledMattermost · github.com/mattermost/mattermost/server/v8 +1
- CVE-2023-25632The Android Mobile Whale browser app before 3.0.1.2 allows the attacker to bypass its browser unlock function via 'Open in Whale' feature.NAVER Whale browser
- CVE-2023-6313SourceCodester URL Shortener Long URL cross site scriptingSourceCodester URL Shortener
- CVE-2023-6312SourceCodester Loan Management System Users Page deleteUser.php delete_user sql injectionSourceCodester Loan Management System
- CVE-2023-6311SourceCodester Loan Management System Loan Type Page delete_ltype.php delete_ltype sql injectionSourceCodester Loan Management System
- CVE-2023-6310SourceCodester Loan Management System deleteBorrower.php delete_borrower sql injectionSourceCodester Loan Management System
- CVE-2023-6309moses-smt mosesdecoder trans_result.php os command injectionmoses-smt mosesdecoder
- CVE-2023-6308Xiamen Four-Faith Video Surveillance Management System Apache Struts unrestricted uploadXiamen Four-Faith Video Surveillance Management System
- CVE-2023-6307jeecgboot JimuReport image path traversaljeecgboot JimuReport
- CVE-2023-6306SourceCodester Free and Open Source Inventory Management System member_data.php sql injectionSourceCodester Free and Open Source Inventory Management Sy…
- CVE-2023-6305SourceCodester Free and Open Source Inventory Management System suppliar_data.php sql injectionSourceCodester Free and Open Source Inventory Management Sy…
- CVE-2023-6303CSZCMS Site Settings Page cross site scriptingCSZCMS
- CVE-2023-6302CSZCMS File Manager Page templates permissionCSZCMS
- CVE-2023-29770In Sentrifugo 3.5, the AssetsController::uploadsaveAction function allows an authenticated attacker to upload any file without extension fil
- CVE-2023-42363A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1.
- CVE-2023-42364A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c eval
- CVE-2023-42365A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.
- CVE-2023-42366A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.
- CVE-2023-46349In the module "Product Catalog (CSV, Excel) Export/Update" (updateproducts) < 3.8.5 from MyPrestaModules for PrestaShop, a guest can perform
- CVE-2023-46355In the module "CSV Feeds PRO" (csvfeeds) < 2.6.1 from Bl Modules for PrestaShop, a guest can download personal information without restricti
- CVE-2023-47437A vulnerability has been identified in Pachno 1.0.6 allowing an authenticated attacker to execute a cross-site scripting (XSS) attack.
- CVE-2023-48034An issue discovered in Acer Wireless Keyboard SK-9662 allows attacker in physical proximity to both decrypt wireless keystrokes and inject a
- CVE-2023-49028Cross Site Scripting vulnerability in smpn1smg absis v.2017-10-19 and before allows a remote attacker to execute arbitrary code via the user
- CVE-2023-49029Cross Site Scripting vulnerability in smpn1smg absis v.2017-10-19 and before allows a remote attacker to execute arbitrary code via the nama
- CVE-2023-49042Heap Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the schedStartTime parameter or
- CVE-2023-49043Buffer Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the wpapsk_crypto parameter i
- CVE-2023-49044Stack Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the ssid parameter in the func
- CVE-2023-49046Stack Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the devName parameter in the f
- CVE-2023-49047Tenda AX1803 v1.0.0.1 contains a stack overflow via the devName parameter in the function formSetDeviceName.
- CVE-2023-49316In Math/BinaryField.php in phpseclib 3 before 3.0.34, excessively large degrees can lead to a denial of service.phpseclib/phpseclib