# CVEs published 2023-11-27

92 CVEs were published on November 27, 2023: 8 critical, 14 high. Days are UTC.

- [CVE-2023-49145](https://cve.now/CVE-2023-49145.md): Apache NiFi: Improper Neutralization of Input in Advanced User Interface for Jolt (CVSS 7.9, Apache Software Foundation Apache NiFi · org.apache.nifi:ni…)
- [CVE-2023-5885](https://cve.now/CVE-2023-5885.md): Franklin Electric Fueling Systems Colibri Path Traversal (CVSS 6.5, Franklin Electric Fueling Systems Colibri)
- [CVE-2023-32062](https://cve.now/CVE-2023-32062.md): OroCalendarBundle has incorrect system calendar events visibility (CVSS 5.0, oroinc crm · oro/calendar-bundle)
- [CVE-2022-41951](https://cve.now/CVE-2022-41951.md): OroPlatform vulnerable to path traversal during temporary file manipulations (CVSS 8.6, oroinc platform · oro/platform)
- [CVE-2023-42000](https://cve.now/CVE-2023-42000.md): Arcserve UDP Agent Unauthenticated Path Traversal File Upload (CVSS 9.8, Arcserve UDP)
- [CVE-2023-41999](https://cve.now/CVE-2023-41999.md): Arcserve UDP Management Authentication Bypass (CVSS 9.8, Arcserve UDP)
- [CVE-2023-41998](https://cve.now/CVE-2023-41998.md): Arcserve UDP Unauthenticated RCE (CVSS 9.8, Arcserve UDP)
- [CVE-2023-6329](https://cve.now/CVE-2023-6329.md): Control iD iDSecure passwordCustom Authentication Bypass (CVSS 9.8, Control iD iDSecure)
- [CVE-2023-5620](https://cve.now/CVE-2023-5620.md): Webpushr \< 4.35.0 - Unauthenticated Stored XSS (no CVSS, Web Push Notifications)
- [CVE-2023-5525](https://cve.now/CVE-2023-5525.md): Limit Login Attempts Reloaded \< 2.25.26 - Admin+ Missing Authorization to Toggle Plugin Auto-Update (CVSS 4.3, Limit Login Attempts Reloaded)
- [CVE-2023-5641](https://cve.now/CVE-2023-5641.md): Martins Free & Easy SEO Link buildings \< 1.2.30 - Reflected XSS (no CVSS, Martins Free & Easy SEO BackLink Link Building Network)
- [CVE-2023-5559](https://cve.now/CVE-2023-5559.md): 10Web Booster \< 2.24.18 - Unauthenticated Arbitrary Option Deletion (no CVSS, 10Web Booster)
- [CVE-2023-5611](https://cve.now/CVE-2023-5611.md): Seraphinite Accelerator \< 2.20.32 - Unauthorised Settings Reset/Import (no CVSS, Seraphinite Accelerator)
- [CVE-2023-2707](https://cve.now/CVE-2023-2707.md): Appointment booking addon for Gravity Forms \<= 1.9.5.1 - Admin+ Stored XSS (CVSS 4.8, gAppointments)
- [CVE-2023-5942](https://cve.now/CVE-2023-5942.md): Medialist \< 1.4.1 - Contributor+ Stored XSS (CVSS 5.4, Medialist)
- [CVE-2023-5738](https://cve.now/CVE-2023-5738.md): WordPress Backup & Migration \< 1.4.5 - Subscriber+ Stored XSS (no CVSS, WordPress Backup & Migration)
- [CVE-2023-4514](https://cve.now/CVE-2023-4514.md): Mmm Simple File List \<= 2.3 - Contributor+ Stored XSS (no CVSS, Mmm Simple File List)
- [CVE-2023-5958](https://cve.now/CVE-2023-5958.md): POST SMTP Mailer \< 2.7.1 - Unauthenticated Cross-site Scripting (no CVSS, POST SMTP Mailer)
- [CVE-2023-4922](https://cve.now/CVE-2023-4922.md): WPB Show Core \<= 2.2 - Unauthenticated Local File Inclusion (no CVSS, wpb-show-core)
- [CVE-2023-5325](https://cve.now/CVE-2023-5325.md): Woocommerce Vietnam Checkout \< 2.0.6 - Unauthenticated Stored XSS (no CVSS, Woocommerce Vietnam Checkout)
- [CVE-2023-5974](https://cve.now/CVE-2023-5974.md): WPB Show Core \<= 2.2 - Unauthenticated Server Side Request Forgery (no CVSS, wpb-show-core)
- [CVE-2023-5737](https://cve.now/CVE-2023-5737.md): WordPress Backup & Migration \< 1.4.4 - Subscriber+ Plugin Settings Update (no CVSS, WordPress Backup & Migration)
- [CVE-2023-5845](https://cve.now/CVE-2023-5845.md): Simple Social Buttons \< 5.1.1 - Unauthenticated Password Protected Post Access (CVSS 5.3, Simple Social Media Share Buttons)
- [CVE-2023-4297](https://cve.now/CVE-2023-4297.md): Mmm Simple File List \<= 2.3 - Subscriber+ Arbitrary Directory Listing (CVSS 4.3, Mmm Simple File List)
- [CVE-2023-5653](https://cve.now/CVE-2023-5653.md): WassUp Real Time Analytics \<= 1.9.4.5 - Unauthenticated Stored XSS (no CVSS, WassUp Real Time Analytics)
- [CVE-2023-5604](https://cve.now/CVE-2023-5604.md): Asgaros Forum \< 2.7.1 - Unauthenticated Arbitrary File Upload (CVSS 9.8, Asgaros Forum)
- [CVE-2023-5239](https://cve.now/CVE-2023-5239.md): Security & Malware scan by CleanTalk \< 2.121 - IP Spoofing (no CVSS, Security & Malware scan by CleanTalk)
- [CVE-2023-5560](https://cve.now/CVE-2023-5560.md): WP-UserOnline \< 2.88.3 - Unauthenticated Stored XSS (no CVSS, WP-UserOnline)
- [CVE-2023-4252](https://cve.now/CVE-2023-4252.md): EventPrime \<= 3.2.9 - Booking Pricing Bypass (no CVSS, EventPrime)
- [CVE-2023-5906](https://cve.now/CVE-2023-5906.md): Job Manager & Career \< 1.4.4 - Directory listing to Sensitive Data Exposure (no CVSS, Job Manager & Career)
- [CVE-2023-5209](https://cve.now/CVE-2023-5209.md): Bookly \< 22.5 - Admin+ Stored XSS (no CVSS, WordPress Online Booking and Scheduling Plugin)
- [CVE-2023-4642](https://cve.now/CVE-2023-4642.md): kk Star Ratings \< 5.4.6 - Rating Tampering via Race Condition (no CVSS, kk Star Ratings)
- [CVE-2023-31275](https://cve.now/CVE-2023-31275.md): An uninitialized pointer use vulnerability exists in the functionality of WPS Office 11.2.0.11537 that handles Data elements in an Excel fil (CVSS 8.8, WPS Office)
- [CVE-2023-39542](https://cve.now/CVE-2023-39542.md): A code execution vulnerability exists in the Javascript saveAs API of Foxit Reader 12.1.3.15356. (CVSS 8.8, Foxit Reader)
- [CVE-2023-40194](https://cve.now/CVE-2023-40194.md): An arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit Reader 12.1.3.15356 due to mistreatment of w (CVSS 8.8, Foxit Reader)
- [CVE-2023-35985](https://cve.now/CVE-2023-35985.md): An arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit Reader 12.1.3.15356 due to a failure to prop (CVSS 8.8, Foxit Reader)
- [CVE-2023-32616](https://cve.now/CVE-2023-32616.md): A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15356 handles 3D annotations. (CVSS 8.8, Foxit Reader)
- [CVE-2023-41257](https://cve.now/CVE-2023-41257.md): A type confusion vulnerability exists in the way Foxit Reader 12.1.2.15356 handles field value properties. (CVSS 8.8, Foxit Reader)
- [CVE-2023-38573](https://cve.now/CVE-2023-38573.md): A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15356 handles a signature field. (CVSS 8.8, Foxit Reader)
- [CVE-2023-4931](https://cve.now/CVE-2023-4931.md): Uncontrolled search path element vulnerability in Plesk (CVSS 6.3, Plesk Installer)
- [CVE-2023-6287](https://cve.now/CVE-2023-6287.md): Backup password in GET parameter (CVSS 3.3, Checkmk Appliance)
- [CVE-2023-4590](https://cve.now/CVE-2023-4590.md): Buffer Overflow vulnerability in Frhed (CVSS 7.3, Frhed)
- [CVE-2023-5871](https://cve.now/CVE-2023-5871.md): Libnbd: malicious nbd server may crash libnbd (CVSS 5.3, Red Hat Enterprise Linux)
- [CVE-2023-43701](https://cve.now/CVE-2023-43701.md): Apache Superset: Stored XSS on API endpoint (CVSS 4.3, Apache Software Foundation Apache Superset · apache-superset)
- [CVE-2023-5607](https://cve.now/CVE-2023-5607.md): An improper limitation of a path name to a restricted directory (path traversal) vulnerability in the TACC ePO extension, for on-premises e (CVSS 8.4, Trellix Application and Change Control)
- [CVE-2023-42501](https://cve.now/CVE-2023-42501.md): Apache Superset: Unnecessary read permissions within the Gamma role (CVSS 4.3, Apache Software Foundation Apache Superset · apache-superset)
- [CVE-2023-40610](https://cve.now/CVE-2023-40610.md): Apache Superset: Privilege escalation with default examples database (CVSS 6.3, Apache Software Foundation Apache Superset · apache-superset)
- [CVE-2023-49068](https://cve.now/CVE-2023-49068.md): Apache DolphinScheduler: Information Leakage Vulnerability (no CVSS, Apache Software Foundation Apache DolphinScheduler · org.ap…)
- [CVE-2023-6254](https://cve.now/CVE-2023-6254.md): Password is send back to client (CVSS 8.1, OTRS AG OTRS)
- [CVE-2023-47168](https://cve.now/CVE-2023-47168.md): Open redirect in /oauth/\<service\>/mobile\_login?redirect\_to= (CVSS 4.3, Mattermost · github.com/mattermost/mattermost/server/v8 +1)
- [CVE-2023-6202](https://cve.now/CVE-2023-6202.md): Insecure Direct Object Reference in /plugins/focalboard/ api/v2/users of Mattermost Boards (CVSS 4.3, Mattermost · github.com/mattermost/mattermost/server/v8 +1)
- [CVE-2023-43754](https://cve.now/CVE-2023-43754.md): Permalink previews displayed for posts in archived channels even if users are disallowed to view archived channels (CVSS 4.3, Mattermost · github.com/mattermost/mattermost/server/v8 +1)
- [CVE-2023-48369](https://cve.now/CVE-2023-48369.md): Log Flooding due to specially crafted requests in different endpoints (CVSS 4.3, Mattermost · github.com/mattermost/mattermost/server/v8 +1)
- [CVE-2023-35075](https://cve.now/CVE-2023-35075.md): HTML injection via channel autocomplete (CVSS 3.1, Mattermost · github.com/mattermost/mattermost/server/v8 +1)
- [CVE-2023-40703](https://cve.now/CVE-2023-40703.md): Denial of Service via specially crafted block fields in Mattermost Boards (CVSS 4.3, Mattermost · github.com/mattermost/mattermost/server/v8 +1)
- [CVE-2023-48268](https://cve.now/CVE-2023-48268.md): Denial of Service via Board Import Zip Bomb (CVSS 4.3, Mattermost · github.com/mattermost/mattermost/server/v8 +1)
- [CVE-2023-45223](https://cve.now/CVE-2023-45223.md): Users full name disclosure through Mattermost Boards with Show Full Name Option disabled (CVSS 4.3, Mattermost · github.com/mattermost/mattermost/server/v8 +1)
- [CVE-2023-47865](https://cve.now/CVE-2023-47865.md): Username and Icon override can be used by members when Hardened Mode is enabled (CVSS 4.3, Mattermost · github.com/mattermost/mattermost/server/v8 +1)
- [CVE-2023-25632](https://cve.now/CVE-2023-25632.md): The Android Mobile Whale browser app before 3.0.1.2 allows the attacker to bypass its browser unlock function via 'Open in Whale' feature. (no CVSS, NAVER Whale browser)
- [CVE-2023-6313](https://cve.now/CVE-2023-6313.md): SourceCodester URL Shortener Long URL cross site scripting (CVSS 3.5, SourceCodester URL Shortener)
- [CVE-2023-6312](https://cve.now/CVE-2023-6312.md): SourceCodester Loan Management System Users Page deleteUser.php delete\_user sql injection (CVSS 4.7, SourceCodester Loan Management System)
- [CVE-2023-6311](https://cve.now/CVE-2023-6311.md): SourceCodester Loan Management System Loan Type Page delete\_ltype.php delete\_ltype sql injection (CVSS 4.7, SourceCodester Loan Management System)
- [CVE-2023-6310](https://cve.now/CVE-2023-6310.md): SourceCodester Loan Management System deleteBorrower.php delete\_borrower sql injection (CVSS 4.7, SourceCodester Loan Management System)
- [CVE-2023-6309](https://cve.now/CVE-2023-6309.md): moses-smt mosesdecoder trans\_result.php os command injection (CVSS 5.5, moses-smt mosesdecoder)
- [CVE-2023-6308](https://cve.now/CVE-2023-6308.md): Xiamen Four-Faith Video Surveillance Management System Apache Struts unrestricted upload (CVSS 6.3, Xiamen Four-Faith Video Surveillance Management System)
- [CVE-2023-6307](https://cve.now/CVE-2023-6307.md): jeecgboot JimuReport image path traversal (CVSS 6.3, jeecgboot JimuReport)
- [CVE-2023-6306](https://cve.now/CVE-2023-6306.md): SourceCodester Free and Open Source Inventory Management System member\_data.php sql injection (CVSS 6.3, SourceCodester Free and Open Source Inventory Management Sy…)
- [CVE-2023-6305](https://cve.now/CVE-2023-6305.md): SourceCodester Free and Open Source Inventory Management System suppliar\_data.php sql injection (CVSS 6.3, SourceCodester Free and Open Source Inventory Management Sy…)
- [CVE-2023-6304](https://cve.now/CVE-2023-6304.md): Tecno 4G Portable WiFi TR118 Ping Tool goform\_get\_cmd\_process os command injection (CVSS 7.2, Tecno 4G Portable WiFi TR118)
- [CVE-2023-6303](https://cve.now/CVE-2023-6303.md): CSZCMS Site Settings Page cross site scripting (CVSS 2.4, CSZCMS)
- [CVE-2023-6302](https://cve.now/CVE-2023-6302.md): CSZCMS File Manager Page templates permission (CVSS 4.7, CSZCMS)
- [CVE-2023-29770](https://cve.now/CVE-2023-29770.md): In Sentrifugo 3.5, the AssetsController::uploadsaveAction function allows an authenticated attacker to upload any file without extension fil (no CVSS)
- [CVE-2023-42363](https://cve.now/CVE-2023-42363.md): A use-after-free vulnerability was discovered in xasprintf function in xfuncs\_printf.c:344 in BusyBox v.1.36.1. (no CVSS)
- [CVE-2023-42364](https://cve.now/CVE-2023-42364.md): A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c eval (CVSS 5.5)
- [CVE-2023-42365](https://cve.now/CVE-2023-42365.md): A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function. (no CVSS)
- [CVE-2023-42366](https://cve.now/CVE-2023-42366.md): A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next\_token function at awk.c:1159. (no CVSS)
- [CVE-2023-46349](https://cve.now/CVE-2023-46349.md): In the module "Product Catalog (CSV, Excel) Export/Update" (updateproducts) \< 3.8.5 from MyPrestaModules for PrestaShop, a guest can perform (no CVSS)
- [CVE-2023-46355](https://cve.now/CVE-2023-46355.md): In the module "CSV Feeds PRO" (csvfeeds) \< 2.6.1 from Bl Modules for PrestaShop, a guest can download personal information without restricti (no CVSS)
- [CVE-2023-46480](https://cve.now/CVE-2023-46480.md): An issue in OwnCast v.0.1.1 allows a remote attacker to execute arbitrary code and obtain sensitive information via the authHost parameter o (CVSS 9.8, github.com/owncast/owncast)
- [CVE-2023-47437](https://cve.now/CVE-2023-47437.md): A vulnerability has been identified in Pachno 1.0.6 allowing an authenticated attacker to execute a cross-site scripting (XSS) attack. (no CVSS)
- [CVE-2023-48034](https://cve.now/CVE-2023-48034.md): An issue discovered in Acer Wireless Keyboard SK-9662 allows attacker in physical proximity to both decrypt wireless keystrokes and inject a (no CVSS)
- [CVE-2023-48188](https://cve.now/CVE-2023-48188.md): SQL injection vulnerability in PrestaShop opartdevis v.4.5.18 thru v.4.6.12 allows a remote attacker to execute arbitrary code via a crafted (CVSS 9.8)
- [CVE-2023-49028](https://cve.now/CVE-2023-49028.md): Cross Site Scripting vulnerability in smpn1smg absis v.2017-10-19 and before allows a remote attacker to execute arbitrary code via the user (no CVSS)
- [CVE-2023-49029](https://cve.now/CVE-2023-49029.md): Cross Site Scripting vulnerability in smpn1smg absis v.2017-10-19 and before allows a remote attacker to execute arbitrary code via the nama (no CVSS)
- [CVE-2023-49030](https://cve.now/CVE-2023-49030.md): SQL Injection vulnerability in32ns KLive v.2019-1-19 and before allows a remote attacker to obtain sensitive information via a crafted scrip (CVSS 7.5)
- [CVE-2023-49040](https://cve.now/CVE-2023-49040.md): An issue in Tneda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the adslPwd parameter in the form\_fast\_setting\_int (CVSS 9.8)
- [CVE-2023-49042](https://cve.now/CVE-2023-49042.md): Heap Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the schedStartTime parameter or (no CVSS)
- [CVE-2023-49043](https://cve.now/CVE-2023-49043.md): Buffer Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the wpapsk\_crypto parameter i (no CVSS)
- [CVE-2023-49044](https://cve.now/CVE-2023-49044.md): Stack Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the ssid parameter in the func (no CVSS)
- [CVE-2023-49046](https://cve.now/CVE-2023-49046.md): Stack Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the devName parameter in the f (no CVSS)
- [CVE-2023-49047](https://cve.now/CVE-2023-49047.md): Tenda AX1803 v1.0.0.1 contains a stack overflow via the devName parameter in the function formSetDeviceName. (no CVSS)
- [CVE-2023-49316](https://cve.now/CVE-2023-49316.md): In Math/BinaryField.php in phpseclib 3 before 3.0.34, excessively large degrees can lead to a denial of service. (no CVSS, phpseclib/phpseclib)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-11-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.