CVEs published November 28, 2023
71 CVEs were published on November 28, 2023: 6 critical, 19 high.
- Published
- 71
- Critical
- 6
- High
- 19
- Medium
- 31
- Low
- 3
- Unrated
- 12
- Now in CISA KEV
- 0
- Fix available
- 32
Most affected products
- Chamilo
- 10
- Becton, Dickinson and Company (BD) FACSChorus
- 7
- Zyxel ATP series firmware · Zyxel USG FLEX series firmwa… +3
- 5
- Apache Software Foundation Apache Superset · apache-superset
- 3
- ESKOM Computer e-municipality module
- 2
- gn_themes WP Shortcodes Plugin — Shortcodes Ultimate
- 2
- NodeJS Node · node +1
- 2
- Zyxel ATP series firmware · Zyxel USG FLEX series firmwa… +7
- 2
- Apache Software Foundation Apache ActiveMQ · org.apache.act…
- 1
- Apache Software Foundation Apache Tomcat · org.apache.to… +2
- 1
Critical 6
- CVE-2023-3545Chamilo LMS Htaccess File Upload Security BypassChamilo
- CVE-2023-3533Chamilo LMS Unauthenticated Remote Code Execution via Arbitrary File WriteChamilo
- CVE-2023-3368Chamilo LMS Unauthenticated Command InjectionChamilo
- CVE-2023-41264Netwrix Usercube before 6.0.215, in certain misconfigured on-premises installations, allows authentication bypass on deployment endpoints, l
- CVE-2023-48022Anyscale Ray 2.6.3 and 2.8.0 allows a remote attacker to execute arbitrary code via the job submission API.ray
- CVE-2023-48023Anyscale Ray 2.6.3 and 2.8.0 allows /log_proxy SSRF.
High 19
- CVE-2023-40056SolarWinds Platform SQL Injection Remote Code Execution VulnerabilitySolarWinds Platform
- CVE-2023-46589Apache Tomcat: HTTP request smuggling via malformed trailer headersApache Software Foundation Apache Tomcat · org.apache.to… +2
- CVE-2023-6201Command Injection in Univera Panorama FrameworkUnivera Computer System Panorama
- CVE-2023-42004IBM Security Guardium CSV injectionIBM Security Guardium
- CVE-2023-6151Information Disclosure in Eskom E-municipalityESKOM Computer e-municipality module
- CVE-2023-6150Information Disclosure in Eskom E-municipalityESKOM Computer e-municipality module
- CVE-2023-4667Stored Cross Site Scripting in webserver administrationIDEMIA SIGMA Lite & Lite + · IDEMIA SIGMA Wide +4
- CVE-2023-4225Chamilo LMS File Upload Functionality Remote Code ExecutionChamilo
- CVE-2023-4226Chamilo LMS File Upload Functionality Remote Code ExecutionChamilo
- CVE-2023-4224Chamilo LMS File Upload Functionality Remote Code ExecutionChamilo
- CVE-2023-4223Chamilo LMS File Upload Functionality Remote Code ExecutionChamilo
- CVE-2023-4222Chamilo LMS Learning Path PPT2LP Command Injection VulnerabilityChamilo
- CVE-2023-4221Chamilo LMS Learning Path PPT2LP Command Injection VulnerabilityChamilo
- CVE-2023-4220Chamilo LMS Unauthenticated Big Upload File Remote Code ExecutionChamilo
- CVE-2023-49075Pimcore Admin UI has Two Factor Authentication disabled for non admin security firewallspimcore admin-ui-classic-bundle · pimcore/admin-ui-classic-…
- CVE-2023-6219BookingPress <= 1.0.76 - Authenticated (Administrator+) Arbitrary File Uploadreputeinfosystems Appointment Booking Calendar Plugin and S…
- CVE-2023-4398An integer overflow vulnerability in the source code of the QuickSec IPSec toolkit used in the VPN feature of the Zyxel ATP series firmware Zyxel ATP series firmware · Zyxel USG FLEX series firmwa… +3
- CVE-2023-45539HAProxy before 2.8.2 accepts # as part of the URI component, which might allow remote attackers to obtain sensitive information or have unsp
- CVE-2023-48848An arbitrary file read vulnerability in ureport v2.2.9 allows a remote attacker to arbitrarily read files on the server by inserting a craftcom.bstek.ureport:ureport2-core
Medium, low and unrated 46
- CVE-2023-49092RustCrypto/RSA vulnerable to a Marvin Attack via key recovery through timing sidechannelsRustCrypto RSA · rsa
- CVE-2023-29066Incorrect User ManagementBecton, Dickinson and Company (BD) FACSChorus
- CVE-2023-29065Overly Permissive Access PolicyBecton, Dickinson and Company (BD) FACSChorus
- CVE-2023-29064Hardcoded SecretsBecton, Dickinson and Company (BD) FACSChorus
- CVE-2023-29063Lack of DMA Access ProtectionsBecton, Dickinson and Company (BD) FACSChorus
- CVE-2023-29062Unsecure Identity VerificationBecton, Dickinson and Company (BD) FACSChorus
- CVE-2023-29061Lack of Adequate BIOS AuthenticationBecton, Dickinson and Company (BD) FACSChorus
- CVE-2023-29060Lack of USB WhitelistingBecton, Dickinson and Company (BD) FACSChorus
- CVE-2023-30590The generateKeys() API function returned from crypto.createDiffieHellman() only generates missing (or outdated) keys, that is, it only generNodeJS Node · node +1
- CVE-2023-30588When an invalid public key is used to create an x509 certificate using the crypto.X509Certificate() API a non-expect termination occurs makiNodeJS Node
- CVE-2023-49078Cross-Site Scripting vulnerability in raptor-web 0.4.4zediious raptor-web
- CVE-2023-42504Apache Superset: Lack of rate limiting allows for possible denial of serviceApache Software Foundation Apache Superset · apache-superset
- CVE-2023-45286HTTP request body disclosure in github.com/go-resty/resty/v2github.com/go-resty/resty/v2
- CVE-2023-42505Apache Superset: Sensitive information disclosure on db connection detailsApache Software Foundation Apache Superset · apache-superset
- CVE-2023-42502Apache Superset: Open Redirect VulnerabilityApache Software Foundation Apache Superset · apache-superset
- CVE-2023-49062Katran could disclose non-initialized kernel memory as part of an IP header.Facebook Katran
- CVE-2022-41678Apache ActiveMQ: Insufficient API restrictions on Jolokia allow authenticated users to perform RCEApache Software Foundation Apache ActiveMQ · org.apache.act…
- CVE-2023-6239Incorrect calculation of effective permissionsM-Files Server
- CVE-2023-6359Cross-Site Scripting in Alumne LMSGrupo Alumne Alumne LMS
- CVE-2023-5981Gnutls: timing side-channel in the rsa-psk authenticationRed Hat Enterprise Linux · Red Hat RHODF-4.15-RHEL-9 +1
- CVE-2023-34055Spring Boot server Web Observations DoS VulnerabilitySpring Boot · org.springframework.boot:spring-boot-actuator
- CVE-2023-34054Reactor Netty HTTP Server Metrics DoS VulnerabilitySpring Reactor Netty · io.projectreactor.netty:reactor-nett…
- CVE-2023-34053Spring Framework server Web Observations DoS VulnerabilitySpring Framework · org.springframework:spring-webmvc
- CVE-2023-6225WP Shortcodes Plugin — Shortcodes Ultimate <= 5.13.3 - Authenticated (Contributor+) Stored Cross-Site Scriptinggn_themes WP Shortcodes Plugin — Shortcodes Ultimate
- CVE-2023-6226WP Shortcodes Plugin — Shortcodes Ultimate <= 5.13.3 - Insecure Direct Object Reference to Information Disclosuregn_themes WP Shortcodes Plugin — Shortcodes Ultimate
- CVE-2023-48713Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscalerknative serving · knative.dev/serving
- CVE-2023-32065OroCommerce get-totals-for-checkout API endpoint returns unwanted dataoroinc orocommerce · oro/commerce
- CVE-2023-32064OroCommerce Customer Portal Incorrect Customer and Customer Group Frontend Menus pages visibilityoroinc orocommerce · oro/customer-portal
- CVE-2023-32063OroCRMCallBundle has incorrect call view page visibilityoroinc crm · oro/crm-call-bundle
- CVE-2023-5960An improper privilege management vulnerability in the hotspot feature of the Zyxel USG FLEX series firmware versions 4.50 through 5.37 and VZyxel USG FLEX series firmware · Zyxel VPN series firmware
- CVE-2023-5797An improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEZyxel ATP series firmware · Zyxel USG FLEX series firmwa… +7
- CVE-2023-5650An improper privilege management vulnerability in the ZySH of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmZyxel ATP series firmware · Zyxel USG FLEX series firmwa… +3
- CVE-2023-4397A buffer overflow vulnerability in the Zyxel ATP series firmware version 5.37, USG FLEX series firmware version 5.37, USG FLEX 50(W) series Zyxel ATP series firmware · Zyxel USG FLEX series firmwa… +2
- CVE-2023-37926A buffer overflow vulnerability in the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through Zyxel ATP series firmware · Zyxel USG FLEX series firmwa… +3
- CVE-2023-37925An improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEZyxel ATP series firmware · Zyxel USG FLEX series firmwa… +7
- CVE-2023-30585A vulnerability has been identified in the Node.js (.msi version) installation process, specifically affecting Windows users who install NodNodeJS Node · node +1
- CVE-2023-35139A cross-site scripting (XSS) vulnerability in the CGI program of the Zyxel ATP series firmware versions 5.10 through 5.37, USG FLEX series fZyxel ATP series firmware · Zyxel USG FLEX series firmwa… +3
- CVE-2023-35136An improper input validation vulnerability in the “Quagga” package of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX serZyxel ATP series firmware · Zyxel USG FLEX series firmwa… +3
- CVE-2023-24023Bluetooth BR/EDR devices with Secure Simple Pairing and Secure Connections pairing in Bluetooth Core Specification 4.2 through 5.4 allow cer
- CVE-2023-46944An issue in GitKraken GitLens before v.14.0.0 allows an attacker to execute arbitrary code via a crafted file to the Visual Studio Codes wor
- CVE-2023-47503An issue in jflyfox jfinalCMS v.5.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the login.jsp component in
- CVE-2023-48042Cross Site Scripting (XSS) in Search filters in Prestashop Amazzing filter version up to version 3.2.5, allows remote attackers to inject ar
- CVE-2023-48121An authentication bypass vulnerability in the Direct Connection Module in Ezviz CS-C6N-xxx prior to v5.3.x build 20230401, Ezviz CS-CV310-xx
- CVE-2023-48193Insecure Permissions vulnerability in JumpServer GPLv3 v.3.8.0 allows a remote attacker to execute arbitrary code via bypassing the command
- CVE-2023-49313A dylib injection vulnerability in XMachOViewer 0.04 allows attackers to compromise integrity.
- CVE-2023-49314Asana Desktop 2.1.0 on macOS allows code injection because of specific Electron Fuses.