# CVEs published 2023-11-28

71 CVEs were published on November 28, 2023: 6 critical, 19 high. Days are UTC.

- [CVE-2023-49092](https://cve.now/CVE-2023-49092.md): RustCrypto/RSA vulnerable to a Marvin Attack via key recovery through timing sidechannels (CVSS 5.9, RustCrypto RSA · rsa)
- [CVE-2023-29066](https://cve.now/CVE-2023-29066.md): Incorrect User Management (CVSS 3.2, Becton, Dickinson and Company (BD) FACSChorus)
- [CVE-2023-29065](https://cve.now/CVE-2023-29065.md): Overly Permissive Access Policy (CVSS 4.1, Becton, Dickinson and Company (BD) FACSChorus)
- [CVE-2023-29064](https://cve.now/CVE-2023-29064.md): Hardcoded Secrets (CVSS 4.1, Becton, Dickinson and Company (BD) FACSChorus)
- [CVE-2023-29063](https://cve.now/CVE-2023-29063.md): Lack of DMA Access Protections (CVSS 2.4, Becton, Dickinson and Company (BD) FACSChorus)
- [CVE-2023-29062](https://cve.now/CVE-2023-29062.md): Unsecure Identity Verification (CVSS 3.8, Becton, Dickinson and Company (BD) FACSChorus)
- [CVE-2023-29061](https://cve.now/CVE-2023-29061.md): Lack of Adequate BIOS Authentication (CVSS 5.2, Becton, Dickinson and Company (BD) FACSChorus)
- [CVE-2023-29060](https://cve.now/CVE-2023-29060.md): Lack of USB Whitelisting (CVSS 5.4, Becton, Dickinson and Company (BD) FACSChorus)
- [CVE-2023-30590](https://cve.now/CVE-2023-30590.md): The generateKeys() API function returned from crypto.createDiffieHellman() only generates missing (or outdated) keys, that is, it only gener (no CVSS, NodeJS Node · node +1)
- [CVE-2023-30588](https://cve.now/CVE-2023-30588.md): When an invalid public key is used to create an x509 certificate using the crypto.X509Certificate() API a non-expect termination occurs maki (no CVSS, NodeJS Node)
- [CVE-2023-49078](https://cve.now/CVE-2023-49078.md): Cross-Site Scripting vulnerability in raptor-web 0.4.4 (CVSS 5.4, zediious raptor-web)
- [CVE-2023-42504](https://cve.now/CVE-2023-42504.md): Apache Superset: Lack of rate limiting allows for possible denial of service (CVSS 5.8, Apache Software Foundation Apache Superset · apache-superset)
- [CVE-2023-40056](https://cve.now/CVE-2023-40056.md): SolarWinds Platform SQL Injection Remote Code Execution Vulnerability (CVSS 8.0, SolarWinds Platform)
- [CVE-2023-45286](https://cve.now/CVE-2023-45286.md): HTTP request body disclosure in github.com/go-resty/resty/v2 (no CVSS, github.com/go-resty/resty/v2)
- [CVE-2023-42505](https://cve.now/CVE-2023-42505.md): Apache Superset: Sensitive information disclosure on db connection details (CVSS 4.3, Apache Software Foundation Apache Superset · apache-superset)
- [CVE-2023-42502](https://cve.now/CVE-2023-42502.md): Apache Superset: Open Redirect Vulnerability (CVSS 4.8, Apache Software Foundation Apache Superset · apache-superset)
- [CVE-2023-49062](https://cve.now/CVE-2023-49062.md): Katran could disclose non-initialized kernel memory as part of an IP header. (no CVSS, Facebook Katran)
- [CVE-2023-46589](https://cve.now/CVE-2023-46589.md): Apache Tomcat: HTTP request smuggling via malformed trailer headers (CVSS 7.5, Apache Software Foundation Apache Tomcat · org.apache.to… +2)
- [CVE-2022-41678](https://cve.now/CVE-2022-41678.md): Apache ActiveMQ: Insufficient API restrictions on Jolokia allow authenticated users to perform RCE (medium (no CVSS), Apache Software Foundation Apache ActiveMQ · org.apache.act…)
- [CVE-2023-6239](https://cve.now/CVE-2023-6239.md): Incorrect calculation of effective permissions (CVSS 5.4, M-Files Server)
- [CVE-2023-6359](https://cve.now/CVE-2023-6359.md): Cross-Site Scripting in Alumne LMS (CVSS 5.4, Grupo Alumne Alumne LMS)
- [CVE-2023-5981](https://cve.now/CVE-2023-5981.md): Gnutls: timing side-channel in the rsa-psk authentication (CVSS 5.9, Red Hat Enterprise Linux · Red Hat RHODF-4.15-RHEL-9 +1)
- [CVE-2023-6201](https://cve.now/CVE-2023-6201.md): Command Injection in Univera Panorama Framework (CVSS 8.8, Univera Computer System Panorama)
- [CVE-2023-42004](https://cve.now/CVE-2023-42004.md): IBM Security Guardium CSV injection (CVSS 8.0, IBM Security Guardium)
- [CVE-2023-6151](https://cve.now/CVE-2023-6151.md): Information Disclosure in Eskom E-municipality (CVSS 7.5, ESKOM Computer e-municipality module)
- [CVE-2023-6150](https://cve.now/CVE-2023-6150.md): Information Disclosure in Eskom E-municipality (CVSS 7.5, ESKOM Computer e-municipality module)
- [CVE-2023-34055](https://cve.now/CVE-2023-34055.md): Spring Boot server Web Observations DoS Vulnerability (CVSS 5.3, Spring Boot · org.springframework.boot:spring-boot-actuator)
- [CVE-2023-34054](https://cve.now/CVE-2023-34054.md): Reactor Netty HTTP Server Metrics DoS Vulnerability (CVSS 5.3, Spring Reactor Netty · io.projectreactor.netty:reactor-nett…)
- [CVE-2023-34053](https://cve.now/CVE-2023-34053.md): Spring Framework server Web Observations DoS Vulnerability (CVSS 5.3, Spring Framework · org.springframework:spring-webmvc)
- [CVE-2023-4667](https://cve.now/CVE-2023-4667.md): Stored Cross Site Scripting in webserver administration (CVSS 8.1, IDEMIA SIGMA Lite & Lite + · IDEMIA SIGMA Wide +4)
- [CVE-2023-4225](https://cve.now/CVE-2023-4225.md): Chamilo LMS File Upload Functionality Remote Code Execution (CVSS 8.8, Chamilo)
- [CVE-2023-4226](https://cve.now/CVE-2023-4226.md): Chamilo LMS File Upload Functionality Remote Code Execution (CVSS 8.8, Chamilo)
- [CVE-2023-4224](https://cve.now/CVE-2023-4224.md): Chamilo LMS File Upload Functionality Remote Code Execution (CVSS 8.8, Chamilo)
- [CVE-2023-4223](https://cve.now/CVE-2023-4223.md): Chamilo LMS File Upload Functionality Remote Code Execution (CVSS 8.8, Chamilo)
- [CVE-2023-4222](https://cve.now/CVE-2023-4222.md): Chamilo LMS Learning Path PPT2LP Command Injection Vulnerability (CVSS 7.2, Chamilo)
- [CVE-2023-4221](https://cve.now/CVE-2023-4221.md): Chamilo LMS Learning Path PPT2LP Command Injection Vulnerability (CVSS 7.2, Chamilo)
- [CVE-2023-4220](https://cve.now/CVE-2023-4220.md): Chamilo LMS Unauthenticated Big Upload File Remote Code Execution (CVSS 8.1, Chamilo)
- [CVE-2023-3545](https://cve.now/CVE-2023-3545.md): Chamilo LMS Htaccess File Upload Security Bypass (CVSS 9.8, Chamilo)
- [CVE-2023-3533](https://cve.now/CVE-2023-3533.md): Chamilo LMS Unauthenticated Remote Code Execution via Arbitrary File Write (CVSS 9.8, Chamilo)
- [CVE-2023-3368](https://cve.now/CVE-2023-3368.md): Chamilo LMS Unauthenticated Command Injection (CVSS 9.8, Chamilo)
- [CVE-2023-49075](https://cve.now/CVE-2023-49075.md): Pimcore Admin UI has Two Factor Authentication disabled for non admin security firewalls (CVSS 8.5, pimcore admin-ui-classic-bundle · pimcore/admin-ui-classic-…)
- [CVE-2023-6225](https://cve.now/CVE-2023-6225.md): WP Shortcodes Plugin — Shortcodes Ultimate \<= 5.13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, gn\_themes WP Shortcodes Plugin — Shortcodes Ultimate)
- [CVE-2023-6226](https://cve.now/CVE-2023-6226.md): WP Shortcodes Plugin — Shortcodes Ultimate \<= 5.13.3 - Insecure Direct Object Reference to Information Disclosure (CVSS 4.3, gn\_themes WP Shortcodes Plugin — Shortcodes Ultimate)
- [CVE-2023-48713](https://cve.now/CVE-2023-48713.md): Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler (CVSS 6.5, knative serving · knative.dev/serving)
- [CVE-2023-32065](https://cve.now/CVE-2023-32065.md): OroCommerce get-totals-for-checkout API endpoint returns unwanted data (CVSS 5.8, oroinc orocommerce · oro/commerce)
- [CVE-2023-32064](https://cve.now/CVE-2023-32064.md): OroCommerce Customer Portal Incorrect Customer and Customer Group Frontend Menus pages visibility (CVSS 5.0, oroinc orocommerce · oro/customer-portal)
- [CVE-2023-32063](https://cve.now/CVE-2023-32063.md): OroCRMCallBundle has incorrect call view page visibility (CVSS 5.0, oroinc crm · oro/crm-call-bundle)
- [CVE-2023-6219](https://cve.now/CVE-2023-6219.md): BookingPress \<= 1.0.76 - Authenticated (Administrator+) Arbitrary File Upload (CVSS 7.2, reputeinfosystems Appointment Booking Calendar Plugin and S…)
- [CVE-2023-5960](https://cve.now/CVE-2023-5960.md): An improper privilege management vulnerability in the hotspot feature of the Zyxel USG FLEX series firmware versions 4.50 through 5.37 and V (CVSS 5.5, Zyxel USG FLEX series firmware · Zyxel VPN series firmware)
- [CVE-2023-5797](https://cve.now/CVE-2023-5797.md): An improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLE (CVSS 5.5, Zyxel ATP series firmware · Zyxel USG FLEX series firmwa… +7)
- [CVE-2023-5650](https://cve.now/CVE-2023-5650.md): An improper privilege management vulnerability in the ZySH of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firm (CVSS 5.5, Zyxel ATP series firmware · Zyxel USG FLEX series firmwa… +3)
- [CVE-2023-4398](https://cve.now/CVE-2023-4398.md): An integer overflow vulnerability in the source code of the QuickSec IPSec toolkit used in the VPN feature of the Zyxel ATP series firmware (CVSS 7.5, Zyxel ATP series firmware · Zyxel USG FLEX series firmwa… +3)
- [CVE-2023-4397](https://cve.now/CVE-2023-4397.md): A buffer overflow vulnerability in the Zyxel ATP series firmware version 5.37, USG FLEX series firmware version 5.37, USG FLEX 50(W) series (CVSS 4.4, Zyxel ATP series firmware · Zyxel USG FLEX series firmwa… +2)
- [CVE-2023-37926](https://cve.now/CVE-2023-37926.md): A buffer overflow vulnerability in the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through (CVSS 5.5, Zyxel ATP series firmware · Zyxel USG FLEX series firmwa… +3)
- [CVE-2023-37925](https://cve.now/CVE-2023-37925.md): An improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLE (CVSS 5.5, Zyxel ATP series firmware · Zyxel USG FLEX series firmwa… +7)
- [CVE-2023-30585](https://cve.now/CVE-2023-30585.md): A vulnerability has been identified in the Node.js (.msi version) installation process, specifically affecting Windows users who install Nod (no CVSS, NodeJS Node · node +1)
- [CVE-2023-35139](https://cve.now/CVE-2023-35139.md): A cross-site scripting (XSS) vulnerability in the CGI program of the Zyxel ATP series firmware versions 5.10 through 5.37, USG FLEX series f (CVSS 5.2, Zyxel ATP series firmware · Zyxel USG FLEX series firmwa… +3)
- [CVE-2023-35136](https://cve.now/CVE-2023-35136.md): An improper input validation vulnerability in the “Quagga” package of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX ser (CVSS 5.5, Zyxel ATP series firmware · Zyxel USG FLEX series firmwa… +3)
- [CVE-2023-24023](https://cve.now/CVE-2023-24023.md): Bluetooth BR/EDR devices with Secure Simple Pairing and Secure Connections pairing in Bluetooth Core Specification 4.2 through 5.4 allow cer (CVSS 6.4)
- [CVE-2023-41264](https://cve.now/CVE-2023-41264.md): Netwrix Usercube before 6.0.215, in certain misconfigured on-premises installations, allows authentication bypass on deployment endpoints, l (CVSS 9.8)
- [CVE-2023-45539](https://cve.now/CVE-2023-45539.md): HAProxy before 2.8.2 accepts # as part of the URI component, which might allow remote attackers to obtain sensitive information or have unsp (CVSS 8.2)
- [CVE-2023-46944](https://cve.now/CVE-2023-46944.md): An issue in GitKraken GitLens before v.14.0.0 allows an attacker to execute arbitrary code via a crafted file to the Visual Studio Codes wor (no CVSS)
- [CVE-2023-47503](https://cve.now/CVE-2023-47503.md): An issue in jflyfox jfinalCMS v.5.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the login.jsp component in (no CVSS)
- [CVE-2023-48022](https://cve.now/CVE-2023-48022.md): Anyscale Ray 2.6.3 and 2.8.0 allows a remote attacker to execute arbitrary code via the job submission API. (CVSS 9.8, ray)
- [CVE-2023-48023](https://cve.now/CVE-2023-48023.md): Anyscale Ray 2.6.3 and 2.8.0 allows /log\_proxy SSRF. (CVSS 9.1)
- [CVE-2023-48042](https://cve.now/CVE-2023-48042.md): Cross Site Scripting (XSS) in Search filters in Prestashop Amazzing filter version up to version 3.2.5, allows remote attackers to inject ar (no CVSS)
- [CVE-2023-48121](https://cve.now/CVE-2023-48121.md): An authentication bypass vulnerability in the Direct Connection Module in Ezviz CS-C6N-xxx prior to v5.3.x build 20230401, Ezviz CS-CV310-xx (no CVSS)
- [CVE-2023-48193](https://cve.now/CVE-2023-48193.md): Insecure Permissions vulnerability in JumpServer GPLv3 v.3.8.0 allows a remote attacker to execute arbitrary code via bypassing the command (no CVSS)
- [CVE-2023-48848](https://cve.now/CVE-2023-48848.md): An arbitrary file read vulnerability in ureport v2.2.9 allows a remote attacker to arbitrarily read files on the server by inserting a craft (CVSS 7.5, com.bstek.ureport:ureport2-core)
- [CVE-2023-49313](https://cve.now/CVE-2023-49313.md): A dylib injection vulnerability in XMachOViewer 0.04 allows attackers to compromise integrity. (no CVSS)
- [CVE-2023-49314](https://cve.now/CVE-2023-49314.md): Asana Desktop 2.1.0 on macOS allows code injection because of specific Electron Fuses. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-11-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.