# CVEs published 2023-11-29

56 CVEs were published on November 29, 2023: 6 critical, 11 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2023-40458](https://cve.now/CVE-2023-40458.md): AceManager DOS Vulnerability (CVSS 7.5, sierrawireless ALEOS)
- [CVE-2023-49694](https://cve.now/CVE-2023-49694.md): NETGEAR ProSAFE Network Management System Privilege Escalation Via MySQL Server (CVSS 7.8, NETGEAR ProSAFE Network Management System)
- [CVE-2023-49693](https://cve.now/CVE-2023-49693.md): NETGEAR ProSAFE Network Management System RCE via Unprotected Access to Java Debug Wire Protocol (CVSS 9.8, NETGEAR ProSAFE Network Management System)
- [CVE-2022-42541](https://cve.now/CVE-2022-42541.md): Remote code execution (CVSS 9.8, Google Android)
- [CVE-2022-42540](https://cve.now/CVE-2022-42540.md): Elevation of privilege (no CVSS, Google Android)
- [CVE-2022-42539](https://cve.now/CVE-2022-42539.md): Information disclosure (no CVSS, Google Android)
- [CVE-2022-42538](https://cve.now/CVE-2022-42538.md): Elevation of privilege (no CVSS, Google Android)
- [CVE-2022-42537](https://cve.now/CVE-2022-42537.md): Remote code execution (no CVSS, Google Android)
- [CVE-2022-42536](https://cve.now/CVE-2022-42536.md): Remote code execution (no CVSS, Google Android)
- [CVE-2023-49082](https://cve.now/CVE-2023-49082.md): aiohttp's ClientSession is vulnerable to CRLF injection via method (CVSS 5.3, aio-libs aiohttp · aiohttp)
- [CVE-2023-44383](https://cve.now/CVE-2023-44383.md): October CMS stored XSS by authenticated backend user with improper configuration (CVSS 5.4, octobercms october · october/system)
- [CVE-2023-49091](https://cve.now/CVE-2023-49091.md): Jwttoken in Cosmos server never expires after password changed and logging out (CVSS 8.8, azukaar Cosmos-Server)
- [CVE-2023-49079](https://cve.now/CVE-2023-49079.md): Misskey's missing signature validation allows arbitrary users to impersonate any remote user. (CVSS 9.3, misskey-dev misskey)
- [CVE-2023-49083](https://cve.now/CVE-2023-49083.md): cryptography vulnerable to NULL-dereference when loading PKCS7 certificates (CVSS 5.9, pyca cryptography · cryptography)
- [CVE-2023-6218](https://cve.now/CVE-2023-6218.md): MOVEit Transfer Group Admin Privilege Escalation (CVSS 7.2, Progress Software MOVEit Transfer)
- [CVE-2023-6217](https://cve.now/CVE-2023-6217.md): MOVEit Transfer XSS via MOVEit Gateway (CVSS 7.1, Progress Software MOVEit Transfer)
- [CVE-2023-49090](https://cve.now/CVE-2023-49090.md): CarrierWave has a content-type allowlist bypass vulnerability, possibly leading to XSS (CVSS 6.8, carrierwaveuploader carrierwave · carrierwave)
- [CVE-2023-49674](https://cve.now/CVE-2023-49674.md): A missing permission check in Jenkins NeuVector Vulnerability Scanner Plugin 1.22 and earlier allows attackers with Overall/Read permission (no CVSS, Jenkins Project Jenkins NeuVector Vulnerability Scanner Plu…)
- [CVE-2023-49673](https://cve.now/CVE-2023-49673.md): A cross-site request forgery (CSRF) vulnerability in Jenkins NeuVector Vulnerability Scanner Plugin 1.22 and earlier allows attackers to con (CVSS 8.8, Jenkins Project Jenkins NeuVector Vulnerability Scanner Plu…)
- [CVE-2023-49656](https://cve.now/CVE-2023-49656.md): Jenkins MATLAB Plugin 2.11.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. (no CVSS, Jenkins Project Jenkins MATLAB Plugin · org.jenkins-ci.plug…)
- [CVE-2023-49655](https://cve.now/CVE-2023-49655.md): A cross-site request forgery (CSRF) vulnerability in Jenkins MATLAB Plugin 2.11.0 and earlier allows attackers to have Jenkins parse an XML (no CVSS, Jenkins Project Jenkins MATLAB Plugin · org.jenkins-ci.plug…)
- [CVE-2023-49654](https://cve.now/CVE-2023-49654.md): Missing permission checks in Jenkins MATLAB Plugin 2.11.0 and earlier allow attackers to have Jenkins parse an XML file from the Jenkins con (no CVSS, Jenkins Project Jenkins MATLAB Plugin · org.jenkins-ci.plug…)
- [CVE-2023-49653](https://cve.now/CVE-2023-49653.md): Jenkins Jira Plugin 3.11 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure per (no CVSS, Jenkins Project Jenkins Jira Plugin · org.jenkins-ci.plugin…)
- [CVE-2023-49652](https://cve.now/CVE-2023-49652.md): Incorrect permission checks in Jenkins Google Compute Engine Plugin 4.550.vb\_327fca\_3db\_11 and earlier allow attackers with global Item/Conf (no CVSS, Jenkins Project Jenkins Google Compute Engine Plugin · org.…)
- [CVE-2023-40626](https://cve.now/CVE-2023-40626.md): \[20231101\] - Core - Exposure of environment variables (no CVSS, Joomla! Project Joomla! CMS)
- [CVE-2023-6378](https://cve.now/CVE-2023-6378.md): Logback "receiver" DOS vulnerability (CVSS 7.1, QOS.CH Sarl logback · ch.qos.logback:logback-classic +1)
- [CVE-2023-6345](https://cve.now/CVE-2023-6345.md): Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to pote (CVSS 9.6, KEV, Google Chrome)
- [CVE-2023-6351](https://cve.now/CVE-2023-6351.md): Use after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a cr (no CVSS, Google Chrome)
- [CVE-2023-6350](https://cve.now/CVE-2023-6350.md): Use after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a cr (no CVSS, Google Chrome)
- [CVE-2023-6346](https://cve.now/CVE-2023-6346.md): Use after free in WebAudio in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a c (no CVSS, Google Chrome)
- [CVE-2023-6347](https://cve.now/CVE-2023-6347.md): Use after free in Mojo in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a craft (CVSS 8.8, Google Chrome)
- [CVE-2023-6348](https://cve.now/CVE-2023-6348.md): Type Confusion in Spellcheck in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to (no CVSS, Google Chrome)
- [CVE-2023-6070](https://cve.now/CVE-2023-6070.md): A server-side request forgery vulnerability in ESM prior to version 11.6.8 allows a low privileged authenticated user to upload arbitrary c (CVSS 4.3, Trellix Enterprise Security Manager)
- [CVE-2023-23324](https://cve.now/CVE-2023-23324.md): Zumtobel Netlink CCD Onboard 3.74 - Firmware 3.80 was discovered to contain hardcoded credentials for the Administrator account. (no CVSS)
- [CVE-2023-23325](https://cve.now/CVE-2023-23325.md): Zumtobel Netlink CCD Onboard 3.74 - Firmware 3.80 was discovered to contain a command injection vulnerability via the NetHostname parameter. (no CVSS)
- [CVE-2023-24294](https://cve.now/CVE-2023-24294.md): Zumtobel Netlink CCD Onboard v3.74 - Firmware v3.80 was discovered to contain a buffer overflow via the component NetlinkWeb::Information::S (no CVSS)
- [CVE-2023-45479](https://cve.now/CVE-2023-45479.md): Tenda AC10 version US\_AC10V4.0si\_V16.03.10.13\_cn was discovered to contain a stack overflow via the list parameter in the function sub\_49E09 (no CVSS)
- [CVE-2023-45480](https://cve.now/CVE-2023-45480.md): Tenda AC10 version US\_AC10V4.0si\_V16.03.10.13\_cn was discovered to contain a stack overflow via the src parameter in the function sub\_47D878 (no CVSS)
- [CVE-2023-45481](https://cve.now/CVE-2023-45481.md): Tenda AC10 version US\_AC10V4.0si\_V16.03.10.13\_cn was discovered to contain a stack overflow via the firewallEn parameter in the function Set (CVSS 9.8)
- [CVE-2023-45482](https://cve.now/CVE-2023-45482.md): Tenda AC10 version US\_AC10V4.0si\_V16.03.10.13\_cn was discovered to contain a stack overflow via the urls parameter in the function get\_paren (no CVSS)
- [CVE-2023-45483](https://cve.now/CVE-2023-45483.md): Tenda AC10 version US\_AC10V4.0si\_V16.03.10.13\_cn was discovered to contain a stack overflow via the time parameter in the function compare\_p (no CVSS)
- [CVE-2023-45484](https://cve.now/CVE-2023-45484.md): Tenda AC10 version US\_AC10V4.0si\_V16.03.10.13\_cn was discovered to contain a stack overflow via the shareSpeed parameter in the function fro (no CVSS)
- [CVE-2023-46886](https://cve.now/CVE-2023-46886.md): Dreamer CMS before version 4.0.1 is vulnerable to Directory Traversal. (CVSS 9.1)
- [CVE-2023-46887](https://cve.now/CVE-2023-46887.md): In Dreamer CMS before 4.0.1, the backend attachment management office has an Arbitrary File Download vulnerability. (no CVSS)
- [CVE-2023-47462](https://cve.now/CVE-2023-47462.md): Insecure Permissions vulnerability in GL.iNet AX1800 v.3.215 and before allows a remote attacker to execute arbitrary code via the file shar (no CVSS)
- [CVE-2023-48880](https://cve.now/CVE-2023-48880.md): A stored cross-site scripting (XSS) vulnerability in EyouCMS v1.6.4-UTF8-SP1 allows attackers to execute arbitrary web scripts or HTML via a (no CVSS)
- [CVE-2023-48881](https://cve.now/CVE-2023-48881.md): A stored cross-site scripting (XSS) vulnerability in EyouCMS v1.6.4-UTF8-SP1 allows attackers to execute arbitrary web scripts or HTML via a (no CVSS)
- [CVE-2023-48882](https://cve.now/CVE-2023-48882.md): A stored cross-site scripting (XSS) vulnerability in EyouCMS v1.6.4-UTF8-SP1 allows attackers to execute arbitrary web scripts or HTML via a (no CVSS)
- [CVE-2023-48945](https://cve.now/CVE-2023-48945.md): A stack overflow in openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. (CVSS 7.5)
- [CVE-2023-48946](https://cve.now/CVE-2023-48946.md): An issue in the box\_mpy function of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) after running a (no CVSS)
- [CVE-2023-48947](https://cve.now/CVE-2023-48947.md): An issue in the cha\_cmp function of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) after running a (no CVSS)
- [CVE-2023-48948](https://cve.now/CVE-2023-48948.md): An issue in the box\_div function in openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) after running a (no CVSS)
- [CVE-2023-48949](https://cve.now/CVE-2023-48949.md): An issue in the box\_add function in openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) after running a (no CVSS)
- [CVE-2023-48950](https://cve.now/CVE-2023-48950.md): An issue in the box\_col\_len function in openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) after runni (no CVSS)
- [CVE-2023-48951](https://cve.now/CVE-2023-48951.md): An issue in the box\_equal function in openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) after running (CVSS 8.8)
- [CVE-2023-48952](https://cve.now/CVE-2023-48952.md): An issue in the box\_deserialize\_reusing function in openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) (CVSS 7.5)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-11-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.