CVEs published in November 2023
2,587 vulnerabilities, 293 critical, 11 exploited.
- projectworlds online food ordering systemOnline Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)9.8 Critical
- glpi-project glpiGLPI vulnerable to unallowed PHP script execution10.0 Critical
- company website cms project website cms, sourcecodester company website cms +1 moreSourceCodester Company Website CMS Create Blog Page createblog unrestricted upload4.7 Medium
- projectworlds online food ordering systemOnline Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)9.8 Critical
- projectworlds online food ordering systemOnline Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)9.8 Critical
- projectworlds online food ordering systemOnline Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)9.8 Critical
- projectworlds online food ordering systemOnline Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)9.8 Critical
- open-xchange appsuite, open-xchange gmbh ox app suite, ox software gmbh app suite +2 moreImageconverter API endpoints provided methods that were not sufficiently validating and...5.3 Medium
- open-xchange appsuite, open-xchange gmbh ox app suite, ox software gmbh app suite +2 moreConnections to external data sources, like e-mail autoconfiguration, were not terminated in case...4.3 Medium
- open-xchange appsuite, open-xchange gmbh ox app suite, ox software gmbh app suite +2 moreDocuments operations, in this case "drawing", could be manipulated to contain invalid data types,...5.4 Medium
- open-xchange appsuite, open-xchange gmbh ox app suite, ox software gmbh app suite +2 moreDocuments operations could be manipulated to contain invalid data types, possibly script code....5.4 Medium
- open-xchange appsuite, open-xchange gmbh ox app suite, ox software gmbh app suite +2 morePresentations may contain references to images, which are user-controlled, and could include...6.1 Medium
- open-xchange ox guard, open-xchange gmbh ox app suite, ox software gmbh app suite +2 moreUsers were able to set an arbitrary "product name" for OX Guard. The chosen value was not...5.4 Medium
- open-xchange appsuite, open-xchange gmbh ox app suite, ox software gmbh app suite +2 moreRMI was not requiring authentication when calling ChronosRMIService:setEventOrganizer. Attackers...5.6 Medium
- open-xchange appsuite, open-xchange gmbh ox app suite, ox software gmbh app suite +2 moreRequests to fetch image metadata could be abused to include SQL queries that would be executed...7.6 High
- open-xchange appsuite, open-xchange gmbh ox app suite, ox software gmbh app suite +2 moreRequests to cache an image could be abused to include SQL queries that would be executed...7.6 High
- open-xchange appsuite, open-xchange gmbh ox app suite, ox software gmbh app suite +2 moreRequests to cache an image and return its metadata could be abused to include SQL queries that...7.6 High
libredwgOSS-FuzzHeap-buffer-overflow in decode_preR13_entitiesNo score- libtiff, fedora, red hat enterprise linux 6 +4 more +6 moreHeap-buffer-overflow in extractimagesection()5.5 Medium
- bplugins icons font loader, icons font loader – load web fonts and icon libraries +1 moreIcons Font Loader <= 1.1.2 - Authenticated (Administrator+) Arbitrary File Upload7.2 High
- projectworlds visitor management system, visitor management system project management system +1 moreSourceCodester Visitor Management System manage_user.php sql injection6.3 Medium
- dell powerscale onefsDell PowerScale OneFS 8.2.x,9.0.0.x-9.5.0.x contains a denial-of-service vulnerability. A low...6.5 Medium
- phpbbphpBB Smiley Pack acp_icons.php main cross site scripting2.4 Low
- dashyLissy93 Dashy Configuration save access control4.3 Medium
- dell powerscale onefsDell PowerScale OneFS 8.2.x, 9.0.0.x-9.5.0.x contains an improper handling of insufficient...4.3 Medium
- mattermost desktopLack Of Secure Keyboard Entry Protection in MacOS Desktop2.9 Low
- quantumcloud ai chatbot, wpbot +1 moreThe ChatBot for WordPress is vulnerable to Stored Cross-Site Scripting via the FAQ Builder in...4.4 Medium
- mattermost desktopLack of Hardening against media exploitation from a remote origin3.7 Low
- mattermost desktopRegex DoS from a malicious server enrolled in Desktop3.1 Low
- algosec fireflowNet-NTLM leak via HTML injection in FireFlow VisualFlow workflow editor5.9 Medium
- red hat openshift container platform 4.11, openshift container platform 4.12, openshift container platform 4.13 +2 more +4 moreOpenshift: modification of node role labels7.2 High
- fujifilm apeos 2560 firmware, apeos 2560 gk firmware, apeos 3060 firmware +249 more +251 moreMultiple MFPs (multifunction printers) provided by FUJIFILM Business Innovation Corp. and Xerox...5.9 Medium
- online bus booking system project bus booking system, projectworlds pvt. limited online bus booking system +1 moreOnline Bus Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)9.8 Critical
- online bus booking system project bus booking system, projectworlds pvt. limited online bus booking system +1 moreOnline Bus Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)9.8 Critical
- online bus booking system project bus booking system, projectworlds pvt. limited online bus booking system +1 moreOnline Bus Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)9.8 Critical
- online bus booking system project bus booking system, projectworlds pvt. limited online bus booking system +1 moreOnline Bus Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)9.8 Critical
- code-projects online examination system, online examination system project examination system +1 moreOnline Examination System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)9.8 Critical
- google chromeInappropriate implementation in V8 in Google Chrome prior to 119.0.6045.105 allowed a remote...8.8 High
- google chromeInappropriate implementation in Compositing in Google Chrome prior to 119.0.6045.105 allowed a...4.3 Medium
- google chromeInappropriate implementation in Compositing in Google Chrome prior to 119.0.6045.105 allowed a...4.7 Medium
- google chromeInappropriate implementation in Picture in Picture in Google Chrome prior to 119.0.6045.105...6.5 Medium
- videolan vlc media playerVideolan VLC prior to version 3.0.20 contains an Integer underflow that leads to an incorrect...7.5 High
- videolan vlc media playerVideolan VLC prior to version 3.0.20 contains an incorrect offset read that leads to a Heap-Based...9.8 Critical
- toumorokoshi transmute-coretransmute-core unsafe YAML deserialization vulnerability9.8 Critical
- lmxcmsAn issue in lmxcms v.1.41 allows a remote attacker to execute arbitrary code via a crafted script...9.8 Critical
- reporticoReportico Cross-site Scripting vulnerability4.8 Medium
- squid-cache squid, red hat enterprise linux 6, enterprise linux 7 +7 more +9 moreSquid: denial of service in ftp8.6 High
- squid-cache squid, red hat enterprise linux 6 extended lifecycle support, enterprise linux 7 +22 more +24 moreSquid: denial of service in http digest authentication8.6 High
- squid-cache squid, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +18 more +20 moreSquid: request/response smuggling in http/1.1 and icap9.3 Critical
- djangoproject djangoDjango potential denial of service vulnerability in UsernameField on Windows7.5 High
- Show moreLoading…