CVE-2023 records published in November 2023
Page three of three: records 2,001 to 2,324 of the 2,324 published in November 2023, newest first. The first page carries the figures for November 2023.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2023-46380 | Loytec Lvis-3me12-a1 cleartext transmission of sensitive information | 7.5v3.1 | 2.5% | 2023-11-04 | Fix |
| CVE-2023-40922 | Kerawen SQL injection | 9.8v3.1 | 0.5% | 2023-11-04 | Fix |
| CVE-2023-40215 | Demon image annotation WordPress plugin SQL injection | 7.2v3.1 | 0.7% | 2023-11-04 | Fix |
| CVE-2023-38391 | Onepage Builder Easiest Landing Page Builder For WordPress plugin SQL injection | 7.2v3.1 | 0.7% | 2023-11-04 | |
| CVE-2023-35910 | Quasar form WordPress plugin SQL injection | 8.8v3.1 | 0.7% | 2023-11-04 | |
| CVE-2023-32741 | Contact Form to Any API WordPress plugin SQL injection | 7.2v3.1 | 0.7% | 2023-11-04 | Fix |
| CVE-2023-47235 | FRRouting crash | 7.5v3.1 | 0.7% | 2023-11-03 | Fix |
| CVE-2023-47234 | FRRouting FRR BGP UPDATE message parsing denial of service | 7.5v3.1 | 0.9% | 2023-11-03 | Fix |
| CVE-2023-47233 | Linux kernel use-after-free | 4.3NVD v3.1 | 0.3% | 2023-11-03 | Fix |
| CVE-2023-46980 | Mayuri K Best Courier Management System code injection | 9.8v3.1 | 1.5% | 2023-11-03 | Exploit code |
| CVE-2023-46954 | Relativityone Relativity ODA LLC SQL injection | 9.8v3.1 | 1.1% | 2023-11-03 | Exploit code |
| CVE-2023-46947 | Subrion remote command execution | 8.8v3.1 | 1.3% | 2023-11-03 | |
| CVE-2023-46848 | Squid: Denial of service in ftp | 7.5NVD v3.1 | 10.2% | 2023-11-03 | Fix |
| CVE-2023-46847 | Squid: Denial of service in HTTP digest authentication | 7.5NVD v3.1 | 78.6% | 2023-11-03 | Fix |
| CVE-2023-46846 | Squid: Request/response smuggling in HTTP/1.1 and icap | 5.3NVD v3.1 | 6.6% | 2023-11-03 | Fix |
| CVE-2023-46817 | Phpfox deserialization of untrusted data | 9.8v3.1 | 1.8% | 2023-11-03 | |
| CVE-2023-46404 | Utoronto Pcrs code injection | 9.9v3.1 | 1.9% | 2023-11-03 | Exploit code |
| CVE-2023-46176 | IBM MQ privilege escalation | 6.7CNA v3.1 | 0.2% | 2023-11-03 | Fix |
| CVE-2023-45362 | mediawiki information disclosure | 4.3v3.1 | 0.6% | 2023-11-03 | Fix |
| CVE-2023-45360 | mediawiki cross-site scripting | 5.4v3.1 | 0.6% | 2023-11-03 | Fix |
| CVE-2023-45189 | IBM Robotic Process Automation information disclosure | 6.5CNA v3.1 | 0.5% | 2023-11-03 | Fix |
| CVE-2023-45024 | bestpractical Request Tracker information disclosure | 7.5v3.1 | 0.6% | 2023-11-03 | Fix |
| CVE-2023-44271 | Pillow denial of service | 7.5v3.1 | 1.1% | 2023-11-03 | Fix |
| CVE-2023-43982 | Bontheme Socialfeed - Photos & Video Using Instagram API server-side request forgery | 9.8v3.1 | 0.6% | 2023-11-03 | |
| CVE-2023-43665 | Django denial of service in Django.utils.text.Truncator | 7.5v3.1 | 1.2% | 2023-11-03 | Fix |
| CVE-2023-43018 | IBM CICS TX privilege escalation | 5.9CNA v3.1 | 0.4% | 2023-11-03 | Fix |
| CVE-2023-42670 | Samba: Ad dc busy RPC multiple listener DoS | 6.5NVD v3.1 | 1.1% | 2023-11-03 | Fix |
| CVE-2023-42029 | IBM CICS TX cross-site scripting | 4.8CNA v3.1 | 0.4% | 2023-11-03 | Fix |
| CVE-2023-42027 | IBM CICS TX cross-site request forgery | 4.3CNA v3.1 | 0.3% | 2023-11-03 | Fix |
| CVE-2023-41914 | SchedMD Slurm race condition | 7.0v3.1 | 0.2% | 2023-11-03 | Fix |
| CVE-2023-41726 | Ivanti Avalanche incorrect default permissions | 7.8v3.1 | 0.6% | 2023-11-03 | Fix |
| CVE-2023-41725 | Ivanti Avalanche unrestricted file upload | 7.8v3.1 | 0.7% | 2023-11-03 | Fix |
| CVE-2023-41652 | RSVPMaker WordPress plugin SQL command improper neutralization | 9.8v3.1 | 0.9% | 2023-11-03 | Exploit codeFix |
| CVE-2023-41357 | Galaxy Software Services Vitals ESP arbitrary file upload | 8.8v3.1 | 0.6% | 2023-11-03 | Fix |
| CVE-2023-41356 | WisdomGarden Tronclass ilearn path traversal | 6.5v3.1 | 0.9% | 2023-11-03 | Fix |
| CVE-2023-41355 | Chunghwa Telecom Nokia G-040w-q improper input validation | 9.8v3.1 | 0.6% | 2023-11-03 | Fix |
| CVE-2023-41354 | Chunghwa Telecom Nokia G-040w-q exposure of sensitive information | 5.3v3.1 | 0.4% | 2023-11-03 | Fix |
| CVE-2023-41353 | Chunghwa Telecom Nokia G-040w-q weak password requirements | 8.8v3.1 | 0.5% | 2023-11-03 | Fix |
| CVE-2023-41352 | Chunghwa Telecom Nokia G-040w-q command injection | 7.2v3.1 | 1.2% | 2023-11-03 | Fix |
| CVE-2023-41351 | Chunghwa Telecom Nokia G-040w-q broken access control | 9.8v3.1 | 0.8% | 2023-11-03 | Fix |
| CVE-2023-41350 | Chunghwa Telecom Nokia G-040w-q excessive authentication attempts | 9.8v3.1 | 0.8% | 2023-11-03 | Fix |
| CVE-2023-41348 | ASUS RT-AX55 command injection 4 | 8.8v3.1 | 1.3% | 2023-11-03 | Reported exploitedFix |
| CVE-2023-41347 | ASUS RT-AX55 command injection 3 | 8.8v3.1 | 1.3% | 2023-11-03 | Reported exploitedFix |
| CVE-2023-41346 | ASUS RT-AX55 command injection 2 | 8.8v3.1 | 1.2% | 2023-11-03 | Reported exploitedFix |
| CVE-2023-41345 | ASUS RT-AX55 command injection 1 | 8.8v3.1 | 1.3% | 2023-11-03 | Reported exploitedFix |
| CVE-2023-41344 | Ncsist ManageEngine MDM path traversal | 7.5v3.1 | 1.0% | 2023-11-03 | Fix |
| CVE-2023-41343 | Ragic No-Code Database Builder stored XSS | 5.4v3.1 | 0.3% | 2023-11-03 | Fix |
| CVE-2023-41260 | bestpractical Request Tracker information disclosure | 7.5v3.1 | 0.7% | 2023-11-03 | Fix |
| CVE-2023-41259 | bestpractical Request Tracker information disclosure | 7.5v3.1 | 0.7% | 2023-11-03 | Fix |
| CVE-2023-41164 | Django denial of service vulnerability in Django.utils.encoding.uri_to_iri | 7.5v3.1 | 1.3% | 2023-11-03 | Fix |
| CVE-2023-39301 | QNAP QTS server-side request forgery | 4.3CNA v3.1 | 0.3% | 2023-11-03 | Fix |
| CVE-2023-39299 | QNAP Music Station path traversal | 7.5CNA v3.1 | 0.6% | 2023-11-03 | Fix |
| CVE-2023-38965 | oretnom23 Lost and Found Information System insecure direct object reference | 9.8v3.1 | 1.3% | 2023-11-03 | |
| CVE-2023-36677 | SP Project and Document Manager WordPress plugin SQL injection | 8.8v3.1 | 0.7% | 2023-11-03 | Fix |
| CVE-2023-36621 | Nationaledtech Boomerang missing authorization | 9.1v3.1 | 1.1% | 2023-11-03 | |
| CVE-2023-36620 | Nationaledtech Boomerang improper access control | 4.6v3.1 | 0.5% | 2023-11-03 | |
| CVE-2023-36529 | Houzez CRM WordPress plugin SQL injection | 9.8v3.1 | 0.7% | 2023-11-03 | Fix |
| CVE-2023-36034 | Microsoft Edge (Chromium-based) remote code execution | 7.3CNA v3.1 | 2.7% | 2023-11-03 | Fix |
| CVE-2023-36029 | Microsoft Edge (Chromium-based) spoofing | 4.3CNA v3.1 | 1.0% | 2023-11-03 | Fix |
| CVE-2023-36022 | Microsoft Edge (Chromium-based) remote code execution | 6.6CNA v3.1 | 1.2% | 2023-11-03 | Fix |
| CVE-2023-35896 | IBM Content Navigator server-side request forgery | 5.4CNA v3.1 | 0.3% | 2023-11-03 | Fix |
| CVE-2023-34383 | WP Project Manager WordPress plugin SQL injection | 9.8v3.1 | 0.6% | 2023-11-03 | Fix |
| CVE-2023-34261 | KYOCERA D-copia253mf Plus information disclosure | 5.3v3.1 | 8.1% | 2023-11-03 | |
| CVE-2023-34260 | KYOCERA D-copia253mf Plus path traversal | 7.5v3.1 | 73.4% | 2023-11-03 | |
| CVE-2023-34259 | KYOCERA D-copia253mf Plus path traversal | 4.9v3.1 | 60.7% | 2023-11-03 | Nuclei |
| CVE-2023-34179 | Groundhogg WordPress plugin SQL injection | 7.2v3.1 | 0.7% | 2023-11-03 | Fix |
| CVE-2023-32508 | Order Your Posts Manually WordPress plugin SQL injection | 7.2NVD v3.1 | 0.7% | 2023-11-03 | |
| CVE-2023-32121 | Highfivery Zero Spam for WordPress SQL command improper neutralization | 7.2v3.1 | 0.7% | 2023-11-03 | Fix |
| CVE-2023-31102 | 7-Zip integer underflow | 7.8v3.1 | 55.2% | 2023-11-03 | Emerging ThreatsFix |
| CVE-2023-26015 | MapPress Maps for WordPress plugin SQL injection | 9.8v3.1 | 0.7% | 2023-11-03 | Fix |
| CVE-2023-25990 | Tutor LMS WordPress plugin SQL injection | 8.8v3.1 | 0.7% | 2023-11-03 | Fix |
| CVE-2023-25960 | Zendrop Global Dropshipping WordPress plugin SQL injection | 9.8v3.1 | 0.7% | 2023-11-03 | Fix |
| CVE-2023-25800 | Tutor LMS WordPress plugin SQL injection | 8.8v3.1 | 0.7% | 2023-11-03 | Fix |
| CVE-2023-25700 | Tutor LMS WordPress plugin SQL injection | 9.8v3.1 | 0.8% | 2023-11-03 | Fix |
| CVE-2023-23369 | QNAP QTS Multimedia Console and Media Streaming add-on OS command injection | 9.0CNA v3.1 | 14.5% | 2023-11-03 | Fix |
| CVE-2023-23368 | QNAP QTS, QuTS hero and QuTScloud OS command injection | 9.8CNA v3.1 | 18.8% | 2023-11-03 | Fix |
| CVE-2023-5948 | Improper authorization in teamamaze/amazefileutilities | 5.5NVD v3.1 | 0.3% | 2023-11-03 | Fix |
| CVE-2023-5946 | Digirisk WordPress plugin reflected cross-site scripting | 6.1v3.1 | 0.4% | 2023-11-03 | Fix |
| CVE-2023-5945 | video carousel slider with lightbox WordPress plugin cross-site request forgery | 5.4v3.1 | 0.3% | 2023-11-03 | Fix |
| CVE-2023-5824 | Squid: Dos against HTTP and HTTPS | 7.5NVD v3.1 | 3.0% | 2023-11-03 | Fix |
| CVE-2023-5763 | Glassfish remote code execution | 6.8CNA v3.1 | 0.7% | 2023-11-03 | Fix |
| CVE-2023-5707 | SEO Slider WordPress plugin authenticated (Contributor+) stored cross-site scripting via shortcode | 5.4v3.1 | 0.5% | 2023-11-03 | Fix |
| CVE-2023-5088 | Qemu: Improper ide controller reset can lead to mbr overwrite | 7.0NVD v3.1 | 0.2% | 2023-11-03 | Fix |
| CVE-2023-4769 | Server-side request forgery in ManageEngine Desktop Central | 8.8v3.1 | 3.3% | 2023-11-03 | Fix |
| CVE-2023-4768 | Improper neutralization of CRLF sequences in ManageEngine Desktop Central | 6.1v3.1 | 2.9% | 2023-11-03 | Fix |
| CVE-2023-4767 | Improper neutralization of CRLF sequences in ManageEngine Desktop Central | 6.1v3.1 | 2.9% | 2023-11-03 | Fix |
| CVE-2023-4592 | Improper neutralization of input during web page generation in Wpn-xm Serverstack | 6.1v3.1 | 0.4% | 2023-11-03 | |
| CVE-2023-4591 | Inclusion of functionality from untrusted control sphere in Wpn-xm Serverstack | 9.8v3.1 | 0.6% | 2023-11-03 | |
| CVE-2023-4091 | Samba: Smb clients can truncate files with read-only permissions | 6.5NVD v3.1 | 1.2% | 2023-11-03 | Fix |
| CVE-2023-4043 | Parsson DoS when parsing numbers from untrusted sources | 5.9CNA v3.1 | 0.8% | 2023-11-03 | Fix |
| CVE-2023-3961 | Samba: Smbd allows client access to unix domain sockets on the file system as root | 9.8NVD v3.1 | 2.4% | 2023-11-03 | Fix |
| CVE-2023-3893 | Kubernetes csi-proxy Insufficient input sanitization leads to privilege escalation | 8.8CNA v3.1 | 2.5% | 2023-11-03 | Fix |
| CVE-2023-3277 | MStore API WordPress plugin unauthorized account access and privilege escalation | 9.8v3.1 | 2.9% | 2023-11-03 | NucleiFix |
| CVE-2023-1476 | Linux kernel A use-after-free | 7.0CNA v3.1 | 0.2% | 2023-11-03 | Fix |
| CVE-2023-1194 | kernel use-after-free in parse_lease_state | 8.1NVD v3.1 | 1.1% | 2023-11-03 | Fix |
| CVE-2023-47204 | Transmute-core unsafe YAML deserialization | 9.8v3.1 | 0.8% | 2023-11-02 | Fix |
| CVE-2023-46958 | lmxcms code injection | 9.8v3.1 | 1.1% | 2023-11-02 | |
| CVE-2023-46925 | Reportico cross-site scripting | 4.8v3.1 | 0.4% | 2023-11-02 | Fix |
| CVE-2023-46725 | FoodCoopShop server-side request forgery | 8.1CNA v3.1 | 0.5% | 2023-11-02 | Fix |
| CVE-2023-46695 | Django potential denial of service vulnerability in UsernameField on Windows | 7.5v3.1 | 49.8% | 2023-11-02 | Fix |
| CVE-2023-46595 | Net-NTLM leak via HTML injection in FireFlow VisualFlow workflow editor | 5.9CNA v3.1 | 0.3% | 2023-11-02 | |
| CVE-2023-46475 | EasyCorp ZenTao cross-site scripting | 5.4v3.1 | 0.4% | 2023-11-02 | |
| CVE-2023-46352 | Smartmodules Facebookconversiontrackingplus missing authorization | 7.5v3.1 | 0.5% | 2023-11-02 | |
| CVE-2023-46327 | FUJIFILM Business Inovation Apeos C3070 Asia Pacific Model improper authentication | 5.9v3.1 | 0.4% | 2023-11-02 | Fix |
| CVE-2023-45347 | Online Food Ordering System multiple Unauthenticated SQL Injections (SQLi) | 9.8CNA v3.1 | 0.7% | 2023-11-02 | |
| CVE-2023-45346 | Online Food Ordering System multiple Unauthenticated SQL Injections (SQLi) | 9.8CNA v3.1 | 0.7% | 2023-11-02 | |
| CVE-2023-45345 | Online Food Ordering System multiple Unauthenticated SQL Injections (SQLi) | 9.8CNA v3.1 | 0.7% | 2023-11-02 | |
| CVE-2023-45344 | Online Food Ordering System multiple Unauthenticated SQL Injections (SQLi) | 9.8CNA v3.1 | 0.7% | 2023-11-02 | |
| CVE-2023-45343 | Online Food Ordering System multiple Unauthenticated SQL Injections (SQLi) | 9.8CNA v3.1 | 0.7% | 2023-11-02 | |
| CVE-2023-45342 | Online Food Ordering System multiple Unauthenticated SQL Injections (SQLi) | 9.8v3.1 | 0.7% | 2023-11-02 | |
| CVE-2023-45341 | Online Food Ordering System multiple Unauthenticated SQL Injections (SQLi) | 9.8CNA v3.1 | 0.7% | 2023-11-02 | |
| CVE-2023-45340 | Online Food Ordering System multiple Unauthenticated SQL Injections (SQLi) | 9.8CNA v3.1 | 0.7% | 2023-11-02 | |
| CVE-2023-45338 | Online Food Ordering System multiple Unauthenticated SQL Injections (SQLi) | 9.8CNA v3.1 | 0.7% | 2023-11-02 | |
| CVE-2023-45336 | Online Food Ordering System multiple Unauthenticated SQL Injections (SQLi) | 9.8CNA v3.1 | 0.7% | 2023-11-02 | |
| CVE-2023-45334 | Online Food Ordering System multiple Unauthenticated SQL Injections (SQLi) | 9.8CNA v3.1 | 0.7% | 2023-11-02 | |
| CVE-2023-45325 | Online Food Ordering System multiple Unauthenticated SQL Injections (SQLi) | 9.8CNA v3.1 | 0.7% | 2023-11-02 | |
| CVE-2023-45323 | Online Food Ordering System multiple Unauthenticated SQL Injections (SQLi) | 9.8CNA v3.1 | 0.7% | 2023-11-02 | |
| CVE-2023-45111 | Online Examination System multiple Unauthenticated SQL Injections (SQLi) | 9.8CNA v3.1 | 0.7% | 2023-11-02 | |
| CVE-2023-45019 | Online Bus Booking System multiple Unauthenticated SQL Injections (SQLi) | 9.8CNA v3.1 | 0.7% | 2023-11-02 | |
| CVE-2023-45018 | Online Bus Booking System multiple Unauthenticated SQL Injections (SQLi) | 9.8CNA v3.1 | 0.7% | 2023-11-02 | |
| CVE-2023-45015 | Online Bus Booking System multiple Unauthenticated SQL Injections (SQLi) | 9.8CNA v3.1 | 0.7% | 2023-11-02 | |
| CVE-2023-45012 | Online Bus Booking System multiple Unauthenticated SQL Injections (SQLi) | 9.8CNA v3.1 | 0.7% | 2023-11-02 | |
| CVE-2023-43336 | Sangoma FreePBX improper access control | 8.8v3.1 | 0.7% | 2023-11-02 | |
| CVE-2023-43194 | Rcos Submitty missing authorization | 5.3v3.1 | 0.5% | 2023-11-02 | |
| CVE-2023-43193 | Rcos Submitty cross-site scripting | 6.1v3.1 | 0.5% | 2023-11-02 | |
| CVE-2023-43087 | Dell PowerScale OneFS improper handling of insufficient permissions | 4.3CNA v3.1 | 0.4% | 2023-11-02 | Fix |
| CVE-2023-43076 | Dell PowerScale OneFS memory leak | 6.5CNA v3.1 | 0.6% | 2023-11-02 | Fix |
| CVE-2023-42802 | GLPI vulnerable to unallowed PHP script execution | 10.0CNA v3.1 | 1.1% | 2023-11-02 | Fix |
| CVE-2023-42299 | OpenImageIO buffer overflow | 9.8v3.1 | 1.3% | 2023-11-02 | Fix |
| CVE-2023-39284 | InsydeH2O IhisiServicesSmm SMI handler vulnerability | 5.5v3.1 | 0.2% | 2023-11-02 | Fix |
| CVE-2023-39283 | InsydeH2O SMM driver memory corruption | 7.8v3.1 | 0.2% | 2023-11-02 | Fix |
| CVE-2023-39057 | Lycorp Line Mini App hirochanKAKIwaiting v13.6.1 information disclosure | 7.5v3.1 | 0.6% | 2023-11-02 | |
| CVE-2023-39054 | Lycorp Line Mini App Tokudaya.ekimae_mc v13.6.1 information disclosure | 7.5v3.1 | 0.6% | 2023-11-02 | |
| CVE-2023-39053 | Lycorp Line Mini App Hattoriya v13.6.1 information disclosure | 7.5v3.1 | 0.6% | 2023-11-02 | |
| CVE-2023-39051 | Lycorp Line Mini App VISION MEAT WORKS Track Diner information disclosure | 7.5v3.1 | 0.6% | 2023-11-02 | |
| CVE-2023-39050 | Lycorp Line Mini App Daiky-value.Fukueten v13.6.1 information disclosure | 7.5v3.1 | 0.6% | 2023-11-02 | |
| CVE-2023-39048 | Lycorp Line Mini App Tokudaya.honten v13.6.1 information disclosure | 7.5v3.1 | 0.6% | 2023-11-02 | |
| CVE-2023-39047 | Lycorp Line Mini App shouzu sweets oz v13.6.1 information disclosure | 7.5v3.1 | 0.6% | 2023-11-02 | Fix |
| CVE-2023-39042 | Lycorp Line Mini App Gyouza-newhushimi v13.6.1 information disclosure | 7.5v3.1 | 0.6% | 2023-11-02 | |
| CVE-2023-38473 | avahi reachable assertion in avahi_alternative_host_name | 5.5NVD v3.1 | 0.3% | 2023-11-02 | Fix |
| CVE-2023-38472 | avahi reachable assertion in avahi_rdata_parse | 5.5NVD v3.1 | 0.3% | 2023-11-02 | Fix |
| CVE-2023-38471 | avahi reachable assertion in dbus_set_host_name | 5.5NVD v3.1 | 0.3% | 2023-11-02 | Fix |
| CVE-2023-38470 | avahi reachable assertion in avahi_escape_label | 5.5NVD v3.1 | 0.3% | 2023-11-02 | Fix |
| CVE-2023-38469 | avahi reachable assertion in avahi_dns_packet_append_record | 5.5NVD v3.1 | 0.3% | 2023-11-02 | Fix |
| CVE-2023-31579 | Dromara Lamp-Cloud use of hard-coded cryptographic key | 9.8v3.1 | 0.7% | 2023-11-02 | Fix |
| CVE-2023-31027 | NVIDIA GPU Display driver uncontrolled search path | 8.2CNA v3.1 | 0.2% | 2023-11-02 | Fix |
| CVE-2023-31026 | NVIDIA vGPU software Virtual GPU Manager null pointer dereference | 6.0CNA v3.1 | 0.2% | 2023-11-02 | Fix |
| CVE-2023-31023 | NVIDIA Display Driver untrusted pointer dereference | 5.5CNA v3.1 | 0.2% | 2023-11-02 | Fix |
| CVE-2023-31022 | NVIDIA GPU Display Driver kernel mode layer null pointer dereference | 5.5CNA v3.1 | 0.2% | 2023-11-02 | Fix |
| CVE-2023-31021 | NVIDIA vGPU software Virtual GPU Manager null pointer dereference | 5.5CNA v3.1 | 0.2% | 2023-11-02 | Fix |
| CVE-2023-31020 | NVIDIA GPU Display Driver kernel mode layer improper access control | 6.1CNA v3.1 | 0.1% | 2023-11-02 | Fix |
| CVE-2023-31019 | NVIDIA GPU Display Driver wksServicePlugin.dll named pipe server improper access control | 7.8CNA v3.1 | 0.2% | 2023-11-02 | Fix |
| CVE-2023-31018 | NVIDIA vGPU driver and Cloud gaming driver null pointer dereference | 6.5CNA v3.1 | 0.2% | 2023-11-02 | Fix |
| CVE-2023-31017 | NVIDIA GPU Display Driver reparse point handling vulnerability | 7.8CNA v3.1 | 0.2% | 2023-11-02 | Fix |
| CVE-2023-31016 | NVIDIA GPU Display Driver uncontrolled search path | 7.3CNA v3.1 | 0.2% | 2023-11-02 | Fix |
| CVE-2023-29047 | OX App Suite SQL injection | 5.3CNA v3.1 | 0.3% | 2023-11-02 | Fix |
| CVE-2023-29046 | OX App Suite resource exhaustion | 4.3CNA v3.1 | 0.5% | 2023-11-02 | Fix |
| CVE-2023-29045 | OX App Suite cross-site scripting | 5.4CNA v3.1 | 0.4% | 2023-11-02 | Fix |
| CVE-2023-29044 | OX App Suite cross-site scripting | 5.4CNA v3.1 | 0.4% | 2023-11-02 | Fix |
| CVE-2023-29043 | OX App Suite cross-site scripting | 6.1CNA v3.1 | 0.3% | 2023-11-02 | Fix |
| CVE-2023-26456 | OX App Suite cross-site scripting | 5.4CNA v3.1 | 0.4% | 2023-11-02 | Fix |
| CVE-2023-26455 | OX App Suite improper authentication | 5.6CNA v3.1 | 0.2% | 2023-11-02 | Fix |
| CVE-2023-26454 | OX App Suite SQL injection | 7.6CNA v3.1 | 0.4% | 2023-11-02 | Fix |
| CVE-2023-26453 | OX App Suite SQL injection | 7.6CNA v3.1 | 0.4% | 2023-11-02 | Fix |
| CVE-2023-26452 | OX App Suite SQL injection | 7.6CNA v3.1 | 0.4% | 2023-11-02 | Fix |
| CVE-2023-5930 | Campcodes Simple Student Information System manage_academic.php cross-site scripting | 6.1v3.1 | 0.5% | 2023-11-02 | |
| CVE-2023-5929 | Campcodes Simple Student Information System manage_academic.php SQL injection | 7.5v3.1 | 0.6% | 2023-11-02 | |
| CVE-2023-5928 | Campcodes Simple Student Information System manage_department.php SQL injection | 7.5v3.1 | 0.6% | 2023-11-02 | |
| CVE-2023-5927 | Campcodes Simple Student Information System manage_course.php SQL injection | 7.5v3.1 | 0.6% | 2023-11-02 | |
| CVE-2023-5926 | Campcodes Simple Student Information System update_status.php SQL injection | 7.5v3.1 | 0.6% | 2023-11-02 | |
| CVE-2023-5925 | Campcodes Simple Student Information System Master.php SQL injection | 7.5v3.1 | 0.6% | 2023-11-02 | |
| CVE-2023-5924 | Campcodes Simple Student Information System view_course.php SQL injection | 7.5v3.1 | 0.6% | 2023-11-02 | |
| CVE-2023-5923 | Campcodes Simple Student Information System index.php SQL injection | 7.5v3.1 | 0.5% | 2023-11-02 | |
| CVE-2023-5920 | Lack of Secure Keyboard Entry Protection in MacOS Desktop | 2.9CNA v3.1 | 0.2% | 2023-11-02 | |
| CVE-2023-5919 | SourceCodester Company Website CMS Create Blog page createblog unrestricted upload | 7.2v3.1 | 0.8% | 2023-11-02 | |
| CVE-2023-5918 | SourceCodester Visitor Management System manage_user.php SQL injection | 9.8v3.1 | 0.7% | 2023-11-02 | |
| CVE-2023-5917 | phpBB Smiley Pack acp_icons.php main cross-site scripting | 6.1v3.1 | 0.5% | 2023-11-02 | Fix |
| CVE-2023-5916 | Lissy93 Dashy Configuration save access control | 4.3v3.1 | 0.5% | 2023-11-02 | |
| CVE-2023-5910 | PopojiCMS Web Config install.php cross-site scripting | 6.1v3.1 | 0.4% | 2023-11-02 | |
| CVE-2023-5876 | Regex DoS from a malicious server enrolled in Desktop | 3.1CNA v3.1 | 0.5% | 2023-11-02 | |
| CVE-2023-5875 | Mattermost Desktop lack of Hardening against media exploitation from a remote origin | 3.7CNA v3.1 | 0.3% | 2023-11-02 | |
| CVE-2023-5860 | Icons Font Loader WordPress plugin authenticated (Administrator+) arbitrary file upload | 7.2v3.1 | 1.0% | 2023-11-02 | Fix |
| CVE-2023-5846 | Franklin Fueling Systems TS-550 weak password hash | 9.8v3.1 | 0.3% | 2023-11-02 | Fix |
| CVE-2023-5606 | AI ChatBot WordPress plugin cross-site scripting | 4.8v3.1 | 0.3% | 2023-11-02 | Fix |
| CVE-2023-5408 | Openshift: Modification of node role labels | 7.2CNA v3.1 | 1.1% | 2023-11-02 | Fix |
| CVE-2023-5035 | Moxa PT-G503 Series Cookie without Secure Flag | 3.1CNA v3.1 | 0.2% | 2023-11-02 | Fix |
| CVE-2023-4217 | Moxa PT-G503 Series session cookies attribute not set properly | 3.1CNA v3.1 | 0.3% | 2023-11-02 | Fix |
| CVE-2023-3164 | libtiff tiffcrop buffer overflow | 5.5NVD v3.1 | 0.3% | 2023-11-02 | Fix |
| CVE-2023-47099 | Virtualmin Create Virtual Server stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-11-01 | |
| CVE-2023-47098 | Virtualmin stored cross-site scripting | 4.8v3.1 | 0.5% | 2023-11-01 | |
| CVE-2023-47097 | Virtualmin Server template under System setting stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-11-01 | |
| CVE-2023-47096 | Virtualmin Cloudmin services client under System setting reflected cross-site scripting | 5.4v3.1 | 0.4% | 2023-11-01 | |
| CVE-2023-47095 | Virtualmin stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-11-01 | |
| CVE-2023-47094 | Virtualmin Account Plans tab of System settings stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-11-01 | |
| CVE-2023-46931 | gpac out-of-bounds write | 5.5v3.1 | 0.2% | 2023-11-01 | |
| CVE-2023-46930 | gpac out-of-bounds write | 5.5v3.1 | 0.2% | 2023-11-01 | |
| CVE-2023-46928 | gpac out-of-bounds write | 5.5v3.1 | 0.2% | 2023-11-01 | |
| CVE-2023-46927 | gpac out-of-bounds write | 5.5v3.1 | 0.2% | 2023-11-01 | |
| CVE-2023-46911 | Jspxcms choose_style_tree.do interface cross-site scripting | 6.1v3.1 | 0.4% | 2023-11-01 | |
| CVE-2023-46724 | squid-cache squid SQUID-2023:4 denial of service in SSL Certificate validation | 8.6CNA v3.1 | 4.0% | 2023-11-01 | Fix |
| CVE-2023-46482 | WuzhiCMS SQL injection | 9.8v3.1 | 1.2% | 2023-11-01 | |
| CVE-2023-46448 | Dmpop Mejiro reflected cross-site scripting | 6.1v3.1 | 0.4% | 2023-11-01 | |
| CVE-2023-46428 | HadSky An arbitrary file upload | 8.8v3.1 | 1.0% | 2023-11-01 | |
| CVE-2023-46278 | Cybozu Remote Service resource exhaustion | 6.5v3.1 | 0.6% | 2023-11-01 | Fix |
| CVE-2023-45203 | Online Examination System multiple Open Redirects | 6.1CNA v3.1 | 0.4% | 2023-11-01 | |
| CVE-2023-45202 | Online Examination System multiple Open Redirects | 6.1CNA v3.1 | 0.4% | 2023-11-01 | |
| CVE-2023-45201 | Online Examination System multiple Open Redirects | 6.1CNA v3.1 | 0.4% | 2023-11-01 | |
| CVE-2023-44954 | Bigtree Cms cross-site scripting | 5.4v3.1 | 0.6% | 2023-11-01 | |
| CVE-2023-44025 | Addify Free Gifts SQL injection | 9.8v3.1 | 0.8% | 2023-11-01 | |
| CVE-2023-42750 | UNISOC chipsets gnss service out-of-bounds write | 4.4v3.1 | 0.1% | 2023-11-01 | Fix |
| CVE-2023-42655 | UNISOC chipsets sim service privilege escalation | 6.7v3.1 | 0.1% | 2023-11-01 | Fix |
| CVE-2023-42654 | UNISOC chipsets dm service missing authorization | 5.5v3.1 | 0.1% | 2023-11-01 | Fix |
| CVE-2023-42653 | UNISOC chipsets faceid service out-of-bounds write | 5.5v3.1 | 0.1% | 2023-11-01 | Fix |
| CVE-2023-42652 | UNISOC chipsets engineermode missing authorization | 5.5v3.1 | 0.1% | 2023-11-01 | Fix |
| CVE-2023-42651 | UNISOC chipsets engineermode missing authorization | 5.5v3.1 | 0.1% | 2023-11-01 | Fix |
| CVE-2023-42650 | UNISOC chipsets engineermode missing authorization | 5.5v3.1 | 0.1% | 2023-11-01 | Fix |
| CVE-2023-42649 | UNISOC chipsets engineermode missing authorization | 5.5v3.1 | 0.1% | 2023-11-01 | Fix |
| CVE-2023-42648 | UNISOC chipsets engineermode missing authorization | 5.5v3.1 | 0.1% | 2023-11-01 | Fix |
| CVE-2023-42647 | UNISOC chipsets Ifaa service information disclosure | 5.5v3.1 | 0.1% | 2023-11-01 | Fix |
| CVE-2023-42646 | UNISOC chipsets Ifaa service missing authorization | 5.5v3.1 | 0.1% | 2023-11-01 | Fix |
| CVE-2023-42645 | UNISOC chipsets sim service information disclosure | 5.5v3.1 | 0.1% | 2023-11-01 | Fix |
| CVE-2023-42644 | UNISOC chipsets dm service missing authorization | 5.5v3.1 | 0.1% | 2023-11-01 | Fix |
| CVE-2023-42643 | UNISOC chipsets validationtools missing authorization | 5.5v3.1 | 0.1% | 2023-11-01 | Fix |
| CVE-2023-42642 | UNISOC chipsets validationtools missing authorization | 5.5v3.1 | 0.1% | 2023-11-01 | Fix |
| CVE-2023-42641 | UNISOC chipsets validationtools missing authorization | 5.5v3.1 | 0.1% | 2023-11-01 | Fix |
| CVE-2023-42640 | UNISOC chipsets validationtools missing authorization | 5.5v3.1 | 0.1% | 2023-11-01 | Fix |
| CVE-2023-42639 | UNISOC chipsets validationtools missing authorization | 5.5v3.1 | 0.1% | 2023-11-01 | Fix |
| CVE-2023-42638 | UNISOC chipsets validationtools missing authorization | 5.5v3.1 | 0.1% | 2023-11-01 | Fix |
| CVE-2023-42637 | UNISOC chipsets validationtools missing authorization | 5.5v3.1 | 0.1% | 2023-11-01 | Fix |
| CVE-2023-42636 | UNISOC chipsets validationtools missing authorization | 5.5v3.1 | 0.1% | 2023-11-01 | Fix |
| CVE-2023-42635 | UNISOC chipsets validationtools missing authorization | 5.5v3.1 | 0.1% | 2023-11-01 | Fix |
| CVE-2023-42634 | UNISOC chipsets validationtools missing authorization | 5.5v3.1 | 0.1% | 2023-11-01 | Fix |
| CVE-2023-42633 | UNISOC chipsets validationtools missing authorization | 5.5v3.1 | 0.1% | 2023-11-01 | Fix |
| CVE-2023-42632 | UNISOC chipsets validationtools missing authorization | 5.5v3.1 | 0.1% | 2023-11-01 | Fix |
| CVE-2023-42631 | UNISOC chipsets validationtools missing authorization | 5.5v3.1 | 0.1% | 2023-11-01 | Fix |
| CVE-2023-40062 | SolarWinds Platform incomplete list of disallowed inputs remote code execution | 8.0CNA v3.1 | 2.7% | 2023-11-01 | Fix |
| CVE-2023-40061 | SolarWinds Platform Insecure Job Execution Mechanism vulnerability | 8.8CNA v3.1 | 0.4% | 2023-11-01 | Fix |
| CVE-2023-39281 | InsydeH2O stack-based buffer overflow | 9.8v3.1 | 0.5% | 2023-11-01 | Fix |
| CVE-2023-33228 | SolarWinds Network Configuration Manager sensitive information disclosure | 4.5CNA v3.1 | 0.4% | 2023-11-01 | Fix |
| CVE-2023-33227 | SolarWinds Network Configuration Manager directory traversal remote code execution | 8.0CNA v3.1 | 1.8% | 2023-11-01 | Fix |
| CVE-2023-33226 | SolarWinds Network Configuration Manager directory traversal remote code execution | 8.0CNA v3.1 | 1.8% | 2023-11-01 | Fix |
| CVE-2023-20270 | Cisco Firepower Threat Defense Software denial of service | 5.8CNA v3.1 | 0.7% | 2023-11-01 | Fix |
| CVE-2023-20267 | Cisco Firepower Threat Defense Software spoofing | 4.0CNA v3.1 | 0.4% | 2023-11-01 | Fix |
| CVE-2023-20264 | Cisco Adaptive Security Appliance (ASA) Software open redirect | 6.1CNA v3.1 | 0.4% | 2023-11-01 | Fix |
| CVE-2023-20256 | Cisco Adaptive Security Appliance (ASA) Software authentication bypass by spoofing | 5.0CNA v3.1 | 0.6% | 2023-11-01 | Fix |
| CVE-2023-20255 | Cisco Meeting Server denial of service | 5.3CNA v3.1 | 0.8% | 2023-11-01 | Fix |
| CVE-2023-20247 | Cisco Adaptive Security Appliance (ASA) Software authentication bypass | 5.0CNA v3.1 | 0.3% | 2023-11-01 | Fix |
| CVE-2023-20246 | Cisco Firepower Threat Defense Software authentication bypass by spoofing | 5.8CNA v3.1 | 0.6% | 2023-11-01 | Fix |
| CVE-2023-20245 | Cisco Adaptive Security Appliance (ASA) Software authentication bypass by spoofing | 5.8CNA v3.1 | 0.5% | 2023-11-01 | Fix |
| CVE-2023-20244 | Cisco Firepower Threat Defense Software missing resource release | 8.6CNA v3.1 | 0.8% | 2023-11-01 | Fix |
| CVE-2023-20220 | Cisco Firepower Management Center path traversal | 7.2CNA v3.1 | 1.1% | 2023-11-01 | Fix |
| CVE-2023-20219 | Cisco Firepower Management Center OS command injection | 7.2CNA v3.1 | 0.9% | 2023-11-01 | Fix |
| CVE-2023-20213 | Cisco Identity Services Engine Software out-of-bounds write | 4.3CNA v3.1 | 0.3% | 2023-11-01 | Fix |
| CVE-2023-20206 | Cisco Firepower Management Center cross-site scripting | 6.1CNA v3.1 | 0.4% | 2023-11-01 | Fix |
| CVE-2023-20196 | Cisco Identity Services Engine Software unrestricted file upload | 4.7CNA v3.1 | 0.6% | 2023-11-01 | Fix |
| CVE-2023-20195 | Cisco Identity Services Engine Software unrestricted file upload | 4.7CNA v3.1 | 0.6% | 2023-11-01 | Fix |
| CVE-2023-20177 | Cisco Firepower Threat Defense Software logic flaw | 4.0CNA v3.1 | 0.5% | 2023-11-01 | Fix |
| CVE-2023-20175 | Cisco Identity Services Engine Software OS command injection | 8.8CNA v3.1 | 0.5% | 2023-11-01 | Fix |
| CVE-2023-20170 | Cisco Identity Services Engine Software command injection | 6.0CNA v3.1 | 0.5% | 2023-11-01 | Fix |
| CVE-2023-20155 | Cisco Firepower Management Center resource exhaustion | 7.5CNA v3.1 | 0.7% | 2023-11-01 | Fix |
| CVE-2023-20114 | Cisco Firepower Management Center external control of a file path | 6.5CNA v3.1 | 0.5% | 2023-11-01 | Fix |
| CVE-2023-20095 | Cisco Adaptive Security Appliance (ASA) Software missing resource release | 8.6CNA v3.1 | 0.6% | 2023-11-01 | Fix |
| CVE-2023-20086 | Cisco Adaptive Security Appliance (ASA) Software uncaught exception | 8.6CNA v3.1 | 0.7% | 2023-11-01 | Fix |
| CVE-2023-20083 | Cisco Firepower Threat Defense Software infinite loop | 8.6CNA v3.1 | 0.7% | 2023-11-01 | Fix |
| CVE-2023-20074 | Cisco Firepower Management Center cross-site scripting | 4.8CNA v3.1 | 0.4% | 2023-11-01 | Fix |
| CVE-2023-20071 | Snort FTP inspection module security feature bypass | 5.8CNA v3.1 | 0.5% | 2023-11-01 | Fix |
| CVE-2023-20070 | Cisco Firepower Threat Defense Software logic flaw | 4.0CNA v3.1 | 0.5% | 2023-11-01 | Fix |
| CVE-2023-20063 | Cisco Cisco Firepower Threat Defense Software and Cisco Firepower Management Center code injection | 8.2CNA v3.1 | 0.4% | 2023-11-01 | Fix |
| CVE-2023-20048 | Cisco Firepower Management Center improper privilege management | 9.9CNA v3.1 | 15.8% | 2023-11-01 | Exploit codeFix |
| CVE-2023-20042 | Cisco Adaptive Security Appliance (ASA) Software improper resource release | 6.8CNA v3.1 | 0.7% | 2023-11-01 | Fix |
| CVE-2023-20041 | Cisco Firepower Management Center cross-site scripting | 4.8CNA v3.1 | 0.4% | 2023-11-01 | Fix |
| CVE-2023-20031 | Cisco Firepower Threat Defense Software logic flaw | 4.0CNA v3.1 | 0.3% | 2023-11-01 | Fix |
| CVE-2023-20005 | Cisco Firepower Management Center cross-site scripting | 4.8CNA v3.1 | 0.4% | 2023-11-01 | Fix |
| CVE-2023-5899 | Cross-site request forgery (CSRF) in pkp/pkp-lib | 8.8v3.1 | 0.3% | 2023-11-01 | Fix |
| CVE-2023-5898 | Cross-site request forgery (CSRF) in pkp/pkp-lib | 8.8v3.1 | 0.3% | 2023-11-01 | Fix |
| CVE-2023-5897 | Cross-site request forgery (CSRF) in pkp/customLocale | 8.8v3.1 | 0.2% | 2023-11-01 | Fix |
| CVE-2023-5896 | Cross-site scripting (XSS) Stored in pkp/pkp-lib | 5.4v3.1 | 0.3% | 2023-11-01 | Fix |
| CVE-2023-5895 | Cross-site scripting (XSS) DOM in pkp/pkp-lib | 5.4v3.1 | 0.4% | 2023-11-01 | Fix |
| CVE-2023-5894 | Cross-site scripting (XSS) Stored in pkp/ojs | 5.4v3.1 | 0.4% | 2023-11-01 | Fix |
| CVE-2023-5893 | Cross-site request forgery (CSRF) in pkp/pkp-lib | 8.8v3.1 | 0.3% | 2023-11-01 | Fix |
| CVE-2023-5892 | Cross-site scripting (XSS) Stored in pkp/pkp-lib | 5.4v3.1 | 0.4% | 2023-11-01 | Fix |
| CVE-2023-5891 | Cross-site scripting (XSS) Reflected in pkp/pkp-lib | 5.4v3.1 | 0.4% | 2023-11-01 | Fix |
| CVE-2023-5890 | Cross-site scripting (XSS) Stored in pkp/pkp-lib | 5.4v3.1 | 0.4% | 2023-11-01 | Fix |
| CVE-2023-5889 | Insufficient session expiration in pkp/pkp-lib | 8.2v3.1 | 0.4% | 2023-11-01 | Fix |
| CVE-2023-5859 | Google Chrome Picture In Picture incorrect security UI | 4.3v3.1 | 0.6% | 2023-11-01 | Fix |
| CVE-2023-5858 | Google Chrome WebApp Provider inappropriate implementation | 4.3v3.1 | 0.7% | 2023-11-01 | Fix |
| CVE-2023-5857 | Google Chrome Downloads inappropriate implementation | 8.8v3.1 | 1.3% | 2023-11-01 | Fix |
| CVE-2023-5856 | Google Chrome Side Panel use-after-free | 8.8v3.1 | 1.2% | 2023-11-01 | Fix |
| CVE-2023-5855 | Google Chrome Reading Mode use-after-free | 8.8v3.1 | 1.0% | 2023-11-01 | Fix |
| CVE-2023-5854 | Google Chrome Profiles use-after-free | 8.8v3.1 | 1.1% | 2023-11-01 | Fix |
| CVE-2023-5853 | Google Chrome Downloads incorrect security UI | 4.3v3.1 | 0.7% | 2023-11-01 | Fix |
| CVE-2023-5852 | Google Chrome Printing use-after-free | 8.8v3.1 | 1.0% | 2023-11-01 | Fix |
| CVE-2023-5851 | Google Chrome Downloads inappropriate implementation | 4.3v3.1 | 0.9% | 2023-11-01 | Fix |
| CVE-2023-5850 | Google Chrome Downloads incorrect security UI | 4.3v3.1 | 0.9% | 2023-11-01 | Fix |
| CVE-2023-5849 | Google Chrome USB integer overflow | 8.8v3.1 | 1.3% | 2023-11-01 | Fix |
| CVE-2023-5847 | Tenable Nessus improper privilege management | 6.7CNA v3.1 | 0.2% | 2023-11-01 | Fix |
| CVE-2023-5766 | Devolutions Remote Desktop Manager remote code execution | 9.8v3.1 | 0.6% | 2023-11-01 | Fix |
| CVE-2023-5765 | Devolutions Remote Desktop Manager password analyzer feature improper access control | 9.8v3.1 | 0.6% | 2023-11-01 | Fix |
| CVE-2023-5627 | Moxa NPort 6000 Series incorrect implementation of authentication algorithm | 7.5CNA v3.1 | 0.3% | 2023-11-01 | Fix |
| CVE-2023-5625 | Red Hat python-eventlet resource exhaustion | 5.3CNA v3.1 | 0.8% | 2023-11-01 | Fix |
| CVE-2023-5516 | Hitachi Energy eSOMS information disclosure | 5.3CNA v3.1 | 0.4% | 2023-11-01 | |
| CVE-2023-5515 | Hitachi Energy eSOMS information disclosure | 5.3CNA v3.1 | 0.4% | 2023-11-01 | |
| CVE-2023-5514 | Hitachi Energy eSOMS information disclosure through error messages | 5.3CNA v3.1 | 0.4% | 2023-11-01 | |
| CVE-2023-5482 | Google Chrome USB improper input validation | 8.8v3.1 | 7.1% | 2023-11-01 | Fix |
| CVE-2023-5480 | Google Chrome Payments inappropriate implementation | 6.1v3.1 | 1.1% | 2023-11-01 | Fix |
| CVE-2023-5358 | Devolutions Server Report log filters feature improper access control | 5.3v3.1 | 0.5% | 2023-11-01 | Fix |
| CVE-2023-5178 | Linux kernel NVMe/TCP target driver use-after-free | 8.8NVD v3.1 | 9.6% | 2023-11-01 | Exploit codeFix |
| CVE-2023-4452 | Moxa EDR-G903 Series web server buffer overflow | 6.5CNA v3.1 | 0.4% | 2023-11-01 | Fix |
| CVE-2023-4198 | Dolibarr ERP CRM improper access control | 6.5v3.1 | 0.6% | 2023-11-01 | Fix |
| CVE-2023-4197 | Dolibarr ERP CRM Improper Input Sanitization Authenticated RCE | 8.8v3.1 | 35.9% | 2023-11-01 | Exploit codeFix |
| CVE-2023-3972 | Insights-client: Unsafe handling of temporary files and directories | 7.8CNA v3.1 | 0.3% | 2023-11-01 | Fix |
| CVE-2023-3397 | Kernel: Slab-use-after-free write in txend due to race condition | 6.3NVD v3.1 | 0.2% | 2023-11-01 | Fix |
| CVE-2023-2622 | Hitachi Energy MACH System Software arbitrary file read | 2.7CNA v3.1 | 0.4% | 2023-11-01 | |
| CVE-2023-2621 | Hitachi Energy MACH System Software path traversal | 6.5CNA v3.1 | 0.5% | 2023-11-01 | Fix |
| CVE-2023-1720 | Bitrix24 stored cross-site scripting (XSS) via file upload | 8.0NVD v3.1 | 0.9% | 2023-11-01 | |
| CVE-2023-1719 | Bitrix24 Insecure Global Variable Extraction | 9.8v3.1 | 5.0% | 2023-11-01 | Nuclei |
| CVE-2023-1718 | Bitrix24 denial of service (DoS) via Improper File Stream Access | 7.5v3.1 | 24.1% | 2023-11-01 | Exploit code |
| CVE-2023-1717 | Bitrix24 cross-site scripting (XSS) via client-side prototype pollution | 9.6v3.1 | 1.1% | 2023-11-01 | |
| CVE-2023-1716 | Bitrix24 stored cross-site scripting | 9.6v3.1 | 0.7% | 2023-11-01 | |
| CVE-2023-1715 | Bitrix24 stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2023-11-01 | |
| CVE-2023-1714 | Bitrix24 remote command execution (RCE) via Unsafe Variable Extraction | 8.8v3.1 | 1.4% | 2023-11-01 | |
| CVE-2023-1713 | Bitrix24 remote command execution (RCE) via insecure temporary file Creation | 8.8v3.1 | 1.2% | 2023-11-01 | |
| CVE-2023-1193 | kernel use-after-free in setup_async_work | 6.5NVD v3.1 | 1.0% | 2023-11-01 | Fix |
| CVE-2023-1192 | kernel use-after-free in smb2_is_status_io_timeout | 6.5NVD v3.1 | 1.1% | 2023-11-01 | Fix |