Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: November 2023

169 records · 11 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 2 of 2

  • CVE-2023-6038
    31Monitor

    Local File Inclusion in h2oai/h2o-3

    HighCVSS 7.5Proof of conceptEPSS 4%

    h2o · h2oNov 16, 2023

  • CVE-2023-46214
    62This week

    Remote code execution (RCE) in Splunk Enterprise through Insecure XML Parsing

    HighCVSS 8.8WeaponizedEPSS 89%

    splunk · cloudNov 16, 2023

  • CVE-2023-6020
    60This week

    Ray Static File Local File Include

    HighCVSS 7.5WeaponizedEPSS 14%

    ray project · rayNov 16, 2023

  • CVE-2023-26347
    33Monitor

    CVE-2023-38205 issues | ColdFusion Admin Panel Access

    HighCVSS 7.5Proof of conceptEPSS 10%

    adobe · coldfusionNov 17, 2023

  • CVE-2023-44350
    58Plan

    ColdFusion | Deserialization of Untrusted Data (CWE-502)

    CriticalCVSS 9.8No exploitEPSS 64%

    adobe · coldfusionNov 17, 2023

  • CVE-2023-44351
    54Plan

    Adobe ColdFusion RCE Security Vulnerability

    CriticalCVSS 9.8No exploitEPSS 50%

    adobe · coldfusionNov 17, 2023

  • CVE-2023-44352
    49Plan

    Unauthenticate Reflected XSS on Adobe Coldfusion 2018 - 2021 - 2023 last version

    MediumCVSS 6.1Proof of conceptEPSS 84%

    adobe · coldfusionNov 17, 2023

  • CVE-2023-44353
    63This week

    ColdFusion WDDX Deserialization Gadgets

    CriticalCVSS 9.8Proof of conceptEPSS 80%

    adobe · coldfusionNov 17, 2023

  • CVE-2023-44355
    31Monitor

    ColdFusion | Improper Input Validation (CWE-20)

    MediumCVSS 4.3No exploitEPSS 47%

    adobe · coldfusionNov 17, 2023

  • CVE-2023-43177
    64This week

    CrushFTP prior to 10.5.1 is vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes.

    CriticalCVSS 9.8WeaponizedEPSS 81%

    crushftp · crushftpNov 17, 2023

  • CVE-2023-6187
    50Plan

    Paid Memberships Pro <= 2.12.3 - Authenticated (Subscriber+) Arbitrary File Upload

    HighCVSS 8.8No exploitEPSS 51%

    strangerstudios · paid memberships proNov 17, 2023

  • CVE-2023-48223
    23Monitor

    fast-jwt JWT Algorithm Confusion

    MediumCVSS 5.9Proof of conceptEPSS 0%

    nearform · fast-jwtNov 20, 2023

  • CVE-2023-48241
    52Plan

    XWiki exposed whole content of all documents of all wikis to anybody with view right on Solr suggest service

    HighCVSS 7.5Proof of conceptEPSS 72%

    xwiki · xwikiNov 20, 2023

  • CVE-2023-48292
    42Plan

    XWiki Admin Tools Application Run Shell Command allows CSRF RCE attacks

    HighCVSS 8.8Proof of conceptEPSS 22%

    xwiki · admin toolsNov 20, 2023

  • CVE-2023-38879
    31Monitor

    The Community Edition version 9.0 of OS4ED's openSIS Classic allows remote attackers to read arbitrary files via a directory traversal vulne

    HighCVSS 7.5Proof of conceptEPSS 3%

    os4ed · opensisNov 20, 2023

  • CVE-2023-5652
    58Plan

    WP Hotel Booking < 2.0.8 - Unauthenticated SQLi

    CriticalCVSS 9.8Proof of conceptEPSS 63%

    thimpress · wp hotel bookingNov 20, 2023

  • CVE-2023-6199
    26Monitor

    Book Stack v23.10.2 - LFR via Blind SSRF

    MediumCVSS 6.5Proof of conceptEPSS 1%

    bookstackapp · bookstackNov 20, 2023

  • CVE-2023-47643
    22Monitor

    SuiteCRM has Unauthenticated Graphql Introspection Enabled

    MediumCVSS 5.3Proof of conceptEPSS 3%

    salesagility · suitecrmNov 21, 2023

  • CVE-2023-49103
    84Now

    An issue was discovered in ownCloud owncloud/graphapi 0.2.x before 0.2.1 and 0.3.x before 0.3.1.

    HighCVSS 7.5KEVWeaponizedEPSS 78%

    owncloud · graph apiNov 21, 2023

  • CVE-2023-49105
    82Now

    An issue was discovered in ownCloud owncloud/core before 10.13.1.

    CriticalCVSS 9.8KEVWeaponizedEPSS 43%

    owncloud · owncloud serverNov 21, 2023

  • CVE-2023-2437
    34Monitor

    UserPro <= 5.1.1 - Authentication Bypass to Administrator

    HighCVSS 8.1Proof of conceptEPSS 6%

    userproplugin · userproNov 22, 2023

  • CVE-2023-5815
    40Plan

    News & Blog Designer Pack – WordPress Blog Plugin <= 3.4.1 - Unauthenticated Remote Code Execution via Local File Inclusion

    CriticalCVSS 9.8Proof of conceptEPSS 4%

    infornweb · news \& blog designer packNov 22, 2023

  • CVE-2023-47014
    26Monitor

    A Cross-Site Request Forgery (CSRF) vulnerability in Sourcecodester Sticky Notes App Using PHP with Source Code v.1.0 allows a local attacke

    MediumCVSS 6.5Proof of conceptEPSS 0%

    remyandrade · sticky notes appNov 22, 2023

  • CVE-2023-47250
    35Monitor

    In mprivacy-tools before 2.0.406g in m-privacy TightGate-Pro Server, broken Access Control on X11 server sockets allows authenticated attack

    HighCVSS 8.8Proof of conceptEPSS 1%

    m-privacy · mprivacy-toolsNov 22, 2023

  • CVE-2023-48646
    53Plan

    Zoho ManageEngine RecoveryManager Plus before 6070 allows admin users to execute arbitrary commands via proxy settings.

    HighCVSS 7.2No exploitEPSS 82%

    zohocorp · manageengine recoverymanager plusNov 22, 2023

  • CVE-2023-47668
    30Monitor

    WordPress Restrict Content Plugin <= 3.2.7 is vulnerable to Sensitive Data Exposure

    HighCVSS 7.5Proof of conceptEPSS 1%

    liquidweb · restrict contentNov 22, 2023

  • CVE-2023-41807
    35Monitor

    Linux Local Privilege Escalation Via GoTTY Page

    HighCVSS 8.8No exploitEPSS 0%

    artica · pandora fmsNov 23, 2023

  • CVE-2023-47529
    30Monitor

    WordPress Cloud Templates & Patterns collection Plugin <= 1.2.2 is vulnerable to Sensitive Data Exposure

    HighCVSS 7.5Proof of conceptEPSS 0%

    themeisle · cloud templates \& patterns collectionNov 23, 2023

  • CVE-2023-6275
    25Monitor

    TOTVS Fluig Platform mobileredir openApp.jsp cross site scripting

    MediumCVSS 6.1Proof of conceptEPSS 2%

    totvs · fluigNov 24, 2023

  • CVE-2023-4590
    39Monitor

    Buffer Overflow vulnerability in Frhed

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    kimmov · frhedNov 27, 2023

  • CVE-2023-35985
    36Monitor

    An arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit Reader 12.1.3.15356 due to a failure to prop

    HighCVSS 8.8Proof of conceptEPSS 2%

    foxitsoftware · foxit readerNov 27, 2023

  • CVE-2023-49043
    43Plan

    Buffer Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the wpapsk_crypto parameter i

    CriticalCVSS 9.8No exploitEPSS 13%

    tenda · ax1803 firmwareNov 27, 2023

  • CVE-2023-41998
    44Plan

    Arcserve UDP Unauthenticated RCE

    CriticalCVSS 9.8No exploitEPSS 15%

    arcserve · udpNov 27, 2023

  • CVE-2023-4922
    44Plan

    WPB Show Core <= 2.2 - Unauthenticated Local File Inclusion

    CriticalCVSS 9.8No exploitEPSS 15%

    wpb show core project · wpb show coreNov 27, 2023

  • CVE-2023-5559
    37Monitor

    10Web Booster < 2.24.18 - Unauthenticated Arbitrary Option Deletion

    CriticalCVSS 9.1Proof of conceptEPSS 2%

    10web · 10web boosterNov 27, 2023

  • CVE-2023-5974
    40Plan

    WPB Show Core <= 2.2 - Unauthenticated Server Side Request Forgery

    CriticalCVSS 9.8Proof of conceptEPSS 3%

    wpb show core project · wpb show coreNov 27, 2023

  • CVE-2023-6329
    60This week

    Control iD iDSecure passwordCustom Authentication Bypass

    CriticalCVSS 9.8WeaponizedEPSS 64%

    controlid · idsecureNov 27, 2023

  • CVE-2023-48034
    24Monitor

    An issue discovered in Acer Wireless Keyboard SK-9662 allows attacker in physical proximity to both decrypt wireless keystrokes and inject a

    MediumCVSS 6.1Proof of conceptEPSS 0%

    acer · sk-9662 firmwareNov 27, 2023

  • CVE-2023-47437
    21Monitor

    A vulnerability has been identified in Pachno 1.0.6 allowing an authenticated attacker to execute a cross-site scripting (XSS) attack.

    MediumCVSS 5.4Proof of conceptEPSS 0%

    pachno · pachnoNov 27, 2023

  • CVE-2023-3368
    60This week

    Chamilo LMS Unauthenticated Command Injection

    CriticalCVSS 9.8Proof of conceptEPSS 69%

    chamilo · chamiloNov 28, 2023

  • CVE-2023-48022
    64This week

    Anyscale Ray 2.6.3 and 2.8.0 allows a remote attacker to execute arbitrary code via the job submission API.

    CriticalCVSS 9.8WeaponizedEPSS 83%

    anyscale · rayNov 28, 2023

  • CVE-2023-48023
    47Plan

    Anyscale Ray 2.6.3 and 2.8.0 allows /log_proxy SSRF.

    CriticalCVSS 9.1Proof of conceptEPSS 35%

    anyscale · rayNov 28, 2023

  • CVE-2023-4220
    60This week

    Chamilo LMS Unauthenticated Big Upload File Remote Code Execution

    MediumCVSS 6.1WeaponizedEPSS 76%

    chamilo · chamilo lmsNov 28, 2023

  • CVE-2023-4226
    36Monitor

    Chamilo LMS File Upload Functionality Remote Code Execution

    HighCVSS 8.8Proof of conceptEPSS 2%

    chamilo · chamilo lmsNov 28, 2023

  • CVE-2023-49313
    39Monitor

    A dylib injection vulnerability in XMachOViewer 0.04 allows attackers to compromise integrity.

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    horsicq · xmachoviewerNov 28, 2023

  • CVE-2023-49314
    32Monitor

    Asana Desktop 2.1.0 on macOS allows code injection because of specific Electron Fuses.

    HighCVSS 7.8Proof of conceptEPSS 4%

    asana · desktopNov 28, 2023

  • CVE-2022-41678
    61This week

    Apache ActiveMQ: Insufficient API restrictions on Jolokia allow authenticated users to perform RCE

    HighCVSS 8.8Proof of conceptEPSS 85%

    apache · activemqNov 28, 2023

  • CVE-2023-41264
    39Monitor

    Netwrix Usercube before 6.0.215, in certain misconfigured on-premises installations, allows authentication bypass on deployment endpoints, l

    CriticalCVSS 9.8No exploitEPSS 1%

    netwrix · usercubeNov 28, 2023

  • CVE-2023-45539
    32Monitor

    HAProxy before 2.8.2 accepts # as part of the URI component, which might allow remote attackers to obtain sensitive information or have unsp

    HighCVSS 8.2Proof of conceptEPSS 1%

    haproxy · haproxyNov 28, 2023

  • CVE-2023-46944
    40Plan

    An issue in GitKraken GitLens before v.14.0.0 allows an attacker to execute arbitrary code via a crafted file to the Visual Studio Codes wor

    HighCVSS 7.8WeaponizedEPSS 1%

    gitkraken · gitlensNov 28, 2023

  • CVE-2023-6345
    73This week

    Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to pote

    CriticalCVSS 9.6KEVWeaponizedEPSS 16%

    google · chromeNov 29, 2023

  • CVE-2023-6350
    35Monitor

    Use after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a cr

    HighCVSS 8.8Proof of conceptEPSS 1%

    google · chromeNov 29, 2023

  • CVE-2023-40626
    30Monitor

    [20231101] - Core - Exposure of environment variables

    HighCVSS 7.5Proof of conceptEPSS 0%

    joomla · joomla\!Nov 29, 2023

  • CVE-2023-35138
    51Plan

    A command injection vulnerability in the “show_zysync_server_contents” function of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NA

    CriticalCVSS 9.8No exploitEPSS 39%

    zyxel · nas326 firmwareNov 29, 2023

  • CVE-2023-37928
    53Plan

    A post-authentication command injection vulnerability in the WSGI server of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 fi

    HighCVSS 8.8No exploitEPSS 60%

    zyxel · nas326 firmwareNov 29, 2023

  • CVE-2023-4473
    51Plan

    A command injection vulnerability in the web server of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware version V5.21(

    CriticalCVSS 9.8No exploitEPSS 41%

    zyxel · nas326 firmwareNov 29, 2023

  • CVE-2023-4474
    48Plan

    The improper neutralization of special elements in the WSGI server of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware

    CriticalCVSS 9.8No exploitEPSS 29%

    zyxel · nas326 firmwareNov 29, 2023

  • CVE-2023-47464
    42Plan

    Insecure Permissions vulnerability in GL.iNet AX1800 version 4.0.0 before 4.5.0 allows a remote attacker to execute arbitrary code via the u

    HighCVSS 8.8Proof of conceptEPSS 22%

    gl-inet · gl-ax1800 firmwareNov 30, 2023

  • CVE-2023-49052
    36Monitor

    File Upload vulnerability in Microweber v.2.0.4 allows a remote attacker to execute arbitrary code via a crafted script to the file upload f

    HighCVSS 8.8Proof of conceptEPSS 2%

    microweber · microweberNov 30, 2023

  • CVE-2023-47505
    29Monitor

    WordPress Elementor Website Builder Plugin <= 3.16.4 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 5.4No exploitEPSS 25%

    elementor · website builderNov 30, 2023

  • CVE-2023-5965
    28Monitor

    Unrestricted Upload of File with Dangerous Type in EspoCRM

    HighCVSS 7.2Proof of conceptEPSS 1%

    espocrm · espocrmNov 30, 2023

  • CVE-2023-5966
    28Monitor

    Unrestricted Upload of File with Dangerous Type in EspoCRM

    HighCVSS 7.2Proof of conceptEPSS 1%

    espocrm · espocrmNov 30, 2023

  • CVE-2023-40211
    31Monitor

    WordPress Post Grid Plugin <= 2.2.50 is vulnerable to Sensitive Data Exposure

    HighCVSS 7.5Proof of conceptEPSS 2%

    pickplugins · post grid comboNov 30, 2023

  • CVE-2023-40600
    31Monitor

    WordPress EWWW Image Optimizer Plugin <= 7.2.0 is vulnerable to Sensitive Data Exposure

    HighCVSS 7.5Proof of conceptEPSS 2%

    ewww · image optimizerNov 30, 2023

  • CVE-2023-6401
    31Monitor

    NotePad++ dbghelp.exe uncontrolled search path

    HighCVSS 7.8Proof of conceptEPSS 0%

    notepad-plus-plus · notepad\+\+Nov 30, 2023

  • CVE-2023-6360
    58Plan

    The 'My Calendar' WordPress Plugin, version < 3.4.22 is affected by an unauthenticated SQL injection vulnerability in the 'from' and 'to' pa

    CriticalCVSS 9.8Proof of conceptEPSS 63%

    joedolson · my calendarNov 30, 2023

  • CVE-2023-47207
    44Plan

    Delta Electronics InfraSuite Device Master Deserialization of Untrusted Data

    CriticalCVSS 9.8No exploitEPSS 16%

    deltaww · infrasuite device masterNov 30, 2023

  • CVE-2023-42916
    61This week

    An out-of-bounds read was addressed with improved input validation.

    MediumCVSS 6.5KEVWeaponizedEPSS 17%

    apple · safariNov 30, 2023

  • CVE-2023-42917
    68This week

    A memory corruption vulnerability was addressed with improved locking.

    HighCVSS 8.8KEVWeaponizedEPSS 9%

    apple · safariNov 30, 2023