Vulnerabilities > Low

DATE CVE VULNERABILITY TITLE RISK
2023-11-21 CVE-2023-48303 Unspecified vulnerability in Nextcloud Server
Nextcloud Server provides data storage for Nextcloud, an open source cloud platform.
network
low complexity
nextcloud
2.7
2023-11-21 CVE-2023-48226 Code Injection vulnerability in Openreplay
OpenReplay is a self-hosted session replay suite.
network
low complexity
openreplay CWE-94
3.5
2023-11-17 CVE-2023-47072 Unspecified vulnerability in Adobe After Effects 24.0
Adobe After Effects version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an Access of Uninitialized Pointer vulnerability that could lead to disclosure of sensitive memory.
local
low complexity
adobe
3.3
2023-11-15 CVE-2023-30954 Race Condition vulnerability in Palantir Video-Application-Server
The Gotham video-application-server service contained a race condition which would cause it to not apply certain acls new videos if the source system had not yet initialized.
network
high complexity
palantir CWE-362
3.7
2023-11-15 CVE-2023-23549 Unspecified vulnerability in Checkmk 2.0.0/2.1.0/2.2.0
Improper Input Validation in Checkmk <2.2.0p15, <2.1.0p37, <=2.0.0p39 allows priviledged attackers to cause partial denial of service of the UI via too long hostnames.
network
low complexity
checkmk
2.7
2023-11-15 CVE-2023-46121 Unspecified vulnerability in Yt-Dlp Project Yt-Dlp
yt-dlp is a youtube-dl fork with additional features and fixes.
network
high complexity
yt-dlp-project
3.7
2023-11-14 CVE-2023-20519 Use After Free vulnerability in AMD Genoapi Firmware and Milanpi Firmware
A Use-After-Free vulnerability in the management of an SNP guest context page may allow a malicious hypervisor to masquerade as the guest's migration agent resulting in a potential loss of guest integrity.
local
low complexity
amd CWE-416
3.3
2023-11-14 CVE-2023-22313 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Intel products
Improper buffer restrictions in some Intel(R) QAT Library software before version 22.07.1 may allow a privileged user to potentially enable information disclosure via local access.
local
low complexity
intel CWE-119
2.3
2023-11-14 CVE-2023-22329 Unspecified vulnerability in Intel products
Improper input validation in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable denial of service via adjacent access.
low complexity
intel
3.5
2023-11-14 CVE-2023-36016 Cross-site Scripting vulnerability in Microsoft Dynamics 365
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
network
low complexity
microsoft CWE-79
3.4