Security Vulnerabilities - CVEs Published In November 2023
Improper Neutralization of Formula Elements in a CSV File vulnerability in Solwin Infotech User Blocker.This issue affects User Blocker: from n/a through 1.5.5.
CVSS Score
7.2
EPSS Score
0.005
Published
2023-11-07
Videolan VLC prior to version 3.0.20 contains an incorrect offset read that leads to a Heap-Based Buffer Overflow in function GetPacket() and results in a memory corruption.
CVSS Score
9.8
EPSS Score
0.001
Published
2023-11-07
Videolan VLC prior to version 3.0.20 contains an Integer underflow that leads to an incorrect packet length.
CVSS Score
7.5
EPSS Score
0.001
Published
2023-11-07
A local non-privileged user can make GPU processing operations that expose sensitive data from previously freed memory.
CVSS Score
5.5
EPSS Score
0.002
Published
2023-11-07
A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory.
CVSS Score
7.8
EPSS Score
0.002
Published
2023-11-07
An issue was discovered in Open Design Alliance Drawings SDK before 2024.10. A corrupted value for the start of MiniFat sector in a crafted DGN file leads to an out-of-bounds read. This can allow attackers to cause a crash, potentially enabling a denial-of-service attack (Crash, Exit, or Restart) or possible code execution.
CVSS Score
7.8
EPSS Score
0.001
Published
2023-11-07
Improper Neutralization of Formula Elements in a CSV File vulnerability in WebToffee Product Reviews Import Export for WooCommerce.This issue affects Product Reviews Import Export for WooCommerce: from n/a through 1.4.8.
CVSS Score
9.8
EPSS Score
0.007
Published
2023-11-07
Improper Neutralization of Formula Elements in a CSV File vulnerability in GiveWP.This issue affects GiveWP: from n/a through 2.25.1.
CVSS Score
9.8
EPSS Score
0.007
Published
2023-11-07
Improper Neutralization of Formula Elements in a CSV File vulnerability in WPEkaClub WP Cookie Consent ( for GDPR, CCPA & ePrivacy ).This issue affects WP Cookie Consent ( for GDPR, CCPA & ePrivacy ): from n/a through 2.2.5.
CVSS Score
7.2
EPSS Score
0.005
Published
2023-11-07
Improper Neutralization of Formula Elements in a CSV File vulnerability in Muneeb Form Builder | Create Responsive Contact Forms.This issue affects Form Builder | Create Responsive Contact Forms: from n/a through 1.9.9.0.
CVSS Score
9.8
EPSS Score
0.007
Published
2023-11-07