2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-51065 | HIGH | 7.5 | 0.7% | Jan 13, 2024 | Incorrect access control in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows unauthenticated attackers... |
| CVE-2023-51063 | HIGH | 8.8 | 0.3% | Jan 13, 2024 | QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 was discovered to contain a DOM Based Reflected Cross Site S... |
| CVE-2023-51804 | HIGH | 7.5 | 0.7% | Jan 13, 2024 | An issue in rymcu forest v.0.02 allows a remote attacker to obtain sensitive information via manipulation of the HTTP bo... |
| CVE-2023-46942 | HIGH | 7.5 | 0.7% | Jan 13, 2024 | Lack of authentication in NPM's package @evershop/evershop before version 1.0.0-rc.8, allows remote attackers to obtain ... |
| CVE-2023-33472 | HIGH | 8.8 | 1.3% | Jan 13, 2024 | An issue was discovered in Scada-LTS v2.7.5.2 build 4551883606 and before, allows remote attackers with low-level authen... |
| CVE-2023-48166 | HIGH | 7.5 | 1.0% | Jan 12, 2024 | A directory traversal vulnerability in the SOAP Server integrated in Atos Unify OpenScape Voice V10 before V10R3.26.1 al... |
| CVE-2023-49647 | HIGH | 7.8 | 0.2% | Jan 12, 2024 | Improper access control in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows befor... |
| CVE-2023-51698 | HIGH | 8.8 | 2.3% | Jan 12, 2024 | Atril is a simple multi-page document viewer. Atril is vulnerable to a critical Command Injection Vulnerability. This vu... |
| CVE-2023-49801 | HIGH | 7.5 | 0.4% | Jan 12, 2024 | Lif Auth Server is a server for validating logins, managing information, and account recovery for Lif Accounts. The issu... |
| CVE-2023-48297 | HIGH | 7.5 | 0.5% | Jan 12, 2024 | Discourse is a platform for community discussion. The message serializer uses the full list of expanded chat mentions (@... |
| CVE-2023-42463 | HIGH | 7.8 | 0.2% | Jan 12, 2024 | Wazuh is a free and open source platform used for threat prevention, detection, and response. This bug introduced a stac... |
| CVE-2023-31035 | HIGH | 7.8 | 0.2% | Jan 12, 2024 | NVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may cause an SMI callout vulnerability that could be us... |
| CVE-2023-31034 | HIGH | 7.8 | 0.2% | Jan 12, 2024 | NVIDIA DGX A100 SBIOS contains a vulnerability where a local attacker can cause input validation checks to be bypassed b... |
| CVE-2023-31033 | HIGH | 8 | 0.3% | Jan 12, 2024 | NVIDIA DGX A100 BMC contains a vulnerability where a user may cause a missing authentication issue for a critical functi... |
| CVE-2023-31031 | HIGH | 7.8 | 0.2% | Jan 12, 2024 | NVIDIA DGX Station A100 and DGX Station A800 SBIOS contains a vulnerability where a user may cause a heap-based buffer o... |
| CVE-2023-31025 | HIGH | 7.5 | 0.5% | Jan 12, 2024 | NVIDIA DGX A100 BMC contains a vulnerability where an attacker may cause an LDAP user injection. A successful exploit of... |
| CVE-2023-46805 | HIGH | 8.2 | 100.0% | Jan 12, 2024 | An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a re... |
| CVE-2023-31036 | HIGH | 8.8 | 0.9% | Jan 12, 2024 | NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where, when it is launched with the non-de... |
| CVE-2023-51949 | HIGH | 8.8 | 0.3% | Jan 12, 2024 | Verydows v2.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /protected/controller/back... |
| CVE-2023-49261 | HIGH | 7.5 | 0.5% | Jan 12, 2024 | The "tokenKey" value used in user authorization is visible in the HTML source of the login page. |
| CVE-2023-49259 | HIGH | 7.5 | 0.3% | Jan 12, 2024 | The authentication cookies are generated using an algorithm based on the username, hardcoded secret and the up-time, and... |
| CVE-2023-49257 | HIGH | 8.8 | 0.3% | Jan 12, 2024 | An authenticated user is able to upload an arbitrary CGI-compatible file using the certificate upload utility and execut... |
| CVE-2023-49256 | HIGH | 7.5 | 0.5% | Jan 12, 2024 | It is possible to download the configuration backup without authorization and decrypt included passwords using hardcoded... |
| CVE-2023-49254 | HIGH | 8.8 | 0.7% | Jan 12, 2024 | Authenticated user can execute arbitrary commands in the context of the root user by providing payload in the "destinati... |
| CVE-2023-5356 | HIGH | 8.8 | 0.8% | Jan 12, 2024 | Incorrect authorization checks in GitLab CE/EE from all versions starting from 8.13 before 16.5.6, all versions starting... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now