2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-42799 | HIGH | 8.8 | 1.7% | Dec 14, 2023 | Moonlight-common-c contains the core GameStream client code shared between Moonlight clients. Moonlight-common-c is vuln... |
| CVE-2023-48667 | HIGH | 7.2 | 1.8% | Dec 14, 2023 | Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS command injecti... |
| CVE-2023-48665 | HIGH | 7.2 | 1.7% | Dec 14, 2023 | Dell vApp Manager, versions prior to 9.2.4.x contain a command injection vulnerability. A remote malicious user with hi... |
| CVE-2023-48664 | HIGH | 7.2 | 1.7% | Dec 14, 2023 | Dell vApp Manager, versions prior to 9.2.4.x contain a command injection vulnerability. A remote malicious user with hi... |
| CVE-2023-48663 | HIGH | 7.2 | 1.7% | Dec 14, 2023 | Dell vApp Manager, versions prior to 9.2.4.x contain a command injection vulnerability. A remote malicious user with hi... |
| CVE-2023-48662 | HIGH | 7.2 | 1.7% | Dec 14, 2023 | Dell vApp Manager, versions prior to 9.2.4.x contain a command injection vulnerability. A remote malicious user with hi... |
| CVE-2023-48660 | HIGH | 7.5 | 0.9% | Dec 14, 2023 | Dell vApp Manger, versions prior to 9.2.4.x contain an arbitrary file read vulnerability. A remote attacker could poten... |
| CVE-2023-44285 | HIGH | 7.8 | 0.2% | Dec 14, 2023 | Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an improper access co... |
| CVE-2023-50564 | HIGH | 8.8 | 29.1% | Dec 14, 2023 | An arbitrary file upload vulnerability in the component /inc/modules_install.php of Pluck-CMS v4.7.18 allows attackers t... |
| CVE-2023-50011 | HIGH | 7.2 | 2.0% | Dec 14, 2023 | PopojiCMS version 2.0.1 is vulnerable to remote command execution in the Meta Social field. |
| CVE-2023-44277 | HIGH | 7.8 | 0.6% | Dec 14, 2023 | Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain an OS command injecti... |
| CVE-2023-6572 | HIGH | 8.1 | 1.7% | Dec 14, 2023 | Command Injection in GitHub repository gradio-app/gradio prior to main. |
| CVE-2023-5592 | HIGH | 7.5 | 0.3% | Dec 14, 2023 | Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT MULTIPROG, PHOENIX CONTACT ProConOS eCLR (SDK)... |
| CVE-2023-48676 | HIGH | 7.1 | 0.2% | Dec 14, 2023 | Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acr... |
| CVE-2023-46143 | HIGH | 7.5 | 0.3% | Dec 14, 2023 | Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT classic line PLCs allows an unauthenticated re... |
| CVE-2023-46142 | HIGH | 8.8 | 0.7% | Dec 14, 2023 | A incorrect permission assignment for critical resource vulnerability in PLCnext products allows an remote attacker with... |
| CVE-2023-45185 | HIGH | 8.8 | 1.0% | Dec 14, 2023 | IBM i Access Client Solutions 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.3 could allow an attacker to execute remote ... |
| CVE-2023-6569 | HIGH | 8.2 | 0.7% | Dec 14, 2023 | External Control of File Name or Path in h2oai/h2o-3 |
| CVE-2023-48631 | HIGH | 7.5 | 1.1% | Dec 14, 2023 | @adobe/css-tools versions 4.3.1 and earlier are affected by an Improper Input Validation vulnerability that could result... |
| CVE-2023-25644 | HIGH | 7.5 | 0.7% | Dec 14, 2023 | There is a denial of service vulnerability in some ZTE mobile internet products. Due to insufficient validation of Web ... |
| CVE-2023-25643 | HIGH | 8.8 | 1.8% | Dec 14, 2023 | There is a command injection vulnerability in some ZTE mobile internet products. Due to insufficient input validation... |
| CVE-2023-1904 | HIGH | 7.5 | 0.4% | Dec 14, 2023 | In affected versions of Octopus Server it is possible for the OpenID client secret to be logged in clear text during the... |
| CVE-2023-25651 | HIGH | 8 | 0.3% | Dec 14, 2023 | There is a SQL injection vulnerability in some ZTE mobile internet products. Due to insufficient input validation of SM... |
| CVE-2023-25648 | HIGH | 7.8 | 0.2% | Dec 14, 2023 | There is a weak folder permission vulnerability in ZTE's ZXCLOUD iRAI product. Due to weak folder permission, an attack... |
| CVE-2023-6407 | HIGH | 7.1 | 0.2% | Dec 14, 2023 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that coul... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now