2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-5058 | HIGH | 7.8 | 0.3% | Dec 7, 2023 | Improper Input Validation in the processing of user-supplied splash screen during system boot in Phoenix SecureCore™ Tec... |
| CVE-2023-4122 | HIGH | 8.8 | 1.5% | Dec 7, 2023 | Student Information System v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'photo' parameter of my-pr... |
| CVE-2023-6580 | HIGH | 8.8 | 2.3% | Dec 7, 2023 | A vulnerability, which was classified as critical, was found in D-Link DIR-846 FW100A53DBR. This affects an unknown part... |
| CVE-2023-6576 | HIGH | 8.8 | 1.4% | Dec 7, 2023 | A vulnerability was found in Byzoro S210 up to 20231123. It has been declared as critical. This vulnerability affects un... |
| CVE-2023-6575 | HIGH | 8.8 | 2.8% | Dec 7, 2023 | A vulnerability was found in Byzoro S210 up to 20231121. It has been classified as critical. This affects an unknown par... |
| CVE-2023-6574 | HIGH | 8.8 | 1.6% | Dec 7, 2023 | A vulnerability was found in Byzoro Smart S20 up to 20231120 and classified as critical. Affected by this issue is some ... |
| CVE-2023-4486 | HIGH | 7.5 | 0.8% | Dec 7, 2023 | Under certain circumstances, invalid authentication credentials could be sent to the login endpoint of Johnson Controls ... |
| CVE-2023-49468 | HIGH | 8.8 | 0.9% | Dec 7, 2023 | Libde265 v1.0.14 was discovered to contain a global buffer overflow vulnerability in the read_coding_unit function at sl... |
| CVE-2023-49467 | HIGH | 8.8 | 0.8% | Dec 7, 2023 | Libde265 v1.0.14 was discovered to contain a heap-buffer-overflow vulnerability in the derive_combined_bipredictive_merg... |
| CVE-2023-49465 | HIGH | 8.8 | 0.8% | Dec 7, 2023 | Libde265 v1.0.14 was discovered to contain a heap-buffer-overflow vulnerability in the derive_spatial_luma_vector_predic... |
| CVE-2023-49464 | HIGH | 8.8 | 0.8% | Dec 7, 2023 | libheif v1.17.5 was discovered to contain a segmentation violation via the function UncompressedImageCodec::get_luma_bit... |
| CVE-2023-49463 | HIGH | 8.8 | 0.8% | Dec 7, 2023 | libheif v1.17.5 was discovered to contain a segmentation violation via the function find_exif_tag at /libheif/exif.cc. |
| CVE-2023-49462 | HIGH | 8.8 | 0.8% | Dec 7, 2023 | libheif v1.17.5 was discovered to contain a segmentation violation via the component /libheif/exif.cc. |
| CVE-2023-49460 | HIGH | 8.8 | 0.8% | Dec 7, 2023 | libheif v1.17.5 was discovered to contain a segmentation violation via the function UncompressedImageCodec::decode_uncom... |
| CVE-2023-39909 | HIGH | 8.8 | 0.8% | Dec 7, 2023 | Ericsson Network Manager before 23.2 mishandles Access Control and thus unauthenticated low-privilege users can access t... |
| CVE-2023-33413 | HIGH | 8.8 | 1.0% | Dec 7, 2023 | The configuration functionality in the Intelligent Platform Management Interface (IPMI) baseboard management controller ... |
| CVE-2023-33412 | HIGH | 8.8 | 1.2% | Dec 7, 2023 | The web interface in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implemen... |
| CVE-2023-33411 | HIGH | 7.5 | 1.3% | Dec 7, 2023 | A web server in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementatio... |
| CVE-2023-49967 | HIGH | 7.5 | 0.8% | Dec 7, 2023 | Typecho v1.2.1 was discovered to be vulnerable to an XML Quadratic Blowup attack via the component /index.php/action/xml... |
| CVE-2023-39171 | HIGH | 7.2 | 1.1% | Dec 7, 2023 | SENEC Storage Box V1,V2 and V3 accidentially expose a management UI accessible with publicly known admin credentials. |
| CVE-2023-39167 | HIGH | 7.5 | 1.0% | Dec 7, 2023 | In SENEC Storage Box V1,V2 and V3 an unauthenticated remote attacker can obtain the devices' logfiles that contain sensi... |
| CVE-2023-49958 | HIGH | 7.5 | 0.6% | Dec 7, 2023 | An issue was discovered in Dalmann OCPP.Core through 1.2.0 for OCPP (Open Charge Point Protocol) for electric vehicles. ... |
| CVE-2023-49957 | HIGH | 7.5 | 0.5% | Dec 7, 2023 | An issue was discovered in Dalmann OCPP.Core before 1.3.0 for OCPP (Open Charge Point Protocol) for electric vehicles. I... |
| CVE-2023-49956 | HIGH | 7.5 | 0.7% | Dec 7, 2023 | An issue was discovered in Dalmann OCPP.Core before 1.3.0 for OCPP (Open Charge Point Protocol) for electric vehicles. A... |
| CVE-2023-49955 | HIGH | 7.5 | 0.7% | Dec 7, 2023 | An issue was discovered in Dalmann OCPP.Core before 1.2.0 for OCPP (Open Charge Point Protocol) for electric vehicles. I... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now