2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-48859 | HIGH | 8.8 | 1.2% | Dec 6, 2023 | TOTOLINK A3002RU version 2.0.0-B20190902.1958 has a post-authentication RCE due to incorrect access control, allows atta... |
| CVE-2023-6288 | HIGH | 7.8 | 0.3% | Dec 6, 2023 | Code injection in Remote Desktop Manager 2023.3.9.3 and earlier on macOS allows an attacker to execute code via the DYLI... |
| CVE-2023-32268 | HIGH | 7.2 | 0.7% | Dec 6, 2023 | Exposure of Proxy Administrator Credentials An authenticated administrator equivalent Filr user can access the credent... |
| CVE-2023-6514 | HIGH | 8.8 | 0.3% | Dec 6, 2023 | The Bluetooth module of some Huawei Smart Screen products has an identity authentication bypass vulnerability. Successf... |
| CVE-2023-49247 | HIGH | 7.5 | 0.4% | Dec 6, 2023 | Permission verification vulnerability in distributed scenarios. Successful exploitation of this vulnerability may affect... |
| CVE-2023-49246 | HIGH | 7.5 | 0.4% | Dec 6, 2023 | Unauthorized access vulnerability in the card management module. Successful exploitation of this vulnerability may affec... |
| CVE-2023-49245 | HIGH | 7.5 | 0.4% | Dec 6, 2023 | Unauthorized access vulnerability in the Huawei Share module. Successful exploitation of this vulnerability may affect s... |
| CVE-2023-49244 | HIGH | 7.5 | 0.4% | Dec 6, 2023 | Permission management vulnerability in the multi-user module. Successful exploitation of this vulnerability may affect s... |
| CVE-2023-49243 | HIGH | 7.5 | 0.4% | Dec 6, 2023 | Vulnerability of unauthorized access to email attachments in the email module. Successful exploitation of this vulnerabi... |
| CVE-2023-49242 | HIGH | 7.5 | 0.4% | Dec 6, 2023 | Free broadcast vulnerability in the running management module. Successful exploitation of this vulnerability may affect ... |
| CVE-2023-49241 | HIGH | 7.5 | 0.4% | Dec 6, 2023 | API permission control vulnerability in the network management module. Successful exploitation of this vulnerability may... |
| CVE-2023-49240 | HIGH | 7.5 | 0.4% | Dec 6, 2023 | Unauthorized access vulnerability in the launcher module. Successful exploitation of this vulnerability may affect servi... |
| CVE-2023-49239 | HIGH | 7.5 | 0.4% | Dec 6, 2023 | Unauthorized access vulnerability in the card management module. Successful exploitation of this vulnerability may affec... |
| CVE-2023-44113 | HIGH | 7.5 | 0.4% | Dec 6, 2023 | Vulnerability of missing permission verification for APIs in the Designed for Reliability (DFR) module. Successful explo... |
| CVE-2023-44099 | HIGH | 7.5 | 0.5% | Dec 6, 2023 | Vulnerability of data verification errors in the kernel module. Successful exploitation of this vulnerability may cause ... |
| CVE-2023-49897 | HIGH | 8.8 | 50.7% | Dec 6, 2023 | An OS command injection vulnerability exists in AE1021PE firmware version 2.0.9 and earlier and AE1021 firmware version ... |
| CVE-2023-2861 | HIGH | 7.1 | 0.4% | Dec 6, 2023 | A flaw was found in the 9p passthrough filesystem (9pfs) implementation in QEMU. The 9pfs server did not prohibit openin... |
| CVE-2023-22523 | HIGH | 8.8 | 11.1% | Dec 6, 2023 | This vulnerability, if exploited, allows an attacker to perform privileged RCE (Remote Code Execution) on machines with ... |
| CVE-2023-22522 | HIGH | 8.8 | 12.8% | Dec 6, 2023 | This Template Injection vulnerability allows an authenticated attacker, including one with anonymous access, to inject u... |
| CVE-2023-6510 | HIGH | 8.8 | 1.0% | Dec 6, 2023 | Use after free in Media Capture in Google Chrome prior to 120.0.6099.62 allowed a remote attacker who convinced a user t... |
| CVE-2023-6509 | HIGH | 8.8 | 1.0% | Dec 6, 2023 | Use after free in Side Panel Search in Google Chrome prior to 120.0.6099.62 allowed a remote attacker who convinced a us... |
| CVE-2023-6508 | HIGH | 8.8 | 1.0% | Dec 6, 2023 | Use after free in Media Stream in Google Chrome prior to 120.0.6099.62 allowed a remote attacker to potentially exploit ... |
| CVE-2023-5970 | HIGH | 8.8 | 0.9% | Dec 5, 2023 | Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated attacker to create an ... |
| CVE-2023-49297 | HIGH | 7.8 | 0.5% | Dec 5, 2023 | PyDrive2 is a wrapper library of google-api-python-client that simplifies many common Google Drive API V2 tasks. Unsafe ... |
| CVE-2023-44221 | HIGH | 7.2 | 74.9% | Dec 5, 2023 | Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated att... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now