2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-49213 | HIGH | 8.8 | 2.1% | Nov 23, 2023 | The API endpoints in Ironman PowerShell Universal 3.0.0 through 4.2.0 allow remote attackers to execute arbitrary comman... |
| CVE-2023-47529 | HIGH | 7.5 | 1.0% | Nov 23, 2023 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ThemeIsle Cloud Templates & Patterns collect... |
| CVE-2023-47244 | HIGH | 7.5 | 0.6% | Nov 23, 2023 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Omnisend Email Marketing for WooCommerce by ... |
| CVE-2023-5972 | HIGH | 7.8 | 0.3% | Nov 23, 2023 | A null pointer dereference flaw was found in the nft_inner.c functionality of netfilter in the Linux kernel. This issue ... |
| CVE-2023-6118 | HIGH | 7.5 | 0.8% | Nov 23, 2023 | Path Traversal: '/../filedir' vulnerability in Neutron IP Camera allows Absolute Path Traversal. This issue affects IP ... |
| CVE-2023-41812 | HIGH | 8.8 | 0.6% | Nov 23, 2023 | Unrestricted Upload of File with Dangerous Type vulnerability in Pandora FMS on all allows Accessing Functionality Not P... |
| CVE-2023-41808 | HIGH | 7.5 | 0.5% | Nov 23, 2023 | Improper Privilege Management vulnerability in Pandora FMS on all allows Privilege Escalation. This vulnerability allows... |
| CVE-2023-41807 | HIGH | 8.8 | 0.7% | Nov 23, 2023 | Improper Privilege Management vulnerability in Pandora FMS on all allows Privilege Escalation. This vulnerability allows... |
| CVE-2023-41806 | HIGH | 7.5 | 0.5% | Nov 23, 2023 | Improper Privilege Management vulnerability in Pandora FMS on all allows Privilege Escalation. This vulnerability causes... |
| CVE-2023-41788 | HIGH | 8.8 | 0.7% | Nov 23, 2023 | Unrestricted Upload of File with Dangerous Type vulnerability in Pandora FMS on all allows Accessing Functionality Not P... |
| CVE-2023-41787 | HIGH | 7.5 | 0.5% | Nov 23, 2023 | Uncontrolled Search Path Element vulnerability in Pandora FMS on all allows Leveraging/Manipulating Configuration File S... |
| CVE-2023-28813 | HIGH | 7.5 | 0.6% | Nov 23, 2023 | An attacker could exploit a vulnerability by sending crafted messages to computers installed with this plug-in to modify... |
| CVE-2023-44290 | HIGH | 7.8 | 0.2% | Nov 23, 2023 | Dell Command | Monitor versions prior to 10.10.0, contain an improper access control vulnerability. A local malicious s... |
| CVE-2023-44289 | HIGH | 7.8 | 0.2% | Nov 23, 2023 | Dell Command | Configure versions prior to 4.11.0, contain an improper access control vulnerability. A local malicious ... |
| CVE-2023-43086 | HIGH | 7.8 | 0.2% | Nov 23, 2023 | Dell Command | Configure, versions prior to 4.11.0, contains an improper access control vulnerability. A local maliciou... |
| CVE-2023-39253 | HIGH | 7.8 | 0.2% | Nov 23, 2023 | Dell OS Recovery Tool, versions 2.2.4013, 2.3.7012.0, and 2.3.7515.0 contain an Improper Access Control Vulnerability. ... |
| CVE-2023-41140 | HIGH | 7.8 | 0.3% | Nov 23, 2023 | A maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause a Heap-Based Buff... |
| CVE-2023-41139 | HIGH | 7.8 | 0.3% | Nov 23, 2023 | A maliciously crafted STP file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to dereference an untruste... |
| CVE-2023-47668 | HIGH | 7.5 | 1.0% | Nov 23, 2023 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in StellarWP Membership Plugin – Restrict Conte... |
| CVE-2023-30581 | HIGH | 7.5 | 1.1% | Nov 23, 2023 | The use of __proto__ in process.mainModule.__proto__.require() can bypass the policy mechanism and require modules outsi... |
| CVE-2023-48107 | HIGH | 8.8 | 1.3% | Nov 22, 2023 | Buffer Overflow vulnerability in zlib-ng minizip-ng v.4.0.2 allows an attacker to execute arbitrary code via a crafted f... |
| CVE-2023-48105 | HIGH | 7.5 | 1.3% | Nov 22, 2023 | An heap overflow vulnerability was discovered in Bytecode alliance wasm-micro-runtime v.1.2.3 allows a remote attacker t... |
| CVE-2023-49102 | HIGH | 8.8 | 1.5% | Nov 22, 2023 | NZBGet 21.1 allows authenticated remote code execution because the unarchive programs (7za and unrar) preserve executabl... |
| CVE-2023-6265 | HIGH | 8.1 | 1.8% | Nov 22, 2023 | ** UNSUPPORTED WHEN ASSIGNED ** Draytek Vigor2960 v1.5.1.4 and v1.5.1.5 are vulnerable to directory traversal via the ma... |
| CVE-2023-47825 | HIGH | 8.8 | 0.3% | Nov 22, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in TienCOP WP EXtra plugin <= 6.4 versions. |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now