2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-48161 | HIGH | 7.1 | 0.4% | Nov 22, 2023 | Buffer Overflow vulnerability in GifLib Project GifLib v.5.2.1 allows a local attacker to obtain sensitive information v... |
| CVE-2023-46814 | HIGH | 7.8 | 0.3% | Nov 22, 2023 | A binary hijacking vulnerability exists within the VideoLAN VLC media player before 3.0.19 on Windows. The uninstaller a... |
| CVE-2023-5299 | HIGH | 8.8 | 0.5% | Nov 22, 2023 | A user with a standard account in Fuji Electric Tellus Lite may overwrite files in the system. |
| CVE-2023-40152 | HIGH | 7.8 | 0.3% | Nov 22, 2023 | When Fuji Electric Tellus Lite V-Simulator parses a specially-crafted input file an out of bounds write may occur. |
| CVE-2023-35127 | HIGH | 7.8 | 0.3% | Nov 22, 2023 | Stack-based buffer overflow may occur when Fuji Electric Tellus Lite V-Simulator parses a specially-crafted input file. |
| CVE-2023-49103 | HIGH | 7.5 | 78.4% | Nov 21, 2023 | An issue was discovered in ownCloud owncloud/graphapi 0.2.x before 0.2.1 and 0.3.x before 0.3.1. The graphapi app relies... |
| CVE-2023-48239 | HIGH | 7.1 | 0.9% | Nov 21, 2023 | Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prio... |
| CVE-2023-20274 | HIGH | 7.8 | 0.2% | Nov 21, 2023 | A vulnerability in the installer script of Cisco AppDynamics PHP Agent could allow an authenticated, local attacker to e... |
| CVE-2023-20272 | HIGH | 8.8 | 0.9% | Nov 21, 2023 | A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, re... |
| CVE-2023-22521 | HIGH | 8.8 | 1.2% | Nov 21, 2023 | This High severity RCE (Remote Code Execution) vulnerability was introduced in version 3.4.6 of Crowd Data Center and Se... |
| CVE-2023-22516 | HIGH | 8.8 | 1.2% | Nov 21, 2023 | This High severity RCE (Remote Code Execution) vulnerability was introduced in versions 8.1.0, 8.2.0, 9.0.0, 9.1.0, 9.2.... |
| CVE-2023-6213 | HIGH | 8.8 | 0.7% | Nov 21, 2023 | Memory safety bugs present in Firefox 119. Some of these bugs showed evidence of memory corruption and we presume that w... |
| CVE-2023-6212 | HIGH | 8.8 | 0.8% | Nov 21, 2023 | Memory safety bugs present in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4. Some of these bugs showed evidence ... |
| CVE-2023-6208 | HIGH | 8.8 | 0.8% | Nov 21, 2023 | When using X11, text selected by the page using the Selection API was erroneously copied into the primary selection, a t... |
| CVE-2023-6207 | HIGH | 8.8 | 0.8% | Nov 21, 2023 | Ownership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects Firefox < 120, Firefox... |
| CVE-2023-6235 | HIGH | 7.8 | 0.3% | Nov 21, 2023 | An uncontrolled search path element vulnerability has been found in the Duet Display product, affecting version 2.5.9.1.... |
| CVE-2023-5776 | HIGH | 8.8 | 0.3% | Nov 21, 2023 | The Post Meta Data Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and i... |
| CVE-2023-4424 | HIGH | 8.8 | 0.4% | Nov 21, 2023 | An malicious BLE device can cause buffer overflow by sending malformed advertising packet BLE device using Zephyr OS, le... |
| CVE-2023-21418 | HIGH | 7.1 | 0.7% | Nov 21, 2023 | Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API irissetup.cgi was vulnerable to pat... |
| CVE-2023-21417 | HIGH | 7.1 | 0.7% | Nov 21, 2023 | Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API manageoverlayimage.cgi was vulnera... |
| CVE-2023-45886 | HIGH | 7.5 | 1.4% | Nov 21, 2023 | The BGP daemon (bgpd) in IP Infusion ZebOS through 7.10.6 allow remote attackers to cause a denial of service by sending... |
| CVE-2023-48310 | HIGH | 7.5 | 1.1% | Nov 20, 2023 | TestingPlatform is a testing platform for Internet Security Standards. Prior to version 2.1.1, user input is not filtere... |
| CVE-2023-48051 | HIGH | 7.5 | 0.2% | Nov 20, 2023 | An issue in /upydev/keygen.py in upydev v0.4.3 allows attackers to decrypt sensitive information via weak encryption pad... |
| CVE-2023-48192 | HIGH | 7.8 | 0.4% | Nov 20, 2023 | An issue in TOTOlink A3700R v.9.1.2u.6134_B20201202 allows a local attacker to execute arbitrary code via the setTracero... |
| CVE-2023-47172 | HIGH | 7.8 | 0.2% | Nov 20, 2023 | Certain WithSecure products allow Local Privilege Escalation. This affects WithSecure Client Security 15, WithSecure Ser... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now