2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-48130 | MEDIUM | 5.4 | 0.4% | Jan 26, 2024 | An issue in GINZA CAFE mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of ... |
| CVE-2023-48128 | MEDIUM | 5.4 | 0.4% | Jan 26, 2024 | An issue in UNITED BOXING GYM mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leak... |
| CVE-2023-48127 | MEDIUM | 5.4 | 0.4% | Jan 26, 2024 | An issue in myGAKUYA mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of th... |
| CVE-2023-48126 | MEDIUM | 5.4 | 0.4% | Jan 26, 2024 | An issue in Luxe Beauty Clinic mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via lea... |
| CVE-2023-38323 | CRITICAL | 9.8 | 1.1% | Jan 26, 2024 | An issue was discovered in OpenNDS before 10.1.3. It fails to sanitize the status path script entry in the configuration... |
| CVE-2023-38319 | CRITICAL | 9.8 | 1.1% | Jan 26, 2024 | An issue was discovered in OpenNDS before 10.1.3. It fails to sanitize the FAS key entry in the configuration file, allo... |
| CVE-2023-38318 | CRITICAL | 9.8 | 1.1% | Jan 26, 2024 | An issue was discovered in OpenNDS before 10.1.3. It fails to sanitize the gateway FQDN entry in the configuration file,... |
| CVE-2023-38317 | CRITICAL | 9.8 | 1.1% | Jan 26, 2024 | An issue was discovered in OpenNDS before 10.1.3. It fails to sanitize the network interface name entry in the configura... |
| CVE-2023-6159 | MEDIUM | 6.5 | 1.0% | Jan 26, 2024 | An issue has been discovered in GitLab CE/EE affecting all versions from 12.7 prior to 16.6.6, 16.7 prior to 16.7.4, and... |
| CVE-2023-5612 | MEDIUM | 5.3 | 4.4% | Jan 26, 2024 | An issue has been discovered in GitLab affecting all versions before 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.... |
| CVE-2023-5933 | MEDIUM | 5.4 | 0.7% | Jan 26, 2024 | An issue has been discovered in GitLab CE/EE affecting all versions after 13.7 before 16.6.6, 16.7 prior to 16.7.4, and ... |
| CVE-2023-51833 | HIGH | 8.1 | 4.4% | Jan 25, 2024 | A command injection issue in TRENDnet TEW-411BRPplus v.2.07_eu that allows a local attacker to execute arbitrary code vi... |
| CVE-2023-52251 | HIGH | 8.8 | 85.0% | Jan 25, 2024 | An issue discovered in provectus kafka-ui 0.4.0 through 0.7.2 allows remote attackers to execute arbitrary code via the ... |
| CVE-2023-52046 | MEDIUM | 4.8 | 0.6% | Jan 25, 2024 | Cross Site Scripting vulnerability (XSS) in webmin v.2.105 and earlier allows a remote attacker to execute arbitrary cod... |
| CVE-2023-52356 | HIGH | 7.5 | 2.5% | Jan 25, 2024 | A segment fault (SEGV) flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadR... |
| CVE-2023-52355 | HIGH | 7.5 | 1.8% | Jan 25, 2024 | An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFRasterScanl... |
| CVE-2023-41474 | MEDIUM | 6.5 | 37.6% | Jan 25, 2024 | Directory Traversal vulnerability in Ivanti Avalanche 6.3.4.153 allows a remote authenticated attacker to obtain sensiti... |
| CVE-2023-7227 | CRITICAL | 9.8 | 1.3% | Jan 25, 2024 | SystemK NVR 504/508/516 versions 2.3.5SK.30084998 and prior are vulnerable to a command injection vulnerability in the ... |
| CVE-2023-6267 | CRITICAL | 9.8 | 0.7% | Jan 25, 2024 | A flaw was found in the json payload. If annotation based security is used to secure a REST resource, the JSON body that... |
| CVE-2023-52076 | HIGH | 7.8 | 1.0% | Jan 25, 2024 | Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A path traversal and arb... |
| CVE-2023-40547 | HIGH | 8.3 | 4.9% | Jan 25, 2024 | A remote code execution vulnerability was found in Shim. The Shim boot support trusts attacker-controlled values when pa... |
| CVE-2023-3181 | HIGH | 7.8 | 0.2% | Jan 25, 2024 | The C:\Program Files (x86)\Splashtop\Splashtop Software Updater\uninst.exe process creates a folder at C:\Windows\Temp~n... |
| CVE-2023-6282 | MEDIUM | 6.1 | 0.3% | Jan 25, 2024 | IceHrm 23.0.0.OS does not sufficiently encode user-controlled input, which creates a Cross-Site Scripting (XSS) vulnerab... |
| CVE-2023-33760 | MEDIUM | 5.3 | 0.3% | Jan 25, 2024 | SpliceCom Maximiser Soft PBX v1.5 and before was discovered to utilize a default SSL certificate. This issue can allow a... |
| CVE-2023-33759 | CRITICAL | 9.8 | 0.8% | Jan 25, 2024 | SpliceCom Maximiser Soft PBX v1.5 and before does not restrict excessive authentication attempts, allowing attackers to ... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now