2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-44395 | MEDIUM | 6.5 | 0.6% | Jan 22, 2024 | Autolab is a course management service that enables instructors to offer autograded programming assignments to their stu... |
| CVE-2023-52354 | HIGH | 7.5 | 0.5% | Jan 22, 2024 | chasquid before 1.13 allows SMTP smuggling because LF-terminated lines are accepted. |
| CVE-2023-47352 | HIGH | 8.8 | 0.4% | Jan 22, 2024 | Technicolor TC8715D devices have predictable default WPA2 security passwords. An attacker who scans for SSID and BSSID v... |
| CVE-2023-52353 | HIGH | 7.5 | 0.5% | Jan 21, 2024 | An issue was discovered in Mbed TLS through 3.5.1. In mbedtls_ssl_session_reset, the maximum negotiable TLS version is m... |
| CVE-2023-6531 | HIGH | 7 | 0.2% | Jan 21, 2024 | A use-after-free flaw was found in the Linux Kernel due to a race problem in the unix garbage collector's deletion of SK... |
| CVE-2023-7063 | MEDIUM | 6.1 | 0.5% | Jan 20, 2024 | The WPForms Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via form submission parameters in all ... |
| CVE-2023-46447 | MEDIUM | 4.3 | 0.4% | Jan 20, 2024 | The POPS! Rebel application 5.0 for Android, in POPS! Rebel Bluetooth Glucose Monitoring System, sends unencrypted gluco... |
| CVE-2023-51925 | CRITICAL | 9.8 | 1.0% | Jan 20, 2024 | An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doAction() method of ... |
| CVE-2023-51924 | CRITICAL | 9.8 | 1.0% | Jan 20, 2024 | An arbitrary file upload vulnerability in the uap.framework.rc.itf.IResourceManager interface of YonBIP v3_23.05 allows ... |
| CVE-2023-51906 | CRITICAL | 9.8 | 1.2% | Jan 20, 2024 | An issue in yonyou YonBIP v3_23.05 allows a remote attacker to execute arbitrary code via a crafted script to the Servic... |
| CVE-2023-47024 | HIGH | 8.8 | 0.3% | Jan 20, 2024 | Cross-Site Request Forgery (CSRF) in NCR Terminal Handler v.1.5.1 leads to a one-click account takeover. This is achieve... |
| CVE-2023-51928 | CRITICAL | 9.8 | 1.0% | Jan 20, 2024 | An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doAction() method of ... |
| CVE-2023-51927 | CRITICAL | 9.8 | 0.6% | Jan 20, 2024 | YonBIP v3_23.05 was discovered to contain a SQL injection vulnerability via the com.yonyou.hrcloud.attend.web.AttendScri... |
| CVE-2023-51926 | HIGH | 7.5 | 0.6% | Jan 20, 2024 | YonBIP v3_23.05 was discovered to contain an arbitrary file read vulnerability via the nc.bs.framework.comn.serv.CommonS... |
| CVE-2023-51892 | CRITICAL | 9.8 | 1.2% | Jan 20, 2024 | An issue in weaver e-cology v.10.0.2310.01 allows a remote attacker to execute arbitrary code via a crafted script to th... |
| CVE-2023-49329 | HIGH | 7.2 | 1.3% | Jan 19, 2024 | Anomali Match before 4.6.2 allows OS Command Injection. An authenticated admin user can inject and execute operating sys... |
| CVE-2023-6450 | MEDIUM | 5.5 | 0.2% | Jan 19, 2024 | An incorrect permissions vulnerability was reported in the Lenovo App Store app that could allow an attacker to use syst... |
| CVE-2023-6044 | MEDIUM | 6.8 | 0.2% | Jan 19, 2024 | A privilege escalation vulnerability was reported in Lenovo Vantage that could allow a local attacker with physical acce... |
| CVE-2023-6043 | HIGH | 7.8 | 0.2% | Jan 19, 2024 | A privilege escalation vulnerability was reported in Lenovo Vantage that could allow a local attacker to bypass integrit... |
| CVE-2023-5081 | LOW | 3.3 | 0.2% | Jan 19, 2024 | An information disclosure vulnerability was reported in the Lenovo Tab M8 HD that could allow a local application to gat... |
| CVE-2023-5080 | HIGH | 7.8 | 0.2% | Jan 19, 2024 | A privilege escalation vulnerability was reported in some Lenovo tablet products that could allow local applications acc... |
| CVE-2023-50694 | CRITICAL | 9.8 | 1.0% | Jan 19, 2024 | An issue in dom96 HTTPbeast v.0.4.1 and before allows a remote attacker to send a malicious crafted request due to insuf... |
| CVE-2023-50693 | CRITICAL | 9.8 | 1.0% | Jan 19, 2024 | An issue in Jester v.0.6.0 and before allows a remote attacker to send a malicious crafted request. |
| CVE-2023-50447 | HIGH | 8.1 | 1.7% | Jan 19, 2024 | Pillow through 10.1.0 allows PIL.ImageMath.eval Arbitrary Code Execution via the environment parameter, a different vuln... |
| CVE-2023-47035 | HIGH | 7.5 | 0.5% | Jan 19, 2024 | RPTC 0x3b08c was discovered to not conduct status checks on the parameter tradingOpen. This vulnerability can allow atta... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now