2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-31024 | CRITICAL | 9.8 | 0.6% | Jan 12, 2024 | NVIDIA DGX A100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause stack m... |
| CVE-2023-46805 | HIGH | 8.2 | 100.0% | Jan 12, 2024 | An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a re... |
| CVE-2023-31036 | HIGH | 8.8 | 0.9% | Jan 12, 2024 | NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where, when it is launched with the non-de... |
| CVE-2023-28899 | MEDIUM | 5.5 | 0.1% | Jan 12, 2024 | By sending a specific reset UDS request via OBDII port of Skoda vehicles, it is possible to cause vehicle engine shutdow... |
| CVE-2023-51978 | MEDIUM | 6.5 | 0.5% | Jan 12, 2024 | In PHPGurukul Art Gallery Management System v1.1, "Update Artist Image" functionality of "imageid" parameter is vulnerab... |
| CVE-2023-28898 | MEDIUM | 5.3 | 0.2% | Jan 12, 2024 | The Real-Time Streaming Protocol implementation in the MIB3 infotainment incorrectly handles requests to /logs URI, when... |
| CVE-2023-28897 | CRITICAL | 9.8 | 0.3% | Jan 12, 2024 | The secret value used for access to critical UDS services of the MIB3 infotainment is hardcoded in the firmware. Vulner... |
| CVE-2023-51949 | HIGH | 8.8 | 0.3% | Jan 12, 2024 | Verydows v2.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /protected/controller/back... |
| CVE-2023-49262 | CRITICAL | 9.8 | 0.7% | Jan 12, 2024 | The authentication mechanism can be bypassed by overflowing the value of the Cookie "authentication" field, provided the... |
| CVE-2023-49261 | HIGH | 7.5 | 0.5% | Jan 12, 2024 | The "tokenKey" value used in user authorization is visible in the HTML source of the login page. |
| CVE-2023-49260 | MEDIUM | 6.1 | 0.3% | Jan 12, 2024 | An XSS attack can be performed by changing the MOTD banner and pointing the victim to the "terminal_tool.cgi" path. It c... |
| CVE-2023-49259 | HIGH | 7.5 | 0.3% | Jan 12, 2024 | The authentication cookies are generated using an algorithm based on the username, hardcoded secret and the up-time, and... |
| CVE-2023-49258 | MEDIUM | 6.1 | 0.3% | Jan 12, 2024 | User browser may be forced to execute JavaScript and pass the authentication cookie to the attacker leveraging the XSS v... |
| CVE-2023-49257 | HIGH | 8.8 | 0.3% | Jan 12, 2024 | An authenticated user is able to upload an arbitrary CGI-compatible file using the certificate upload utility and execut... |
| CVE-2023-49256 | HIGH | 7.5 | 0.5% | Jan 12, 2024 | It is possible to download the configuration backup without authorization and decrypt included passwords using hardcoded... |
| CVE-2023-49255 | CRITICAL | 9.8 | 0.7% | Jan 12, 2024 | The router console is accessible without authentication at "data" field, and while a user needs to be logged in in order... |
| CVE-2023-49254 | HIGH | 8.8 | 0.7% | Jan 12, 2024 | Authenticated user can execute arbitrary commands in the context of the root user by providing payload in the "destinati... |
| CVE-2023-49253 | CRITICAL | 9.8 | 0.6% | Jan 12, 2024 | Root user password is hardcoded into the device and cannot be changed in the user interface. |
| CVE-2023-7028 | CRITICAL | 9.8 | 95.0% | Jan 12, 2024 | An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.... |
| CVE-2023-6955 | MEDIUM | 5.3 | 0.6% | Jan 12, 2024 | A missing authorization check vulnerability exists in GitLab Remote Development affecting all versions prior to 16.5.6, ... |
| CVE-2023-5356 | HIGH | 8.8 | 0.8% | Jan 12, 2024 | Incorrect authorization checks in GitLab CE/EE from all versions starting from 8.13 before 16.5.6, all versions starting... |
| CVE-2023-4812 | MEDIUM | 5.3 | 0.5% | Jan 12, 2024 | An issue has been discovered in GitLab EE affecting all versions starting from 15.3 before 16.5.6, all versions starting... |
| CVE-2023-2030 | MEDIUM | 5.3 | 0.4% | Jan 12, 2024 | An issue has been discovered in GitLab CE/EE affecting all versions from 12.2 prior to 16.5.6, 16.6 prior to 16.6.4, and... |
| CVE-2023-0437 | HIGH | 7.5 | 1.1% | Jan 12, 2024 | When calling bson_utf8_validate on some inputs a loop with an exit condition that cannot be reached may occur, i.e. an i... |
| CVE-2023-52026 | CRITICAL | 9.8 | 1.6% | Jan 12, 2024 | TOTOlink EX1800T V9.1.0cu.2112_B20220316 was discovered to contain a remote command execution (RCE) vulnerability via th... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now