2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-50256 | HIGH | 7.5 | 0.7% | Jan 3, 2024 | Froxlor is open source server administration software. Prior to version 2.1.2, it was possible to submit the registratio... |
| CVE-2023-52141 | — | — | — | Jan 3, 2024 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA po... |
| CVE-2023-52140 | — | — | — | Jan 3, 2024 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA po... |
| CVE-2023-6540 | HIGH | 7.5 | 0.5% | Jan 3, 2024 | A vulnerability was reported in the Lenovo Browser Mobile and Lenovo Browser HD Apps for Android that could allow an att... |
| CVE-2023-6338 | HIGH | 7.8 | 0.2% | Jan 3, 2024 | Uncontrolled search path vulnerabilities were reported in the Lenovo Universal Device Client (UDC) that could allow an a... |
| CVE-2023-49442 | CRITICAL | 9.8 | 38.5% | Jan 3, 2024 | Deserialization of Untrusted Data in jeecgFormDemoController in JEECG 4.0 and earlier allows attackers to run arbitrary ... |
| CVE-2023-5881 | HIGH | 8.2 | 0.6% | Jan 3, 2024 | Unauthenticated access permitted to web interface page The Genie Company Aladdin Connect (Retrofit-Kit Model ALDCM) "Gar... |
| CVE-2023-5880 | HIGH | 8.8 | 0.6% | Jan 3, 2024 | When the Genie Company Aladdin Connect garage door opener (Retrofit-Kit Model ALDCM) is placed into configuration mode t... |
| CVE-2023-5879 | MEDIUM | 6.8 | 0.4% | Jan 3, 2024 | Users’ product account authentication data was stored in clear text in The Genie Company Aladdin Connect Mobile Applicat... |
| CVE-2023-50090 | CRITICAL | 9.8 | 0.8% | Jan 3, 2024 | Arbitrary File Write vulnerability in the saveReportFile method of ureport2 2.2.9 and before allows attackers to write a... |
| CVE-2023-46929 | HIGH | 7.5 | 0.8% | Jan 3, 2024 | An issue discovered in GPAC 2.3-DEV-rev605-gfc9e29089-master in MP4Box in gf_avc_change_vui /afltest/gpac/src/media_tool... |
| CVE-2023-6004 | MEDIUM | 4.8 | 0.4% | Jan 3, 2024 | A flaw was found in libssh. By utilizing the ProxyCommand or ProxyJump feature, users can exploit unchecked hostname syn... |
| CVE-2023-50253 | MEDIUM | 6.5 | 0.7% | Jan 3, 2024 | Laf is a cloud development platform. In the Laf version design, the log uses communication with k8s to quickly retrieve ... |
| CVE-2023-46742 | MEDIUM | 6.5 | 0.3% | Jan 3, 2024 | CubeFS is an open-source cloud-native file storage system. CubeFS prior to version 3.3.1 was found to leak users secret ... |
| CVE-2023-46741 | CRITICAL | 9.8 | 0.3% | Jan 3, 2024 | CubeFS is an open-source cloud-native file storage system. A vulnerability was found in CubeFS prior to version 3.3.1 th... |
| CVE-2023-46740 | CRITICAL | 9.8 | 0.4% | Jan 3, 2024 | CubeFS is an open-source cloud-native file storage system. Prior to version 3.3.1, CubeFS used an insecure random string... |
| CVE-2023-46739 | MEDIUM | 5.9 | 0.4% | Jan 3, 2024 | CubeFS is an open-source cloud-native file storage system. A vulnerability was found during in the CubeFS master compone... |
| CVE-2023-46738 | MEDIUM | 6.5 | 0.6% | Jan 3, 2024 | CubeFS is an open-source cloud-native file storage system. A security vulnerability was found in CubeFS HandlerNode in v... |
| CVE-2023-30617 | MEDIUM | 6.5 | 0.5% | Jan 3, 2024 | Kruise provides automated management of large-scale applications on Kubernetes. Starting in version 0.8.0 and prior to v... |
| CVE-2023-45559 | HIGH | 8.2 | 0.5% | Jan 3, 2024 | An issue in Tamaki_hamanoki Line v.13.6.1 allows attackers to send crafted notifications via leakage of the channel acce... |
| CVE-2023-50093 | MEDIUM | 6.1 | 0.4% | Jan 3, 2024 | APIIDA API Gateway Manager for Broadcom Layer7 v2023.2.2 is vulnerable to Host Header Injection. |
| CVE-2023-37607 | HIGH | 7.5 | 1.5% | Jan 3, 2024 | Directory Traversal in Automatic Systems SOC FL9600 FirstLane V06 lego_T04E00 allows a remote attacker to obtain sensiti... |
| CVE-2023-50092 | MEDIUM | 6.1 | 0.4% | Jan 3, 2024 | APIIDA API Gateway Manager for Broadcom Layer7 v2023.2 is vulnerable to Cross Site Scripting (XSS). |
| CVE-2023-39655 | CRITICAL | 9.6 | 0.5% | Jan 3, 2024 | A host header injection vulnerability exists in the NPM package @perfood/couch-auth versions <= 0.20.0. By sending a spe... |
| CVE-2023-37608 | HIGH | 7.5 | 0.9% | Jan 3, 2024 | An issue in Automatic Systems SOC FL9600 FirstLane V06 lego_T04E00 allows a remote attacker to obtain sensitive informat... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now