2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-49000 | CRITICAL | 9.8 | 0.9% | Dec 27, 2023 | An issue in ArtistScope ArtisBrowser v.34.1.5 and before allows an attacker to bypass intended access restrictions via i... |
| CVE-2023-46918 | MEDIUM | 4.6 | 0.3% | Dec 27, 2023 | Phlox com.phlox.simpleserver.plus (aka Simple HTTP Server PLUS) 1.8.1-plus has an Android manifest file that contains an... |
| CVE-2023-51084 | CRITICAL | 9.8 | 0.7% | Dec 27, 2023 | hyavijava v6.0.07.1 was discovered to contain a stack overflow via the ResultConverter.convert2Xml method. |
| CVE-2023-51080 | HIGH | 7.5 | 0.6% | Dec 27, 2023 | The NumberUtil.toBigDecimal method in hutool-core v5.8.23 was discovered to contain a stack overflow. |
| CVE-2023-51079 | MEDIUM | 5.3 | 0.7% | Dec 27, 2023 | A long execution time can occur in the ParseTools.subCompileExpression method in MVEL 2.5.0.Final because of many Java c... |
| CVE-2023-51075 | HIGH | 7.5 | 0.7% | Dec 27, 2023 | hutool-core v5.8.23 was discovered to contain an infinite loop in the StrSplitter.splitByRegex function. This vulnerabil... |
| CVE-2023-51074 | MEDIUM | 5.3 | 0.7% | Dec 27, 2023 | json-path v2.8.0 was discovered to contain a stack overflow via the Criteria.parse() method. |
| CVE-2023-47883 | CRITICAL | 9.8 | 1.9% | Dec 27, 2023 | The com.altamirano.fabricio.tvbrowser TV browser application through 4.5.1 for Android is vulnerable to JavaScript code ... |
| CVE-2023-47882 | HIGH | 7.1 | 0.5% | Dec 27, 2023 | The Kami Vision YI IoT com.yunyi.smartcamera application through 4.1.9_20231127 for Android allows a remote attacker to ... |
| CVE-2023-46919 | MEDIUM | 6.3 | 0.1% | Dec 27, 2023 | Phlox com.phlox.simpleserver (aka Simple HTTP Server) 1.8 and com.phlox.simpleserver.plus (aka Simple HTTP Server PLUS) ... |
| CVE-2023-43955 | CRITICAL | 9.8 | 1.3% | Dec 27, 2023 | The com.phlox.tvwebbrowser TV Bro application through 2.0.0 for Android mishandles external intents through WebView. Thi... |
| CVE-2023-43481 | CRITICAL | 9.8 | 1.1% | Dec 27, 2023 | An issue in Shenzhen TCL Browser TV Web BrowseHere (aka com.tcl.browser) 6.65.022_dab24cc6_231221_gp allows a remote att... |
| CVE-2023-52075 | HIGH | 7.5 | 0.5% | Dec 27, 2023 | ReVanced API proxies requests needed to feed the ReVanced Manager and website with data. Up to and including commit 71f8... |
| CVE-2023-40038 | HIGH | 8.8 | 0.3% | Dec 27, 2023 | Arris DG860A and DG1670A devices have predictable default WPA2 PSKs that could lead to unauthorized remote access. (They... |
| CVE-2023-52077 | CRITICAL | 9.8 | 0.7% | Dec 27, 2023 | Nexkey is a lightweight fork of Misskey v12 optimized for small to medium size servers. Prior to 12.23Q4.5, Nexkey allow... |
| CVE-2023-51700 | CRITICAL | 9.8 | 0.5% | Dec 27, 2023 | Unofficial Mobile BankID Integration for WordPress lets users employ Mobile BankID to authenticate themselves on your Wo... |
| CVE-2023-51697 | HIGH | 7.5 | 0.3% | Dec 27, 2023 | Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.7.0, Audiobookshelf is vulnerable to unauthenti... |
| CVE-2023-51665 | HIGH | 7.5 | 0.3% | Dec 27, 2023 | Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.7.0, Audiobookshelf is vulnerable to unauthenti... |
| CVE-2023-51664 | CRITICAL | 9.8 | 3.4% | Dec 27, 2023 | tj-actions/changed-files is a Github action to retrieve all files and directories. Prior to 41.0.0, the `tj-actions/chan... |
| CVE-2023-51443 | MEDIUM | 5.9 | 1.5% | Dec 27, 2023 | FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to ... |
| CVE-2023-50255 | HIGH | 7.8 | 1.1% | Dec 27, 2023 | Deepin-Compressor is the default archive manager of Deepin Linux OS. Prior to 5.12.21, there's a path traversal vulnerab... |
| CVE-2023-7116 | CRITICAL | 9.8 | 9.9% | Dec 27, 2023 | A vulnerability, which was classified as critical, has been found in WeiYe-Jing datax-web 2.1.2. Affected by this issue ... |
| CVE-2023-4641 | MEDIUM | 5.5 | 0.3% | Dec 27, 2023 | A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password ... |
| CVE-2023-3171 | HIGH | 7.5 | 0.9% | Dec 27, 2023 | A flaw was found in EAP-7 during deserialization of certain classes, which permits instantiation of HashMap and HashTabl... |
| CVE-2023-6190 | CRITICAL | 9.8 | 0.8% | Dec 27, 2023 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in İzmir Katip Çelebi Unive... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now