2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-51387 | HIGH | 8.8 | 1.5% | Dec 22, 2023 | Hertzbeat is an open source, real-time monitoring system. Hertzbeat uses aviatorscript to evaluate alert expressions. Th... |
| CVE-2023-50928 | CRITICAL | 9 | 0.4% | Dec 22, 2023 | "Sandbox Accounts for Events" provides multiple, temporary AWS accounts to a number of authenticated users simultaneousl... |
| CVE-2023-50924 | MEDIUM | 5.4 | 0.3% | Dec 22, 2023 | Englesystem is a shift planning system for chaos events. Engelsystem prior to v3.4.1 performed insufficient validation o... |
| CVE-2023-50731 | CRITICAL | 9.1 | 1.0% | Dec 22, 2023 | MindsDB is a SQL Server for artificial intelligence. Prior to version 23.11.4.1, the `put` method in `mindsdb/mindsdb/ap... |
| CVE-2023-50730 | HIGH | 7.5 | 0.8% | Dec 22, 2023 | Grackle is a GraphQL server written in functional Scala, built on the Typelevel stack. The GraphQL specification require... |
| CVE-2023-50727 | MEDIUM | 6.1 | 0.5% | Dec 22, 2023 | Resque is a Redis-backed Ruby library for creating background jobs, placing them on multiple queues, and processing them... |
| CVE-2023-50725 | MEDIUM | 6.1 | 0.5% | Dec 22, 2023 | Resque is a Redis-backed Ruby library for creating background jobs, placing them on multiple queues, and processing them... |
| CVE-2023-50712 | MEDIUM | 5.4 | 0.3% | Dec 22, 2023 | Iris is a web collaborative platform aiming to help incident responders sharing technical details during investigations.... |
| CVE-2023-51035 | CRITICAL | 9.8 | 1.3% | Dec 22, 2023 | TOTOLINK EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary command execution on the cstecgi.cgi NTPSyncWithHost ... |
| CVE-2023-51034 | CRITICAL | 9.8 | 1.1% | Dec 22, 2023 | TOTOlink EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary command execution via the cstecgi.cgi UploadFirmwareF... |
| CVE-2023-51033 | CRITICAL | 9.8 | 1.0% | Dec 22, 2023 | TOTOlink EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary command execution via the cstecgi.cgi setOpModeCfg in... |
| CVE-2023-51022 | CRITICAL | 9.8 | 1.0% | Dec 22, 2023 | TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘langFlag’ par... |
| CVE-2023-51021 | CRITICAL | 9.8 | 1.0% | Dec 22, 2023 | TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘merge’ parame... |
| CVE-2023-51020 | CRITICAL | 9.8 | 1.0% | Dec 22, 2023 | TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘langType’ par... |
| CVE-2023-51019 | CRITICAL | 9.8 | 1.0% | Dec 22, 2023 | TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘key5g’ parame... |
| CVE-2023-51018 | CRITICAL | 9.8 | 1.0% | Dec 22, 2023 | TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘opmode’ param... |
| CVE-2023-51017 | CRITICAL | 9.8 | 1.0% | Dec 22, 2023 | TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanIp paramete... |
| CVE-2023-51016 | CRITICAL | 9.8 | 1.0% | Dec 22, 2023 | TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the setRebootScheC... |
| CVE-2023-51015 | CRITICAL | 9.8 | 1.0% | Dec 22, 2023 | TOTOLINX EX1800T v9.1.0cu.2112_B20220316 is vulnerable to arbitrary command execution in the ‘enable parameter’ of the s... |
| CVE-2023-51014 | CRITICAL | 9.8 | 1.0% | Dec 22, 2023 | TOTOLINK EX1800T V9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanSecDns para... |
| CVE-2023-51013 | CRITICAL | 9.8 | 1.0% | Dec 22, 2023 | TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanNetmask par... |
| CVE-2023-51012 | CRITICAL | 9.8 | 1.0% | Dec 22, 2023 | TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanGateway par... |
| CVE-2023-51011 | CRITICAL | 9.8 | 1.0% | Dec 22, 2023 | TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanPriDns para... |
| CVE-2023-50714 | HIGH | 8.8 | 0.5% | Dec 22, 2023 | yii2-authclient is an extension that adds OpenID, OAuth, OAuth2 and OpenId Connect consumers for the Yii framework 2.0. ... |
| CVE-2023-50708 | CRITICAL | 9.8 | 0.7% | Dec 22, 2023 | yii2-authclient is an extension that adds OpenID, OAuth, OAuth2 and OpenId Connect consumers for the Yii framework 2.0. ... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now