2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-50147 | CRITICAL | 9.8 | 1.2% | Dec 22, 2023 | There is an arbitrary command execution vulnerability in the setDiagnosisCfg function of the cstecgi .cgi of the TOTOlin... |
| CVE-2023-51028 | CRITICAL | 9.8 | 1.0% | Dec 22, 2023 | TOTOLINK EX1800T 9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the apcliChannel pa... |
| CVE-2023-51027 | CRITICAL | 9.8 | 1.0% | Dec 22, 2023 | TOTOlink EX1800T V9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘apcliAuthMode... |
| CVE-2023-51026 | CRITICAL | 9.8 | 1.0% | Dec 22, 2023 | TOTOlink EX1800T V9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘hour’ paramet... |
| CVE-2023-51025 | CRITICAL | 9.8 | 1.0% | Dec 22, 2023 | TOTOlink EX1800T V9.1.0cu.2112_B20220316 is vulnerable to an unauthorized arbitrary command execution in the ‘admuser’ p... |
| CVE-2023-51024 | CRITICAL | 9.8 | 1.0% | Dec 22, 2023 | TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘tz’ parameter... |
| CVE-2023-51023 | CRITICAL | 9.8 | 1.0% | Dec 22, 2023 | TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to arbitrary command execution in the ‘host_time’ parameter of th... |
| CVE-2023-43088 | MEDIUM | 6.8 | 0.3% | Dec 22, 2023 | Dell Client BIOS contains a pre-boot direct memory access (DMA) vulnerability. An authenticated attacker with physical ... |
| CVE-2023-39251 | MEDIUM | 6.7 | 0.2% | Dec 22, 2023 | Dell BIOS contains an Improper Input Validation vulnerability. A local malicious user with high privileges could potent... |
| CVE-2023-51662 | HIGH | 7.5 | 0.3% | Dec 22, 2023 | The Snowflake .NET driver provides an interface to the Microsoft .NET open source software framework for developing appl... |
| CVE-2023-51649 | MEDIUM | 4.3 | 0.4% | Dec 22, 2023 | Nautobot is a Network Source of Truth and Network Automation Platform built as a web application atop the Django Python ... |
| CVE-2023-51448 | HIGH | 8.8 | 9.0% | Dec 22, 2023 | Cacti provides an operational monitoring and fault management framework. Version 1.2.25 has a Blind SQL Injection (SQLi)... |
| CVE-2023-50259 | MEDIUM | 5.3 | 0.6% | Dec 22, 2023 | Medusa is an automatic video library manager for TV shows. Versions prior to 1.0.19 are vulnerable to unauthenticated bl... |
| CVE-2023-50258 | MEDIUM | 5.3 | 0.7% | Dec 22, 2023 | Medusa is an automatic video library manager for TV shows. Versions prior to 1.0.19 are vulnerable to unauthenticated bl... |
| CVE-2023-50254 | HIGH | 7.8 | 2.1% | Dec 22, 2023 | Deepin Linux's default document reader `deepin-reader` software suffers from a serious vulnerability in versions prior t... |
| CVE-2023-50250 | MEDIUM | 6.1 | 1.3% | Dec 22, 2023 | Cacti is an open source operational monitoring and fault management framework. A reflection cross-site scripting vulnera... |
| CVE-2023-49792 | CRITICAL | 9.8 | 1.0% | Dec 22, 2023 | Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. In Nextcloud Server prior to versio... |
| CVE-2023-49791 | MEDIUM | 5.4 | 0.6% | Dec 22, 2023 | Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. In Nextcloud Server prior to versio... |
| CVE-2023-49790 | MEDIUM | 4.3 | 0.3% | Dec 22, 2023 | The Nextcloud iOS Files app allows users of iOS to interact with Nextcloud, a self-hosted productivity platform. Prior t... |
| CVE-2023-49088 | MEDIUM | 4.8 | 1.3% | Dec 22, 2023 | Cacti is an open source operational monitoring and fault management framework. The fix applied for CVE-2023-39515 in ver... |
| CVE-2023-49085 | HIGH | 8.8 | 84.6% | Dec 22, 2023 | Cacti provides an operational monitoring and fault management framework. In versions 1.2.25 and prior, it is possible to... |
| CVE-2023-48704 | HIGH | 7.5 | 0.5% | Dec 22, 2023 | ClickHouse is an open-source column-oriented database management system that allows generating analytical data reports i... |
| CVE-2023-48670 | HIGH | 7.8 | 0.2% | Dec 22, 2023 | Dell SupportAssist for Home PCs version 3.14.1 and prior versions contain a privilege escalation vulnerability in the i... |
| CVE-2023-45957 | MEDIUM | 5.4 | 0.4% | Dec 22, 2023 | A stored cross-site scripting (XSS) vulnerability in the component admin/AdminRequestSqlController.php of thirty bees be... |
| CVE-2023-45165 | MEDIUM | 5.5 | 0.2% | Dec 22, 2023 | IBM AIX 7.2 and 7.3 could allow a non-privileged local user to exploit a vulnerability in the AIX SMB client to cause a ... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now