2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-6974 | CRITICAL | 9.8 | 1.5% | Dec 20, 2023 | A malicious user could use this issue to access internal HTTP(s) servers and in the worst case (ie: aws instance) it cou... |
| CVE-2023-47707 | MEDIUM | 5.4 | 0.4% | Dec 20, 2023 | IBM Security Guardium Key Lifecycle Manager 4.3 is vulnerable to cross-site scripting. This vulnerability allows users t... |
| CVE-2023-47705 | MEDIUM | 4.3 | 0.5% | Dec 20, 2023 | IBM Security Guardium Key Lifecycle Manager 4.3 could allow an authenticated user to manipulate username data due to imp... |
| CVE-2023-47703 | MEDIUM | 5.3 | 0.8% | Dec 20, 2023 | IBM Security Guardium Key Lifecycle Manager 4.3 could allow a remote attacker to obtain sensitive information when a det... |
| CVE-2023-47702 | CRITICAL | 9.1 | 1.0% | Dec 20, 2023 | IBM Security Guardium Key Lifecycle Manager 4.3 could allow a remote attacker to traverse directories on the system. An ... |
| CVE-2023-47706 | HIGH | 8.8 | 0.8% | Dec 20, 2023 | IBM Security Guardium Key Lifecycle Manager 4.3 could allow an authenticated user to upload files of a dangerous file ty... |
| CVE-2023-47704 | HIGH | 7.5 | 0.6% | Dec 20, 2023 | IBM Security Guardium Key Lifecycle Manager 4.3 contains plain text hard-coded credentials or other secrets in source co... |
| CVE-2023-27172 | CRITICAL | 9.1 | 0.7% | Dec 20, 2023 | Xpand IT Write-back Manager v2.3.1 uses weak secret keys to sign JWT tokens. This allows attackers to easily obtain the ... |
| CVE-2023-6689 | HIGH | 8.8 | 0.3% | Dec 20, 2023 | A successful CSRF attack could force the user to perform state changing requests on the application. If the victim ... |
| CVE-2023-50707 | HIGH | 7.5 | 0.7% | Dec 20, 2023 | Through the exploitation of active user sessions, an attacker could send custom requests to cause a denial-of-service c... |
| CVE-2023-50706 | MEDIUM | 4.3 | 0.2% | Dec 20, 2023 | A user without administrator permissions with access to the UC500 windows system could perform a memory dum... |
| CVE-2023-50705 | MEDIUM | 5.3 | 0.5% | Dec 20, 2023 | An attacker could create malicious requests to obtain sensitive information about the web server. |
| CVE-2023-50704 | MEDIUM | 6.1 | 0.4% | Dec 20, 2023 | An attacker could construct a URL within the application that causes a redirection to an arbitrary external domain ... |
| CVE-2023-50703 | MEDIUM | 5.9 | 0.3% | Dec 20, 2023 | An attacker with network access could perform a man-in-the-middle (MitM) attack and capture sensitive information to ga... |
| CVE-2023-47161 | MEDIUM | 6.5 | 0.8% | Dec 20, 2023 | IBM UrbanCode Deploy (UCD) 7.1 through 7.1.2.14, 7.2 through 7.2.3.7, and 7.3 through 7.3.2.2 may mishandle input valida... |
| CVE-2023-45887 | CRITICAL | 9.8 | 1.6% | Dec 20, 2023 | DS Wireless Communication (DWC) with DWC_VERSION_3 and DWC_VERSION_11 allows remote attackers to execute arbitrary code ... |
| CVE-2023-42013 | MEDIUM | 5.3 | 0.7% | Dec 20, 2023 | IBM UrbanCode Deploy (UCD) 7.1 through 7.1.2.14, 7.2 through 7.2.3.7, and 7.3 through 7.3.2.2 could allow a remote attac... |
| CVE-2023-42012 | MEDIUM | 5.5 | 0.2% | Dec 20, 2023 | An IBM UrbanCode Deploy Agent 7.2 through 7.2.3.7, and 7.3 through 7.3.2.2 installed as a Windows service in a non-stand... |
| CVE-2023-6930 | CRITICAL | 9.8 | 0.8% | Dec 19, 2023 | EuroTel ETL3100 versions v01c01 and v01x37 suffer from an unauthenticated configuration and log download vulner... |
| CVE-2023-6929 | CRITICAL | 9.8 | 0.8% | Dec 19, 2023 | EuroTel ETL3100 versions v01c01 and v01x37 are vulnerable to insecure direct object references that occur when the ... |
| CVE-2023-6928 | CRITICAL | 9.8 | 0.8% | Dec 19, 2023 | EuroTel ETL3100 versions v01c01 and v01x37 does not limit the number of attempts to guess administrative credentials in... |
| CVE-2023-49147 | HIGH | 7.8 | 0.5% | Dec 19, 2023 | An issue was discovered in PDF24 Creator 11.14.0. The configuration of the msi installer file was found to produce a vis... |
| CVE-2023-45172 | MEDIUM | 5.5 | 0.2% | Dec 19, 2023 | IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in AIX windows to caus... |
| CVE-2023-50835 | HIGH | 8.8 | 0.3% | Dec 19, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Praveen Goswami Advanced Category Template.This issue affects Advance... |
| CVE-2023-49164 | HIGH | 8.8 | 0.3% | Dec 19, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in OceanWP Ocean Extra.This issue affects Ocean Extra: from n/a through ... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now