2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-45184 | HIGH | 7.5 | 1.6% | Dec 14, 2023 | IBM i Access Client Solutions 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.3 could allow an attacker to obtain a decryp... |
| CVE-2023-41720 | HIGH | 7.8 | 0.7% | Dec 14, 2023 | A vulnerability exists on all versions of Ivanti Connect Secure below 22.6R2 where an attacker with a foothold on an Iva... |
| CVE-2023-41719 | HIGH | 7.2 | 3.4% | Dec 14, 2023 | A vulnerability exists on all versions of Ivanti Connect Secure below 22.6R2 where an attacker impersonating an administ... |
| CVE-2023-43042 | HIGH | 7.5 | 0.7% | Dec 14, 2023 | IBM SAN Volume Controller, IBM Storwize, IBM FlashSystem and IBM Storage Virtualize 8.3 products use default passwords f... |
| CVE-2023-31546 | CRITICAL | 9.6 | 49.4% | Dec 14, 2023 | Cross Site Scripting (XSS) vulnerability in DedeBIZ v6.0.3 allows attackers to run arbitrary code via the search feature... |
| CVE-2023-41618 | MEDIUM | 6.1 | 0.5% | Dec 14, 2023 | Emlog Pro v2.1.14 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the component /adm... |
| CVE-2023-40921 | CRITICAL | 9.8 | 0.5% | Dec 14, 2023 | SQL Injection vulnerability in functions/point_list.php in Common Services soliberte before v4.3.03 allows attackers to ... |
| CVE-2023-21751 | MEDIUM | 6.5 | 1.0% | Dec 14, 2023 | Azure DevOps Server Spoofing Vulnerability |
| CVE-2023-49646 | MEDIUM | 6.5 | 0.4% | Dec 13, 2023 | Improper authentication in some Zoom clients before version 5.16.5 may allow an authenticated user to conduct a denial o... |
| CVE-2023-45174 | HIGH | 7.8 | 0.2% | Dec 13, 2023 | IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a privileged local user to exploit a vulnerability in the qdaemon command to ... |
| CVE-2023-45170 | HIGH | 7.8 | 0.2% | Dec 13, 2023 | IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the piobe command t... |
| CVE-2023-45166 | HIGH | 7.8 | 0.2% | Dec 13, 2023 | IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the piodmgrsu comma... |
| CVE-2023-43586 | HIGH | 8.8 | 1.0% | Dec 13, 2023 | Path traversal in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows may allow an a... |
| CVE-2023-43585 | MEDIUM | 6.5 | 0.6% | Dec 13, 2023 | Improper access control in Zoom Mobile App for iOS and Zoom SDKs for iOS before version 5.16.5 may allow an authenticate... |
| CVE-2023-43583 | MEDIUM | 4.9 | 0.6% | Dec 13, 2023 | Cryptographic issues Zoom Mobile App for Android, Zoom Mobile App for iOS, and Zoom SDKs for Android and iOS before vers... |
| CVE-2023-41621 | MEDIUM | 6.1 | 1.1% | Dec 13, 2023 | A Cross Site Scripting (XSS) vulnerability was discovered in Emlog Pro v2.1.14 via the component /admin/store.php. |
| CVE-2023-50709 | HIGH | 7.5 | 0.7% | Dec 13, 2023 | Cube is a semantic layer for building data applications. Prior to version 0.34.34, it is possible to make the entire Cub... |
| CVE-2023-47623 | MEDIUM | 6.1 | 0.4% | Dec 13, 2023 | Scrypted is a home video integration and automation platform. In versions 0.55.0 and prior, a reflected cross-site scrip... |
| CVE-2023-47620 | MEDIUM | 6.1 | 0.5% | Dec 13, 2023 | Scrypted is a home video integration and automation platform. In versions 0.55.0 and prior, a reflected cross-site scrip... |
| CVE-2023-6775 | MEDIUM | 6.1 | 0.6% | Dec 13, 2023 | A vulnerability was found in CodeAstro POS and Inventory Management System 1.0. It has been classified as problematic. T... |
| CVE-2023-50443 | MEDIUM | 4.6 | 0.3% | Dec 13, 2023 | Encrypted disks created by PRIMX CRYHOD for Windows before Q.2020.4 (ANSSI qualification submission) or CRYHOD for Windo... |
| CVE-2023-50442 | MEDIUM | 5.5 | 0.1% | Dec 13, 2023 | Encrypted folders created by PRIMX ZONECENTRAL through 2023.5 can be modified by a local attacker (with appropriate priv... |
| CVE-2023-50440 | MEDIUM | 5.5 | 0.2% | Dec 13, 2023 | ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 (ANSSI qualification submission); ZED! for Windows bef... |
| CVE-2023-50439 | MEDIUM | 5.3 | 0.5% | Dec 13, 2023 | ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 (ANSSI qualification submission), ZED! for Windows bef... |
| CVE-2023-50268 | MEDIUM | 5.5 | 0.4% | Dec 13, 2023 | jq is a command-line JSON processor. Version 1.7 is vulnerable to stack-based buffer overflow in builds using decNumber.... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now