2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-50262 | HIGH | 7.5 | 1.5% | Dec 13, 2023 | Dompdf is an HTML to PDF converter for PHP. When parsing SVG images Dompdf performs an initial validation to ensure that... |
| CVE-2023-50248 | MEDIUM | 6.5 | 0.6% | Dec 13, 2023 | CKAN is an open-source data management system for powering data hubs and data portals. Starting in version 2.0.0 and pri... |
| CVE-2023-50246 | MEDIUM | 5.5 | 0.5% | Dec 13, 2023 | jq is a command-line JSON processor. Version 1.7 is vulnerable to heap-based buffer overflow. Version 1.7.1 contains a p... |
| CVE-2023-49878 | MEDIUM | 4.3 | 0.7% | Dec 13, 2023 | IBM System Storage Virtualization Engine TS7700 3957-VEC, 3948-VED and 3957-VEC could allow a remote attacker to obtain ... |
| CVE-2023-49877 | MEDIUM | 4.3 | 0.8% | Dec 13, 2023 | IBM System Storage Virtualization Engine TS7700 3957-VEC, 3948-VED and 3957-VEC could allow a remote authenticated user ... |
| CVE-2023-48702 | HIGH | 7.2 | 1.2% | Dec 13, 2023 | Jellyfin is a system for managing and streaming media. Prior to version 10.8.13, the `/System/MediaEncoder/Path` endpoin... |
| CVE-2023-47624 | MEDIUM | 6.5 | 0.8% | Dec 13, 2023 | Audiobookshelf is a self-hosted audiobook and podcast server. In versions 2.4.3 and prior, any user (regardless of their... |
| CVE-2023-47619 | MEDIUM | 6.5 | 0.6% | Dec 13, 2023 | Audiobookshelf is a self-hosted audiobook and podcast server. In versions 2.4.3 and prior, users with the update permiss... |
| CVE-2023-6774 | MEDIUM | 5.4 | 0.7% | Dec 13, 2023 | A vulnerability was found in CodeAstro POS and Inventory Management System 1.0 and classified as problematic. Affected b... |
| CVE-2023-6773 | HIGH | 8.8 | 0.7% | Dec 13, 2023 | A vulnerability has been found in CodeAstro POS and Inventory Management System 1.0 and classified as problematic. Affec... |
| CVE-2023-50444 | HIGH | 7.5 | 0.6% | Dec 13, 2023 | By default, .ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 (ANSSI qualification submission); ZED! fo... |
| CVE-2023-50441 | MEDIUM | 5.5 | 0.2% | Dec 13, 2023 | Encrypted folders created by PRIMX ZONECENTRAL for Windows before Q.2021.2 (ANSSI qualification submission) or ZONECENTR... |
| CVE-2023-49296 | MEDIUM | 6.1 | 0.3% | Dec 13, 2023 | The Arduino Create Agent allows users to use the Arduino Create applications to upload code to any USB connected Arduino... |
| CVE-2023-46247 | HIGH | 7.5 | 0.7% | Dec 13, 2023 | Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine (EVM). Contracts containing large arrays mi... |
| CVE-2023-6795 | MEDIUM | 4.7 | 1.1% | Dec 13, 2023 | An OS command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to di... |
| CVE-2023-6794 | MEDIUM | 4.7 | 0.6% | Dec 13, 2023 | An arbitrary file upload vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-write adminis... |
| CVE-2023-6793 | LOW | 2.7 | 0.6% | Dec 13, 2023 | An improper privilege management vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-only ... |
| CVE-2023-6792 | MEDIUM | 6.3 | 1.1% | Dec 13, 2023 | An OS command injection vulnerability in the XML API of Palo Alto Networks PAN-OS software enables an authenticated API ... |
| CVE-2023-6791 | MEDIUM | 4.9 | 0.6% | Dec 13, 2023 | A credential disclosure vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-only administr... |
| CVE-2023-6790 | MEDIUM | 6.1 | 0.7% | Dec 13, 2023 | A DOM-Based cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables a remote attacker to ... |
| CVE-2023-6789 | MEDIUM | 4.8 | 0.4% | Dec 13, 2023 | A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables a malicious authenticated read-... |
| CVE-2023-6772 | HIGH | 7.2 | 0.6% | Dec 13, 2023 | A vulnerability, which was classified as critical, was found in OTCMS 7.01. Affected is an unknown function of the file ... |
| CVE-2023-6771 | CRITICAL | 9.8 | 0.6% | Dec 13, 2023 | A vulnerability, which was classified as critical, has been found in SourceCodester Simple Student Attendance System 1.0... |
| CVE-2023-46727 | CRITICAL | 9.8 | 67.1% | Dec 13, 2023 | GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.11, GLPI i... |
| CVE-2023-46726 | CRITICAL | 9.8 | 1.3% | Dec 13, 2023 | GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.11, on PHP... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now