2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-49140 | HIGH | 7.5 | 1.0% | Dec 12, 2023 | Denial-of-service (DoS) vulnerability exists in commplex-link service of HMI GC-A2 series. If a remote unauthenticated a... |
| CVE-2023-41963 | HIGH | 7.5 | 1.0% | Dec 12, 2023 | Denial-of-service (DoS) vulnerability exists in FTP service of HMI GC-A2 series. If a remote unauthenticated attacker se... |
| CVE-2023-6547 | MEDIUM | 5.4 | 0.3% | Dec 12, 2023 | Mattermost fails to validate team membership when a user attempts to access a playbook, allowing a user with permissions... |
| CVE-2023-49874 | MEDIUM | 4.3 | 0.4% | Dec 12, 2023 | Mattermost fails to check whether a user is a guest when updating the tasks of a private playbook run allowing a guest t... |
| CVE-2023-49809 | MEDIUM | 6.5 | 0.6% | Dec 12, 2023 | Mattermost fails to handle a null request body in the /add endpoint, allowing a simple member to send a request with nul... |
| CVE-2023-49695 | MEDIUM | 6.8 | 0.9% | Dec 12, 2023 | OS command injection vulnerability in WRC-X3000GSN v1.0.2, WRC-X3000GS v1.0.24 and earlier, and WRC-X3000GSA v1.0.24 and... |
| CVE-2023-49607 | HIGH | 7.5 | 0.6% | Dec 12, 2023 | Mattermost fails to validate the type of the "reminder" body request parameter allowing an attacker to crash the Playboo... |
| CVE-2023-49563 | MEDIUM | 6.1 | 0.5% | Dec 12, 2023 | Cross Site Scripting (XSS) in Voltronic Power SNMP Web Pro v.1.1 allows an attacker to execute arbitrary code via a craf... |
| CVE-2023-48677 | HIGH | 7.8 | 0.3% | Dec 12, 2023 | Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protec... |
| CVE-2023-46701 | MEDIUM | 5.3 | 0.4% | Dec 12, 2023 | Mattermost fails to perform authorization checks in the /plugins/playbooks/api/v0/runs/add-to-timeline-dialog endpoint ... |
| CVE-2023-45847 | HIGH | 7.5 | 0.6% | Dec 12, 2023 | Mattermost fails to to check the length when setting the title in a run checklist in Playbooks, allowing an attacker to ... |
| CVE-2023-45316 | HIGH | 8.8 | 0.3% | Dec 12, 2023 | Mattermost fails to validate if a relative path is passed in /plugins/playbooks/api/v0/telemetry/run/<telem_run_id> as a... |
| CVE-2023-41623 | HIGH | 7.2 | 0.8% | Dec 12, 2023 | Emlog version pro2.1.14 was discovered to contain a SQL injection vulnerability via the uid parameter at /admin/media.ph... |
| CVE-2023-48642 | MEDIUM | 5.4 | 0.5% | Dec 12, 2023 | Archer Platform 6.x before 6.13 P2 (6.13.0.2) contains an authenticated HTML content injection vulnerability. A remote a... |
| CVE-2023-48641 | HIGH | 8.8 | 0.5% | Dec 12, 2023 | Archer Platform 6.x before 6.14 P1 HF2 (6.14.0.1.2) contains an insecure direct object reference vulnerability. An authe... |
| CVE-2023-41120 | MEDIUM | 6.5 | 0.5% | Dec 12, 2023 | An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x befo... |
| CVE-2023-41119 | HIGH | 8.8 | 0.6% | Dec 12, 2023 | An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x befo... |
| CVE-2023-41118 | HIGH | 8.8 | 0.8% | Dec 12, 2023 | An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x befo... |
| CVE-2023-41117 | CRITICAL | 9.8 | 0.8% | Dec 12, 2023 | An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x befo... |
| CVE-2023-41116 | MEDIUM | 4.3 | 0.4% | Dec 12, 2023 | An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x befo... |
| CVE-2023-41115 | MEDIUM | 6.5 | 0.6% | Dec 12, 2023 | An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x befo... |
| CVE-2023-41114 | MEDIUM | 6.5 | 0.6% | Dec 12, 2023 | An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x befo... |
| CVE-2023-41113 | MEDIUM | 4.3 | 0.5% | Dec 12, 2023 | An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x befo... |
| CVE-2023-6709 | HIGH | 8.8 | 0.9% | Dec 12, 2023 | Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository mlflow/mlflow prior to 2.9.2. |
| CVE-2023-50424 | CRITICAL | 9.8 | 1.1% | Dec 12, 2023 | SAP BTP Security Services Integration Library ([Golang] github.com/sap/cloud-security-client-go) - versions < 0.17.0, al... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now