2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-6679 | MEDIUM | 5.5 | 0.3% | Dec 11, 2023 | A null pointer dereference vulnerability was found in dpll_pin_parent_pin_set() in drivers/dpll/dpll_netlink.c in the Di... |
| CVE-2023-49795 | MEDIUM | 5.3 | 0.4% | Dec 11, 2023 | MindsDB connects artificial intelligence models to real time data. Versions prior to 23.11.4.1 contain a server-side req... |
| CVE-2023-48715 | MEDIUM | 5.4 | 0.5% | Dec 11, 2023 | Tuleap is an open source suite to improve management of software developments and collaboration. Prior to version 15.2.9... |
| CVE-2023-6538 | MEDIUM | 6.5 | 1.6% | Dec 11, 2023 | SMU versions prior to 14.8.7825.01 are susceptible to unintended information disclosure, through URL manipulation. Authe... |
| CVE-2023-6671 | HIGH | 8.8 | 0.2% | Dec 11, 2023 | A vulnerability has been discovered on OJS, that consists in a CSRF (Cross-Site Request Forgery) attack that forces an e... |
| CVE-2023-6194 | HIGH | 7.1 | 0.3% | Dec 11, 2023 | In Eclipse Memory Analyzer versions 0.7 to 1.14.0, report definition XML files are not filtered to prohibit document typ... |
| CVE-2023-49418 | CRITICAL | 9.8 | 0.9% | Dec 11, 2023 | TOTOLink A7000R V9.1.0u.6115_B20201022has a stack overflow vulnerability via setIpPortFilterRules. |
| CVE-2023-49417 | CRITICAL | 9.8 | 0.9% | Dec 11, 2023 | TOTOLink A7000R V9.1.0u.6115_B20201022 has a stack overflow vulnerability via setOpModeCfg. |
| CVE-2023-6186 | HIGH | 8.8 | 0.8% | Dec 11, 2023 | Insufficient macro permission validation of The Document Foundation LibreOffice allows an attacker to execute built-in m... |
| CVE-2023-6185 | HIGH | 8.8 | 1.0% | Dec 11, 2023 | Improper Input Validation vulnerability in GStreamer integration of The Document Foundation LibreOffice allows an attack... |
| CVE-2023-49964 | HIGH | 8.8 | 34.7% | Dec 11, 2023 | An issue was discovered in Hyland Alfresco Community Edition through 7.2.0. By inserting malicious content in the folder... |
| CVE-2023-5500 | HIGH | 8.8 | 1.0% | Dec 11, 2023 | This vulnerability allows an remote attacker with low privileges to misuse Improper Control of Generation of Code ('Code... |
| CVE-2023-49355 | HIGH | 7.5 | 1.2% | Dec 11, 2023 | decToString in decNumber/decNumber.c in jq 88f01a7 has a one-byte out-of-bounds write via the " []-1.2e-1111111111" inpu... |
| CVE-2023-6181 | CRITICAL | 9.8 | 0.4% | Dec 11, 2023 | An oversight in BCB handling of reboot reason that allows for persistent code execution |
| CVE-2023-48425 | CRITICAL | 9.8 | 0.4% | Dec 11, 2023 | U-Boot vulnerability resulting in persistent Code Execution |
| CVE-2023-48424 | CRITICAL | 9.8 | 0.3% | Dec 11, 2023 | U-Boot shell vulnerability resulting in Privilege escalation in a production device |
| CVE-2023-48417 | CRITICAL | 9.8 | 0.3% | Dec 11, 2023 | Missing Permission checks resulting in unauthorized access and Manipulation in KeyChainActivity Application |
| CVE-2023-6659 | HIGH | 7.5 | 0.6% | Dec 11, 2023 | A vulnerability, which was classified as critical, has been found in Campcodes Web-Based Student Clearance System 1.0. T... |
| CVE-2023-50465 | MEDIUM | 5.4 | 0.6% | Dec 11, 2023 | A stored cross-site scripting (XSS) vulnerability exists in Monica (aka MonicaHQ) 4.0.0 via an SVG document uploaded by ... |
| CVE-2023-6658 | CRITICAL | 9.8 | 0.8% | Dec 10, 2023 | A vulnerability classified as critical was found in SourceCodester Simple Student Attendance System 1.0. This vulnerabil... |
| CVE-2023-50463 | MEDIUM | 6.5 | 0.7% | Dec 10, 2023 | The caddy-geo-ip (aka GeoIP) middleware through 0.6.0 for Caddy 2, when trust_header X-Forwarded-For is used, allows att... |
| CVE-2023-6657 | CRITICAL | 9.8 | 0.9% | Dec 10, 2023 | A vulnerability classified as critical has been found in SourceCodester Simple Student Attendance System 1.0. This affec... |
| CVE-2023-6656 | HIGH | 7.5 | 0.9% | Dec 10, 2023 | ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in DeepFaceLab pretrained DF.wf.288res.384.92.72.22. It has be... |
| CVE-2023-50457 | MEDIUM | 4.3 | 0.4% | Dec 10, 2023 | An issue was discovered in Zammad before 6.2.0. When listing tickets linked to a knowledge base answer, or knowledge bas... |
| CVE-2023-50456 | MEDIUM | 5.3 | 0.4% | Dec 10, 2023 | An issue was discovered in Zammad before 6.2.0. An attacker can trigger phishing links in generated notification emails ... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now