2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-49486 | MEDIUM | 5.4 | 0.4% | Dec 8, 2023 | JFinalCMS v5.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the model management department... |
| CVE-2023-49485 | MEDIUM | 5.4 | 0.4% | Dec 8, 2023 | JFinalCMS v5.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the column management departmen... |
| CVE-2023-49484 | MEDIUM | 5.4 | 0.4% | Dec 8, 2023 | Dreamer CMS v4.1.3 was discovered to contain a cross-site scripting (XSS) vulnerability in the article management depart... |
| CVE-2023-49444 | MEDIUM | 5.4 | 0.5% | Dec 8, 2023 | An arbitrary file upload vulnerability in DoraCMS v2.1.8 allow attackers to execute arbitrary code via uploading a craft... |
| CVE-2023-49443 | CRITICAL | 9.8 | 0.8% | Dec 8, 2023 | DoraCMS v2.1.8 was discovered to re-use the same code for verification of valid usernames and passwords. This vulnerabil... |
| CVE-2023-6607 | HIGH | 7.5 | 0.7% | Dec 8, 2023 | A vulnerability has been found in Tongda OA 2017 up to 11.10 and classified as critical. Affected by this vulnerability ... |
| CVE-2023-49007 | CRITICAL | 9.8 | 9.0% | Dec 8, 2023 | In Netgear Orbi RBR750 firmware before V7.2.6.21, there is a stack-based buffer overflow in /usr/sbin/httpd. |
| CVE-2023-46157 | HIGH | 8.8 | 2.3% | Dec 8, 2023 | File-Manager in MGT CloudPanel 2.0.0 through 2.3.2 allows the lowest privilege user to achieve OS command injection by c... |
| CVE-2023-45866 | MEDIUM | 6.3 | 7.9% | Dec 8, 2023 | Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encry... |
| CVE-2023-32460 | HIGH | 7.8 | 0.2% | Dec 8, 2023 | Dell PowerEdge BIOS contains an improper privilege management security vulnerability. An unauthenticated local attacker... |
| CVE-2023-48929 | CRITICAL | 9.8 | 0.8% | Dec 8, 2023 | Franklin Fueling Systems System Sentinel AnyWare (SSA) version 1.6.24.492 is vulnerable to Session Fixation. The 'sid' p... |
| CVE-2023-48928 | MEDIUM | 6.1 | 0.5% | Dec 8, 2023 | Franklin Fueling Systems System Sentinel AnyWare (SSA) version 1.6.24.492 is vulnerable to Open Redirect. The 'path' par... |
| CVE-2023-26158 | HIGH | 8.2 | 0.8% | Dec 8, 2023 | All versions of the package mockjs are vulnerable to Prototype Pollution via the Util.extend function due to missing che... |
| CVE-2023-48122 | HIGH | 7.5 | 0.8% | Dec 8, 2023 | An issue in microweber v.2.0.1 and fixed in v.2.0.4 allows a remote attacker to obtain sensitive information via the HTT... |
| CVE-2023-43305 | HIGH | 8.2 | 0.6% | Dec 8, 2023 | An issue in studio kent mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of... |
| CVE-2023-43744 | HIGH | 7.2 | 2.0% | Dec 8, 2023 | An OS command injection vulnerability in Zultys MX-SE, MX-SE II, MX-E, MX-Virtual, MX250, and MX30 with firmware version... |
| CVE-2023-43743 | HIGH | 8.8 | 0.7% | Dec 8, 2023 | A SQL injection vulnerability in Zultys MX-SE, MX-SE II, MX-E, MX-Virtual, MX250, and MX30 with firmware versions prior ... |
| CVE-2023-43742 | CRITICAL | 9.8 | 0.9% | Dec 8, 2023 | An authentication bypass in Zultys MX-SE, MX-SE II, MX-E, MX-Virtual, MX250, and MX30 with firmware versions prior to 17... |
| CVE-2023-6599 | MEDIUM | 4.3 | 0.5% | Dec 8, 2023 | Missing Standardized Error Handling Mechanism in GitHub repository microweber/microweber prior to 2.0. |
| CVE-2023-6061 | — | — | — | Dec 8, 2023 | Rejected reason: This CVE ID has been rejected/withdrawn by its CVE Numbering Authority (Palo Alto Networks) based on di... |
| CVE-2023-5008 | CRITICAL | 9.8 | 0.9% | Dec 8, 2023 | Student Information System v1.0 is vulnerable to an unauthenticated SQL Injection vulnerability on the 'regno' parameter... |
| CVE-2023-5058 | HIGH | 7.8 | 0.3% | Dec 7, 2023 | Improper Input Validation in the processing of user-supplied splash screen during system boot in Phoenix SecureCore™ Tec... |
| CVE-2023-4122 | HIGH | 8.8 | 1.5% | Dec 7, 2023 | Student Information System v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'photo' parameter of my-pr... |
| CVE-2023-6581 | CRITICAL | 9.8 | 4.0% | Dec 7, 2023 | A vulnerability has been found in D-Link DAR-7000 up to 20231126 and classified as critical. This vulnerability affects ... |
| CVE-2023-6580 | HIGH | 8.8 | 2.3% | Dec 7, 2023 | A vulnerability, which was classified as critical, was found in D-Link DIR-846 FW100A53DBR. This affects an unknown part... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now