2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-49404 | CRITICAL | 9.8 | 0.9% | Dec 7, 2023 | Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function formAdvancedSetListSet. |
| CVE-2023-48958 | MEDIUM | 5.5 | 0.3% | Dec 7, 2023 | gpac 2.3-DEV-rev617-g671976fcc-master contains memory leaks in gf_mpd_resolve_url media_tools/mpd.c:4589. |
| CVE-2023-47440 | MEDIUM | 6.5 | 1.0% | Dec 7, 2023 | Gladys Assistant v4.27.0 and prior is vulnerable to Directory Traversal. The patch of CVE-2023-43256 was found to be inc... |
| CVE-2023-46871 | MEDIUM | 5.3 | 0.7% | Dec 7, 2023 | GPAC version 2.3-DEV-rev602-ged8424300-master in MP4Box contains a memory leak in NewSFDouble scenegraph/vrml_tools.c:30... |
| CVE-2023-41905 | MEDIUM | 5.4 | 0.4% | Dec 7, 2023 | NETSCOUT nGeniusONE 6.3.4 build 2298 allows a Reflected Cross-Site scripting (XSS) vulnerability by an authenticated use... |
| CVE-2023-41172 | MEDIUM | 5.4 | 0.4% | Dec 7, 2023 | NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability (issue 4 of 4). |
| CVE-2023-41171 | MEDIUM | 5.4 | 0.4% | Dec 7, 2023 | NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability (issue 3 of 4). |
| CVE-2023-41170 | MEDIUM | 6.1 | 0.4% | Dec 7, 2023 | NetScout nGeniusONE 6.3.4 build 2298 allows a Reflected Cross-Site scripting vulnerability. |
| CVE-2023-41169 | MEDIUM | 5.4 | 0.4% | Dec 7, 2023 | NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability (issue 2 of 4). |
| CVE-2023-41168 | MEDIUM | 5.4 | 0.4% | Dec 7, 2023 | NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability (issue 1 of 4). |
| CVE-2023-40302 | CRITICAL | 9.1 | 0.8% | Dec 7, 2023 | NETSCOUT nGeniusPULSE 3.8 has Weak File Permissions Vulnerability |
| CVE-2023-40301 | CRITICAL | 9.8 | 1.5% | Dec 7, 2023 | NETSCOUT nGeniusPULSE 3.8 has a Command Injection Vulnerability. |
| CVE-2023-40300 | CRITICAL | 9.8 | 0.7% | Dec 7, 2023 | NETSCOUT nGeniusPULSE 3.8 has a Hardcoded Cryptographic Key. |
| CVE-2023-39909 | HIGH | 8.8 | 0.8% | Dec 7, 2023 | Ericsson Network Manager before 23.2 mishandles Access Control and thus unauthenticated low-privilege users can access t... |
| CVE-2023-33413 | HIGH | 8.8 | 1.0% | Dec 7, 2023 | The configuration functionality in the Intelligent Platform Management Interface (IPMI) baseboard management controller ... |
| CVE-2023-33412 | HIGH | 8.8 | 1.2% | Dec 7, 2023 | The web interface in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implemen... |
| CVE-2023-33411 | HIGH | 7.5 | 1.3% | Dec 7, 2023 | A web server in the Intelligent Platform Management Interface (IPMI) baseboard management controller (BMC) implementatio... |
| CVE-2023-50002 | CRITICAL | 9.8 | 0.9% | Dec 7, 2023 | Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function formRebootMeshNode. |
| CVE-2023-50001 | CRITICAL | 9.8 | 0.9% | Dec 7, 2023 | Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function formUpgradeMeshOnline. |
| CVE-2023-50000 | CRITICAL | 9.8 | 0.9% | Dec 7, 2023 | Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function formResetMeshNode. |
| CVE-2023-49999 | CRITICAL | 9.8 | 2.2% | Dec 7, 2023 | Tenda W30E V16.01.0.12(4843) was discovered to contain a command injection vulnerability via the function setUmountUSBPa... |
| CVE-2023-49410 | CRITICAL | 9.8 | 0.9% | Dec 7, 2023 | Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function via the function set_wan_status... |
| CVE-2023-49403 | CRITICAL | 9.8 | 2.2% | Dec 7, 2023 | Tenda W30E V16.01.0.12(4843) was discovered to contain a command injection vulnerability via the function setFixTools. |
| CVE-2023-49402 | CRITICAL | 9.8 | 0.9% | Dec 7, 2023 | Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function localMsg. |
| CVE-2023-6588 | MEDIUM | 6.5 | 0.6% | Dec 7, 2023 | Offline mode is always enabled, even if permission disallows it, in Devolutions Server data source in Devolutions Wo... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now