2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-32268 | HIGH | 7.2 | 0.7% | Dec 6, 2023 | Exposure of Proxy Administrator Credentials An authenticated administrator equivalent Filr user can access the credent... |
| CVE-2023-6514 | HIGH | 8.8 | 0.3% | Dec 6, 2023 | The Bluetooth module of some Huawei Smart Screen products has an identity authentication bypass vulnerability. Successf... |
| CVE-2023-6459 | MEDIUM | 5.3 | 0.5% | Dec 6, 2023 | Mattermost is grouping calls in the /metrics endpoint by id and reports that id in the response. Since this id is the ch... |
| CVE-2023-6458 | CRITICAL | 9.8 | 0.6% | Dec 6, 2023 | Mattermost webapp fails to validate route parameters in/<TEAM_NAME>/channels/<CHANNEL_NAME> allowing an attacker to perf... |
| CVE-2023-6273 | MEDIUM | 5.3 | 0.4% | Dec 6, 2023 | Permission management vulnerability in the module for disabling Sound Booster. Successful exploitation of this vulnerabi... |
| CVE-2023-49248 | MEDIUM | 5.5 | 0.2% | Dec 6, 2023 | Vulnerability of unauthorized file access in the Settings app. Successful exploitation of this vulnerability may cause u... |
| CVE-2023-49247 | HIGH | 7.5 | 0.4% | Dec 6, 2023 | Permission verification vulnerability in distributed scenarios. Successful exploitation of this vulnerability may affect... |
| CVE-2023-49246 | HIGH | 7.5 | 0.4% | Dec 6, 2023 | Unauthorized access vulnerability in the card management module. Successful exploitation of this vulnerability may affec... |
| CVE-2023-49245 | HIGH | 7.5 | 0.4% | Dec 6, 2023 | Unauthorized access vulnerability in the Huawei Share module. Successful exploitation of this vulnerability may affect s... |
| CVE-2023-49244 | HIGH | 7.5 | 0.4% | Dec 6, 2023 | Permission management vulnerability in the multi-user module. Successful exploitation of this vulnerability may affect s... |
| CVE-2023-49243 | HIGH | 7.5 | 0.4% | Dec 6, 2023 | Vulnerability of unauthorized access to email attachments in the email module. Successful exploitation of this vulnerabi... |
| CVE-2023-49242 | HIGH | 7.5 | 0.4% | Dec 6, 2023 | Free broadcast vulnerability in the running management module. Successful exploitation of this vulnerability may affect ... |
| CVE-2023-49241 | HIGH | 7.5 | 0.4% | Dec 6, 2023 | API permission control vulnerability in the network management module. Successful exploitation of this vulnerability may... |
| CVE-2023-49240 | HIGH | 7.5 | 0.4% | Dec 6, 2023 | Unauthorized access vulnerability in the launcher module. Successful exploitation of this vulnerability may affect servi... |
| CVE-2023-49239 | HIGH | 7.5 | 0.4% | Dec 6, 2023 | Unauthorized access vulnerability in the card management module. Successful exploitation of this vulnerability may affec... |
| CVE-2023-46773 | CRITICAL | 9.8 | 0.5% | Dec 6, 2023 | Permission management vulnerability in the PMS module. Successful exploitation of this vulnerability may cause privilege... |
| CVE-2023-46688 | MEDIUM | 6.1 | 0.5% | Dec 6, 2023 | Open redirect vulnerability in Pleasanter 1.3.47.0 and earlier allows a remote unauthenticated attacker to redirect user... |
| CVE-2023-45210 | MEDIUM | 4.3 | 0.5% | Dec 6, 2023 | Pleasanter 1.3.47.0 and earlier contains an improper access control vulnerability, which may allow a remote authenticate... |
| CVE-2023-44113 | HIGH | 7.5 | 0.4% | Dec 6, 2023 | Vulnerability of missing permission verification for APIs in the Designed for Reliability (DFR) module. Successful explo... |
| CVE-2023-44099 | HIGH | 7.5 | 0.5% | Dec 6, 2023 | Vulnerability of data verification errors in the kernel module. Successful exploitation of this vulnerability may cause ... |
| CVE-2023-34439 | MEDIUM | 5.4 | 0.4% | Dec 6, 2023 | Pleasanter 1.3.47.0 and earlier contains a stored cross-site scripting vulnerability. If this vulnerability is exploited... |
| CVE-2023-48849 | CRITICAL | 9.8 | 1.3% | Dec 6, 2023 | Ruijie EG Series Routers version EG_3.0(1)B11P216 and before allows unauthenticated attackers to remotely execute arbitr... |
| CVE-2023-49897 | HIGH | 8.8 | 50.7% | Dec 6, 2023 | An OS command injection vulnerability exists in AE1021PE firmware version 2.0.9 and earlier and AE1021 firmware version ... |
| CVE-2023-2861 | HIGH | 7.1 | 0.4% | Dec 6, 2023 | A flaw was found in the 9p passthrough filesystem (9pfs) implementation in QEMU. The 9pfs server did not prohibit openin... |
| CVE-2023-6527 | MEDIUM | 6.1 | 0.4% | Dec 6, 2023 | The Email Subscription Popup plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the HTTP_REFERER h... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now