2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-26154 | MEDIUM | 5.9 | 1.0% | Dec 6, 2023 | Versions of the package pubnub before 7.4.0; all versions of the package com.pubnub:pubnub; versions of the package pubn... |
| CVE-2023-22524 | CRITICAL | 9.8 | 24.7% | Dec 6, 2023 | Certain versions of the Atlassian Companion App for MacOS were affected by a remote code execution vulnerability. An att... |
| CVE-2023-22523 | HIGH | 8.8 | 11.1% | Dec 6, 2023 | This vulnerability, if exploited, allows an attacker to perform privileged RCE (Remote Code Execution) on machines with ... |
| CVE-2023-22522 | HIGH | 8.8 | 12.8% | Dec 6, 2023 | This Template Injection vulnerability allows an authenticated attacker, including one with anonymous access, to inject u... |
| CVE-2023-41268 | CRITICAL | 9.8 | 0.7% | Dec 6, 2023 | Improper input validation vulnerability in Samsung Open Source Escargot allows stack overflow and segmentation fault. Th... |
| CVE-2023-40053 | MEDIUM | 5 | 0.8% | Dec 6, 2023 | A vulnerability has been identified within Serv-U 15.4 that allows an authenticated actor to insert content on the file ... |
| CVE-2023-6512 | MEDIUM | 6.5 | 1.3% | Dec 6, 2023 | Inappropriate implementation in Web Browser UI in Google Chrome prior to 120.0.6099.62 allowed a remote attacker to pote... |
| CVE-2023-6511 | MEDIUM | 4.3 | 0.9% | Dec 6, 2023 | Inappropriate implementation in Autofill in Google Chrome prior to 120.0.6099.62 allowed a remote attacker to bypass Aut... |
| CVE-2023-6510 | HIGH | 8.8 | 1.0% | Dec 6, 2023 | Use after free in Media Capture in Google Chrome prior to 120.0.6099.62 allowed a remote attacker who convinced a user t... |
| CVE-2023-6509 | HIGH | 8.8 | 1.0% | Dec 6, 2023 | Use after free in Side Panel Search in Google Chrome prior to 120.0.6099.62 allowed a remote attacker who convinced a us... |
| CVE-2023-6508 | HIGH | 8.8 | 1.0% | Dec 6, 2023 | Use after free in Media Stream in Google Chrome prior to 120.0.6099.62 allowed a remote attacker to potentially exploit ... |
| CVE-2023-48940 | MEDIUM | 5.4 | 0.5% | Dec 6, 2023 | A stored cross-site scripting (XSS) vulnerability in /admin.php of DaiCuo v2.5.15 allows attackers to execute arbitrary ... |
| CVE-2023-48930 | CRITICAL | 9.8 | 1.2% | Dec 6, 2023 | xinhu xinhuoa 2.2.1 contains a File upload vulnerability. |
| CVE-2023-28876 | MEDIUM | 4.3 | 0.5% | Dec 6, 2023 | A Broken Access Control issue in comments to uploaded files in Filerun through Update 20220202 allows attackers to delet... |
| CVE-2023-28875 | MEDIUM | 5.4 | 0.4% | Dec 6, 2023 | A Stored XSS issue in shared files download terms in Filerun Update 20220202 allows attackers to inject JavaScript code ... |
| CVE-2023-24547 | MEDIUM | 6.5 | 0.3% | Dec 6, 2023 | On affected platforms running Arista MOS, the configuration of a BGP password will cause the password to be logged in cl... |
| CVE-2023-49283 | MEDIUM | 5.3 | 2.2% | Dec 5, 2023 | microsoft-graph-core the Microsoft Graph Library for PHP. The Microsoft Graph Beta PHP SDK published packages which cont... |
| CVE-2023-49282 | MEDIUM | 5.3 | 2.2% | Dec 5, 2023 | msgraph-sdk-php is the Microsoft Graph Library for PHP. The Microsoft Graph PHP SDK published packages which contained t... |
| CVE-2023-5970 | HIGH | 8.8 | 0.9% | Dec 5, 2023 | Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated attacker to create an ... |
| CVE-2023-49297 | HIGH | 7.8 | 0.5% | Dec 5, 2023 | PyDrive2 is a wrapper library of google-api-python-client that simplifies many common Google Drive API V2 tasks. Unsafe ... |
| CVE-2023-46736 | MEDIUM | 6.5 | 0.4% | Dec 5, 2023 | EspoCRM is an Open Source CRM (Customer Relationship Management) software. In affected versions there is Server-Side Req... |
| CVE-2023-44221 | HIGH | 7.2 | 74.9% | Dec 5, 2023 | Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated att... |
| CVE-2023-6448 | CRITICAL | 9.8 | 2.1% | Dec 5, 2023 | Unitronics VisiLogic before version 9.9.00, used in Vision and Samba PLCs and HMIs, uses a default administrative passwo... |
| CVE-2023-46674 | HIGH | 7.8 | 0.2% | Dec 5, 2023 | An issue was identified that allowed the unsafe deserialization of java objects from hadoop or spark configuration prope... |
| CVE-2023-45287 | HIGH | 7.5 | 1.3% | Dec 5, 2023 | Before Go 1.20, the RSA based TLS key exchanges used the math/big library, which is not constant time. RSA blinding was ... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now