2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-42674 | MEDIUM | 5.5 | 0.1% | Dec 4, 2023 | In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. Th... |
| CVE-2023-42673 | MEDIUM | 5.5 | 0.1% | Dec 4, 2023 | In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. Th... |
| CVE-2023-42672 | MEDIUM | 5.5 | 0.1% | Dec 4, 2023 | In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. Th... |
| CVE-2023-42671 | MEDIUM | 5.5 | 0.1% | Dec 4, 2023 | In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. Th... |
| CVE-2023-38003 | HIGH | 7.2 | 1.1% | Dec 4, 2023 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 could allow a user with DATAACCES... |
| CVE-2023-40692 | HIGH | 7.5 | 1.1% | Dec 4, 2023 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, 11.5 is vulnerable to denial of service un... |
| CVE-2023-49948 | MEDIUM | 5.3 | 0.8% | Dec 3, 2023 | Forgejo before 1.20.5-1 allows remote attackers to test for the existence of private user accounts by appending .rss (or... |
| CVE-2023-49947 | HIGH | 7.5 | 0.6% | Dec 3, 2023 | Forgejo before 1.20.5-1 allows 2FA bypass when docker login uses Basic Authentication. |
| CVE-2023-49946 | CRITICAL | 9.1 | 0.9% | Dec 3, 2023 | In Forgejo before 1.20.5-1, certain endpoints do not check whether an object belongs to a repository for which permissio... |
| CVE-2023-45178 | HIGH | 7.5 | 1.1% | Dec 3, 2023 | IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5 CLI is vulnerable to a denial of service when a s... |
| CVE-2023-49926 | MEDIUM | 6.1 | 0.4% | Dec 3, 2023 | app/Lib/Tools/EventTimelineTool.php in MISP before 2.4.179 allows XSS in the event timeline widget. |
| CVE-2023-6474 | MEDIUM | 6.5 | 0.4% | Dec 3, 2023 | A vulnerability has been found in PHPGurukul Nipah Virus Testing Management System 1.0 and classified as problematic. Th... |
| CVE-2023-47100 | — | — | — | Dec 2, 2023 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-47038. Reason: This record is a duplicate of CVE-2023-... |
| CVE-2023-6473 | MEDIUM | 5.4 | 0.6% | Dec 2, 2023 | A vulnerability, which was classified as problematic, was found in SourceCodester Online Quiz System 1.0. This affects a... |
| CVE-2023-6472 | MEDIUM | 4.8 | 0.6% | Dec 2, 2023 | A vulnerability, which was classified as problematic, has been found in PHPEMS 7.0. This issue affects some unknown proc... |
| CVE-2023-6467 | LOW | 3.7 | 0.6% | Dec 2, 2023 | A vulnerability was found in Thecosy IceCMS 2.0.1. It has been rated as problematic. This issue affects some unknown pro... |
| CVE-2023-6466 | MEDIUM | 6.1 | 0.6% | Dec 2, 2023 | A vulnerability was found in Thecosy IceCMS 2.0.1. It has been declared as problematic. This vulnerability affects unkno... |
| CVE-2023-6465 | MEDIUM | 6.1 | 0.8% | Dec 2, 2023 | A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0. It has been classified as problematic... |
| CVE-2023-6464 | CRITICAL | 9.8 | 0.8% | Dec 2, 2023 | A vulnerability was found in SourceCodester User Registration and Login System 1.0 and classified as critical. Affected ... |
| CVE-2023-39257 | HIGH | 7.8 | 0.2% | Dec 2, 2023 | Dell Rugged Control Center, version prior to 4.7, contains an Improper Access Control vulnerability. A local malicious ... |
| CVE-2023-39256 | HIGH | 7.8 | 0.2% | Dec 2, 2023 | Dell Rugged Control Center, version prior to 4.7, contains an improper access control vulnerability. A local malicious ... |
| CVE-2023-49914 | MEDIUM | 6.5 | 0.4% | Dec 2, 2023 | InteraXon Muse 2 devices allow remote attackers to cause a denial of service (incorrect Muse App report of an outstandin... |
| CVE-2023-6463 | MEDIUM | 5.4 | 0.6% | Dec 1, 2023 | A vulnerability has been found in SourceCodester User Registration and Login System 1.0 and classified as problematic. A... |
| CVE-2023-48887 | CRITICAL | 9.8 | 1.6% | Dec 1, 2023 | A deserialization vulnerability in Jupiter v1.3.1 allows attackers to execute arbitrary commands via sending a crafted R... |
| CVE-2023-48886 | CRITICAL | 9.8 | 1.4% | Dec 1, 2023 | A deserialization vulnerability in NettyRpc v1.2 allows attackers to execute arbitrary commands via sending a crafted RP... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now