2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-47453 | HIGH | 7.8 | 0.3% | Nov 30, 2023 | An Untrusted search path vulnerability in Sohu Video Player 7.0.15.0 allows local users to gain escalated privileges thr... |
| CVE-2023-47452 | HIGH | 7.8 | 0.5% | Nov 30, 2023 | An Untrusted search path vulnerability in notepad++ 6.5 allows local users to gain escalated privileges through the msim... |
| CVE-2023-6439 | MEDIUM | 6.1 | 0.7% | Nov 30, 2023 | A vulnerability classified as problematic was found in ZenTao PMS 18.8. Affected by this vulnerability is an unknown fun... |
| CVE-2023-6376 | HIGH | 7.5 | 1.1% | Nov 30, 2023 | Henschen & Associates court document management software does not sufficiently randomize file names of cached documents,... |
| CVE-2023-6375 | HIGH | 7.5 | 1.0% | Nov 30, 2023 | Tyler Technologies Court Case Management Plus may store backups in a location that can be accessed by a remote, unauthen... |
| CVE-2023-6354 | CRITICAL | 9.4 | 1.0% | Nov 30, 2023 | Tyler Technologies Magistrate Court Case Management Plus allows an unauthenticated, remote attacker to upload, delete, a... |
| CVE-2023-6353 | CRITICAL | 9.4 | 1.0% | Nov 30, 2023 | Tyler Technologies Civil and Criminal Electronic Filing allows an unauthenticated, remote attacker to upload, delete, an... |
| CVE-2023-6352 | MEDIUM | 5.3 | 1.1% | Nov 30, 2023 | The default configuration of Aquaforest TIFF Server allows access to arbitrary file paths, subject to any restrictions i... |
| CVE-2023-6344 | MEDIUM | 5.3 | 0.9% | Nov 30, 2023 | Tyler Technologies Court Case Management Plus allows a remote, unauthenticated attacker to enumerate directories using t... |
| CVE-2023-6343 | MEDIUM | 5.3 | 0.9% | Nov 30, 2023 | Tyler Technologies Court Case Management Plus allows a remote, unauthenticated attacker to enumerate and access sensitiv... |
| CVE-2023-6342 | CRITICAL | 9.8 | 1.1% | Nov 30, 2023 | Tyler Technologies Court Case Management Plus allows a remote attacker to authenticate as any user by manipulating at le... |
| CVE-2023-6341 | MEDIUM | 5.3 | 0.9% | Nov 30, 2023 | Catalis (previously Icon Software) CMS360 allows a remote, unauthenticated attacker to view sensitive court documents by... |
| CVE-2023-48812 | CRITICAL | 9.8 | 1.5% | Nov 30, 2023 | In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file sub_4119A0 function obtains fields from the front-end through... |
| CVE-2023-48811 | CRITICAL | 9.8 | 1.5% | Nov 30, 2023 | In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end throug... |
| CVE-2023-48810 | CRITICAL | 9.8 | 1.5% | Nov 30, 2023 | In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end throug... |
| CVE-2023-48808 | CRITICAL | 9.8 | 1.5% | Nov 30, 2023 | In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end throug... |
| CVE-2023-48807 | CRITICAL | 9.8 | 1.5% | Nov 30, 2023 | In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end throug... |
| CVE-2023-48806 | CRITICAL | 9.8 | 1.5% | Nov 30, 2023 | In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end throug... |
| CVE-2023-48805 | CRITICAL | 9.8 | 1.5% | Nov 30, 2023 | In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end throug... |
| CVE-2023-48804 | CRITICAL | 9.8 | 1.5% | Nov 30, 2023 | In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end throug... |
| CVE-2023-48803 | CRITICAL | 9.8 | 1.5% | Nov 30, 2023 | In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end throug... |
| CVE-2023-48802 | CRITICAL | 9.8 | 1.5% | Nov 30, 2023 | In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end throug... |
| CVE-2023-47870 | HIGH | 8.8 | 0.3% | Nov 30, 2023 | Cross-Site Request Forgery (CSRF), Missing Authorization vulnerability in gVectors Team wpForo Forum wpforo allows Cross... |
| CVE-2023-6438 | MEDIUM | 5.3 | 0.7% | Nov 30, 2023 | A vulnerability classified as problematic has been found in Thecosy IceCMS 2.0.1. Affected is an unknown function of the... |
| CVE-2023-48752 | MEDIUM | 6.1 | 0.4% | Nov 30, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Happyforms Form bu... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now