2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-4473 | CRITICAL | 9.8 | 41.3% | Nov 30, 2023 | A command injection vulnerability in the web server of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 fir... |
| CVE-2023-37928 | HIGH | 8.8 | 60.2% | Nov 30, 2023 | A post-authentication command injection vulnerability in the WSGI server of the Zyxel NAS326 firmware version V5.21(AAZF... |
| CVE-2023-37927 | HIGH | 8.8 | 1.8% | Nov 30, 2023 | The improper neutralization of special elements in the CGI program of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0... |
| CVE-2023-35138 | CRITICAL | 9.8 | 40.0% | Nov 30, 2023 | A command injection vulnerability in the “show_zysync_server_contents” function of the Zyxel NAS326 firmware version V5.... |
| CVE-2023-35137 | HIGH | 7.5 | 0.9% | Nov 30, 2023 | An improper authentication vulnerability in the authentication module of the Zyxel NAS326 firmware version V5.21(AAZF.14... |
| CVE-2023-3741 | CRITICAL | 9.8 | 1.5% | Nov 30, 2023 | An OS Command injection vulnerability in NEC Platforms DT900 and DT900S Series all versions allows an attacker to execut... |
| CVE-2023-49694 | HIGH | 7.8 | 0.5% | Nov 29, 2023 | A low-privileged OS user with access to a Windows host where NETGEAR ProSAFE Network Management System is installed c... |
| CVE-2023-49693 | CRITICAL | 9.8 | 1.2% | Nov 29, 2023 | NETGEAR ProSAFE Network Management System has Java Debug Wire Protocol (JDWP) listening on port 11611 and it is remotel... |
| CVE-2023-40458 | HIGH | 7.5 | 0.8% | Nov 29, 2023 | Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Sierra Wireless, Inc ALEOS could potentially all... |
| CVE-2023-49091 | CRITICAL | 9.8 | 0.8% | Nov 29, 2023 | Cosmos provides users the ability self-host a home server by acting as a secure gateway to your application, as well as ... |
| CVE-2023-49082 | MEDIUM | 5.3 | 0.9% | Nov 29, 2023 | aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Improper validation makes it possible fo... |
| CVE-2023-48952 | HIGH | 7.5 | 1.0% | Nov 29, 2023 | An issue in the box_deserialize_reusing function in openlink virtuoso-opensource v7.2.11 allows attackers to cause a Den... |
| CVE-2023-48951 | HIGH | 7.5 | 0.8% | Nov 29, 2023 | An issue in the box_equal function in openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service... |
| CVE-2023-48950 | HIGH | 7.5 | 0.9% | Nov 29, 2023 | An issue in the box_col_len function in openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Servi... |
| CVE-2023-48949 | HIGH | 7.5 | 0.8% | Nov 29, 2023 | An issue in the box_add function in openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (... |
| CVE-2023-48948 | HIGH | 7.5 | 0.9% | Nov 29, 2023 | An issue in the box_div function in openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (... |
| CVE-2023-48947 | HIGH | 7.5 | 0.9% | Nov 29, 2023 | An issue in the cha_cmp function of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (... |
| CVE-2023-48946 | HIGH | 7.5 | 0.9% | Nov 29, 2023 | An issue in the box_mpy function of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (... |
| CVE-2023-48945 | HIGH | 7.5 | 0.9% | Nov 29, 2023 | A stack overflow in openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted... |
| CVE-2023-44383 | MEDIUM | 5.4 | 0.4% | Nov 29, 2023 | October is a Content Management System (CMS) and web platform to assist with development workflow. A user with access to... |
| CVE-2023-49083 | HIGH | 7.5 | 1.0% | Nov 29, 2023 | cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Calling `load_pe... |
| CVE-2023-49079 | HIGH | 7.5 | 0.4% | Nov 29, 2023 | Misskey is an open source, decentralized social media platform. Misskey's missing signature validation allows arbitrary ... |
| CVE-2023-6218 | HIGH | 7.2 | 0.7% | Nov 29, 2023 | In Progress MOVEit Transfer versions released before 2022.0.9 (14.0.9), 2022.1.10 (14.1.10), 2023.0.7 (15.0.7), a privi... |
| CVE-2023-6217 | MEDIUM | 6.1 | 0.5% | Nov 29, 2023 | In Progress MOVEit Transfer versions released before 2022.0.9 (14.0.9), 2022.1.10 (14.1.10), 2023.0.7 (15.0.7), a refle... |
| CVE-2023-48882 | MEDIUM | 4.8 | 0.4% | Nov 29, 2023 | A stored cross-site scripting (XSS) vulnerability in EyouCMS v1.6.4-UTF8-SP1 allows attackers to execute arbitrary web s... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now