2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-48881 | MEDIUM | 4.8 | 0.4% | Nov 29, 2023 | A stored cross-site scripting (XSS) vulnerability in EyouCMS v1.6.4-UTF8-SP1 allows attackers to execute arbitrary web s... |
| CVE-2023-48880 | MEDIUM | 4.8 | 0.4% | Nov 29, 2023 | A stored cross-site scripting (XSS) vulnerability in EyouCMS v1.6.4-UTF8-SP1 allows attackers to execute arbitrary web s... |
| CVE-2023-49090 | MEDIUM | 6.1 | 0.6% | Nov 29, 2023 | CarrierWave is a solution for file uploads for Rails, Sinatra and other Ruby web frameworks. CarrierWave has a Content-T... |
| CVE-2023-49674 | MEDIUM | 4.3 | 0.5% | Nov 29, 2023 | A missing permission check in Jenkins NeuVector Vulnerability Scanner Plugin 1.22 and earlier allows attackers with Over... |
| CVE-2023-49673 | HIGH | 8.8 | 0.4% | Nov 29, 2023 | A cross-site request forgery (CSRF) vulnerability in Jenkins NeuVector Vulnerability Scanner Plugin 1.22 and earlier all... |
| CVE-2023-49656 | CRITICAL | 9.8 | 0.8% | Nov 29, 2023 | Jenkins MATLAB Plugin 2.11.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. |
| CVE-2023-49655 | HIGH | 8.8 | 0.4% | Nov 29, 2023 | A cross-site request forgery (CSRF) vulnerability in Jenkins MATLAB Plugin 2.11.0 and earlier allows attackers to have J... |
| CVE-2023-49654 | CRITICAL | 9.8 | 0.8% | Nov 29, 2023 | Missing permission checks in Jenkins MATLAB Plugin 2.11.0 and earlier allow attackers to have Jenkins parse an XML file ... |
| CVE-2023-49653 | MEDIUM | 6.5 | 0.6% | Nov 29, 2023 | Jenkins Jira Plugin 3.11 and earlier does not set the appropriate context for credentials lookup, allowing attackers wit... |
| CVE-2023-49652 | LOW | 2.7 | 0.5% | Nov 29, 2023 | Incorrect permission checks in Jenkins Google Compute Engine Plugin 4.550.vb_327fca_3db_11 and earlier allow attackers w... |
| CVE-2023-40626 | HIGH | 7.5 | 0.8% | Nov 29, 2023 | The language file parsing process could be manipulated to expose environment variables. Environment variables might cont... |
| CVE-2023-6378 | HIGH | 7.5 | 0.9% | Nov 29, 2023 | A serialization vulnerability in logback receiver component part of logback version 1.4.11 allows an attacker to mount ... |
| CVE-2023-6351 | HIGH | 8.8 | 0.9% | Nov 29, 2023 | Use after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap... |
| CVE-2023-6350 | HIGH | 8.8 | 1.1% | Nov 29, 2023 | Use after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap... |
| CVE-2023-6348 | HIGH | 8.8 | 1.0% | Nov 29, 2023 | Type Confusion in Spellcheck in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the ... |
| CVE-2023-6347 | HIGH | 8.8 | 1.1% | Nov 29, 2023 | Use after free in Mojo in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap co... |
| CVE-2023-6346 | HIGH | 8.8 | 1.0% | Nov 29, 2023 | Use after free in WebAudio in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit hea... |
| CVE-2023-6345 | CRITICAL | 9.6 | 19.6% | Nov 29, 2023 | Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the rend... |
| CVE-2023-6070 | MEDIUM | 4.3 | 0.2% | Nov 29, 2023 | A server-side request forgery vulnerability in ESM prior to version 11.6.8 allows a low privileged authenticated user t... |
| CVE-2023-45484 | CRITICAL | 9.8 | 1.0% | Nov 29, 2023 | Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the shareSpeed parameter... |
| CVE-2023-45483 | CRITICAL | 9.8 | 1.0% | Nov 29, 2023 | Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the time parameter in th... |
| CVE-2023-45482 | CRITICAL | 9.8 | 1.0% | Nov 29, 2023 | Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the urls parameter in th... |
| CVE-2023-45481 | CRITICAL | 9.8 | 1.0% | Nov 29, 2023 | Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the firewallEn parameter... |
| CVE-2023-45480 | CRITICAL | 9.8 | 1.0% | Nov 29, 2023 | Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the src parameter in the... |
| CVE-2023-45479 | CRITICAL | 9.8 | 1.0% | Nov 29, 2023 | Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the list parameter in th... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now