2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-47462 | CRITICAL | 9.8 | 1.3% | Nov 29, 2023 | Insecure Permissions vulnerability in GL.iNet AX1800 v.3.215 and before allows a remote attacker to execute arbitrary co... |
| CVE-2023-46887 | HIGH | 7.5 | 0.3% | Nov 29, 2023 | In Dreamer CMS before 4.0.1, the backend attachment management office has an Arbitrary File Download vulnerability. |
| CVE-2023-46886 | CRITICAL | 9.1 | 1.0% | Nov 29, 2023 | Dreamer CMS before version 4.0.1 is vulnerable to Directory Traversal. Background template management allows arbitrary m... |
| CVE-2023-24294 | HIGH | 7.5 | 0.9% | Nov 29, 2023 | Zumtobel Netlink CCD Onboard v3.74 - Firmware v3.80 was discovered to contain a buffer overflow via the component Netlin... |
| CVE-2023-23325 | CRITICAL | 9.8 | 2.0% | Nov 29, 2023 | Zumtobel Netlink CCD Onboard 3.74 - Firmware 3.80 was discovered to contain a command injection vulnerability via the Ne... |
| CVE-2023-23324 | CRITICAL | 9.8 | 0.9% | Nov 29, 2023 | Zumtobel Netlink CCD Onboard 3.74 - Firmware 3.80 was discovered to contain hardcoded credentials for the Administrator ... |
| CVE-2023-46944 | HIGH | 7.8 | 1.2% | Nov 28, 2023 | An issue in GitKraken GitLens before v.14.0.0 allows an attacker to execute arbitrary code via a crafted file to the Vis... |
| CVE-2023-49092 | MEDIUM | 5.9 | 0.6% | Nov 28, 2023 | RustCrypto/RSA is a portable RSA implementation in pure Rust. Due to a non-constant-time implementation, information abo... |
| CVE-2023-48193 | CRITICAL | 9.8 | 2.0% | Nov 28, 2023 | Insecure Permissions vulnerability in JumpServer GPLv3 v.3.8.0 allows a remote attacker to execute arbitrary code via by... |
| CVE-2023-29066 | LOW | 3.5 | 0.3% | Nov 28, 2023 | The FACSChorus software does not properly assign data access privileges for operating system user accounts. A non-admini... |
| CVE-2023-29065 | MEDIUM | 4.3 | 0.3% | Nov 28, 2023 | The FACSChorus software database can be accessed directly with the privileges of the currently logged-in user. A threat ... |
| CVE-2023-29064 | MEDIUM | 4.3 | 0.3% | Nov 28, 2023 | The FACSChorus software contains sensitive information stored in plaintext. A threat actor could gain hardcoded secrets ... |
| CVE-2023-29063 | LOW | 2.4 | 0.2% | Nov 28, 2023 | The FACSChorus workstation does not prevent physical access to its PCI express (PCIe) slots, which could allow a threat ... |
| CVE-2023-29062 | LOW | 3.8 | 0.3% | Nov 28, 2023 | The Operating System hosting the FACSChorus application is configured to allow transmission of hashed user credentials u... |
| CVE-2023-29061 | MEDIUM | 5.2 | 0.4% | Nov 28, 2023 | There is no BIOS password on the FACSChorus workstation. A threat actor with physical access to the workstation can pote... |
| CVE-2023-45539 | HIGH | 8.2 | 1.5% | Nov 28, 2023 | HAProxy before 2.8.2 accepts # as part of the URI component, which might allow remote attackers to obtain sensitive info... |
| CVE-2023-30590 | HIGH | 7.5 | 1.5% | Nov 28, 2023 | The generateKeys() API function returned from crypto.createDiffieHellman() only generates missing (or outdated) keys, th... |
| CVE-2023-30588 | MEDIUM | 5.3 | 1.2% | Nov 28, 2023 | When an invalid public key is used to create an x509 certificate using the crypto.X509Certificate() API a non-expect ter... |
| CVE-2023-29060 | MEDIUM | 5.7 | 0.3% | Nov 28, 2023 | The FACSChorus workstation operating system does not restrict what devices can interact with its USB ports. If exploited... |
| CVE-2023-49078 | MEDIUM | 6.1 | 0.5% | Nov 28, 2023 | raptor-web is a CMS for game server communities that can be used to host information and keep track of players. In versi... |
| CVE-2023-48121 | MEDIUM | 5.3 | 0.8% | Nov 28, 2023 | An authentication bypass vulnerability in the Direct Connection Module in Ezviz CS-C6N-xxx prior to v5.3.x build 2023040... |
| CVE-2023-42504 | MEDIUM | 6.5 | 1.1% | Nov 28, 2023 | An authenticated malicious user could initiate multiple concurrent requests, each requesting multiple dashboard exports,... |
| CVE-2023-40056 | HIGH | 8.8 | 4.8% | Nov 28, 2023 | SQL Injection Remote Code Vulnerability was found in the SolarWinds Platform. This vulnerability can be expl... |
| CVE-2023-48848 | HIGH | 7.5 | 0.9% | Nov 28, 2023 | An arbitrary file read vulnerability in ureport v2.2.9 allows a remote attacker to arbitrarily read files on the server ... |
| CVE-2023-45286 | MEDIUM | 5.9 | 0.7% | Nov 28, 2023 | A race condition in go-resty can result in HTTP request body disclosure across requests. This condition can be triggered... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now