2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-43081 | LOW | 3.3 | 0.2% | Nov 22, 2023 | PowerProtect Agent for File System Version 19.14 and prior, contains an incorrect default permissions vulnerability in ... |
| CVE-2023-28749 | HIGH | 8.8 | 0.3% | Nov 22, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in CreativeMindsSolutions CM On Demand Search And Replace plugin <= 1.3.... |
| CVE-2023-6253 | MEDIUM | 6 | 0.3% | Nov 22, 2023 | A saved encryption key in the Uninstaller in Digital Guardian's Agent before version 7.9.4 allows a local attacker to re... |
| CVE-2023-5983 | HIGH | 7.5 | 0.6% | Nov 22, 2023 | Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Botanik Software Pharmacy Automation ... |
| CVE-2023-5047 | CRITICAL | 9.8 | 0.7% | Nov 22, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in DRD Fleet Leasing ... |
| CVE-2023-3104 | HIGH | 7.5 | 0.5% | Nov 22, 2023 | Lack of authentication vulnerability. An unauthenticated local user is able to see through the cameras using the web ser... |
| CVE-2023-3103 | MEDIUM | 5.9 | 0.6% | Nov 22, 2023 | Authentication bypass vulnerability, the exploitation of which could allow a local attacker to perform a Man-in-the-Midd... |
| CVE-2023-6189 | MEDIUM | 5.3 | 0.5% | Nov 22, 2023 | Missing access permissions checks in the M-Files server before 23.11.13156.0 allow attackers to perform data write and... |
| CVE-2023-6117 | HIGH | 7.5 | 0.7% | Nov 22, 2023 | A possibility of unwanted server memory consumption was detected through the obsolete functionalities in the Rest API me... |
| CVE-2023-46673 | HIGH | 7.5 | 0.8% | Nov 22, 2023 | It was identified that malformed scripts used in the script processor of an Ingest Pipeline could cause an Elasticsearch... |
| CVE-2023-37924 | CRITICAL | 9.8 | 7.2% | Nov 22, 2023 | Apache Software Foundation Apache Submarine has an SQL injection vulnerability when a user logs in. This issue can resul... |
| CVE-2023-6011 | MEDIUM | 5.4 | 0.4% | Nov 22, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DECE Software Geod... |
| CVE-2023-5921 | HIGH | 7.1 | 0.2% | Nov 22, 2023 | Improper Enforcement of Behavioral Workflow vulnerability in DECE Software Geodi allows Functionality Bypass. This issu... |
| CVE-2023-2447 | MEDIUM | 6.1 | 0.2% | Nov 22, 2023 | The UserPro plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.1.1. Th... |
| CVE-2023-2446 | MEDIUM | 6.5 | 0.8% | Nov 22, 2023 | The UserPro plugin for WordPress is vulnerable to sensitive information disclosure via the 'userpro' shortcode in versio... |
| CVE-2023-47393 | MEDIUM | 5.3 | 0.5% | Nov 22, 2023 | An access control issue in Mercedes me IOS APP v1.34.0 and below allows attackers to view the maintenance orders of othe... |
| CVE-2023-47392 | MEDIUM | 5.3 | 0.5% | Nov 22, 2023 | An access control issue in Mercedes me IOS APP v1.34.0 and below allows attackers to view the carts of other users via s... |
| CVE-2023-47016 | HIGH | 7.5 | 1.2% | Nov 22, 2023 | radare2 5.8.9 has an out-of-bounds read in r_bin_object_set_items in libr/bin/bobj.c, causing a crash in r_read_le32 in ... |
| CVE-2023-41146 | MEDIUM | 4.3 | 0.5% | Nov 22, 2023 | Autodesk Customer Support Portal allows cases created by users under an account to see cases created by other users on t... |
| CVE-2023-41145 | MEDIUM | 5.3 | 0.5% | Nov 22, 2023 | Autodesk users who no longer have an active license for an account can still access cases for that account. |
| CVE-2023-29069 | HIGH | 7.8 | 0.3% | Nov 22, 2023 | A maliciously crafted DLL file can be forced to install onto a non-default location, and attacker can overwrite parts of... |
| CVE-2023-48161 | HIGH | 7.1 | 0.4% | Nov 22, 2023 | Buffer Overflow vulnerability in GifLib Project GifLib v.5.2.1 allows a local attacker to obtain sensitive information v... |
| CVE-2023-46814 | HIGH | 7.8 | 0.3% | Nov 22, 2023 | A binary hijacking vulnerability exists within the VideoLAN VLC media player before 3.0.19 on Windows. The uninstaller a... |
| CVE-2023-5299 | HIGH | 8.8 | 0.5% | Nov 22, 2023 | A user with a standard account in Fuji Electric Tellus Lite may overwrite files in the system. |
| CVE-2023-40152 | HIGH | 7.8 | 0.3% | Nov 22, 2023 | When Fuji Electric Tellus Lite V-Simulator parses a specially-crafted input file an out of bounds write may occur. |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now