2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-35127 | HIGH | 7.8 | 0.3% | Nov 22, 2023 | Stack-based buffer overflow may occur when Fuji Electric Tellus Lite V-Simulator parses a specially-crafted input file. |
| CVE-2023-48701 | MEDIUM | 6.1 | 0.7% | Nov 21, 2023 | Statamic CMS is a Laravel and Git powered content management system (CMS). Prior to versions 3.4.15 an 4.36.0, HTML file... |
| CVE-2023-48700 | MEDIUM | 6.5 | 0.4% | Nov 21, 2023 | The Nautobot Device Onboarding plugin uses the netmiko and NAPALM libraries to simplify the onboarding process of a new ... |
| CVE-2023-48699 | CRITICAL | 9.8 | 0.7% | Nov 21, 2023 | fastbots is a library for fast bot and scraper development using selenium and the Page Object Model (POM) design. Prior ... |
| CVE-2023-48307 | CRITICAL | 9.8 | 0.9% | Nov 21, 2023 | Nextcloud Mail is the mail app for Nextcloud, a self-hosted productivity platform. Starting in version 1.13.0 and prior ... |
| CVE-2023-48306 | CRITICAL | 9.8 | 0.8% | Nov 21, 2023 | Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prio... |
| CVE-2023-48305 | MEDIUM | 4.4 | 0.2% | Nov 21, 2023 | Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prio... |
| CVE-2023-6248 | CRITICAL | 9.8 | 1.2% | Nov 21, 2023 | The Syrus4 IoT gateway utilizes an unsecured MQTT server to download and execute arbitrary commands, allowing a remote u... |
| CVE-2023-49105 | CRITICAL | 9.8 | 11.1% | Nov 21, 2023 | An issue was discovered in ownCloud owncloud/core before 10.13.1. An attacker can access, modify, or delete any file wit... |
| CVE-2023-49104 | MEDIUM | 6.1 | 0.6% | Nov 21, 2023 | An issue was discovered in ownCloud owncloud/oauth2 before 0.6.1, when Allow Subdomains is enabled. An attacker is able ... |
| CVE-2023-49103 | HIGH | 7.5 | 78.4% | Nov 21, 2023 | An issue was discovered in ownCloud owncloud/graphapi 0.2.x before 0.2.1 and 0.3.x before 0.3.1. The graphapi app relies... |
| CVE-2023-48304 | MEDIUM | 4.3 | 0.6% | Nov 21, 2023 | Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prio... |
| CVE-2023-48303 | LOW | 2.7 | 0.7% | Nov 21, 2023 | Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prio... |
| CVE-2023-48302 | MEDIUM | 5.4 | 0.6% | Nov 21, 2023 | Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prio... |
| CVE-2023-48301 | MEDIUM | 5.4 | 0.6% | Nov 21, 2023 | Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prio... |
| CVE-2023-6238 | MEDIUM | 6.7 | 0.3% | Nov 21, 2023 | A buffer overflow vulnerability was found in the NVM Express (NVMe) driver in the Linux kernel. Only privileged user cou... |
| CVE-2023-48299 | MEDIUM | 5.3 | 0.7% | Nov 21, 2023 | TorchServe is a tool for serving and scaling PyTorch models in production. Starting in version 0.1.0 and prior to versio... |
| CVE-2023-48239 | HIGH | 7.1 | 0.9% | Nov 21, 2023 | Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prio... |
| CVE-2023-48230 | CRITICAL | 9.8 | 1.9% | Nov 21, 2023 | Cap'n Proto is a data interchange format and capability-based RPC system. In versions 1.0 and 1.0.1, when using the KJ H... |
| CVE-2023-48228 | CRITICAL | 9.8 | 1.2% | Nov 21, 2023 | authentik is an open-source identity provider. When initialising a oauth2 flow with a `code_challenge` and `code_method`... |
| CVE-2023-48226 | LOW | 3.5 | 0.8% | Nov 21, 2023 | OpenReplay is a self-hosted session replay suite. In version 1.14.0, due to lack of validation Name field - Account Sett... |
| CVE-2023-47643 | MEDIUM | 5.3 | 3.0% | Nov 21, 2023 | SuiteCRM is a Customer Relationship Management (CRM) software application. Prior to version 8.4.2, Graphql Introspection... |
| CVE-2023-20274 | HIGH | 7.8 | 0.2% | Nov 21, 2023 | A vulnerability in the installer script of Cisco AppDynamics PHP Agent could allow an authenticated, local attacker to e... |
| CVE-2023-20272 | HIGH | 8.8 | 0.9% | Nov 21, 2023 | A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, re... |
| CVE-2023-20265 | MEDIUM | 5.4 | 0.5% | Nov 21, 2023 | A vulnerability in the web-based management interface of a small subset of Cisco IP Phones could allow an authenticated,... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now