2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-20208 | MEDIUM | 4.8 | 0.5% | Nov 21, 2023 | A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to cond... |
| CVE-2023-5055 | CRITICAL | 9.8 | 0.8% | Nov 21, 2023 | Possible variant of CVE-2021-3434 in function le_ecred_reconf_req. |
| CVE-2023-22521 | HIGH | 8.8 | 1.2% | Nov 21, 2023 | This High severity RCE (Remote Code Execution) vulnerability was introduced in version 3.4.6 of Crowd Data Center and Se... |
| CVE-2023-22516 | HIGH | 8.8 | 1.2% | Nov 21, 2023 | This High severity RCE (Remote Code Execution) vulnerability was introduced in versions 8.1.0, 8.2.0, 9.0.0, 9.1.0, 9.2.... |
| CVE-2023-46377 | — | — | — | Nov 21, 2023 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further inv... |
| CVE-2023-6213 | HIGH | 8.8 | 0.7% | Nov 21, 2023 | Memory safety bugs present in Firefox 119. Some of these bugs showed evidence of memory corruption and we presume that w... |
| CVE-2023-6212 | HIGH | 8.8 | 0.8% | Nov 21, 2023 | Memory safety bugs present in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4. Some of these bugs showed evidence ... |
| CVE-2023-6211 | MEDIUM | 6.5 | 0.5% | Nov 21, 2023 | If an attacker needed a user to load an insecure http: page and knew that user had enabled HTTPS-only mode, the attacker... |
| CVE-2023-6210 | MEDIUM | 6.5 | 0.6% | Nov 21, 2023 | When an https: web page created a pop-up from a "javascript:" URL, that pop-up was incorrectly allowed to load blockable... |
| CVE-2023-6209 | MEDIUM | 6.5 | 1.4% | Nov 21, 2023 | Relative URLs starting with three slashes were incorrectly parsed, and a path-traversal "/../" part in the path could be... |
| CVE-2023-6208 | HIGH | 8.8 | 0.8% | Nov 21, 2023 | When using X11, text selected by the page using the Selection API was erroneously copied into the primary selection, a t... |
| CVE-2023-6207 | HIGH | 8.8 | 0.8% | Nov 21, 2023 | Ownership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects Firefox < 120, Firefox... |
| CVE-2023-6206 | MEDIUM | 5.4 | 0.6% | Nov 21, 2023 | The black fade animation when exiting fullscreen is roughly the length of the anti-clickjacking delay on permission prom... |
| CVE-2023-6205 | MEDIUM | 6.5 | 0.9% | Nov 21, 2023 | It was possible to cause the use of a MessagePort after it had already been freed, which could potentially have led to a... |
| CVE-2023-6204 | MEDIUM | 6.5 | 0.8% | Nov 21, 2023 | On some systems—depending on the graphics settings and drivers—it was possible to force an out-of-bounds read and leak m... |
| CVE-2023-49061 | MEDIUM | 6.1 | 0.3% | Nov 21, 2023 | An attacker could have performed HTML template injection via Reader Mode and exfiltrated user information. This vulnerab... |
| CVE-2023-49060 | CRITICAL | 9.8 | 0.6% | Nov 21, 2023 | An attacker could have accessed internal pages or data by ex-filtrating a security key from ReaderMode via the `referrer... |
| CVE-2023-48124 | MEDIUM | 5.4 | 0.6% | Nov 21, 2023 | Cross Site Scripting in SUP Online Shopping v.1.0 allows a remote attacker to execute arbitrary code via the Name, Email... |
| CVE-2023-6235 | HIGH | 7.8 | 0.3% | Nov 21, 2023 | An uncontrolled search path element vulnerability has been found in the Duet Display product, affecting version 2.5.9.1.... |
| CVE-2023-28802 | MEDIUM | 5.4 | 0.2% | Nov 21, 2023 | An Improper Validation of Integrity Check Value in Zscaler Client Connector on Windows allows an authenticated user to d... |
| CVE-2023-5599 | MEDIUM | 5.4 | 0.4% | Nov 21, 2023 | A stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2022x thr... |
| CVE-2023-5598 | MEDIUM | 5.4 | 0.4% | Nov 21, 2023 | Stored Cross-site Scripting (XSS) vulnerabilities affecting 3DSwym in 3DSwymer from Release 3DEXPERIENCE R2022x through ... |
| CVE-2023-5776 | HIGH | 8.8 | 0.3% | Nov 21, 2023 | The Post Meta Data Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and i... |
| CVE-2023-5553 | MEDIUM | 6.8 | 0.3% | Nov 21, 2023 | During internal Axis Security Development Model (ASDM) threat-modelling, a flaw was found in the protection for device t... |
| CVE-2023-4424 | HIGH | 8.8 | 0.4% | Nov 21, 2023 | An malicious BLE device can cause buffer overflow by sending malformed advertising packet BLE device using Zephyr OS, le... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now