2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-4149 | CRITICAL | 9.8 | 1.1% | Nov 21, 2023 | A vulnerability in the web-based management allows an unauthenticated remote attacker to inject arbitrary system command... |
| CVE-2023-46935 | MEDIUM | 5.4 | 0.4% | Nov 21, 2023 | eyoucms v1.6.4 is vulnerable Cross Site Scripting (XSS), which can lead to stealing sensitive information of logged-in u... |
| CVE-2023-21418 | HIGH | 7.1 | 0.7% | Nov 21, 2023 | Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API irissetup.cgi was vulnerable to pat... |
| CVE-2023-21417 | HIGH | 7.1 | 0.7% | Nov 21, 2023 | Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API manageoverlayimage.cgi was vulnera... |
| CVE-2023-21416 | MEDIUM | 6.5 | 0.7% | Nov 21, 2023 | Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API dynamicoverlay.cgi was vulnerable t... |
| CVE-2023-45886 | HIGH | 7.5 | 1.4% | Nov 21, 2023 | The BGP daemon (bgpd) in IP Infusion ZebOS through 7.10.6 allow remote attackers to cause a denial of service by sending... |
| CVE-2023-42770 | CRITICAL | 9.8 | 0.9% | Nov 21, 2023 | Red Lion SixTRAK and VersaTRAK Series RTUs with authenticated users enabled (UDR-A) any Sixnet UDR message will meet an... |
| CVE-2023-6144 | MEDIUM | 4.8 | 0.4% | Nov 21, 2023 | Dev blog v1.0 allows to exploit an account takeover through the "user" cookie. With this, an attacker can access any use... |
| CVE-2023-6142 | MEDIUM | 5.4 | 0.4% | Nov 21, 2023 | Dev blog v1.0 allows to exploit an XSS through an unrestricted file upload, together with a bad entropy of filenames. Wi... |
| CVE-2023-40151 | CRITICAL | 9.8 | 1.1% | Nov 21, 2023 | When user authentication is not enabled the shell can execute commands with the highest privileges. Red Lion SixTRAK ... |
| CVE-2023-6199 | MEDIUM | 6.5 | 1.4% | Nov 20, 2023 | Book Stack version 23.10.2 allows filtering local files on the server. This is possible because the application is vulne... |
| CVE-2023-48310 | HIGH | 7.5 | 1.1% | Nov 20, 2023 | TestingPlatform is a testing platform for Internet Security Standards. Prior to version 2.1.1, user input is not filtere... |
| CVE-2023-48051 | HIGH | 7.5 | 0.2% | Nov 20, 2023 | An issue in /upydev/keygen.py in upydev v0.4.3 allows attackers to decrypt sensitive information via weak encryption pad... |
| CVE-2023-48192 | HIGH | 7.8 | 0.4% | Nov 20, 2023 | An issue in TOTOlink A3700R v.9.1.2u.6134_B20201202 allows a local attacker to execute arbitrary code via the setTracero... |
| CVE-2023-48176 | CRITICAL | 9.8 | 0.9% | Nov 20, 2023 | An Insecure Permissions issue in WebsiteGuide v.0.2 allows a remote attacker to gain escalated privileges via crafted jw... |
| CVE-2023-6178 | MEDIUM | 6.5 | 0.8% | Nov 20, 2023 | An arbitrary file write vulnerability exists where an authenticated attacker with privileges on the managing applicatio... |
| CVE-2023-6062 | MEDIUM | 6.5 | 1.0% | Nov 20, 2023 | An arbitrary file write vulnerability exists where an authenticated, remote attacker with administrator privileges on t... |
| CVE-2023-47311 | MEDIUM | 6.1 | 0.4% | Nov 20, 2023 | An issue in Yamcs 5.8.6 allows attackers to send aribitrary telelcommands in a Command Stack via Clickjacking. |
| CVE-2023-47172 | HIGH | 7.8 | 0.2% | Nov 20, 2023 | Certain WithSecure products allow Local Privilege Escalation. This affects WithSecure Client Security 15, WithSecure Ser... |
| CVE-2023-46471 | MEDIUM | 5.4 | 0.6% | Nov 20, 2023 | Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a remote attacker to execute arbi... |
| CVE-2023-46470 | MEDIUM | 5.4 | 0.6% | Nov 20, 2023 | Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a remote attacker to execute arbi... |
| CVE-2023-48111 | HIGH | 7.5 | 0.8% | Nov 20, 2023 | Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the time parameter in the function saveParentContro... |
| CVE-2023-48110 | HIGH | 7.5 | 0.8% | Nov 20, 2023 | Tenda AX1803 v1.0.0.1 was discovered to contain a heap overflow via the urls parameter in the function saveParentControl... |
| CVE-2023-48109 | HIGH | 7.5 | 0.8% | Nov 20, 2023 | Tenda AX1803 v1.0.0.1 was discovered to contain a heap overflow via the deviceId parameter in the function saveParentCon... |
| CVE-2023-47417 | MEDIUM | 6.1 | 0.5% | Nov 20, 2023 | Cross Site Scripting (XSS) vulnerability in the component /shells/embedder.html of DZSlides after v2011.07.25 allows att... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now