2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-6176 | MEDIUM | 4.7 | 0.3% | Nov 16, 2023 | A null pointer dereference flaw was found in the Linux kernel API for the cryptographic algorithm scatterwalk functional... |
| CVE-2023-48056 | HIGH | 7.5 | 0.5% | Nov 16, 2023 | PyPinkSign v0.5.1 uses a non-random or static IV for Cipher Block Chaining (CBC) mode in AES encryption. This vulnerabil... |
| CVE-2023-48055 | HIGH | 7.5 | 0.4% | Nov 16, 2023 | SuperAGI v0.0.13 was discovered to use a hardcoded key for encryption operations. This vulnerability can lead to the dis... |
| CVE-2023-48054 | HIGH | 7.4 | 0.3% | Nov 16, 2023 | Missing SSL certificate validation in localstack v2.3.2 allows attackers to eavesdrop on communications between the host... |
| CVE-2023-48053 | HIGH | 7.5 | 0.4% | Nov 16, 2023 | Archery v1.10.0 uses a non-random or static IV for Cipher Block Chaining (CBC) mode in AES encryption. This vulnerabilit... |
| CVE-2023-48052 | HIGH | 7.4 | 0.3% | Nov 16, 2023 | Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and... |
| CVE-2023-47514 | MEDIUM | 6.1 | 0.4% | Nov 16, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in lawrenceowen, gcubero, acunnningham, fmahmood Star CloudPR... |
| CVE-2023-6038 | HIGH | 7.5 | 4.3% | Nov 16, 2023 | A Local File Inclusion (LFI) vulnerability exists in the h2o-3 REST API, allowing unauthenticated remote attackers to re... |
| CVE-2023-6022 | HIGH | 8.8 | 0.4% | Nov 16, 2023 | Cross-Site Request Forgery (CSRF) in GitHub repository prefecthq/prefect prior to 2.16.5. |
| CVE-2023-6021 | HIGH | 7.5 | 37.1% | Nov 16, 2023 | LFI in Ray's log API endpoint allows attackers to read any file on the server without authentication. The issue is fixed... |
| CVE-2023-6019 | CRITICAL | 9.8 | 74.6% | Nov 16, 2023 | A command injection existed in Ray's cpu_profile URL parameter allowing attackers to execute os commands on the system r... |
| CVE-2023-6017 | HIGH | 7.1 | 0.9% | Nov 16, 2023 | H2O included a reference to an S3 bucket that no longer existed allowing an attacker to take over the S3 bucket URL. |
| CVE-2023-6013 | MEDIUM | 5.4 | 0.7% | Nov 16, 2023 | H2O is vulnerable to stored XSS vulnerability which can lead to a Local File Include attack. |
| CVE-2023-47060 | LOW | 3.3 | 0.3% | Nov 16, 2023 | Adobe Premiere Pro version 24.0 (and earlier) and 23.6 (and earlier) are affected by an Access of Uninitialized Pointer ... |
| CVE-2023-47059 | HIGH | 7.8 | 0.4% | Nov 16, 2023 | Adobe Premiere Pro version 24.0 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds read vulnerability... |
| CVE-2023-47058 | HIGH | 7.8 | 0.4% | Nov 16, 2023 | Adobe Premiere Pro version 24.0 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds read vulnerability... |
| CVE-2023-47057 | HIGH | 7.8 | 0.3% | Nov 16, 2023 | Adobe Premiere Pro version 24.0 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds write vulnerabilit... |
| CVE-2023-47056 | HIGH | 7.8 | 0.4% | Nov 16, 2023 | Adobe Premiere Pro version 24.0 (and earlier) and 23.6 (and earlier) are affected by a Heap-based Buffer Overflow vulner... |
| CVE-2023-47055 | HIGH | 7.8 | 0.4% | Nov 16, 2023 | Adobe Premiere Pro version 24.0 (and earlier) and 23.6 (and earlier) are affected by a Use After Free vulnerability that... |
| CVE-2023-6023 | HIGH | 7.5 | 3.0% | Nov 16, 2023 | An attacker can read any file on the filesystem on the server hosting ModelDB through an LFI in the artifact_path URL pa... |
| CVE-2023-6018 | CRITICAL | 9.8 | 47.9% | Nov 16, 2023 | An attacker can overwrite any file on the server hosting MLflow without any authentication. |
| CVE-2023-6016 | CRITICAL | 9.8 | 30.6% | Nov 16, 2023 | An attacker is able to gain remote code execution on a server hosting the H2O dashboard through it's POJO model import f... |
| CVE-2023-6015 | HIGH | 7.5 | 4.4% | Nov 16, 2023 | MLflow allowed arbitrary files to be PUT onto the server. |
| CVE-2023-47054 | MEDIUM | 5.5 | 0.4% | Nov 16, 2023 | Adobe Audition version 24.0 (and earlier) and 23.6.1 (and earlier) are affected by an Access of Uninitialized Pointer vu... |
| CVE-2023-47053 | MEDIUM | 5.5 | 0.4% | Nov 16, 2023 | Adobe Audition version 24.0 (and earlier) and 23.6.1 (and earlier) are affected by an Access of Uninitialized Pointer vu... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now