2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-45484 | CRITICAL | 9.8 | 1.0% | Nov 29, 2023 | Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the shareSpeed parameter... |
| CVE-2023-45483 | CRITICAL | 9.8 | 1.0% | Nov 29, 2023 | Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the time parameter in th... |
| CVE-2023-45482 | CRITICAL | 9.8 | 1.0% | Nov 29, 2023 | Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the urls parameter in th... |
| CVE-2023-45481 | CRITICAL | 9.8 | 1.0% | Nov 29, 2023 | Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the firewallEn parameter... |
| CVE-2023-45480 | CRITICAL | 9.8 | 1.0% | Nov 29, 2023 | Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the src parameter in the... |
| CVE-2023-45479 | CRITICAL | 9.8 | 1.0% | Nov 29, 2023 | Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the list parameter in th... |
| CVE-2023-47462 | CRITICAL | 9.8 | 1.3% | Nov 29, 2023 | Insecure Permissions vulnerability in GL.iNet AX1800 v.3.215 and before allows a remote attacker to execute arbitrary co... |
| CVE-2023-46886 | CRITICAL | 9.1 | 1.0% | Nov 29, 2023 | Dreamer CMS before version 4.0.1 is vulnerable to Directory Traversal. Background template management allows arbitrary m... |
| CVE-2023-23325 | CRITICAL | 9.8 | 2.0% | Nov 29, 2023 | Zumtobel Netlink CCD Onboard 3.74 - Firmware 3.80 was discovered to contain a command injection vulnerability via the Ne... |
| CVE-2023-23324 | CRITICAL | 9.8 | 0.9% | Nov 29, 2023 | Zumtobel Netlink CCD Onboard 3.74 - Firmware 3.80 was discovered to contain hardcoded credentials for the Administrator ... |
| CVE-2023-48193 | CRITICAL | 9.8 | 2.0% | Nov 28, 2023 | Insecure Permissions vulnerability in JumpServer GPLv3 v.3.8.0 allows a remote attacker to execute arbitrary code via by... |
| CVE-2023-41264 | CRITICAL | 9.8 | 1.0% | Nov 28, 2023 | Netwrix Usercube before 6.0.215, in certain misconfigured on-premises installations, allows authentication bypass on dep... |
| CVE-2023-49313 | CRITICAL | 9.8 | 1.3% | Nov 28, 2023 | A dylib injection vulnerability in XMachOViewer 0.04 allows attackers to compromise integrity. By exploiting this, unaut... |
| CVE-2023-48023 | CRITICAL | 9.1 | 35.1% | Nov 28, 2023 | Anyscale Ray 2.6.3 and 2.8.0 allows /log_proxy SSRF. NOTE: the vendor's position is that this report is irrelevant becau... |
| CVE-2023-48022 | CRITICAL | 9.8 | 81.5% | Nov 28, 2023 | Anyscale Ray 2.6.3 and 2.8.0 allows a remote attacker to execute arbitrary code via the job submission API. NOTE: the ve... |
| CVE-2023-3545 | CRITICAL | 9.8 | 2.0% | Nov 28, 2023 | Improper sanitisation in `main/inc/lib/fileUpload.lib.php` in Chamilo LMS <= v1.11.20 on Windows and Apache installation... |
| CVE-2023-3533 | CRITICAL | 9.8 | 2.7% | Nov 28, 2023 | Path traversal in file upload functionality in `/main/webservices/additional_webservices.php` in Chamilo LMS <= v1.11.20... |
| CVE-2023-3368 | CRITICAL | 9.8 | 68.9% | Nov 28, 2023 | Command injection in `/main/webservices/additional_webservices.php` in Chamilo LMS <= v1.11.20 allows unauthenticated at... |
| CVE-2023-47503 | CRITICAL | 9.8 | 1.3% | Nov 28, 2023 | An issue in jflyfox jfinalCMS v.5.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the log... |
| CVE-2023-48188 | CRITICAL | 9.8 | 1.3% | Nov 27, 2023 | SQL injection vulnerability in PrestaShop opartdevis v.4.5.18 thru v.4.6.12 allows a remote attacker to execute arbitrar... |
| CVE-2023-46480 | CRITICAL | 9.8 | 1.6% | Nov 27, 2023 | An issue in OwnCast v.0.1.1 allows a remote attacker to execute arbitrary code and obtain sensitive information via the ... |
| CVE-2023-46349 | CRITICAL | 9.8 | 0.8% | Nov 27, 2023 | In the module "Product Catalog (CSV, Excel) Export/Update" (updateproducts) < 3.8.5 from MyPrestaModules for PrestaShop,... |
| CVE-2023-49044 | CRITICAL | 9.8 | 1.4% | Nov 27, 2023 | Stack Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the ssid p... |
| CVE-2023-6329 | CRITICAL | 9.8 | 65.2% | Nov 27, 2023 | An authentication bypass vulnerability exists in Control iD iDSecure v4.7.32.0. The login routine used by iDS-Core.dll c... |
| CVE-2023-5974 | CRITICAL | 9.8 | 3.1% | Nov 27, 2023 | The WPB Show Core WordPress plugin through 2.2 is vulnerable to server-side request forgery (SSRF) via the `path` parame... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now