2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-47370 | MEDIUM | 6.5 | 0.4% | Nov 9, 2023 | The leakage of channel access token in bluetrick Line 13.6.1 allows remote attackers to send malicious notifications to ... |
| CVE-2023-47368 | MEDIUM | 6.5 | 0.4% | Nov 9, 2023 | The leakage of channel access token in taketorinoyu Line 13.6.1 allows remote attackers to send malicious notifications ... |
| CVE-2023-43791 | HIGH | 8.8 | 1.2% | Nov 9, 2023 | Label Studio is a multi-type data labeling and annotation tool with standardized output format. There is a vulnerability... |
| CVE-2023-41138 | MEDIUM | 6.7 | 0.2% | Nov 9, 2023 | The AppsAnywhere macOS client-privileged helper can be tricked into executing arbitrary commands with elevated permissio... |
| CVE-2023-41137 | CRITICAL | 9.8 | 0.3% | Nov 9, 2023 | Symmetric encryption used to protect messages between the AppsAnywhere server and client can be broken by reverse engine... |
| CVE-2023-40055 | HIGH | 8.8 | 2.1% | Nov 9, 2023 | The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability. This vu... |
| CVE-2023-40054 | HIGH | 8.8 | 3.0% | Nov 9, 2023 | The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability. This vu... |
| CVE-2023-4612 | CRITICAL | 9.8 | 0.9% | Nov 9, 2023 | Improper Authentication vulnerability in Apereo CAS in jakarta.servlet.http.HttpServletRequest.getRemoteAddr method allo... |
| CVE-2023-47369 | MEDIUM | 6.5 | 0.4% | Nov 9, 2023 | The leakage of channel access token in best_training_member Line 13.6.1 allows remote attackers to send malicious notifi... |
| CVE-2023-47367 | MEDIUM | 6.5 | 0.4% | Nov 9, 2023 | The leakage of channel access token in platinum clinic Line 13.6.1 allows remote attackers to send malicious notificatio... |
| CVE-2023-47366 | MEDIUM | 6.5 | 0.4% | Nov 9, 2023 | The leakage of channel access token in craft_members Line 13.6.1 allows remote attackers to send malicious notifications... |
| CVE-2023-47365 | MEDIUM | 6.5 | 0.4% | Nov 9, 2023 | The leakage of channel access token in Lil.OFF-PRICE STORE Line 13.6.1 allows remote attackers to send malicious notific... |
| CVE-2023-47364 | MEDIUM | 6.5 | 0.4% | Nov 9, 2023 | The leakage of channel access token in nagaoka taxi Line 13.6.1 allows remote attackers to send malicious notifications ... |
| CVE-2023-47363 | MEDIUM | 6.5 | 0.4% | Nov 9, 2023 | The leakage of channel access token in F.B.P members Line 13.6.1 allows remote attackers to send malicious notifications... |
| CVE-2023-6052 | CRITICAL | 9.8 | 1.0% | Nov 9, 2023 | A vulnerability classified as critical has been found in Tongda OA 2017 up to 11.9. Affected is an unknown function of t... |
| CVE-2023-47616 | MEDIUM | 4.6 | 0.3% | Nov 9, 2023 | A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Telit Cinterion BGS5, Teli... |
| CVE-2023-47615 | MEDIUM | 5.5 | 0.2% | Nov 9, 2023 | A CWE-526: Exposure of Sensitive Information Through Environmental Variables vulnerability exists in Telit Cinterion BGS... |
| CVE-2023-47612 | MEDIUM | 6.1 | 0.3% | Nov 9, 2023 | A CWE-552: Files or Directories Accessible to External Parties vulnerability exists in Telit Cinterion BGS5, Telit Cinte... |
| CVE-2023-4218 | MEDIUM | 5 | 0.4% | Nov 9, 2023 | In Eclipse IDE versions < 2023-09 (4.29) some files with xml content are parsed vulnerable against all sorts of XXE atta... |
| CVE-2023-47248 | CRITICAL | 9.8 | 14.4% | Nov 9, 2023 | Deserialization of untrusted data in IPC and Parquet readers in PyArrow versions 0.14.0 to 14.0.0 allows arbitrary code ... |
| CVE-2023-47613 | HIGH | 7.1 | 0.2% | Nov 9, 2023 | A CWE-23: Relative Path Traversal vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterio... |
| CVE-2023-47489 | HIGH | 7.8 | 0.4% | Nov 9, 2023 | CSV injection in export as csv in Combodo iTop v.3.1.0-2-11973 allows a local attacker to execute arbitrary code via a c... |
| CVE-2023-47488 | MEDIUM | 6.1 | 1.2% | Nov 9, 2023 | Cross Site Scripting vulnerability in Combodo iTop v.3.1.0-2-11973 allows a local attacker to obtain sensitive informati... |
| CVE-2023-46492 | MEDIUM | 6.1 | 0.6% | Nov 9, 2023 | Cross Site Scripting vulnerability in MLDB.ai v.2017.04.17.0 allows a remote attacker to execute arbitrary code via a cr... |
| CVE-2023-26156 | HIGH | 7.5 | 2.2% | Nov 9, 2023 | Versions of the package chromedriver before 119.0.1 are vulnerable to Command Injection when setting the chromedriver.pa... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now