2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-41351 | CRITICAL | 9.8 | 0.8% | Nov 3, 2023 | Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of authentication bypass, which allows an unauthenticated remote att... |
| CVE-2023-46817 | CRITICAL | 9.8 | 1.8% | Nov 3, 2023 | An issue was discovered in phpFox before 4.8.14. The url request parameter passed to the /core/redirect route is not pro... |
| CVE-2023-46517 | — | — | — | Nov 3, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2023-45362 | MEDIUM | 4.3 | 0.6% | Nov 3, 2023 | An issue was discovered in DifferenceEngine.php in MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.... |
| CVE-2023-45360 | MEDIUM | 5.4 | 0.6% | Nov 3, 2023 | An issue was discovered in MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. Ther... |
| CVE-2023-45024 | HIGH | 7.5 | 0.6% | Nov 3, 2023 | Best Practical Request Tracker (RT) 5 before 5.0.5 allows Information Disclosure via a transaction search in the transac... |
| CVE-2023-44271 | HIGH | 7.5 | 1.0% | Nov 3, 2023 | An issue was discovered in Pillow before 10.0.0. It is a Denial of Service that uncontrollably allocates memory to proce... |
| CVE-2023-43982 | CRITICAL | 9.8 | 0.6% | Nov 3, 2023 | Bon Presta boninstagramcarousel between v5.2.1 to v7.0.0 was discovered to contain a Server-Side Request Forgery (SSRF) ... |
| CVE-2023-43665 | HIGH | 7.5 | 1.2% | Nov 3, 2023 | In Django 3.2 before 3.2.22, 4.1 before 4.1.12, and 4.2 before 4.2.6, the django.utils.text.Truncator chars() and words(... |
| CVE-2023-41914 | HIGH | 7 | 0.2% | Nov 3, 2023 | SchedMD Slurm 23.02.x before 23.02.6 and 22.05.x before 22.05.10 allows filesystem race conditions for gaining ownership... |
| CVE-2023-41350 | CRITICAL | 9.8 | 0.8% | Nov 3, 2023 | Chunghwa Telecom NOKIA G-040W-Q has a vulnerability of insufficient measures to prevent multiple failed authentication a... |
| CVE-2023-41348 | HIGH | 8.8 | 1.3% | Nov 3, 2023 | ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters withi... |
| CVE-2023-41347 | HIGH | 8.8 | 1.3% | Nov 3, 2023 | ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters withi... |
| CVE-2023-41346 | HIGH | 8.8 | 1.2% | Nov 3, 2023 | ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters withi... |
| CVE-2023-41345 | HIGH | 8.8 | 1.3% | Nov 3, 2023 | ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters withi... |
| CVE-2023-41343 | MEDIUM | 5.4 | 0.3% | Nov 3, 2023 | Rogic No-Code Database Builder's file uploading function has insufficient filtering for special characters. A remote att... |
| CVE-2023-41260 | HIGH | 7.5 | 0.7% | Nov 3, 2023 | Best Practical Request Tracker (RT) before 4.4.7 and 5.x before 5.0.5 allows Information Exposure in responses to mail-g... |
| CVE-2023-41259 | HIGH | 7.5 | 0.7% | Nov 3, 2023 | Best Practical Request Tracker (RT) before 4.4.7 and 5.x before 5.0.5 allows Information Disclosure via fake or spoofed ... |
| CVE-2023-41164 | HIGH | 7.5 | 1.3% | Nov 3, 2023 | In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uri_to_iri() is subject to a... |
| CVE-2023-38965 | CRITICAL | 9.8 | 1.3% | Nov 3, 2023 | Lost and Found Information System 1.0 allows account takeover via username and password to a /classes/Users.php?f=save U... |
| CVE-2023-36621 | CRITICAL | 9.1 | 0.9% | Nov 3, 2023 | An issue was discovered in the Boomerang Parental Control application through 13.83 for Android. The child can use Safe ... |
| CVE-2023-36620 | MEDIUM | 4.6 | 0.5% | Nov 3, 2023 | An issue was discovered in the Boomerang Parental Control application before 13.83 for Android. The app is missing the a... |
| CVE-2023-34261 | MEDIUM | 5.3 | 6.7% | Nov 3, 2023 | Kyocera TASKalfa 4053ci printers through 2VG_S000.002.561 allow identification of valid user accounts via username enume... |
| CVE-2023-34260 | HIGH | 7.5 | 68.0% | Nov 3, 2023 | Kyocera TASKalfa 4053ci printers through 2VG_S000.002.561 allow a denial of service (service outage) via /wlmdeu%2f%2e%2... |
| CVE-2023-34259 | MEDIUM | 4.9 | 57.7% | Nov 3, 2023 | Kyocera TASKalfa 4053ci printers through 2VG_S000.002.561 allow /wlmdeu%2f%2e%2e%2f%2e%2e directory traversal to read ar... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now