2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-46478 | HIGH | 8.8 | 1.0% | Oct 30, 2023 | An issue in minCal v.1.0.0 allows a remote attacker to execute arbitrary code via a crafted script to the customer_data ... |
| CVE-2023-45804 | — | — | — | Oct 30, 2023 | Rejected reason: User requested a CVE number by mistake |
| CVE-2023-45672 | HIGH | 7.5 | 1.4% | Oct 30, 2023 | Frigate is an open source network video recorder. Prior to version 0.13.0 Beta 3, an unsafe deserialization vulnerabilit... |
| CVE-2023-45671 | MEDIUM | 4.7 | 1.4% | Oct 30, 2023 | Frigate is an open source network video recorder. Prior to version 0.13.0 Beta 3, there is a reflected cross-site script... |
| CVE-2023-45670 | MEDIUM | 6.8 | 0.4% | Oct 30, 2023 | Frigate is an open source network video recorder. Prior to version 0.13.0 Beta 3, the `config/save` and `config/set` end... |
| CVE-2023-44397 | CRITICAL | 9.8 | 0.6% | Oct 30, 2023 | CloudExplorer Lite is an open source, lightweight cloud management platform. Prior to version 1.4.1, the gateway filter ... |
| CVE-2023-43798 | MEDIUM | 5.4 | 0.4% | Oct 30, 2023 | BigBlueButton is an open-source virtual classroom. BigBlueButton prior to versions 2.6.12 and 2.7.0-rc.1 is vulnerable t... |
| CVE-2023-43797 | MEDIUM | 5.4 | 0.4% | Oct 30, 2023 | BigBlueButton is an open-source virtual classroom. Prior to versions 2.6.11 and 2.7.0-beta.3, Guest Lobby was vulnerable... |
| CVE-2023-45956 | HIGH | 7.5 | 0.5% | Oct 30, 2023 | An issue discovered in Govee LED Strip v3.00.42 allows attackers to cause a denial of service via crafted Move and MoveW... |
| CVE-2023-42323 | HIGH | 8.8 | 0.4% | Oct 30, 2023 | Cross Site Request Forgery (CSRF) vulnerability in DouHaocms v.3.3 allows a remote attacker to execute arbitrary code vi... |
| CVE-2023-5349 | LOW | 3.3 | 0.7% | Oct 30, 2023 | A memory leak flaw was found in ruby-magick, an interface between Ruby and ImageMagick. This issue can lead to a denial ... |
| CVE-2023-43792 | CRITICAL | 9.8 | 0.6% | Oct 30, 2023 | baserCMS is a website development framework. In versions 4.6.0 through 4.7.6, there is a Code Injection vulnerability in... |
| CVE-2023-47104 | CRITICAL | 9.8 | 0.7% | Oct 30, 2023 | tinyfiledialogs (aka tiny file dialogs) before 3.15.0 allows shell metacharacters (such as a backquote or a dollar sign)... |
| CVE-2023-43649 | CRITICAL | 9.8 | 0.3% | Oct 30, 2023 | baserCMS is a website development framework. Prior to version 4.8.0, there is a cross site request forgery vulnerability... |
| CVE-2023-43648 | MEDIUM | 6.5 | 1.0% | Oct 30, 2023 | baserCMS is a website development framework. Prior to version 4.8.0, there is a Directory Traversal Vulnerability in the... |
| CVE-2023-43647 | MEDIUM | 5.4 | 0.5% | Oct 30, 2023 | baserCMS is a website development framework. Prior to version 4.8.0, there is a cross-site scripting vulnerability in th... |
| CVE-2023-42804 | MEDIUM | 5.3 | 0.5% | Oct 30, 2023 | BigBlueButton is an open-source virtual classroom. BigBlueButton prior to version 2.6.0-beta.1 has a path traversal vuln... |
| CVE-2023-42803 | HIGH | 8.8 | 0.5% | Oct 30, 2023 | BigBlueButton is an open-source virtual classroom. BigBlueButton prior to version 2.6.0-beta.2 is vulnerable to unrestri... |
| CVE-2023-41891 | HIGH | 8.8 | 0.9% | Oct 30, 2023 | FlyteAdmin is the control plane for Flyte responsible for managing entities and administering workflow executions. Prior... |
| CVE-2023-47101 | HIGH | 7.8 | 0.2% | Oct 30, 2023 | The installer (aka openvpn-client-installer) in Securepoint SSL VPN Client before 2.0.40 allows local privilege escalati... |
| CVE-2023-45780 | HIGH | 7.3 | 0.1% | Oct 30, 2023 | In Print Service, there is a possible background activity launch due to a logic error in the code. This could lead to lo... |
| CVE-2023-40101 | MEDIUM | 5.5 | 0.1% | Oct 30, 2023 | In collapse of canonicalize_md.c, there is a possible out of bounds read due to a missing bounds check. This could lead ... |
| CVE-2023-21398 | HIGH | 7.8 | 0.1% | Oct 30, 2023 | In sdksandbox, there is a possible strandhogg style overlay attack due to a logic error in the code. This could lead to ... |
| CVE-2023-21397 | HIGH | 7.8 | 0.1% | Oct 30, 2023 | In Setup Wizard, there is a possible way to save a WiFi network due to an insecure default value. This could lead to loc... |
| CVE-2023-21396 | HIGH | 7.8 | 0.1% | Oct 30, 2023 | In Activity Manager, there is a possible background activity launch due to a logic error in the code. This could lead to... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now