2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-4606 | HIGH | 8.1 | 0.5% | Oct 25, 2023 | An authenticated XCC user with Read-Only permission can change a different user’s password through a crafted API command... |
| CVE-2023-46660 | MEDIUM | 5.3 | 0.5% | Oct 25, 2023 | Jenkins Zanata Plugin 0.6 and earlier uses a non-constant time comparison function when checking whether the provided an... |
| CVE-2023-46659 | MEDIUM | 5.4 | 0.5% | Oct 25, 2023 | Jenkins Edgewall Trac Plugin 1.13 and earlier does not escape the Trac website URL on the build page, resulting in a sto... |
| CVE-2023-46658 | MEDIUM | 5.3 | 0.6% | Oct 25, 2023 | Jenkins MSTeams Webhook Trigger Plugin 0.1.1 and earlier uses a non-constant time comparison function when checking whet... |
| CVE-2023-46657 | MEDIUM | 5.3 | 0.6% | Oct 25, 2023 | Jenkins Gogs Plugin 1.0.15 and earlier uses a non-constant time comparison function when checking whether the provided a... |
| CVE-2023-46656 | MEDIUM | 5.3 | 0.6% | Oct 25, 2023 | Jenkins Multibranch Scan Webhook Trigger Plugin 1.0.9 and earlier uses a non-constant time comparison function when chec... |
| CVE-2023-46655 | MEDIUM | 6.5 | 1.2% | Oct 25, 2023 | Jenkins CloudBees CD Plugin 1.1.32 and earlier follows symbolic links to locations outside of the directory from which a... |
| CVE-2023-46654 | HIGH | 8.1 | 1.4% | Oct 25, 2023 | Jenkins CloudBees CD Plugin 1.1.32 and earlier follows symbolic links to locations outside of the expected directory dur... |
| CVE-2023-46653 | MEDIUM | 6.5 | 0.4% | Oct 25, 2023 | Jenkins lambdatest-automation Plugin 1.20.10 and earlier logs LAMBDATEST Credentials access token at the INFO level, pot... |
| CVE-2023-46652 | MEDIUM | 4.3 | 0.4% | Oct 25, 2023 | A missing permission check in Jenkins lambdatest-automation Plugin 1.20.9 and earlier allows attackers with Overall/Read... |
| CVE-2023-46651 | MEDIUM | 6.5 | 0.6% | Oct 25, 2023 | Jenkins Warnings Plugin 10.5.0 and earlier does not set the appropriate context for credentials lookup, allowing attacke... |
| CVE-2023-46650 | MEDIUM | 5.4 | 0.6% | Oct 25, 2023 | Jenkins GitHub Plugin 1.37.3 and earlier does not escape the GitHub project URL on the build page when showing changes, ... |
| CVE-2023-46574 | CRITICAL | 9.8 | 65.4% | Oct 25, 2023 | An issue in TOTOLINK A3700R v.9.1.2u.6165_20211012 allows a remote attacker to execute arbitrary code via the FileName p... |
| CVE-2023-46564 | CRITICAL | 9.8 | 0.8% | Oct 25, 2023 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formDMZ. |
| CVE-2023-46563 | CRITICAL | 9.8 | 0.8% | Oct 25, 2023 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formIpQoS. |
| CVE-2023-46562 | CRITICAL | 9.8 | 0.8% | Oct 25, 2023 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formDosCfg. |
| CVE-2023-46560 | CRITICAL | 9.8 | 0.8% | Oct 25, 2023 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formTcpipSetup. |
| CVE-2023-46559 | CRITICAL | 9.8 | 0.8% | Oct 25, 2023 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formIPv6Addr. |
| CVE-2023-46558 | CRITICAL | 9.8 | 0.8% | Oct 25, 2023 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMapDelDevic... |
| CVE-2023-46557 | CRITICAL | 9.8 | 0.8% | Oct 25, 2023 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMultiAPVLAN... |
| CVE-2023-46556 | CRITICAL | 9.8 | 0.8% | Oct 25, 2023 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formFilter. |
| CVE-2023-46555 | CRITICAL | 9.8 | 0.8% | Oct 25, 2023 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formPortFw. |
| CVE-2023-46554 | CRITICAL | 9.8 | 0.8% | Oct 25, 2023 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMapDel. |
| CVE-2023-46553 | CRITICAL | 9.8 | 0.8% | Oct 25, 2023 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formParentContr... |
| CVE-2023-46552 | CRITICAL | 9.8 | 0.8% | Oct 25, 2023 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMultiAP. |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now