2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-43509 | MEDIUM | 5.8 | 0.6% | Oct 25, 2023 | A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote ... |
| CVE-2023-43508 | MEDIUM | 6.5 | 0.4% | Oct 25, 2023 | Vulnerabilities in the web-based management interface of ClearPass Policy Manager allow an attacker with read-only privi... |
| CVE-2023-43507 | HIGH | 8.8 | 0.8% | Oct 25, 2023 | A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote at... |
| CVE-2023-43506 | HIGH | 7.8 | 0.2% | Oct 25, 2023 | A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their us... |
| CVE-2023-43488 | HIGH | 7.8 | 0.2% | Oct 25, 2023 | The vulnerability allows a low privileged (untrusted) application to modify a critical system property that should be d... |
| CVE-2023-43360 | MEDIUM | 5.4 | 0.5% | Oct 25, 2023 | Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a cra... |
| CVE-2023-43281 | MEDIUM | 6.5 | 1.0% | Oct 25, 2023 | Double Free vulnerability in Nothings Stb Image.h v.2.28 allows a remote attacker to cause a denial of service via a cra... |
| CVE-2023-42494 | CRITICAL | 9.8 | 0.7% | Oct 25, 2023 | EisBaer Scada - CWE-749: Exposed Dangerous Method or Function |
| CVE-2023-42493 | CRITICAL | 9.8 | 0.4% | Oct 25, 2023 | EisBaer Scada - CWE-256: Plaintext Storage of a Password |
| CVE-2023-42492 | CRITICAL | 9.8 | 0.4% | Oct 25, 2023 | EisBaer Scada - CWE-321: Use of Hard-coded Cryptographic Key |
| CVE-2023-42491 | CRITICAL | 9.8 | 0.6% | Oct 25, 2023 | EisBaer Scada - CWE-285: Improper Authorization |
| CVE-2023-42490 | HIGH | 7.5 | 0.6% | Oct 25, 2023 | EisBaer Scada - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor |
| CVE-2023-42489 | CRITICAL | 9.8 | 0.7% | Oct 25, 2023 | EisBaer Scada - CWE-732: Incorrect Permission Assignment for Critical Resource |
| CVE-2023-42488 | HIGH | 7.5 | 0.8% | Oct 25, 2023 | EisBaer Scada - CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') |
| CVE-2023-42031 | MEDIUM | 4.9 | 1.0% | Oct 25, 2023 | IBM TXSeries for Multiplatforms, 8.1, 8.2, and 9.1, CICS TX Standard CICS TX Advanced 10.1 and 11.1 could allow a privil... |
| CVE-2023-41960 | LOW | 3.3 | 0.2% | Oct 25, 2023 | The vulnerability allows an unprivileged(untrusted) third-party application to interact with a content-provider unsafely... |
| CVE-2023-41721 | MEDIUM | 5.3 | 0.6% | Oct 25, 2023 | Instances of UniFi Network Application that (i) are run on a UniFi Gateway Console, and (ii) are versions 7.5.176. and e... |
| CVE-2023-41372 | HIGH | 7.8 | 0.2% | Oct 25, 2023 | The vulnerability allows an unprivileged (untrusted) third- party application to arbitrary modify the server settings of... |
| CVE-2023-41339 | MEDIUM | 5.3 | 0.5% | Oct 25, 2023 | GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. The WMS... |
| CVE-2023-41255 | HIGH | 8.8 | 0.4% | Oct 25, 2023 | The vulnerability allows an unprivileged user with access to the subnet of the TPC-110W device to gain a root shell on t... |
| CVE-2023-3112 | HIGH | 7.8 | 0.2% | Oct 25, 2023 | A vulnerability was reported in Elliptic Labs Virtual Lock Sensor for ThinkPad T14 Gen 3 that could allow an attacker wi... |
| CVE-2023-3010 | MEDIUM | 6.1 | 0.4% | Oct 25, 2023 | Grafana is an open-source platform for monitoring and observability. The WorldMap panel plugin, versions before 1.0.4 ... |
| CVE-2023-39930 | CRITICAL | 9.8 | 0.7% | Oct 25, 2023 | A first-factor authentication bypass vulnerability exists in the PingFederate with PingID Radius PCV when a MSCHAP authe... |
| CVE-2023-39924 | MEDIUM | 4.8 | 0.4% | Oct 25, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Mitchell Bennis Simple File List plugin <= 6.1.9 versi... |
| CVE-2023-39817 | — | — | — | Oct 25, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now