2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-32615 | HIGH | 8.1 | 0.7% | Sep 5, 2023 | A file write vulnerability exists in the OAS Engine configuration functionality of Open Automation Software OAS Platform... |
| CVE-2023-32271 | MEDIUM | 6.5 | 0.9% | Sep 5, 2023 | An information disclosure vulnerability exists in the OAS Engine configuration management functionality of Open Automati... |
| CVE-2023-31242 | CRITICAL | 9.8 | 3.4% | Sep 5, 2023 | An authentication bypass vulnerability exists in the OAS Engine functionality of Open Automation Software OAS Platform v... |
| CVE-2023-4778 | MEDIUM | 5.5 | 0.3% | Sep 5, 2023 | Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3-DEV. |
| CVE-2023-41108 | HIGH | 8.8 | 1.3% | Sep 5, 2023 | TEF portal 2023-07-17 is vulnerable to authenticated remote code execution. |
| CVE-2023-41107 | MEDIUM | 5.4 | 0.4% | Sep 5, 2023 | TEF portal 2023-07-17 is vulnerable to a persistent cross site scripting (XSS)attack. |
| CVE-2023-41012 | CRITICAL | 9.8 | 1.3% | Sep 5, 2023 | An issue in China Mobile Communications China Mobile Intelligent Home Gateway v.HG6543C4 allows a remote attacker to exe... |
| CVE-2023-36361 | CRITICAL | 9.8 | 0.7% | Sep 5, 2023 | Audimexee v14.1.7 was discovered to contain a SQL injection vulnerability via the p_table_name parameter. |
| CVE-2023-4480 | MEDIUM | 5.5 | 0.6% | Sep 5, 2023 | Due to an out-of-date dependency in the “Fusion File Manager” component accessible through the admin panel, an attacker... |
| CVE-2023-40743 | CRITICAL | 9.8 | 1.9% | Sep 5, 2023 | ** UNSUPPORTED WHEN ASSIGNED ** When integrating Apache Axis 1.x in an application, it may not have been obvious that lo... |
| CVE-2023-32086 | — | — | — | Sep 5, 2023 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2023-2453 | HIGH | 8.8 | 0.7% | Sep 5, 2023 | There is insufficient sanitization of tainted file names that are directly concatenated with a path that is subsequently... |
| CVE-2023-20898 | HIGH | 7.8 | 0.3% | Sep 5, 2023 | Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters pr... |
| CVE-2023-20897 | MEDIUM | 5.3 | 1.0% | Sep 5, 2023 | Salt masters prior to 3005.2 or 3006.2 contain a DOS in minion return. After receiving several bad packets on the reques... |
| CVE-2023-38569 | MEDIUM | 5.4 | 0.4% | Sep 5, 2023 | Stored cross-site scripting vulnerability in SHIRASAGI prior to v1.18.0 allows a remote authenticated attacker to execut... |
| CVE-2023-36492 | MEDIUM | 6.1 | 0.4% | Sep 5, 2023 | Reflected cross-site scripting vulnerability in SHIRASAGI prior to v1.18.0 allows a remote unauthenticated attacker to e... |
| CVE-2023-40705 | MEDIUM | 5.4 | 0.4% | Sep 5, 2023 | Stored cross-site scripting vulnerability in Map setting page of VI Web Client prior to 7.9.6 allows a remote authentica... |
| CVE-2023-40535 | MEDIUM | 5.4 | 0.4% | Sep 5, 2023 | Stored cross-site scripting vulnerability in View setting page of VI Web Client prior to 7.9.6 allows a remote authentic... |
| CVE-2023-39938 | MEDIUM | 6.1 | 0.4% | Sep 5, 2023 | Reflected cross-site scripting vulnerability in VI Web Client prior to 7.9.6 allows a remote unauthenticated attacker to... |
| CVE-2023-39448 | HIGH | 8.8 | 1.1% | Sep 5, 2023 | Path traversal vulnerability in SHIRASAGI prior to v1.18.0 allows a remote authenticated attacker to alter or create ar... |
| CVE-2023-38574 | MEDIUM | 6.1 | 0.4% | Sep 5, 2023 | Open redirect vulnerability in VI Web Client prior to 7.9.6 allows a remote unauthenticated attacker to redirect users t... |
| CVE-2023-4540 | HIGH | 7.5 | 0.9% | Sep 5, 2023 | Improper Handling of Exceptional Conditions vulnerability in Daurnimator lua-http library allows Excessive Allocation an... |
| CVE-2023-41910 | CRITICAL | 9.8 | 1.0% | Sep 5, 2023 | An issue was discovered in lldpd before 1.0.17. By crafting a CDP PDU packet with specific CDP_TLV_ADDRESSES TLVs, a mal... |
| CVE-2023-41909 | HIGH | 7.5 | 0.9% | Sep 5, 2023 | An issue was discovered in FRRouting FRR through 9.0. bgp_nlri_parse_flowspec in bgpd/bgp_flowspec.c processes malformed... |
| CVE-2023-41908 | MEDIUM | 5.3 | 0.4% | Sep 5, 2023 | Cerebrate before 1.15 lacks the Secure attribute for the session cookie. |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now