2023 CVE Vulnerabilities

31,475 CVEs published in 2023.

CVE IDSeverityCVSSDescription
CVE-2023-38329MEDIUM6.1An issue was discovered in eGroupWare 17.1.20190111. A cross-site scripting Reflected (XSS) vulnerability exists in cale...
CVE-2023-38327MEDIUM5.3An issue was discovered in eGroupWare 17.1.20190111. A User Enumeration vulnerability exists under calendar/freebusy.php...
CVE-2023-50458MEDIUM4.3In Dradis before 4.11.0, the Output Console shows a job queue that may contain information about other users' jobs.
CVE-2023-43039MEDIUM6.1IBM OpenPages with Watson 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary ...
CVE-2023-52236HIGH7A vulnerability has been identified in RUGGEDCOM i800 (All versions), RUGGEDCOM i801 (All versions), RUGGEDCOM i802 (All...
CVE-2023-51232HIGH7.5Directory Traversal vulnerability in dagster-webserver Dagster thru 1.5.11 allows remote attackers to obtain sensitive i...
CVE-2023-6820——Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2023-6818——Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2023-6770——Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2023-6726——Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2023-5361——Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2023-50786MEDIUM4.3Dradis through 4.16.0 allows referencing external images (resources) over HTTPS, instead of forcing the use of embedded ...
CVE-2023-47310MEDIUM6.5A misconfiguration in the default settings of MikroTik RouterOS 7 and fixed in v7.14 allows incoming IPv6 UDP traceroute...
CVE-2023-29113MEDIUM6.3The MIB3 infotainment unit used in Skoda and Volkswagen vehicles does not incorporate any privilege separation for the p...
CVE-2023-28912MEDIUM5.7The MIB3 unit stores the synchronized phone contact book in clear-text, allowing an attacker with either code execution ...
CVE-2023-28911MEDIUM6.5A specific flaw exists within the Bluetooth stack of the MIB3 infotainment. The issue results from the lack of proper va...
CVE-2023-28910HIGH8A specific flaw exists within the Bluetooth stack of the MIB3 infotainment system. The issue results from the disabled a...
CVE-2023-28909HIGH8A specific flaw exists within the Bluetooth stack of the MIB3 unit. The issue results from the lack of proper validation...
CVE-2023-28908MEDIUM5.4A specific flaw exists within the Bluetooth stack of the MIB3 infotainment. The issue results from the lack of proper va...
CVE-2023-28907MEDIUM6.7There is no memory isolation between CPU cores of the MIB3 infotainment. This fact allows an attacker with access to the...
CVE-2023-28906HIGH7.8A command injection in the networking service of the MIB3 infotainment allows an attacker already presenting in the syst...
CVE-2023-28905HIGH8A heap buffer overflow in the image processing binary of the MIB3 infotainment unit allows an attacker to execute arbitr...
CVE-2023-28904MEDIUM5.2A logic flaw leading to a RAM buffer overflow in the bootloader component of the MIB3 infotainment unit allows an attack...
CVE-2023-28903LOW3.3An integer overflow in the image processing binary of the MIB3 infotainment unit allows an attacker with local access to...
CVE-2023-28902LOW3.3An integer underflow in the image processing binary of the MIB3 infotainment unit allows an attacker with local access t...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now