How severe is CVE-2023-49343?

This vulnerability has a severity rating of HIGH with a CVSS score of 7.8 out of 10.

What type of vulnerability is CVE-2023-49343?

This is classified as CWE-337, which is a common weakness in software security.

CVE-2023-49343

HIGH Year: 2023

CVSS v3 Score

7.8

High

Weakness Type

CWE-337

View all →

Vulnerability Description

Temporary data passed between application components by Budgie Extras Dropby applet could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the system. Attackers may pre-create and control this file to present false information to users or deny access to the application and panel.

CVE-2024-7558

HIGH

CVSS:8.7(High)

JUJU_CONTEXT_ID is a predictable authentication secret. On a Juju machine (non-Kubernetes) or Juju charm container (on Kubernetes), an unprivileged user in the same network namespace can connect to an...

CWE-3372024

CVE-2022-40267

CRITICAL

CVSS:9.1(Critical)

Predictable Seed in Pseudo-Random Number Generator (PRNG) vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-xMy/z (x=32,64,80, y=T,R, z=ES,DS,ESS,DSS) with serial number 17X****...

CWE-3372022

CVE-2020-28597

CRITICAL

CVSS:9.8(Critical)

A predictable seed vulnerability exists in the password reset functionality of Epignosis EfrontPro 5.2.21. By predicting the seed it is possible to generate the correct password reset 1-time token. An...

CWE-3372020

CVE-2022-26852

CRITICAL

CVSS:9.8(Critical)

Dell PowerScale OneFS, versions 8.2.x-9.3.x, contain a predictable seed in pseudo-random number generator. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to an...

CWE-3372022