2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-44112 | HIGH | 7.5 | 0.4% | Jan 16, 2024 | Out-of-bounds access vulnerability in the device authentication module. Successful exploitation of this vulnerability ma... |
| CVE-2023-22526 | HIGH | 8.8 | 1.6% | Jan 16, 2024 | This High severity RCE (Remote Code Execution) vulnerability was introduced in version 7.19.0 of Confluence Data Center.... |
| CVE-2023-51282 | HIGH | 7.5 | 1.1% | Jan 16, 2024 | An issue in mingSoft MCMS v.5.2.4 allows a a remote attacker to obtain sensitive information via a crafted script to the... |
| CVE-2023-51257 | HIGH | 7.8 | 0.3% | Jan 16, 2024 | An invalid memory write issue in Jasper-Software Jasper v.4.1.1 and before allows a local attacker to execute arbitrary ... |
| CVE-2023-51059 | HIGH | 8.8 | 0.9% | Jan 16, 2024 | An issue in MOKO TECHNOLOGY LTD MOKOSmart MKGW1 BLE Gateway v.1.1.1 and before allows a remote attacker to escalate priv... |
| CVE-2023-43449 | HIGH | 8.8 | 0.8% | Jan 16, 2024 | An issue in HummerRisk HummerRisk v.1.10 thru 1.4.1 allows an authenticated attacker to execute arbitrary code via a cra... |
| CVE-2023-6457 | HIGH | 7.1 | 0.1% | Jan 16, 2024 | Incorrect Default Permissions vulnerability in Hitachi Tuning Manager on Windows (Hitachi Tuning Manager server componen... |
| CVE-2023-51810 | HIGH | 7.5 | 1.3% | Jan 16, 2024 | SQL injection vulnerability in StackIdeas EasyDiscuss v.5.0.5 and fixed in v.5.0.10 allows a remote attacker to obtain s... |
| CVE-2023-49107 | HIGH | 7.5 | 0.4% | Jan 16, 2024 | Generation of Error Message Containing Sensitive Information vulnerability in Hitachi Device Manager on Windows, Linux (... |
| CVE-2023-49106 | HIGH | 7.5 | 0.4% | Jan 16, 2024 | Missing Password Field Masking vulnerability in Hitachi Device Manager on Windows, Linux (Device Manager Agent component... |
| CVE-2023-47460 | HIGH | 8.8 | 1.2% | Jan 16, 2024 | SQL injection vulnerability in Knovos Discovery v.22.67.0 allows a remote attacker to execute arbitrary code via the /Di... |
| CVE-2023-7206 | HIGH | 7.8 | 0.2% | Jan 15, 2024 | In Horner Automation Cscape versions 9.90 SP10 and prior, local attackers are able to exploit this vulnerability if a u... |
| CVE-2023-6991 | HIGH | 8.8 | 0.7% | Jan 15, 2024 | The JSM file_get_contents() Shortcode WordPress plugin before 2.7.1 does not validate one of its shortcode's parameters ... |
| CVE-2023-6620 | HIGH | 7.2 | 14.2% | Jan 15, 2024 | The POST SMTP Mailer WordPress plugin before 2.8.7 does not properly sanitise and escape several parameters before using... |
| CVE-2023-6029 | HIGH | 7.5 | 0.2% | Jan 15, 2024 | The EazyDocs WordPress plugin before 2.3.6 does not have authorization and CSRF checks when handling documents and does ... |
| CVE-2023-5905 | HIGH | 8.1 | 0.6% | Jan 15, 2024 | The DeMomentSomTres WordPress Export Posts With Images WordPress plugin through 20220825 does not check authorization of... |
| CVE-2023-4818 | HIGH | 7.6 | 0.7% | Jan 15, 2024 | PAX A920 device allows to downgrade bootloader due to a bug in its version check. The signature is correctly checked and... |
| CVE-2023-42137 | HIGH | 7.8 | 0.5% | Jan 15, 2024 | PAX Android based POS devices with PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier can allow for command executi... |
| CVE-2023-42136 | HIGH | 7.8 | 0.5% | Jan 15, 2024 | PAX Android based POS devices with PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier can allow the execution of ar... |
| CVE-2023-5253 | HIGH | 7.5 | 0.5% | Jan 15, 2024 | A missing authentication check in the WebSocket channel used for the Check Point IoT integration in Nozomi Networks Guar... |
| CVE-2023-48383 | HIGH | 7.5 | 1.0% | Jan 15, 2024 | NetVision Information airPASS has a path traversal vulnerability within its parameter in a specific URL. An unauthen... |
| CVE-2023-52289 | HIGH | 7.5 | 0.7% | Jan 13, 2024 | An issue was discovered in the flaskcode package through 0.0.8 for Python. An unauthenticated directory traversal, explo... |
| CVE-2023-52288 | HIGH | 7.5 | 0.8% | Jan 13, 2024 | An issue was discovered in the flaskcode package through 0.0.8 for Python. An unauthenticated directory traversal, explo... |
| CVE-2023-51070 | HIGH | 7.5 | 0.6% | Jan 13, 2024 | An access control issue in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows unauthenticated attackers ... |
| CVE-2023-51066 | HIGH | 8.8 | 1.5% | Jan 13, 2024 | An authenticated remote code execution vulnerability in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allo... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now