2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-0437 | HIGH | 7.5 | 1.1% | Jan 12, 2024 | When calling bson_utf8_validate on some inputs a loop with an exit condition that cannot be reached may occur, i.e. an i... |
| CVE-2023-49568 | HIGH | 7.5 | 0.7% | Jan 12, 2024 | A denial of service (DoS) vulnerability was discovered in go-git versions prior to v5.11. This vulnerability allows an a... |
| CVE-2023-48909 | HIGH | 8.8 | 0.9% | Jan 12, 2024 | An issue was discovered in Jave2 version 3.3.1, allows attackers to execute arbitrary code via the FFmpeg function. |
| CVE-2023-6740 | HIGH | 7.8 | 0.2% | Jan 12, 2024 | Privilege escalation in jar_signature agent plugin in Checkmk before 2.2.0p18, 2.1.0p38 and 2.0.0p39 allows local user t... |
| CVE-2023-6735 | HIGH | 7.8 | 0.3% | Jan 12, 2024 | Privilege escalation in mk_tsm agent plugin in Checkmk before 2.2.0p18, 2.1.0p38 and 2.0.0p39 allows local user to escal... |
| CVE-2023-34061 | HIGH | 7.5 | 0.5% | Jan 12, 2024 | Cloud Foundry routing release versions from v0.163.0 to v0.283.0 are vulnerable to a DOS attack. An unauthenticated att... |
| CVE-2023-6040 | HIGH | 7.8 | 0.3% | Jan 12, 2024 | An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables:... |
| CVE-2023-40250 | HIGH | 8.8 | 0.6% | Jan 12, 2024 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Hancom HCell on Windows allows O... |
| CVE-2023-46474 | HIGH | 7.2 | 23.4% | Jan 11, 2024 | File Upload vulnerability PMB v.7.4.8 allows a remote attacker to execute arbitrary code and escalate privileges via a c... |
| CVE-2023-50123 | HIGH | 8.1 | 0.6% | Jan 11, 2024 | The number of attempts to bring the Hozard Alarm system (alarmsystemen) v1.0 to a disarmed state is not limited. This co... |
| CVE-2023-51782 | HIGH | 7 | 0.3% | Jan 11, 2024 | An issue was discovered in the Linux kernel before 6.6.8. rose_ioctl in net/rose/af_rose.c has a use-after-free because ... |
| CVE-2023-51781 | HIGH | 7 | 0.3% | Jan 11, 2024 | An issue was discovered in the Linux kernel before 6.6.8. atalk_ioctl in net/appletalk/ddp.c has a use-after-free becaus... |
| CVE-2023-51780 | HIGH | 7 | 0.5% | Jan 11, 2024 | An issue was discovered in the Linux kernel before 6.6.8. do_vcc_ioctl in net/atm/ioctl.c has a use-after-free because o... |
| CVE-2023-50671 | HIGH | 7.8 | 0.4% | Jan 11, 2024 | In exiftags 1.01, nikon_prop1 in nikon.c has a heap-based buffer overflow (write of size 28) because snprintf can write ... |
| CVE-2023-51749 | HIGH | 8.8 | 0.3% | Jan 11, 2024 | ScaleFusion 10.5.2 does not properly limit users to the Edge application because a search can be made from a tooltip. NO... |
| CVE-2023-51748 | HIGH | 8.8 | 0.3% | Jan 11, 2024 | ScaleFusion 10.5.2 does not properly limit users to the Edge application because Ctrl-O and Ctrl-S can be used. This is ... |
| CVE-2023-50159 | HIGH | 8.8 | 0.3% | Jan 11, 2024 | In ScaleFusion (Windows Desktop App) agent 10.5.2, Kiosk mode application restrictions can be bypassed allowing arbitrar... |
| CVE-2023-6979 | HIGH | 8.8 | 1.1% | Jan 11, 2024 | The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file ty... |
| CVE-2023-6636 | HIGH | 7.2 | 1.3% | Jan 11, 2024 | The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to arbitrary file uploads due to m... |
| CVE-2023-6583 | HIGH | 7.2 | 0.8% | Jan 11, 2024 | The Import and export users and customers plugin for WordPress is vulnerable to Directory Traversal in all versions up t... |
| CVE-2023-6567 | HIGH | 7.5 | 51.4% | Jan 11, 2024 | The LearnPress plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order_by’ parameter in all versio... |
| CVE-2023-6558 | HIGH | 7.2 | 1.4% | Jan 11, 2024 | The Export and Import Users and Customers plugin for WordPress is vulnerable to arbitrary file uploads due to insufficie... |
| CVE-2023-6266 | HIGH | 7.5 | 2.1% | Jan 11, 2024 | The Backup Migration plugin for WordPress is vulnerable to unauthorized access of data due to insufficient path and file... |
| CVE-2023-5504 | HIGH | 8.7 | 0.9% | Jan 11, 2024 | The BackWPup plugin for WordPress is vulnerable to Directory Traversal in versions up to, and including, 4.0.1 via the L... |
| CVE-2023-6699 | HIGH | 7.5 | 0.9% | Jan 11, 2024 | The WP Compress – Image Optimizer [All-In-One] plugin for WordPress is vulnerable to Directory Traversal in all versions... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now