2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-50916 | HIGH | 7.2 | 4.6% | Jan 10, 2024 | Kyocera Device Manager before 3.1.1213.0 allows NTLM credential exposure during UNC path authentication via a crafted ch... |
| CVE-2023-46712 | HIGH | 8.8 | 0.7% | Jan 10, 2024 | A improper access control in Fortinet FortiPortal version 7.0.0 through 7.0.6, Fortinet FortiPortal version 7.2.0 throug... |
| CVE-2023-44250 | HIGH | 8.8 | 0.9% | Jan 10, 2024 | An improper privilege management vulnerability [CWE-269] in a Fortinet FortiOS HA cluster version 7.4.0 through 7.4.1 an... |
| CVE-2023-29444 | HIGH | 7.3 | 0.2% | Jan 10, 2024 | An uncontrolled search path element vulnerability (DLL hijacking) has been discovered that could allow a locally authent... |
| CVE-2023-49738 | HIGH | 7.5 | 1.3% | Jan 10, 2024 | An information disclosure vulnerability exists in the image404Raw.php functionality of WWBN AVideo dev master commit 15f... |
| CVE-2023-49715 | HIGH | 8.8 | 1.4% | Jan 10, 2024 | A unrestricted php file upload vulnerability exists in the import.json.php temporary copy functionality of WWBN AVideo d... |
| CVE-2023-49589 | HIGH | 8.8 | 0.9% | Jan 10, 2024 | An insufficient entropy vulnerability exists in the userRecoverPass.php recoverPass generation functionality of WWBN AVi... |
| CVE-2023-45139 | HIGH | 7.5 | 1.2% | Jan 10, 2024 | fontTools is a library for manipulating fonts, written in Python. The subsetting module has a XML External Entity Inject... |
| CVE-2023-41056 | HIGH | 8.1 | 2.6% | Jan 10, 2024 | Redis is an in-memory database that persists on disk. Redis incorrectly handles resizing of memory buffers which can res... |
| CVE-2023-48261 | HIGH | 7.5 | 0.6% | Jan 10, 2024 | The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the results database via a craft... |
| CVE-2023-48260 | HIGH | 7.5 | 0.6% | Jan 10, 2024 | The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the results database via a craft... |
| CVE-2023-48259 | HIGH | 7.5 | 0.6% | Jan 10, 2024 | The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the results database via a craft... |
| CVE-2023-48258 | HIGH | 8.1 | 0.2% | Jan 10, 2024 | The vulnerability allows a remote attacker to delete arbitrary files on the file system via a crafted URL or HTTP reque... |
| CVE-2023-48257 | HIGH | 8.8 | 0.5% | Jan 10, 2024 | The vulnerability allows a remote attacker to access sensitive data inside exported packages or obtain up to Remote Code... |
| CVE-2023-48253 | HIGH | 8.8 | 0.9% | Jan 10, 2024 | The vulnerability allows a remote authenticated attacker to read or update arbitrary content of the authentication datab... |
| CVE-2023-48252 | HIGH | 8.8 | 0.6% | Jan 10, 2024 | The vulnerability allows an authenticated remote attacker to perform actions exceeding their authorized access via craft... |
| CVE-2023-48247 | HIGH | 7.5 | 0.6% | Jan 10, 2024 | The vulnerability allows an unauthenticated remote attacker to read arbitrary files under the context of the application... |
| CVE-2023-48243 | HIGH | 8.8 | 1.1% | Jan 10, 2024 | The vulnerability allows a remote attacker to upload arbitrary files in all paths of the system under the context of the... |
| CVE-2023-49471 | HIGH | 8.8 | 1.1% | Jan 10, 2024 | Blind Server-Side Request Forgery (SSRF) vulnerability in karlomikus Bar Assistant before version 3.2.0 does not validat... |
| CVE-2023-49427 | HIGH | 7.5 | 0.6% | Jan 10, 2024 | Buffer Overflow vulnerability in Tenda AX12 V22.03.01.46, allows remote attackers to cause a denial of service (DoS) via... |
| CVE-2023-48864 | HIGH | 7.5 | 0.6% | Jan 10, 2024 | SEMCMS v4.8 was discovered to contain a SQL injection vulnerability via the languageID parameter in /web_inc.php. |
| CVE-2023-47994 | HIGH | 8.8 | 0.7% | Jan 9, 2024 | An integer overflow vulnerability in LoadPixelDataRLE4 function in PluginBMP.cpp in Freeimage 3.18.0 allows attackers to... |
| CVE-2023-47992 | HIGH | 8.8 | 0.7% | Jan 9, 2024 | An integer overflow vulnerability in FreeImageIO.cpp::_MemoryReadProc in FreeImage 3.18.0 allows attackers to obtain sen... |
| CVE-2023-3043 | HIGH | 8.8 | 0.3% | Jan 9, 2024 | AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack-based buffer overflow via an ... |
| CVE-2023-37297 | HIGH | 8.8 | 0.3% | Jan 9, 2024 | AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent netw... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now