2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-43753 | MEDIUM | 6.8 | 0.2% | Sep 16, 2024 | Improper conditions check in some Intel(R) Processors with Intel(R) SGX may allow a privileged user to potentially enabl... |
| CVE-2023-43626 | HIGH | 8.7 | 0.1% | Sep 16, 2024 | Improper access control in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable ... |
| CVE-2023-42772 | HIGH | 8.7 | 0.2% | Sep 16, 2024 | Untrusted pointer dereference in UEFI firmware for some Intel(R) reference processors may allow a privileged user to pot... |
| CVE-2023-41833 | HIGH | 8.7 | 0.1% | Sep 16, 2024 | A race condition in UEFI firmware for some Intel(R) processors may allow a privileged user to potentially enable escalat... |
| CVE-2023-25546 | LOW | 2.5 | 0.1% | Sep 16, 2024 | Out-of-bounds read in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable denia... |
| CVE-2023-23904 | MEDIUM | 6.9 | 0.1% | Sep 16, 2024 | NULL pointer dereference in the UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially en... |
| CVE-2023-22351 | MEDIUM | 6.9 | 0.1% | Sep 16, 2024 | Out-of-bounds write in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable esca... |
| CVE-2023-3410 | MEDIUM | 5.4 | 0.3% | Sep 14, 2024 | The Bricks theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘customTag' attribute in versions up... |
| CVE-2023-6841 | HIGH | 7.5 | 0.7% | Sep 10, 2024 | A denial of service vulnerability was found in keycloak where the amount of attributes per object is not limited,an atta... |
| CVE-2023-37234 | CRITICAL | 9.8 | 0.4% | Sep 10, 2024 | Loftware Spectrum through 4.6 has unprotected JMX Registry. |
| CVE-2023-37233 | HIGH | 8.8 | 0.4% | Sep 10, 2024 | Loftware Spectrum before 4.6 HF14 allows authenticated XXE attacks. |
| CVE-2023-37232 | HIGH | 7.5 | 0.4% | Sep 10, 2024 | Loftware Spectrum through 4.6 exposes Sensitive Information (Logs) to an Unauthorized Actor. |
| CVE-2023-36103 | CRITICAL | 9.8 | 1.4% | Sep 10, 2024 | Command Injection vulnerability in goform/SetIPTVCfg interface of Tenda AC15 V15.03.05.20 allows remote attackers to run... |
| CVE-2023-44254 | MEDIUM | 6.5 | 0.5% | Sep 10, 2024 | An authorization bypass through user-controlled key [CWE-639] vulnerability in FortiAnalyzer version 7.4.1 and before 7.... |
| CVE-2023-37231 | CRITICAL | 9.8 | 0.5% | Sep 10, 2024 | Loftware Spectrum before 4.6 HF14 uses a Hard-coded Password. |
| CVE-2023-37230 | HIGH | 8.8 | 0.3% | Sep 10, 2024 | Loftware Spectrum (testDeviceConnection) before 5.1 allows SSRF. |
| CVE-2023-37229 | HIGH | 8.8 | 0.3% | Sep 10, 2024 | Loftware Spectrum before 5.1 allows SSRF. |
| CVE-2023-37227 | CRITICAL | 9.8 | 0.6% | Sep 10, 2024 | Loftware Spectrum before 4.6 HF13 Deserializes Untrusted Data. |
| CVE-2023-37226 | CRITICAL | 9.8 | 0.6% | Sep 10, 2024 | Loftware Spectrum before 4.6 HF14 has Missing Authentication for a Critical Function. |
| CVE-2023-49069 | MEDIUM | 6.9 | 0.4% | Sep 10, 2024 | A vulnerability has been identified in Mendix Runtime V10 (All versions < V10.17.0 only if the basic authentication mech... |
| CVE-2023-30756 | HIGH | 8.2 | 0.5% | Sep 10, 2024 | A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP... |
| CVE-2023-30755 | MEDIUM | 5.9 | 0.4% | Sep 10, 2024 | A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP... |
| CVE-2023-2919 | MEDIUM | 4.3 | 0.2% | Sep 10, 2024 | The Tutor LMS plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.7.4. ... |
| CVE-2023-28827 | HIGH | 8.2 | 0.5% | Sep 10, 2024 | A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) (All versions < V3.5.20), SIMATIC CP... |
| CVE-2023-50883 | MEDIUM | 6.1 | 0.6% | Sep 9, 2024 | ONLYOFFICE Docs before 8.0.1 allows XSS because a macro is an immediately-invoked function expression (IIFE), and theref... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now