2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-44252 | HIGH | 8.8 | 0.7% | Dec 13, 2023 | ** UNSUPPORTED WHEN ASSIGNED **An improper authentication vulnerability [CWE-287] in Fortinet FortiWAN version 5.2.0 thr... |
| CVE-2023-44251 | HIGH | 8.8 | 0.8% | Dec 13, 2023 | ** UNSUPPORTED WHEN ASSIGNED **A improper limitation of a pathname to a restricted directory ('path traversal') vulnerab... |
| CVE-2023-31210 | HIGH | 7.8 | 0.5% | Dec 13, 2023 | Usage of user controlled LD_LIBRARY_PATH in agent in Checkmk 2.2.0p10 up to 2.2.0p16 allows malicious Checkmk site user ... |
| CVE-2023-6478 | HIGH | 7.5 | 1.6% | Dec 13, 2023 | A flaw was found in xorg-server. A specially crafted request to RRChangeProviderProperty or RRChangeOutputProperty can t... |
| CVE-2023-6377 | HIGH | 7.8 | 1.6% | Dec 13, 2023 | A flaw was found in xorg-server. Querying or changing XKB button actions such as moving from a touchpad to a mouse can r... |
| CVE-2023-48791 | HIGH | 8.8 | 1.3% | Dec 13, 2023 | An improper neutralization of special elements used in a command ('Command Injection') vulnerability [CWE-77] in FortiPo... |
| CVE-2023-48782 | HIGH | 8.8 | 2.7% | Dec 13, 2023 | A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM versio... |
| CVE-2023-41678 | HIGH | 8.8 | 1.1% | Dec 13, 2023 | A double free in Fortinet FortiOS versions 7.0.0 through 7.0.5, FortiPAM version 1.0.0 through 1.0.3, 1.1.0 through 1.1.... |
| CVE-2023-40716 | HIGH | 7.8 | 0.2% | Dec 13, 2023 | An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the command line interpr... |
| CVE-2023-36639 | HIGH | 8.8 | 1.1% | Dec 13, 2023 | A use of externally-controlled format string in Fortinet FortiProxy versions 7.2.0 through 7.2.4, 7.0.0 through 7.0.10, ... |
| CVE-2023-45801 | HIGH | 7.5 | 0.7% | Dec 13, 2023 | Improper Authentication vulnerability in Nadatel DVR allows Information Elicitation.This issue affects DVR: from 3.0.0 b... |
| CVE-2023-47579 | HIGH | 7.5 | 0.6% | Dec 13, 2023 | Relyum RELY-PCIe 22.2.1 devices suffer from a system group misconfiguration, allowing read access to the central passwor... |
| CVE-2023-47578 | HIGH | 8.8 | 0.3% | Dec 13, 2023 | Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 devices are susceptible to Cross Site Request Forgery (CSRF) attacks due to ... |
| CVE-2023-47576 | HIGH | 8.8 | 1.5% | Dec 13, 2023 | An issue was discovered in Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 devices, allowing authenticated command injection... |
| CVE-2023-47573 | HIGH | 8.8 | 0.7% | Dec 13, 2023 | An issue discovered in Relyum RELY-PCIe 22.2.1 devices. The authorization mechanism is not enforced in the web interface... |
| CVE-2023-45800 | HIGH | 7.5 | 0.6% | Dec 13, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Hanbiro Hanbiro gr... |
| CVE-2023-6753 | HIGH | 8.8 | 1.1% | Dec 13, 2023 | Path Traversal in GitHub repository mlflow/mlflow prior to 2.9.2. |
| CVE-2023-3517 | HIGH | 8.8 | 0.6% | Dec 12, 2023 | Hitachi Vantara Pentaho Data Integration & Analytics versions before 9.5.0.1 and 9.3.0.5, including 8.3.x does not res... |
| CVE-2023-5764 | HIGH | 7.8 | 0.5% | Dec 12, 2023 | A template injection flaw was found in Ansible where a user's controller internal templating operations may remove the u... |
| CVE-2023-5379 | HIGH | 7.5 | 1.0% | Dec 12, 2023 | A flaw was found in Undertow. When an AJP request is sent that exceeds the max-header-size attribute in ajp-listener, JB... |
| CVE-2023-50251 | HIGH | 7.5 | 0.9% | Dec 12, 2023 | php-svg-lib is an SVG file parsing / rendering library. Prior to version 0.5.1, when parsing the attributes passed to a ... |
| CVE-2023-50247 | HIGH | 7.5 | 0.9% | Dec 12, 2023 | h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. The QUIC stack (quicly), as used by H2O up to commit... |
| CVE-2023-36696 | HIGH | 7.8 | 0.9% | Dec 12, 2023 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
| CVE-2023-36391 | HIGH | 7.8 | 7.2% | Dec 12, 2023 | Local Security Authority Subsystem Service Elevation of Privilege Vulnerability |
| CVE-2023-36019 | HIGH | 7.4 | 16.2% | Dec 12, 2023 | Microsoft Power Platform Connector Spoofing Vulnerability |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now