2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-38042 | HIGH | 7.8 | 0.3% | May 31, 2024 | A local privilege escalation vulnerability in Ivanti Secure Access Client for Windows allows a low privileged user to ex... |
| CVE-2023-7073 | MEDIUM | 6.4 | 0.3% | May 31, 2024 | The Auto Featured Image (Auto Post Thumbnail) plugin for WordPress is vulnerable to Server-Side Request Forgery in all v... |
| CVE-2023-52882 | MEDIUM | 5.5 | 0.3% | May 30, 2024 | In the Linux kernel, the following vulnerability has been resolved: clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX ra... |
| CVE-2023-46297 | MEDIUM | 5.1 | 0.2% | May 29, 2024 | An issue was discovered on Mercusys MW325R EU V3 MW325R(EU)_V3_1.11.0 221019 devices. A WAN attacker can make the admin ... |
| CVE-2023-42005 | HIGH | 8.8 | 0.3% | May 29, 2024 | IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data 3.5, 4.0, 4.5, 4.6, 4.7, and 4.8 could allow a use... |
| CVE-2023-52881 | MEDIUM | 5.5 | 0.2% | May 29, 2024 | In the Linux kernel, the following vulnerability has been resolved: tcp: do not accept ACK of bytes we never sent This... |
| CVE-2023-6743 | HIGH | 8.8 | 1.3% | May 29, 2024 | The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to Remote Code... |
| CVE-2023-30314 | MEDIUM | 6.5 | 0.4% | May 28, 2024 | An issue discovered in 360 V6G, 360 T5G, 360 T6M, and 360 P1 routers allows attackers to hijack TCP sessions which could... |
| CVE-2023-30312 | HIGH | 7.3 | 0.3% | May 28, 2024 | An issue discovered in OpenWrt 18.06, 19.07, 21.02, 22.03, and beyond allows off-path attackers to hijack TCP sessions, ... |
| CVE-2023-46694 | HIGH | 8.1 | 0.9% | May 28, 2024 | Vtenext 21.02 allows an authenticated attacker to upload arbitrary files, potentially enabling them to execute remote co... |
| CVE-2023-30313 | HIGH | 7.5 | 0.4% | May 28, 2024 | An issue discovered in Wavlink QUANTUM D2G routers allows attackers to hijack TCP sessions which could lead to a denial ... |
| CVE-2023-30310 | HIGH | 7.5 | 0.4% | May 28, 2024 | An issue discovered in Comfast Comfast CF-616AC routers allows attackers to hijack TCP sessions which could lead to a de... |
| CVE-2023-30309 | MEDIUM | 5.7 | 0.3% | May 28, 2024 | An issue discovered in D-Link DI-7003GV2 routers allows attackers to hijack TCP sessions which could lead to a denial of... |
| CVE-2023-30308 | MEDIUM | 6.5 | 0.4% | May 28, 2024 | An issue discovered in Ruijie EG210G-P, Ruijie EG105G-V2, Ruijie NBR, and Ruijie EG105G routers allows attackers to hija... |
| CVE-2023-30307 | MEDIUM | 5.3 | 0.4% | May 28, 2024 | An issue discovered in TP-LINK TL-R473GP-AC, TP-LINK XDR6020, TP-LINK TL-R479GP-AC, TP-LINK TL-R4239G, TP-LINK TL-WAR120... |
| CVE-2023-30306 | MEDIUM | 4.3 | 0.3% | May 28, 2024 | An issue discovered in Mercury x30g, Mercury YR1800XG routers allows attackers to hijack TCP sessions which could lead t... |
| CVE-2023-43850 | MEDIUM | 6.5 | 0.6% | May 28, 2024 | Improper input validation in the user management function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows rem... |
| CVE-2023-43849 | MEDIUM | 6.5 | 0.5% | May 28, 2024 | Incorrect access control in firmware upgrade function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows remote ... |
| CVE-2023-43848 | HIGH | 8 | 0.5% | May 28, 2024 | Incorrect access control in the firewall management function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows ... |
| CVE-2023-43847 | MEDIUM | 5.3 | 0.6% | May 28, 2024 | Incorrect access control in the outlet control function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows remot... |
| CVE-2023-43846 | MEDIUM | 5.3 | 0.6% | May 28, 2024 | Incorrect access control in logs management function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows remote a... |
| CVE-2023-43845 | CRITICAL | 9.8 | 0.5% | May 28, 2024 | Aten PE6208 2.3.228 and 2.4.232 have default credentials for the privileged telnet account. The user is not asked to cha... |
| CVE-2023-43844 | HIGH | 8 | 0.4% | May 28, 2024 | Aten PE6208 2.3.228 and 2.4.232 have default credentials for the privileged web interface account. The user is not asked... |
| CVE-2023-43843 | HIGH | 7.3 | 0.4% | May 28, 2024 | Incorrect access control in the account management function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows r... |
| CVE-2023-43842 | HIGH | 7.3 | 0.4% | May 28, 2024 | Incorrect access control in the account management function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows r... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now