2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-6323 | MEDIUM | 6.5 | 0.3% | May 15, 2024 | ThroughTek Kalay SDK does not verify the authenticity of received messages, allowing an attacker to impersonate an autho... |
| CVE-2023-6322 | HIGH | 8.8 | 0.8% | May 15, 2024 | A stack-based buffer overflow vulnerability exists in the message parsing functionality of the Roku Indoor Camera SE ver... |
| CVE-2023-6321 | HIGH | 8.8 | 2.7% | May 15, 2024 | A command injection vulnerability exists in the IOCTL that manages OTA updates. A specially crafted command can lead to ... |
| CVE-2023-33327 | HIGH | 8.8 | 0.5% | May 14, 2024 | Improper Privilege Management vulnerability in Teplitsa of social technologies Leyka allows Privilege Escalation.This is... |
| CVE-2023-50180 | MEDIUM | 5.5 | 0.3% | May 14, 2024 | An exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE-497] in FortiADC versio... |
| CVE-2023-46714 | HIGH | 7.2 | 1.4% | May 14, 2024 | A stack-based buffer overflow [CWE-121] vulnerability in Fortinet FortiOS version 7.2.1 through 7.2.6 and version 7.4.0 ... |
| CVE-2023-45586 | MEDIUM | 5 | 0.3% | May 14, 2024 | An insufficient verification of data authenticity vulnerability [CWE-345] in Fortinet FortiOS SSL-VPN tunnel mode versio... |
| CVE-2023-45583 | HIGH | 7.2 | 0.7% | May 14, 2024 | A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, Forti... |
| CVE-2023-44247 | HIGH | 7.2 | 1.3% | May 14, 2024 | A double free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 6.4 all versions may allow a privileged attacker... |
| CVE-2023-40720 | HIGH | 7.1 | 0.8% | May 14, 2024 | An authorization bypass through user-controlled key vulnerability [CWE-639] in FortiVoiceEntreprise version 7.0.0 throug... |
| CVE-2023-36640 | MEDIUM | 6.7 | 0.3% | May 14, 2024 | A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, Forti... |
| CVE-2023-24204 | MEDIUM | 5.4 | 0.6% | May 14, 2024 | SQL injection vulnerability in SourceCodester Simple Customer Relationship Management System v1.0 allows attacker to exe... |
| CVE-2023-24203 | MEDIUM | 5.4 | 0.6% | May 14, 2024 | Cross Site Scripting vulnerability in SourceCodester Simple Customer Relationship Management System v1.0 allows attacker... |
| CVE-2023-6812 | MEDIUM | 6.1 | 0.4% | May 14, 2024 | The WP Compress – Image Optimizer [All-In-One plugin for WordPress is vulnerable to Open Redirect in all versions up to,... |
| CVE-2023-46280 | HIGH | 8.2 | 0.3% | May 14, 2024 | A vulnerability has been identified in Security Configuration Tool (SCT) (All versions), SIMATIC Automation Tool (All ve... |
| CVE-2023-35841 | HIGH | 7.8 | 0.4% | May 14, 2024 | Exposed IOCTL with Insufficient Access Control in Phoenix WinFlash Driver on Windows allows Privilege Escalation which a... |
| CVE-2023-6688 | MEDIUM | 6.5 | 0.7% | May 14, 2024 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.11 prior to 16.11.2. A problem with... |
| CVE-2023-6682 | MEDIUM | 6.5 | 0.7% | May 14, 2024 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.9 prior to 16.9.7, starting from 16... |
| CVE-2023-6327 | MEDIUM | 5.3 | 0.7% | May 14, 2024 | The ShopLentor (formerly WooLentor) plugin for WordPress is vulnerable to unauthorized access of data due to a missing c... |
| CVE-2023-5971 | MEDIUM | 4.8 | 0.5% | May 14, 2024 | The Save as PDF Plugin by Pdfcrowd WordPress plugin before 3.2.0 does not sanitise and escape some of its settings, whic... |
| CVE-2023-5447 | MEDIUM | 5.5 | 0.2% | May 14, 2024 | Missing lock check in SynHsaService may create a use-after-free condition which causes abnormal termination of the servi... |
| CVE-2023-5052 | MEDIUM | 6.3 | 0.5% | May 14, 2024 | vulnerability in Uniform Server Zero, version 10.2.5, consisting of an XSS through the /us_extra/phpinfo.php page. This ... |
| CVE-2023-52721 | MEDIUM | 5.5 | 0.2% | May 14, 2024 | The WindowManager module has a vulnerability in permission control. Impact: Successful exploitation of this vulnerabilit... |
| CVE-2023-52720 | MEDIUM | 4.1 | 0.1% | May 14, 2024 | Race condition vulnerability in the soundtrigger module Impact: Successful exploitation of this vulnerability will affec... |
| CVE-2023-52719 | MEDIUM | 5.5 | 0.2% | May 14, 2024 | Privilege escalation vulnerability in the PMS module Impact: Successful exploitation of this vulnerability may affect se... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now