2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-50364 | HIGH | 8.8 | 0.9% | Apr 26, 2024 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system ver... |
| CVE-2023-50363 | HIGH | 8.1 | 0.4% | Apr 26, 2024 | An incorrect authorization vulnerability has been reported to affect several QNAP operating system versions. If exploite... |
| CVE-2023-50362 | HIGH | 8.8 | 0.8% | Apr 26, 2024 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system ver... |
| CVE-2023-50361 | HIGH | 8.8 | 0.8% | Apr 26, 2024 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system ver... |
| CVE-2023-47222 | CRITICAL | 9.8 | 0.5% | Apr 26, 2024 | An exposure of sensitive information vulnerability has been reported to affect Media Streaming add-on. If exploited, the... |
| CVE-2023-41291 | MEDIUM | 4.9 | 0.4% | Apr 26, 2024 | A path traversal vulnerability has been reported to affect QuFirewall. If exploited, the vulnerability could allow authe... |
| CVE-2023-41290 | MEDIUM | 4.9 | 0.5% | Apr 26, 2024 | A path traversal vulnerability has been reported to affect QuFirewall. If exploited, the vulnerability could allow authe... |
| CVE-2023-52646 | MEDIUM | 5.5 | 0.2% | Apr 26, 2024 | In the Linux kernel, the following vulnerability has been resolved: aio: fix mremap after fork null-deref Commit e4a0d... |
| CVE-2023-6116 | HIGH | 8.9 | 0.7% | Apr 26, 2024 | Team ENVY, a Security Research TEAM has found a flaw that allows for a remote code execution on the camera. An attacker... |
| CVE-2023-6096 | HIGH | 7.4 | 0.1% | Apr 26, 2024 | Vladimir Kononovich, a Security Researcher has found a flaw that using a inappropriate encryption logic on the DVR. fir... |
| CVE-2023-6095 | HIGH | 8.9 | 0.7% | Apr 26, 2024 | Vladimir Kononovich, a Security Researcher has found a flaw that allows for a remote code execution on the DVR. An atta... |
| CVE-2023-47252 | MEDIUM | 6.3 | 0.1% | Apr 26, 2024 | An issue was discovered in PnpSmm in Insyde InsydeH2O with kernel 5.0 through 5.6. There is a possible out-of-bounds acc... |
| CVE-2023-6787 | HIGH | 8.8 | 0.7% | Apr 25, 2024 | A flaw was found in Keycloak that occurs from an error in the re-authentication mechanism within org.keycloak.authentica... |
| CVE-2023-6717 | MEDIUM | 6 | 0.7% | Apr 25, 2024 | A flaw was found in the SAML client registration in Keycloak that could allow an administrator to register malicious Jav... |
| CVE-2023-6596 | HIGH | 7.5 | 0.8% | Apr 25, 2024 | An incomplete fix was shipped for the Rapid Reset (CVE-2023-44487/CVE-2023-39325) vulnerability for an OpenShift Contain... |
| CVE-2023-6544 | MEDIUM | 5.4 | 1.1% | Apr 25, 2024 | A flaw was found in the Keycloak package. This issue occurs due to a permissive regular expression hardcoded for filteri... |
| CVE-2023-6484 | MEDIUM | 5.3 | 1.0% | Apr 25, 2024 | A log injection flaw was found in Keycloak. A text string may be injected through the authentication form when using the... |
| CVE-2023-5675 | MEDIUM | 6.5 | 0.5% | Apr 25, 2024 | A flaw was found in Quarkus. When a Quarkus RestEasy Classic or Reactive JAX-RS endpoint has its methods declared in the... |
| CVE-2023-3597 | MEDIUM | 5 | 0.6% | Apr 25, 2024 | A flaw was found in Keycloak, where it does not correctly validate its client step-up authentication in org.keycloak.aut... |
| CVE-2023-52220 | MEDIUM | 4.3 | 0.4% | Apr 25, 2024 | Missing Authorization vulnerability in MonsterInsights Google Analytics by Monster Insights.This issue affects Google An... |
| CVE-2023-51484 | CRITICAL | 9.8 | 0.7% | Apr 25, 2024 | Improper Authentication vulnerability in wp-buy Login as User or Customer (User Switching) allows Privilege Escalation.T... |
| CVE-2023-51482 | CRITICAL | 9.9 | 0.7% | Apr 25, 2024 | Improper Authentication vulnerability in EazyPlugins Eazy Plugin Manager allows Accessing Functionality Not Properly Con... |
| CVE-2023-51478 | CRITICAL | 9.8 | 0.7% | Apr 25, 2024 | Improper Authentication vulnerability in Abdul Hakeem Build App Online allows Privilege Escalation.This issue affects Bu... |
| CVE-2023-6237 | MEDIUM | 5.9 | 2.3% | Apr 25, 2024 | Issue summary: Checking excessively long invalid RSA public keys may take a long time. Impact summary: Applications tha... |
| CVE-2023-20249 | MEDIUM | 5.4 | 0.4% | Apr 24, 2024 | A vulnerability in the web-based management interface of Cisco TelePresence Management Suite (TMS) Software could allow ... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now