2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-49963 | HIGH | 8.8 | 0.3% | Apr 19, 2024 | DYMO LabelWriter Print Server through 2.366 contains a backdoor hard-coded password that could allow an attacker to take... |
| CVE-2023-49502 | HIGH | 8.8 | 1.5% | Apr 19, 2024 | Buffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute arbitrary code via the f... |
| CVE-2023-49501 | HIGH | 8 | 0.4% | Apr 19, 2024 | Buffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute arbitrary code via the c... |
| CVE-2023-37397 | MEDIUM | 4.4 | 0.1% | Apr 19, 2024 | IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a local user to obtain or modify sensitive information due to improper... |
| CVE-2023-27279 | MEDIUM | 6.5 | 0.7% | Apr 19, 2024 | IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a user to cause a denial of service due to missing API rate limiting. ... |
| CVE-2023-37396 | MEDIUM | 5.5 | 0.1% | Apr 19, 2024 | IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a local user to obtain sensitive information due to improper encryptio... |
| CVE-2023-22869 | MEDIUM | 5.5 | 0.2% | Apr 19, 2024 | IBM Aspera Faspex 5.0.0 through 5.0.7 stores potentially sensitive information in log files that could be read by a loca... |
| CVE-2023-50260 | HIGH | 8.8 | 41.2% | Apr 19, 2024 | Wazuh is a free and open source platform used for threat prevention, detection, and response. A wrong validation in the ... |
| CVE-2023-49275 | MEDIUM | 6.5 | 0.9% | Apr 19, 2024 | Wazuh is a free and open source platform used for threat prevention, detection, and response. A NULL pointer dereference... |
| CVE-2023-37400 | HIGH | 7.8 | 0.2% | Apr 19, 2024 | IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a local user to escalate their privileges due to insecure credential s... |
| CVE-2023-3758 | HIGH | 7.1 | 1.0% | Apr 18, 2024 | A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users. This m... |
| CVE-2023-6897 | MEDIUM | 4.3 | 0.4% | Apr 18, 2024 | The EAN for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, an... |
| CVE-2023-6892 | MEDIUM | 5.4 | 0.3% | Apr 18, 2024 | The EAN for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'alg_wc_ean_p... |
| CVE-2023-50885 | MEDIUM | 6.8 | 0.6% | Apr 18, 2024 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in AGILELOGIX Store Locator... |
| CVE-2023-49768 | MEDIUM | 6.5 | 0.3% | Apr 18, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FormAssembly / Dre... |
| CVE-2023-47843 | HIGH | 7.6 | 0.5% | Apr 18, 2024 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Zachary Segal CataBlog.T... |
| CVE-2023-3675 | MEDIUM | 6.5 | 0.5% | Apr 18, 2024 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Secomea GateManager (Web... |
| CVE-2023-41864 | MEDIUM | 4.3 | 0.2% | Apr 18, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Pepro Dev. Group PeproDev CF7 Database.This issue affects PeproDev CF... |
| CVE-2023-49742 | CRITICAL | 9.9 | 0.8% | Apr 18, 2024 | Missing Authorization vulnerability in Support Genix.This issue affects Support Genix: from n/a through 1.2.3. |
| CVE-2023-4509 | MEDIUM | 4.3 | 0.2% | Apr 18, 2024 | It is possible for an API key to be logged in clear text in the audit log file after an invalid login attempt. |
| CVE-2023-4235 | HIGH | 8.1 | 0.9% | Apr 17, 2024 | A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decode_delive... |
| CVE-2023-4234 | HIGH | 8.1 | 1.1% | Apr 17, 2024 | A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decode_submit... |
| CVE-2023-4233 | HIGH | 8.1 | 1.0% | Apr 17, 2024 | A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the sms_decode_ad... |
| CVE-2023-4232 | HIGH | 8.1 | 0.9% | Apr 17, 2024 | A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decode_status... |
| CVE-2023-5407 | MEDIUM | 5.9 | 0.4% | Apr 17, 2024 | Controller denial of service due to improper handling of a specially crafted message received by the controller. See Ho... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now