2023 CVE Vulnerabilities

31,509 CVEs published in 2023.

CVE IDSeverityCVSSDescription
CVE-2023-5406MEDIUM5.9Server communication with a controller can lead to remote code execution using a specially crafted message from the cont...
CVE-2023-5405MEDIUM5.9Server information leak for the CDA Server process memory can occur when an error is generated in response to a speciall...
CVE-2023-5404HIGH8.1Server receiving a malformed message can cause a pointer to be overwritten which can result in a remote code execution o...
CVE-2023-5403HIGH8.1Server hostname translation to IP address manipulation which could lead to an attacker performing remote code execution ...
CVE-2023-5401HIGH8.1Server receiving a malformed message based on a using the specified key values can cause a stack overflow vulnerability ...
CVE-2023-5400HIGH8.1Server receiving a malformed message based on a using the specified key values can cause a heap overflow vulnerability w...
CVE-2023-5398MEDIUM5.9Server receiving a malformed message based on a list of IPs resulting in heap corruption causing a denial of service. Se...
CVE-2023-5397HIGH8.1Server receiving a malformed message to create a new connection could lead to an attacker performing remote code executi...
CVE-2023-5396HIGH7.4Server receiving a malformed message creates connection for a hostname that may cause a stack overflow resulting in poss...
CVE-2023-5395HIGH8.1Server receiving a malformed message that uses the hostname in an internal table may cause a stack overflow resulting in...
CVE-2023-52645MEDIUM4.7In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: fix race conditions with genpd ...
CVE-2023-46060HIGH7.5A Buffer Overflow vulnerability in Tenda AC500 v.2.0.1.9 allows a remote attacker to cause a denial of service via the p...
CVE-2023-6805MEDIUM6.4The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is...
CVE-2023-45744HIGH8.8A data integrity vulnerability exists in the web interface /cgi-bin/upload_config.cgi functionality of Peplink Smart Rea...
CVE-2023-45209HIGH7.5An information disclosure vulnerability exists in the web interface /cgi-bin/download_config.cgi functionality of Peplin...
CVE-2023-43491HIGH7.5An information disclosure vulnerability exists in the web interface /cgi-bin/debug_dump.cgi functionality of Peplink Sma...
CVE-2023-40146CRITICAL9.8A privilege escalation vulnerability exists in the /bin/login functionality of Peplink Smart Reader v1.2.0 (in QEMU). A ...
CVE-2023-39367HIGH7.2An OS command injection vulnerability exists in the web interface mac2name functionality of Peplink Smart Reader v1.2.0 ...
CVE-2023-52644MEDIUM6.3In the Linux kernel, the following vulnerability has been resolved: wifi: b43: Stop/wake correct queue in DMA Tx path w...
CVE-2023-51500HIGH7.7Missing Authorization vulnerability in Undsgn Uncode Core.This issue affects Uncode Core: from n/a through 2.8.8.
CVE-2023-51418HIGH7.7Missing Authorization vulnerability in Joris van Montfort JVM rich text icons.This issue affects JVM rich text icons: fr...
CVE-2023-52643MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: iio: core: fix memleak in iio_device_register_sysfs...
CVE-2023-52642HIGH7.8In the Linux kernel, the following vulnerability has been resolved: media: rc: bpf attach/detach requires write permiss...
CVE-2023-44227HIGH7.5Missing Authorization vulnerability in Mitchell Bennis Simple File List.This issue affects Simple File List: from n/a th...
CVE-2023-36505HIGH7.2Improper Input Validation vulnerability in Saturday Drive Ninja Forms Contact Form.This issue affects Ninja Forms Contac...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now