2023 CVE Vulnerabilities

31,509 CVEs published in 2023.

CVE IDSeverityCVSSDescription
CVE-2023-49909HIGH8.8A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350...
CVE-2023-49908HIGH8.8A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350...
CVE-2023-49907HIGH8.8A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350...
CVE-2023-49906HIGH8.8A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350...
CVE-2023-49134CRITICAL9.8A command execution vulnerability exists in the tddpd enable_test_mode functionality of Tp-Link AC1350 Wireless MU-MIMO ...
CVE-2023-49133CRITICAL9.8A command execution vulnerability exists in the tddpd enable_test_mode functionality of Tp-Link AC1350 Wireless MU-MIMO ...
CVE-2023-49074HIGH7.5A denial of service vulnerability exists in the TDDP functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Poi...
CVE-2023-48784MEDIUM6.7A use of externally-controlled format string vulnerability [CWE-134] in FortiOS version 7.4.1 and below, version 7.2.7 a...
CVE-2023-48724HIGH7.5A memory corruption vulnerability exists in the web interface functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit A...
CVE-2023-47542MEDIUM6.7A improper neutralization of special elements used in a template engine [CWE-1336] in FortiManager versions 7.4.1 and be...
CVE-2023-47541MEDIUM6.7An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox...
CVE-2023-47540MEDIUM6.7An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet ...
CVE-2023-45590HIGH8.8An improper control of generation of code ('code injection') in Fortinet FortiClientLinux version 7.2.0, 7.0.6 through 7...
CVE-2023-41677HIGH8.8A insufficiently protected credentials vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2....
CVE-2023-6320HIGH7.2A command injection vulnerability exists in the com.webos.service.connectionmanager/tv/setVlanStaticAddress endpoint on ...
CVE-2023-6319HIGH7.2A command injection vulnerability exists in the getAudioMetadata method from the com.webos.service.attachedstoragemanage...
CVE-2023-6318HIGH7.2A command injection vulnerability exists in the processAnalyticsReport method from the com.webos.service.cloudupload ser...
CVE-2023-6317CRITICAL9.8A prompt bypass exists in the secondscreen.gateway service running on webOS version 4 through 7. An attacker can create ...
CVE-2023-50821MEDIUM6.9A vulnerability has been identified in SIMATIC PCS 7 V9.1 (All versions < V9.1 SP2 UC04), SIMATIC WinCC Runtime Professi...
CVE-2023-1083CRITICAL9.8An unauthenticated remote attacker who is aware of a MQTT topic name can send and receive messages, including GET/SET c...
CVE-2023-1082HIGH8.8An remote attacker with low privileges can perform a command injection which can lead to root access.
CVE-2023-7164HIGH7.5The BackWPup WordPress plugin before 4.0.4 does not prevent Directory Listing in its temporary backup folder, allowing u...
CVE-2023-52386HIGH7.5Out-of-bounds write vulnerability in the RSMC module. Impact: Successful exploitation of this vulnerability will affect ...
CVE-2023-52385MEDIUM6.2Out-of-bounds write vulnerability in the RSMC module. Impact: Successful exploitation of this vulnerability will affect ...
CVE-2023-52364MEDIUM6.3Vulnerability of input parameters being not strictly verified in the RSMC module. Impact: Successful exploitation of thi...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now