2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-6522 | HIGH | 7.2 | 0.3% | Apr 5, 2024 | Incorrect Use of Privileged APIs vulnerability in ExtremePacs Extreme XDS allows Collect Data as Provided by Users. Thi... |
| CVE-2023-52235 | HIGH | 8.8 | 0.5% | Apr 5, 2024 | SpaceX Starlink Wi-Fi router GEN 2 before 2023.53.0 and Starlink Dish before 07dd2798-ff15-4722-a9ee-de28928aed34 allow ... |
| CVE-2023-5973 | MEDIUM | 4.3 | 0.2% | Apr 5, 2024 | Brocade Web Interface in Brocade Fabric OS v9.x and before v9.2.0 does not properly represent the portName to the user... |
| CVE-2023-45288 | HIGH | 7.5 | 92.0% | Apr 4, 2024 | An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONT... |
| CVE-2023-38709 | HIGH | 7.3 | 3.9% | Apr 4, 2024 | Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP r... |
| CVE-2023-3454 | CRITICAL | 9.8 | 1.2% | Apr 4, 2024 | Remote code execution (RCE) vulnerability in Brocade Fabric OS after v9.0 and before v9.2.0 could allow an attacker to e... |
| CVE-2023-36645 | CRITICAL | 9.8 | 0.9% | Apr 4, 2024 | SQL injection vulnerability in ITB-GmbH TradePro v9.5, allows remote attackers to run SQL queries via oordershow compone... |
| CVE-2023-36644 | MEDIUM | 5.3 | 1.0% | Apr 4, 2024 | Incorrect Access Control in ITB-GmbH TradePro v9.5, allows remote attackers to receive all order confirmations from the ... |
| CVE-2023-36643 | MEDIUM | 5.3 | 0.7% | Apr 4, 2024 | Incorrect Access Control in ITB-GmbH TradePro v9.5, allows remote attackers to receive all orders from the online shop v... |
| CVE-2023-25200 | MEDIUM | 4.7 | 0.4% | Apr 4, 2024 | An HTML injection vulnerability exists in the MT Safeline X-Ray X3310 webserver version NXG 19.05 that enables a remote ... |
| CVE-2023-25199 | MEDIUM | 5.4 | 0.3% | Apr 4, 2024 | A reflected cross-site scripting (XSS) vulnerability exists in the MT Safeline X-Ray X3310 webserver version NXG 19.05 t... |
| CVE-2023-52043 | HIGH | 8.1 | 0.3% | Apr 3, 2024 | An issue in D-Link COVR 1100, 1102, 1103 AC1200 Dual-Band Whole-Home Mesh Wi-Fi System (Hardware Rev B1) truncates Wirel... |
| CVE-2023-52641 | MEDIUM | 5.5 | 0.2% | Apr 3, 2024 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Add NULL ptr dereference checking at the ... |
| CVE-2023-52640 | HIGH | 7.1 | 0.2% | Apr 3, 2024 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix oob in ntfs_listxattr The length of ... |
| CVE-2023-45552 | MEDIUM | 6.5 | 0.3% | Apr 3, 2024 | In VeridiumID before 3.5.0, a stored cross-site scripting (XSS) vulnerability has been discovered in the admin portal th... |
| CVE-2023-44040 | MEDIUM | 6.1 | 0.4% | Apr 3, 2024 | In VeridiumID before 3.5.0, the identity provider page is susceptible to a cross-site scripting (XSS) vulnerability that... |
| CVE-2023-44038 | MEDIUM | 6.5 | 0.3% | Apr 3, 2024 | In VeridiumID before 3.5.0, the identity provider page allows an unauthenticated attacker to discover information about ... |
| CVE-2023-35812 | MEDIUM | 5.3 | 0.4% | Apr 3, 2024 | An issue was discovered in the Amazon Linux packages of OpenSSH 7.4 for Amazon Linux 1 and 2, because of an incomplete f... |
| CVE-2023-44039 | CRITICAL | 9.1 | 0.5% | Apr 3, 2024 | In VeridiumID before 3.5.0, the WebAuthn API allows an internal unauthenticated attacker (who can pass enrollment verifi... |
| CVE-2023-5755 | — | — | — | Apr 3, 2024 | Rejected reason: **REJECT** Duplicate of CVE-2023-46784. Please refer to CVE-2023-46784. |
| CVE-2023-52639 | MEDIUM | 4.7 | 0.2% | Apr 3, 2024 | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: vsie: fix race during shadow creation R... |
| CVE-2023-52638 | MEDIUM | 5.5 | 0.2% | Apr 3, 2024 | In the Linux kernel, the following vulnerability has been resolved: can: j1939: prevent deadlock by changing j1939_sock... |
| CVE-2023-52637 | HIGH | 7.8 | 0.2% | Apr 3, 2024 | In the Linux kernel, the following vulnerability has been resolved: can: j1939: Fix UAF in j1939_sk_match_filter during... |
| CVE-2023-52296 | MEDIUM | 5.3 | 0.6% | Apr 3, 2024 | IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 is vulnerable to denial of service when querying ... |
| CVE-2023-38729 | MEDIUM | 6.5 | 0.6% | Apr 3, 2024 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to sensitive inform... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now