2023 CVE Vulnerabilities

31,509 CVEs published in 2023.

CVE IDSeverityCVSSDescription
CVE-2023-48788CRITICAL9.8A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiClientEMS versio...
CVE-2023-47534HIGH8.8A improper neutralization of formula elements in a csv file vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.2...
CVE-2023-46717HIGH8.8An improper authentication vulnerability [CWE-287] in FortiOS versions 7.4.1 and below, versions 7.2.6 and below, and ve...
CVE-2023-42790HIGH8.1A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.5, FortiO...
CVE-2023-42789CRITICAL9.8A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 ...
CVE-2023-41842MEDIUM6.7A use of externally-controlled format string vulnerability [CWE-134] vulnerability in Fortinet allows a privileged atta...
CVE-2023-36554CRITICAL9.8A improper access control in Fortinet FortiManager version 7.4.0, version 7.2.0 through 7.2.3, version 7.0.0 through 7.0...
CVE-2023-45793MEDIUM5.5A vulnerability has been identified in Siveillance Control (All versions >= V2.8 < V3.1.1). The affected product does no...
CVE-2023-41313CRITICAL9.8The authentication method in Apache Doris versions before 2.0.0 was vulnerable to timing attacks. Users are recommended ...
CVE-2023-4731MEDIUM4.3The LadiApp plugn for WordPress is vulnerable to Cross-Site Request Forgery due to a missing nonce check on the init_end...
CVE-2023-4729MEDIUM4.3The LadiApp plugin for WordPress is vulnerable to Cross-Site Request Forgery due to a missing nonce check on the publish...
CVE-2023-4728MEDIUM5.4The LadiApp plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on...
CVE-2023-4629MEDIUM4.3The LadiApp plugin for WordPress is vulnerable to Cross-Site Request Forgery due to a missing nonce check on the save_co...
CVE-2023-4628MEDIUM4.3The LadiApp plugin for WordPress is vulnerable to Cross-Site Request Forgery due to a missing nonce check on the ladiflo...
CVE-2023-4627MEDIUM4.3The LadiApp plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on...
CVE-2023-4626MEDIUM4.3The LadiApp plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on...
CVE-2023-49453MEDIUM6.1Reflected cross-site scripting (XSS) vulnerability in Racktables v0.22.0 and before, allows local attackers to execute a...
CVE-2023-6814MEDIUM5.6Insertion of Sensitive Information into Log File vulnerability in Hitachi Cosminexus Component Container allows local us...
CVE-2023-49785CRITICAL9.8NextChat, also known as ChatGPT-Next-Web, is a cross-platform chat user interface for use with ChatGPT. Versions 2.11.2 ...
CVE-2023-7247MEDIUM4.9The Login as User or Customer WordPress plugin through 3.8 does not prevent users to log in as any other user on the sit...
CVE-2023-6444MEDIUM5.3The Seriously Simple Podcasting WordPress plugin before 3.0.0 discloses the Podcast owner's email address (which by defa...
CVE-2023-52498MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: PM: sleep: Fix possible deadlocks in core system-wi...
CVE-2023-52495HIGH7.8In the Linux kernel, the following vulnerability has been resolved: soc: qcom: pmic_glink_altmode: fix port sanity chec...
CVE-2023-52494HIGH7.8In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Add alignment check for event ring ...
CVE-2023-52493MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Drop chan lock before queuing buffe...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now