2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-38946 | HIGH | 8.8 | 0.8% | Mar 6, 2024 | An issue in Multilaser RE160 firmware v5.07.51_pt_MTL01 and v5.07.52_pt_MTL01 allows attackers to bypass the access cont... |
| CVE-2023-38945 | CRITICAL | 9.8 | 1.0% | Mar 6, 2024 | Multilaser RE160 v5.07.51_pt_MTL01 and v5.07.52_pt_MTL01, Multilaser RE160V v12.03.01.08_pt and V12.03.01.09_pt, and Mul... |
| CVE-2023-38944 | CRITICAL | 9.8 | 15.5% | Mar 6, 2024 | An issue in Multilaser RE160V firmware v12.03.01.09_pt and Multilaser RE163V firmware v12.03.01.10_pt allows attackers t... |
| CVE-2023-48644 | MEDIUM | 6.1 | 0.3% | Mar 5, 2024 | An issue was discovered in the Archibus app 4.0.3 for iOS. There is an XSS vulnerability in the create work request feat... |
| CVE-2023-45290 | MEDIUM | 6.5 | 1.2% | Mar 5, 2024 | When parsing a multipart form (either explicitly with Request.ParseMultipartForm or implicitly with Request.FormValue, R... |
| CVE-2023-45289 | MEDIUM | 4.3 | 1.1% | Mar 5, 2024 | When following an HTTP redirect to a domain which is not a subdomain match or exact match of the initial domain, an http... |
| CVE-2023-26282 | MEDIUM | 4.2 | 0.2% | Mar 5, 2024 | IBM Watson CP4D Data Stores 4.6.0 through 4.6.3 could allow a user with physical access and specific knowledge of the sy... |
| CVE-2023-25681 | MEDIUM | 6.5 | 0.6% | Mar 5, 2024 | LDAP users on IBM Spectrum Virtualize 8.5 which are configured to require multifactor authentication can still authentic... |
| CVE-2023-7103 | CRITICAL | 9.8 | 0.6% | Mar 5, 2024 | Authentication Bypass by Primary Weakness vulnerability in ZKSoftware Biometric Security Solutions UFace 5 allows Authen... |
| CVE-2023-5457 | CRITICAL | 9.8 | 0.6% | Mar 5, 2024 | A CWE-1269 “Product Released in Non-Release Configuration” vulnerability in the Django web framework used by the web app... |
| CVE-2023-45600 | CRITICAL | 9.8 | 0.4% | Mar 5, 2024 | A CWE-613 “Insufficient Session Expiration” vulnerability in the web application, due to the session cookie “sessionid” ... |
| CVE-2023-45599 | HIGH | 8.8 | 0.2% | Mar 5, 2024 | A CWE-646 “Reliance on File Name or Extension of Externally-Supplied File” vulnerability in the “iec61850” functionality... |
| CVE-2023-45598 | MEDIUM | 5.3 | 0.5% | Mar 5, 2024 | A CWE-425 “Direct Request ('Forced Browsing')” vulnerability in the “measure” functionality of the web application allow... |
| CVE-2023-45597 | CRITICAL | 9 | 0.4% | Mar 5, 2024 | A CWE-1236 “Improper Neutralization of Formula Elements in a CSV File” vulnerability in the “file_configuration” functio... |
| CVE-2023-45596 | MEDIUM | 5.3 | 0.5% | Mar 5, 2024 | A CWE-425 “Direct Request ('Forced Browsing')” vulnerability in the “file_configuration” functionality of the web applic... |
| CVE-2023-45595 | HIGH | 8.8 | 0.4% | Mar 5, 2024 | A CWE-434 “Unrestricted Upload of File with Dangerous Type” vulnerability in the “file_configuration” functionality of t... |
| CVE-2023-45594 | MEDIUM | 6.8 | 0.3% | Mar 5, 2024 | A CWE-552 “Files or Directories Accessible to External Parties” vulnerability in the embedded Chromium browser allows a ... |
| CVE-2023-45593 | MEDIUM | 6.8 | 0.3% | Mar 5, 2024 | A CWE-184 “Incomplete List of Disallowed Inputs” vulnerability in the embedded Chromium browser (concerning the handling... |
| CVE-2023-45592 | CRITICAL | 9.8 | 0.7% | Mar 5, 2024 | A CWE-250 “Execution with Unnecessary Privileges” vulnerability in the embedded Chromium browser (due to the binary bein... |
| CVE-2023-45591 | HIGH | 8.8 | 0.7% | Mar 5, 2024 | A CWE-122 “Heap-based Buffer Overflow” vulnerability in the “logger_generic” function of the “Ax_rtu” binary allows a re... |
| CVE-2023-5456 | CRITICAL | 9.8 | 0.6% | Mar 5, 2024 | A CWE-798 “Use of Hard-coded Credentials” vulnerability in the MariaDB database of the web application allows a remote u... |
| CVE-2023-42419 | LOW | 3.8 | 0.1% | Mar 5, 2024 | Maintenance Server, in Cybellum's QCOW air-gapped distribution (China Edition), versions 2.15.5 through 2.27, was compil... |
| CVE-2023-52432 | HIGH | 7.1 | 0.2% | Mar 5, 2024 | Improper input validation in IpcTxSndSetLoopbackCtrl in libsec-ril prior to SMR Sep-2023 Release 1 allows local attacker... |
| CVE-2023-49970 | CRITICAL | 9.8 | 0.8% | Mar 5, 2024 | Customer Support System v1 was discovered to contain a SQL injection vulnerability via the subject parameter at /custome... |
| CVE-2023-49969 | MEDIUM | 4.3 | 0.5% | Mar 5, 2024 | Customer Support System v1 was discovered to contain a SQL injection vulnerability via the id parameter at /customer_sup... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now