2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-43896 | HIGH | 7.8 | 0.4% | Oct 10, 2023 | A buffer overflow in Macrium Reflect 8.1.7544 and below allows attackers to escalate privileges or execute arbitrary cod... |
| CVE-2023-5491 | HIGH | 8.8 | 1.7% | Oct 10, 2023 | A vulnerability, which was classified as critical, has been found in Byzoro Smart S45F Multi-Service Secure Gateway Inte... |
| CVE-2023-5490 | HIGH | 8.8 | 1.7% | Oct 10, 2023 | A vulnerability classified as critical was found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Managemen... |
| CVE-2023-5489 | HIGH | 8.8 | 1.7% | Oct 10, 2023 | A vulnerability classified as critical has been found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Mana... |
| CVE-2023-44994 | HIGH | 8.8 | 0.2% | Oct 10, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Bainternet ShortCodes UI plugin <= 1.9.8 versions. |
| CVE-2023-44476 | HIGH | 8.8 | 0.2% | Oct 10, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Andres Felipe Perea V. CopyRightPro plugin <= 2.1 versions. |
| CVE-2023-44475 | HIGH | 8.8 | 0.2% | Oct 10, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Michael Simpson Add Shortcodes Actions And Filters plugin <= 2.0.9 ve... |
| CVE-2023-44471 | HIGH | 8.8 | 0.2% | Oct 10, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Bernhard Kau Backend Localization plugin <= 2.1.10 versions. |
| CVE-2023-5499 | HIGH | 7.5 | 0.6% | Oct 10, 2023 | Information exposure vulnerability in Shenzhen Reachfar v28, the exploitation of which could allow a remote attacker to ... |
| CVE-2023-5488 | HIGH | 8.8 | 1.8% | Oct 10, 2023 | A vulnerability was found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 202309... |
| CVE-2023-4966 | HIGH | 7.5 | 100.0% | Oct 10, 2023 | Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server... |
| CVE-2023-44487 | HIGH | 7.5 | 100.0% | Oct 10, 2023 | The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many... |
| CVE-2023-44470 | HIGH | 8.8 | 0.2% | Oct 10, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Kvvaradha Kv TinyMCE Editor Add Fonts plugin <= 1.1 versions. |
| CVE-2023-44241 | HIGH | 8.8 | 0.2% | Oct 10, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Keap Keap Landing Pages plugin <= 1.4.2 versions. |
| CVE-2023-5450 | HIGH | 7.8 | 0.1% | Oct 10, 2023 | An insufficient verification of data vulnerability exists in BIG-IP Edge Client Installer on macOS that may allow an at... |
| CVE-2023-45226 | HIGH | 7.4 | 0.4% | Oct 10, 2023 | The BIG-IP SPK TMM (Traffic Management Module) f5-debug-sidecar and f5-debug-sshd containers contains hardcoded credent... |
| CVE-2023-43787 | HIGH | 7.8 | 0.4% | Oct 10, 2023 | A vulnerability was found in libX11 due to an integer overflow within the XCreateImage() function. This flaw allows a lo... |
| CVE-2023-43746 | HIGH | 8.7 | 0.4% | Oct 10, 2023 | When running in Appliance mode, an authenticated user assigned the Administrator role may be able to bypass Appliance m... |
| CVE-2023-43611 | HIGH | 7.8 | 0.1% | Oct 10, 2023 | The BIG-IP Edge Client Installer on macOS does not follow best practices for elevating privileges during the installati... |
| CVE-2023-42768 | HIGH | 7.2 | 0.5% | Oct 10, 2023 | When a non-admin user has been assigned an administrator role via an iControl REST PUT request and later the user's rol... |
| CVE-2023-41085 | HIGH | 7.5 | 0.5% | Oct 10, 2023 | When IPSec is configured on a Virtual Server, undisclosed traffic can cause TMM to terminate. Note: Software versions... |
| CVE-2023-40542 | HIGH | 7.5 | 0.5% | Oct 10, 2023 | When TCP Verified Accept is enabled on a TCP profile that is configured on a Virtual Server, undisclosed requests can ca... |
| CVE-2023-40537 | HIGH | 8.1 | 0.5% | Oct 10, 2023 | An authenticated user's session cookie may remain valid for a limited time after logging out from the BIG-IP Configurat... |
| CVE-2023-40534 | HIGH | 7.5 | 0.5% | Oct 10, 2023 | When a client-side HTTP/2 profile and the HTTP MRF Router option are enabled for a virtual server, and an iRule using th... |
| CVE-2023-45601 | HIGH | 7.8 | 0.2% | Oct 10, 2023 | A vulnerability has been identified in Parasolid V35.0 (All versions < V35.0.262), Parasolid V35.1 (All versions < V35.1... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now