2023 CVE Vulnerabilities

31,475 CVEs published in 2023.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2023-44837HIGH7.5D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Password parameter in the SetWanSettings...
CVE-2023-44836HIGH7.5D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the SSID parameter in the SetWLanRadioSettin...
CVE-2023-44835HIGH7.5D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Mac parameter in the SetParentsControlIn...
CVE-2023-44834HIGH7.5D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the StartTime parameter in the SetParentsCon...
CVE-2023-44833HIGH7.5D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the GuardInt parameter in the SetWLanRadioSe...
CVE-2023-44832HIGH7.5D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the MacAddress parameter in the SetWanSettin...
CVE-2023-44831HIGH7.5D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Type parameter in the SetWLanRadioSettin...
CVE-2023-44830HIGH7.5D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the EndTime parameter in the SetParentsContr...
CVE-2023-44829HIGH7.5D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the AdminPassword parameter in the SetDevice...
CVE-2023-44828HIGH7.5D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the CurrentPassword parameter in the CheckPa...
CVE-2023-45159HIGH8.41E Client installer can perform arbitrary file deletion on protected files.   A non-privileged user could provide a sym...
CVE-2023-45198HIGH7.5ftpd before "NetBSD-ftpd 20230930" can leak information about the host filesystem before authentication via an MLSD or M...
CVE-2023-26236HIGH7.8An issue was discovered in WatchGuard EPDR 8.0.21.0002. Due to a weak implementation of message handling between WatchGu...
CVE-2023-43321HIGH8.8File Upload vulnerability in Digital China Networks DCFW-1800-SDC v.3.0 allows an authenticated attacker to execute arbi...
CVE-2023-40299HIGH7.8Kong Insomnia 2023.4.0 on macOS allows attackers to execute code and access restricted files, or make requests for TCC p...
CVE-2023-43809HIGH7.5Soft Serve is a self-hostable Git server for the command line. Prior to version 0.6.2, a security vulnerability in Soft ...
CVE-2023-43805HIGH7.5Nexkey is a fork of Misskey, an open source, decentralized social media platform. Prior to version 12.121.9, incomplete ...
CVE-2023-43799HIGH7.8Altair is a GraphQL Client. Prior to version 5.2.5, the Altair GraphQL Client Desktop Application does not sanitize exte...
CVE-2023-43793HIGH7.5Misskey is an open source, decentralized social media platform. Prior to version 2023.9.0, by editing the URL, a user ca...
CVE-2023-36618HIGH8.8Atos Unify OpenScape Session Border Controller through V10 R3.01.03 allows execution of OS commands as root user by low-...
CVE-2023-44209HIGH7.8Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protec...
CVE-2023-42809HIGH8.8Redisson is a Java Redis client that uses the Netty framework. Prior to version 3.22.0, some of the messages received fr...
CVE-2023-42449HIGH8.1Hydra is the two-layer scalability solution for Cardano. Prior to version 0.13.0, it is possible for a malicious head in...
CVE-2023-42824HIGH7.8The issue was addressed with improved checks. This issue is fixed in iOS 16.7.1 and iPadOS 16.7.1. A local attacker may ...
CVE-2023-42448HIGH8.1Hydra is the layer-two scalability solution for Cardano. Prior to version 0.13.0, the specification states that the cont...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now