2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-29180 | HIGH | 7.5 | 2.6% | Feb 22, 2024 | A null pointer dereference vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4, FortiOS 7.0.0 through 7.0.11, FortiOS ... |
| CVE-2023-29179 | MEDIUM | 6.5 | 2.5% | Feb 22, 2024 | A null pointer dereference in Fortinet FortiOS version 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.12, ... |
| CVE-2023-4895 | MEDIUM | 4.3 | 0.4% | Feb 22, 2024 | An issue has been discovered in GitLab EE affecting all versions starting from 12.0 to 16.7.6, all versions starting fro... |
| CVE-2023-6477 | MEDIUM | 6.7 | 0.5% | Feb 22, 2024 | An issue has been discovered in GitLab EE affecting all versions starting from 16.5 before 16.7.6, all versions starting... |
| CVE-2023-3509 | MEDIUM | 5.4 | 0.3% | Feb 21, 2024 | An issue has been discovered in GitLab affecting all versions before 16.7.6, all versions starting from 16.8 before 16.8... |
| CVE-2023-52155 | HIGH | 7.2 | 0.7% | Feb 21, 2024 | A SQL Injection vulnerability in /admin/sauvegarde/run.php in PMB 7.4.7 and earlier allows remote authenticated attacker... |
| CVE-2023-52154 | HIGH | 7.2 | 0.7% | Feb 21, 2024 | File Upload vulnerability in pmb/camera_upload.php in PMB 7.4.7 and earlier allows attackers to run arbitrary code via u... |
| CVE-2023-52153 | CRITICAL | 9.8 | 0.8% | Feb 21, 2024 | A SQL Injection vulnerability in /pmb/opac_css/includes/sessions.inc.php in PMB 7.4.7 and earlier allows remote unauthen... |
| CVE-2023-51828 | CRITICAL | 9.8 | 0.9% | Feb 21, 2024 | A SQL Injection vulnerability in /admin/convert/export.class.php in PMB 7.4.7 and earlier versions allows remote unauthe... |
| CVE-2023-38844 | HIGH | 7.5 | 0.9% | Feb 21, 2024 | SQL injection vulnerability in PMB v.7.4.7 and earlier allows a remote attacker to execute arbitrary code via the thesau... |
| CVE-2023-37177 | CRITICAL | 9.8 | 1.1% | Feb 21, 2024 | SQL Injection vulnerability in PMB Services PMB v.7.4.7 and before allows a remote unauthenticated attacker to execute a... |
| CVE-2023-24334 | HIGH | 8 | 0.5% | Feb 21, 2024 | A stack overflow vulnerability in Tenda AC23 with firmware version US_AC23V1.0re_V16.03.07.45_cn_TDC01 allows attackers ... |
| CVE-2023-24333 | HIGH | 8.8 | 0.5% | Feb 21, 2024 | A stack overflow vulnerability in Tenda AC21 with firmware version US_AC21V1.0re_V16.03.08.15_cn_TDC01 allows attackers ... |
| CVE-2023-24332 | HIGH | 8.1 | 0.5% | Feb 21, 2024 | A stack overflow vulnerability in Tenda AC6 with firmware version US_AC6V5.0re_V03.03.02.01_cn_TDC01 allows attackers to... |
| CVE-2023-24331 | CRITICAL | 9.8 | 2.1% | Feb 21, 2024 | Command Injection vulnerability in D-Link Dir 816 with firmware version DIR-816_A2_v1.10CNB04 allows attackers to run ar... |
| CVE-2023-24330 | HIGH | 8.8 | 1.3% | Feb 21, 2024 | Command Injection vulnerability in D-Link Dir 882 with firmware version DIR882A1_FW130B06 allows attackers to run arbitr... |
| CVE-2023-6640 | MEDIUM | 6.5 | 0.3% | Feb 21, 2024 | Malformed S2 Nonce Get Command Class packets can be sent to crash PC Controller v5.54.0 and earlier. |
| CVE-2023-6533 | MEDIUM | 6.5 | 0.3% | Feb 21, 2024 | Malformed Device Reset Locally Command Class packets can be sent to the controller, causing the controller to assume the... |
| CVE-2023-50975 | HIGH | 8.4 | 0.2% | Feb 21, 2024 | The TD Bank TD Advanced Dashboard client through 3.0.3 for macOS allows arbitrary code execution because of the lack of ... |
| CVE-2023-49100 | MEDIUM | 4.4 | 0.2% | Feb 21, 2024 | Trusted Firmware-A (TF-A) before 2.10 has a potential read out-of-bounds in the SDEI service. The input parameter passed... |
| CVE-2023-46241 | HIGH | 8.1 | 0.8% | Feb 21, 2024 | `discourse-microsoft-auth` is a plugin that enables authentication via Microsoft. On sites with the `discourse-microsoft... |
| CVE-2023-50955 | LOW | 2.7 | 0.6% | Feb 21, 2024 | IBM InfoSphere Information Server 11.7 could allow an authenticated privileged user to obtain the absolute path of the w... |
| CVE-2023-33843 | MEDIUM | 5.4 | 0.4% | Feb 21, 2024 | IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed a... |
| CVE-2023-47795 | MEDIUM | 5.4 | 0.6% | Feb 21, 2024 | Stored cross-site scripting (XSS) vulnerability in the Document and Media widget in Liferay Portal 7.4.3.18 through 7.4.... |
| CVE-2023-7235 | HIGH | 8.4 | 0.2% | Feb 21, 2024 | The OpenVPN GUI installer before version 2.6.9 did not set the proper access control restrictions to the installation di... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now