2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-43864 | HIGH | 7.5 | 0.8% | Sep 28, 2023 | D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWAN_Wizard55 function. |
| CVE-2023-43863 | HIGH | 7.5 | 0.8% | Sep 28, 2023 | D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWanDhcpplus function. |
| CVE-2023-43862 | HIGH | 7.5 | 0.7% | Sep 28, 2023 | D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formLanguageChange function. |
| CVE-2023-43861 | HIGH | 7.5 | 0.8% | Sep 28, 2023 | D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWanPPPoE function. |
| CVE-2023-43860 | HIGH | 7.5 | 0.7% | Sep 28, 2023 | D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWanNonLogin function. |
| CVE-2023-40307 | HIGH | 7.8 | 0.2% | Sep 28, 2023 | An attacker with standard privileges on macOS when requesting administrator privileges from the application can submit i... |
| CVE-2023-26145 | HIGH | 8.1 | 2.9% | Sep 28, 2023 | This affects versions of the package pydash before 6.0.0. A number of pydash methods such as pydash.objects.invoke() and... |
| CVE-2023-38877 | HIGH | 8.8 | 0.9% | Sep 28, 2023 | A host header injection vulnerability exists in gugoan's Economizzer v.0.9-beta1 and commit 3730880 (April 2023). By sen... |
| CVE-2023-38874 | HIGH | 8.8 | 28.5% | Sep 28, 2023 | A remote code execution (RCE) vulnerability via an insecure file upload exists in gugoan's Economizzer v.0.9-beta1 and c... |
| CVE-2023-42222 | HIGH | 8.8 | 1.4% | Sep 28, 2023 | WebCatalog before 49.0 is vulnerable to Incorrect Access Control. WebCatalog calls the Electron shell.openExternal funct... |
| CVE-2023-41450 | HIGH | 8.8 | 1.4% | Sep 28, 2023 | An issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to t... |
| CVE-2023-41444 | HIGH | 7.8 | 0.3% | Sep 28, 2023 | An issue in Binalyze IREC.sys v.3.11.0 and before allows a local attacker to execute arbitrary code and escalate privile... |
| CVE-2023-43320 | HIGH | 8.8 | 1.0% | Sep 27, 2023 | An issue in Proxmox Server Solutions GmbH Proxmox VE v.5.4 thru v.8.0, Proxmox Backup Server v.1.1 thru v.3.0, and Proxm... |
| CVE-2023-43314 | HIGH | 7.5 | 0.7% | Sep 27, 2023 | ** UNSUPPORTED WHEN ASSIGNED **The buffer overflow vulnerability in the Zyxel PMG2005-T20B firmware version V1.00(ABNK.2... |
| CVE-2023-41452 | HIGH | 8.8 | 0.6% | Sep 27, 2023 | Cross Site Request Forgery vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary ... |
| CVE-2023-43660 | HIGH | 8.1 | 0.3% | Sep 27, 2023 | Warpgate is a smart SSH, HTTPS and MySQL bastion host for Linux that doesn't need special client apps. The SSH key verif... |
| CVE-2023-43192 | HIGH | 8.8 | 0.7% | Sep 27, 2023 | SQL injection can exist in a newly created part of the SpringbootCMS 1.0 background, and the parameters submitted by use... |
| CVE-2023-44047 | HIGH | 7.2 | 0.7% | Sep 27, 2023 | Sourcecodester Toll Tax Management System v1 is vulnerable to SQL Injection. |
| CVE-2023-43650 | HIGH | 7.4 | 0.5% | Sep 27, 2023 | JumpServer is an open source bastion host. The verification code for resetting user's password is vulnerable to brute-fo... |
| CVE-2023-33972 | HIGH | 8.8 | 0.5% | Sep 27, 2023 | Scylladb is a NoSQL data store using the seastar framework, compatible with Apache Cassandra. Authenticated users who ar... |
| CVE-2023-5184 | HIGH | 8.8 | 0.4% | Sep 27, 2023 | Two potential signed to unsigned conversion errors and buffer overflow vulnerabilities at the following locations in the... |
| CVE-2023-20262 | HIGH | 7.5 | 0.7% | Sep 27, 2023 | A vulnerability in the SSH service of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to c... |
| CVE-2023-20254 | HIGH | 8.8 | 0.6% | Sep 27, 2023 | A vulnerability in the session management system of the Cisco Catalyst SD-WAN Manager multi-tenant feature could allow a... |
| CVE-2023-20231 | HIGH | 8.8 | 0.7% | Sep 27, 2023 | A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to perform an injec... |
| CVE-2023-20227 | HIGH | 7.5 | 0.7% | Sep 27, 2023 | A vulnerability in the Layer 2 Tunneling Protocol (L2TP) feature of Cisco IOS XE Software could allow an unauthenticated... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now