2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-5155 | CRITICAL | 9.8 | 0.5% | Feb 15, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Utarit Information... |
| CVE-2023-4993 | HIGH | 7.5 | 0.4% | Feb 15, 2024 | Incorrect Use of Privileged APIs vulnerability in Utarit Information Technologies SoliPay Mobile App allows Collect Data... |
| CVE-2023-47537 | MEDIUM | 4.8 | 0.2% | Feb 15, 2024 | An improper certificate validation vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.6, F... |
| CVE-2023-45581 | HIGH | 7.2 | 0.8% | Feb 15, 2024 | An improper privilege management vulnerability [CWE-269] vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.2, F... |
| CVE-2023-44253 | MEDIUM | 5 | 0.7% | Feb 15, 2024 | An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet FortiManager version 7... |
| CVE-2023-26206 | MEDIUM | 6.1 | 0.5% | Feb 15, 2024 | An improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiNAC 9.4.0 - 9.4... |
| CVE-2023-39245 | CRITICAL | 9.8 | 0.4% | Feb 15, 2024 | DELL ESI (Enterprise Storage Integrator) for SAP LAMA, version 10.0, contains an information disclosure vulnerability i... |
| CVE-2023-39244 | CRITICAL | 9.8 | 0.5% | Feb 15, 2024 | DELL ESI (Enterprise Storage Integrator) for SAP LAMA, version 10.0, contains an information disclosure vulnerability in... |
| CVE-2023-32484 | CRITICAL | 9.8 | 0.6% | Feb 15, 2024 | Dell Networking Switches running Enterprise SONiC versions 4.1.0, 4.0.5, 3.5.4 and below contains an improper input val... |
| CVE-2023-32462 | CRITICAL | 9.8 | 1.8% | Feb 15, 2024 | Dell OS10 Networking Switches running 10.5.2.x and above contain an OS command injection vulnerability when using remot... |
| CVE-2023-28078 | CRITICAL | 9.1 | 0.7% | Feb 15, 2024 | Dell OS10 Networking Switches running 10.5.2.x and above contain a vulnerability with zeroMQ when VLT is configured. A ... |
| CVE-2023-4539 | HIGH | 7.5 | 0.5% | Feb 15, 2024 | Use of a hard-coded password for a special database account created during Comarch ERP XL installation allows an attacke... |
| CVE-2023-4538 | MEDIUM | 6.5 | 0.4% | Feb 15, 2024 | The database access credentials configured during installation are stored in a special table, and are encrypted with a s... |
| CVE-2023-4537 | HIGH | 7.4 | 0.6% | Feb 15, 2024 | Comarch ERP XL client is vulnerable to MS SQL protocol downgrade request from a server side, what could lead to an unenc... |
| CVE-2023-51787 | HIGH | 7.5 | 0.5% | Feb 15, 2024 | An issue was discovered in Wind River VxWorks 7 22.09 and 23.03. If a VxWorks task or POSIX thread that uses OpenSSL exi... |
| CVE-2023-46596 | MEDIUM | 6.1 | 0.3% | Feb 15, 2024 | Improper input validation in Algosec FireFlow VisualFlow workflow editor via Name, Description and Configuration File f... |
| CVE-2023-6138 | HIGH | 7.9 | 0.2% | Feb 14, 2024 | A potential security vulnerability has been identified in the system BIOS for certain HP Workstation PCs, which might al... |
| CVE-2023-49721 | MEDIUM | 6.7 | 0.2% | Feb 14, 2024 | An insecure default to allow UEFI Shell in EDK2 was left enabled in LXD. This allows an OS-resident attacker to bypass S... |
| CVE-2023-48733 | MEDIUM | 6.7 | 0.3% | Feb 14, 2024 | An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. This allows an OS-resident attacker t... |
| CVE-2023-50927 | HIGH | 7.5 | 0.5% | Feb 14, 2024 | Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. An attacker can trigger o... |
| CVE-2023-50926 | HIGH | 7.5 | 0.5% | Feb 14, 2024 | Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. An out-of-bounds read can... |
| CVE-2023-48229 | HIGH | 7.6 | 0.4% | Feb 14, 2024 | Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. An out-of-bounds write ex... |
| CVE-2023-6409 | HIGH | 7.7 | 0.2% | Feb 14, 2024 | CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to a project file prot... |
| CVE-2023-6408 | HIGH | 8.1 | 0.3% | Feb 14, 2024 | CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists ... |
| CVE-2023-52399 | — | — | — | Feb 14, 2024 | Rejected reason: This is unused. |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now