2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-31002 | MEDIUM | 5.5 | 0.1% | Feb 7, 2024 | IBM Security Access Manager Container 10.0.0.0 through 10.0.6.1 temporarily stores sensitive information in files that c... |
| CVE-2023-39196 | MEDIUM | 5.3 | 0.8% | Feb 7, 2024 | Improper Authentication vulnerability in Apache Ozone. The vulnerability allows an attacker to download metadata intern... |
| CVE-2023-51437 | HIGH | 7.4 | 0.8% | Feb 7, 2024 | Observable timing discrepancy vulnerability in Apache Pulsar SASL Authentication Provider can allow an attacker to forge... |
| CVE-2023-46914 | CRITICAL | 9.8 | 0.8% | Feb 7, 2024 | SQL Injection vulnerability in RM bookingcalendar module for PrestaShop versions 2.7.9 and before, allows remote attacke... |
| CVE-2023-40355 | MEDIUM | 5.4 | 1.1% | Feb 7, 2024 | Cross Site Scripting (XSS) vulnerability in Axigen versions 10.3.3.0 before 10.3.3.59, 10.4.0 before 10.4.19, and 10.5.0... |
| CVE-2023-6388 | MEDIUM | 5 | 0.5% | Feb 7, 2024 | Suite CRM version 7.14.2 allows making arbitrary HTTP requests through the vulnerable server. This is possible because ... |
| CVE-2023-45735 | HIGH | 8 | 0.5% | Feb 6, 2024 | A potential attacker with access to the Westermo Lynx device may be able to execute malicious code that could affec... |
| CVE-2023-45227 | MEDIUM | 5.4 | 0.3% | Feb 6, 2024 | An attacker with access to the web application with vulnerable software could introduce arbitrary JavaScr... |
| CVE-2023-45222 | MEDIUM | 5.4 | 0.3% | Feb 6, 2024 | An attacker with access to the web application that has the vulnerable software could introduce arbitrary JavaScript ... |
| CVE-2023-45213 | MEDIUM | 6.5 | 0.4% | Feb 6, 2024 | A potential attacker with access to the Westermo Lynx device would be able to execute malicious code that could a... |
| CVE-2023-42765 | MEDIUM | 5.4 | 0.3% | Feb 6, 2024 | An attacker with access to the vulnerable software could introduce arbitrary JavaScript by injecting a cross-si... |
| CVE-2023-40544 | MEDIUM | 5.7 | 0.2% | Feb 6, 2024 | An attacker with access to the network where the affected devices are located could maliciously actions to ob... |
| CVE-2023-40143 | MEDIUM | 5.4 | 0.3% | Feb 6, 2024 | An attacker with access to the Westermo Lynx web application that has the vulnerable software could introduce arbitrary... |
| CVE-2023-38579 | HIGH | 8.8 | 0.2% | Feb 6, 2024 | The cross-site request forgery token in the request may be predictable or easily guessable allowing attacke... |
| CVE-2023-40545 | CRITICAL | 9.8 | 0.9% | Feb 6, 2024 | Authentication bypass when an OAuth2 Client is using client_secret_jwt as its authentication method on affected 11.3 ver... |
| CVE-2023-47618 | HIGH | 7.2 | 1.9% | Feb 6, 2024 | A post authentication command execution vulnerability exists in the web filtering functionality of Tp-Link ER7206 Omada ... |
| CVE-2023-47617 | HIGH | 7.2 | 3.4% | Feb 6, 2024 | A post authentication command injection vulnerability exists when configuring the web group member of Tp-Link ER7206 Oma... |
| CVE-2023-47209 | HIGH | 7.2 | 3.4% | Feb 6, 2024 | A post authentication command injection vulnerability exists in the ipsec policy functionality of Tp-Link ER7206 Omada G... |
| CVE-2023-47167 | HIGH | 7.2 | 3.4% | Feb 6, 2024 | A post authentication command injection vulnerability exists in the GRE policy functionality of Tp-Link ER7206 Omada Gig... |
| CVE-2023-46683 | HIGH | 7.2 | 3.4% | Feb 6, 2024 | A post authentication command injection vulnerability exists when configuring the wireguard VPN functionality of Tp-Lin... |
| CVE-2023-43482 | HIGH | 7.2 | 3.3% | Feb 6, 2024 | A command execution vulnerability exists in the guest resource functionality of Tp-Link ER7206 Omada Gigabit VPN Router ... |
| CVE-2023-42664 | HIGH | 7.2 | 3.4% | Feb 6, 2024 | A post authentication command injection vulnerability exists when setting up the PPTP global configuration of Tp-Link ER... |
| CVE-2023-36498 | HIGH | 7.2 | 3.4% | Feb 6, 2024 | A post-authentication command injection vulnerability exists in the PPTP client functionality of Tp-Link ER7206 Omada Gi... |
| CVE-2023-50395 | HIGH | 8 | 1.6% | Feb 6, 2024 | SQL Injection Remote Code Execution Vulnerability was found using an update statement in the SolarWinds Platform. This ... |
| CVE-2023-46183 | MEDIUM | 4.4 | 0.2% | Feb 6, 2024 | IBM PowerVM Hypervisor FW950.00 through FW950.90, FW1020.00 through FW1020.40, and FW1030.00 through FW1030.30 could all... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now