2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-35665 | HIGH | 7.8 | 0.1% | Sep 11, 2023 | In multiple files, there is a possible way to import a contact from another user due to a missing permission check. This... |
| CVE-2023-35658 | HIGH | 8.8 | 0.2% | Sep 11, 2023 | In gatt_process_prep_write_rsp of gatt_cl.cc, there is a possible privilege escalation due to a use after free. This cou... |
| CVE-2023-4314 | HIGH | 7.2 | 1.3% | Sep 11, 2023 | The wpDataTables WordPress plugin before 2.1.66 does not validate the "Serialized PHP array" input data before deseriali... |
| CVE-2023-4278 | HIGH | 7.5 | 3.5% | Sep 11, 2023 | The MasterStudy LMS WordPress Plugin WordPress plugin before 3.0.18 does not have proper checks in place during registra... |
| CVE-2023-39227 | HIGH | 7.5 | 0.3% | Sep 11, 2023 | Softneta MedDream PACS stores usernames and passwords in plaintext. The plaintext storage could be abused by attackers ... |
| CVE-2023-38256 | HIGH | 7.5 | 0.6% | Sep 11, 2023 | Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, and 3.... |
| CVE-2023-36497 | HIGH | 8.8 | 0.5% | Sep 11, 2023 | Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, and 3.... |
| CVE-2023-39780 | HIGH | 8.8 | 32.2% | Sep 11, 2023 | On ASUS RT-AX55 3.0.0.4.386.51598 devices, authenticated attackers can perform OS command injection via the /start_apply... |
| CVE-2023-39070 | HIGH | 7.8 | 0.3% | Sep 11, 2023 | An issue in Cppcheck 2.12 dev allows a local attacker to execute arbitrary code via the removeContradiction parameter in... |
| CVE-2023-39068 | HIGH | 7.5 | 0.6% | Sep 11, 2023 | Buffer Overflow vulnerability in NBD80S09S-KLC v.YK_HZXM_NBD80S09S-KLC_V4.03.R11.7601.Nat.OnvifC.20230414.bin and NBD80N... |
| CVE-2023-39063 | HIGH | 7.8 | 0.4% | Sep 11, 2023 | Buffer Overflow vulnerability in RaidenFTPD 2.4.4005 allows a local attacker to execute arbitrary code via the Server na... |
| CVE-2023-38829 | HIGH | 8.8 | 2.0% | Sep 11, 2023 | An issue in NETIS SYSTEMS WF2409E v.3.6.42541 allows a remote attacker to execute arbitrary code via the ping and tracer... |
| CVE-2023-38743 | HIGH | 7.2 | 11.6% | Sep 11, 2023 | Zoho ManageEngine ADManager Plus before Build 7200 allows admin users to execute commands on the host machine. |
| CVE-2023-31468 | HIGH | 7.8 | 0.8% | Sep 11, 2023 | An issue was discovered in Inosoft VisiWin 7 through 2022-2.1 (Runtime RT7.3 RC3 20221209.5). The "%PROGRAMFILES(X86)%\I... |
| CVE-2023-27470 | HIGH | 7 | 0.5% | Sep 11, 2023 | BASupSrvcUpdater.exe in N-able Take Control Agent through 7.0.41.1141 before 7.0.43 has a TOCTOU Race Condition via a ps... |
| CVE-2023-36161 | HIGH | 7.5 | 0.5% | Sep 11, 2023 | An issue was discovered in Qubo Smart Plug 10A version HSP02_01_01_14_SYSTEM-10A, allows attackers to cause a denial of ... |
| CVE-2023-3612 | HIGH | 8.8 | 0.4% | Sep 11, 2023 | Govee Home app has unprotected access to WebView component which can be opened by any app on the device. By sending an U... |
| CVE-2023-4585 | HIGH | 8.8 | 0.7% | Sep 11, 2023 | Memory safety bugs present in Firefox 116, Firefox ESR 115.1, and Thunderbird 115.1. Some of these bugs showed evidence ... |
| CVE-2023-4584 | HIGH | 8.8 | 0.7% | Sep 11, 2023 | Memory safety bugs present in Firefox 116, Firefox ESR 102.14, Firefox ESR 115.1, Thunderbird 102.14, and Thunderbird 11... |
| CVE-2023-4583 | HIGH | 7.5 | 0.6% | Sep 11, 2023 | When checking if the Browsing Context had been discarded in `HttpBaseChannel`, if the load group was not available then ... |
| CVE-2023-4582 | HIGH | 8.8 | 0.8% | Sep 11, 2023 | Due to large allocation checks in Angle for glsl shaders being too lenient a buffer overflow could have occurred when al... |
| CVE-2023-4576 | HIGH | 8.6 | 0.7% | Sep 11, 2023 | On Windows, an integer overflow could occur in `RecordedSourceSurfaceCreation` which resulted in a heap buffer overflow ... |
| CVE-2023-4816 | HIGH | 8.8 | 0.5% | Sep 11, 2023 | A vulnerability exists in the Equipment Tag Out authentication, when configured with Single Sign-On (SSO) with password ... |
| CVE-2023-4877 | HIGH | 7.5 | 0.4% | Sep 10, 2023 | Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository hamza417/inure prior to build92. |
| CVE-2023-4876 | HIGH | 7.5 | 0.4% | Sep 10, 2023 | Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository hamza417/inure prior to build92. |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now