2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-50488 | CRITICAL | 9.8 | 1.2% | Feb 2, 2024 | An issue in Blurams Lumi Security Camera (A31C) v23.0406.435.4120 allows attackers to execute arbitrary code. |
| CVE-2023-39611 | HIGH | 7.5 | 0.6% | Feb 2, 2024 | An issue in Software FX Chart FX 7 version 7.0.4962.20829 allows attackers to enumerate and read files from the local fi... |
| CVE-2023-48645 | HIGH | 7.8 | 0.2% | Feb 2, 2024 | An issue was discovered in the Archibus app 4.0.3 for iOS. It uses a local database that is synchronized with a Web cent... |
| CVE-2023-49118 | MEDIUM | 5.5 | 0.1% | Feb 2, 2024 | in OpenHarmony v3.2.4 and prior versions allow a local attacker causes information leak through out-of-bounds Read. |
| CVE-2023-45734 | HIGH | 8.8 | 0.3% | Feb 2, 2024 | in OpenHarmony v3.2.4 and prior versions allow an adjacent attacker arbitrary code execution through out-of-bounds writ... |
| CVE-2023-43756 | MEDIUM | 5.5 | 0.1% | Feb 2, 2024 | in OpenHarmony v3.2.4 and prior versions allow a local attacker causes information leak through out-of-bounds Read. |
| CVE-2023-46045 | HIGH | 7.8 | 0.7% | Feb 2, 2024 | Graphviz 2.36.0 through 9.x before 10.0.1 has an out-of-bounds read via a crafted config6a file. NOTE: exploitability ma... |
| CVE-2023-38263 | HIGH | 8.8 | 0.5% | Feb 2, 2024 | IBM SOAR QRadar Plugin App 1.0 through 5.0.3 could allow an authenticated user to perform unauthorized actions due to im... |
| CVE-2023-38020 | MEDIUM | 4.3 | 0.4% | Feb 2, 2024 | IBM SOAR QRadar Plugin App 1.0 through 5.0.3 could allow an authenticated user to manipulate output written to log files... |
| CVE-2023-38019 | MEDIUM | 6.5 | 1.0% | Feb 2, 2024 | IBM SOAR QRadar Plugin App 1.0 through 5.0.3 could allow a remote attacker to traverse directories on the system. An att... |
| CVE-2023-46159 | MEDIUM | 6.5 | 0.7% | Feb 2, 2024 | IBM Storage Ceph 5.3z1, 5.3z5, and 6.1z1 could allow an authenticated user on the network to cause a denial of service f... |
| CVE-2023-50962 | HIGH | 7.5 | 0.3% | Feb 2, 2024 | IBM PowerSC 1.3, 2.0, and 2.1 MFA does not implement the "HTTP Strict Transport Security" (HSTS) web security policy mec... |
| CVE-2023-50941 | MEDIUM | 5.4 | 0.3% | Feb 2, 2024 | IBM PowerSC 1.3, 2.0, and 2.1 does not provide logout functionality, which could allow an authenticated user to gain acc... |
| CVE-2023-50938 | MEDIUM | 4.3 | 0.4% | Feb 2, 2024 | IBM PowerSC 1.3, 2.0, and 2.1 could allow a remote attacker to hijack the clicking action of the victim. By persuading a... |
| CVE-2023-50935 | MEDIUM | 6.5 | 0.4% | Feb 2, 2024 | IBM PowerSC 1.3, 2.0, and 2.1 fails to properly restrict access to a URL or resource, which may allow a remote attacker ... |
| CVE-2023-50934 | MEDIUM | 5.3 | 0.4% | Feb 2, 2024 | IBM PowerSC 1.3, 2.0, and 2.1 uses single-factor authentication which can lead to unnecessary risk of compromise when co... |
| CVE-2023-50328 | MEDIUM | 5.3 | 0.5% | Feb 2, 2024 | IBM PowerSC 1.3, 2.0, and 2.1 may allow a remote attacker to view session identifiers passed via URL query strings. IBM... |
| CVE-2023-48793 | CRITICAL | 9.8 | 7.0% | Feb 2, 2024 | Zoho ManageEngine ADAudit Plus through 7250 allows SQL Injection in the aggregate report feature. |
| CVE-2023-48792 | CRITICAL | 9.8 | 7.0% | Feb 2, 2024 | Zoho ManageEngine ADAudit Plus through 7250 is vulnerable to SQL Injection in the report export option. |
| CVE-2023-46344 | MEDIUM | 5.4 | 0.6% | Feb 2, 2024 | A vulnerability in Solar-Log Base 15 Firmware 6.0.1 Build 161, and possibly other Solar-Log Base products, allows an att... |
| CVE-2023-32333 | CRITICAL | 9.8 | 0.5% | Feb 2, 2024 | IBM Maximo Asset Management 7.6.1.3 could allow a remote attacker to log into the admin panel due to improper access con... |
| CVE-2023-50940 | CRITICAL | 9.8 | 0.5% | Feb 2, 2024 | IBM PowerSC 1.3, 2.0, and 2.1 uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out privi... |
| CVE-2023-50937 | HIGH | 7.5 | 0.3% | Feb 2, 2024 | IBM PowerSC 1.3, 2.0, and 2.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt... |
| CVE-2023-50936 | HIGH | 8.8 | 0.4% | Feb 2, 2024 | IBM PowerSC 1.3, 2.0, and 2.1 does not invalidate session after logout which could allow an authenticated user to impers... |
| CVE-2023-50933 | MEDIUM | 6.1 | 0.4% | Feb 2, 2024 | IBM PowerSC 1.3, 2.0, and 2.1 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now