2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-33758 | MEDIUM | 6.1 | 0.4% | Jan 25, 2024 | Splicecom Maximiser Soft PBX v1.5 and before was discovered to contain a cross-site scripting (XSS) vulnerability via th... |
| CVE-2023-33757 | MEDIUM | 5.9 | 0.3% | Jan 25, 2024 | A lack of SSL certificate validation in Splicecom iPCS (iOS App) v1.3.4, iPCS2 (iOS App) v2.8 and before, and iPCS (Andr... |
| CVE-2023-50785 | LOW | 2.7 | 2.0% | Jan 25, 2024 | Zoho ManageEngine ADAudit Plus before 7270 allows admin users to view names of arbitrary directories via path traversal. |
| CVE-2023-24676 | HIGH | 7.2 | 1.3% | Jan 24, 2024 | An issue found in ProcessWire 3.0.210 allows attackers to execute arbitrary code and install a reverse shell via the dow... |
| CVE-2023-52040 | CRITICAL | 9.8 | 0.9% | Jan 24, 2024 | An issue discovered in TOTOLINK X6000R v9.4.0cu.852_B20230719 allows attackers to run arbitrary commands via the sub_412... |
| CVE-2023-52039 | CRITICAL | 9.8 | 0.8% | Jan 24, 2024 | An issue discovered in TOTOLINK X6000R v9.4.0cu.852_B20230719 allows attackers to run arbitrary commands via the sub_415... |
| CVE-2023-52038 | CRITICAL | 9.8 | 0.8% | Jan 24, 2024 | An issue discovered in TOTOLINK X6000R v9.4.0cu.852_B20230719 allows attackers to run arbitrary commands via the sub_415... |
| CVE-2023-51890 | HIGH | 7.5 | 0.9% | Jan 24, 2024 | An infinite loop issue discovered in Mathtex 1.05 and before allows a remote attackers to consume CPU resources via craf... |
| CVE-2023-51889 | CRITICAL | 9.8 | 1.3% | Jan 24, 2024 | Stack Overflow vulnerability in the validate() function in Mathtex v.1.05 and before allows a remote attacker to execute... |
| CVE-2023-51888 | HIGH | 7.5 | 0.8% | Jan 24, 2024 | Buffer Overflow vulnerability in the nomath() function in Mathtex v.1.05 and before allows a remote attacker to cause a ... |
| CVE-2023-51887 | CRITICAL | 9.8 | 2.5% | Jan 24, 2024 | Command Injection vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via craf... |
| CVE-2023-51886 | HIGH | 7.5 | 0.8% | Jan 24, 2024 | Buffer Overflow vulnerability in the main() function in Mathtex 1.05 and before allows a remote attacker to cause a deni... |
| CVE-2023-51885 | CRITICAL | 9.8 | 1.3% | Jan 24, 2024 | Buffer Overflow vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via the le... |
| CVE-2023-44281 | HIGH | 7.1 | 0.2% | Jan 24, 2024 | Dell Pair Installer version prior to 1.2.1 contains an elevation of privilege vulnerability. A low privilege user with ... |
| CVE-2023-6697 | MEDIUM | 6.1 | 1.0% | Jan 24, 2024 | The WP Go Maps (formerly WP Google Maps) plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ma... |
| CVE-2023-51702 | MEDIUM | 6.5 | 0.4% | Jan 24, 2024 | Since version 5.2.0, when using deferrable mode with the path of a Kubernetes configuration file for authentication, the... |
| CVE-2023-50944 | MEDIUM | 6.5 | 1.0% | Jan 24, 2024 | Apache Airflow, versions before 2.8.1, have a vulnerability that allows an authenticated user to access the source code ... |
| CVE-2023-50943 | HIGH | 7.5 | 1.2% | Jan 24, 2024 | Apache Airflow, versions before 2.8.1, have a vulnerability that allows a potential attacker to poison the XCom data by ... |
| CVE-2023-52221 | CRITICAL | 9.8 | 0.6% | Jan 24, 2024 | Unrestricted Upload of File with Dangerous Type vulnerability in UkrSolution Barcode Scanner and Inventory manager.This ... |
| CVE-2023-44001 | MEDIUM | 5.4 | 0.4% | Jan 24, 2024 | An issue in Ailand clinic mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage ... |
| CVE-2023-44000 | MEDIUM | 5.4 | 0.4% | Jan 24, 2024 | An issue in Otakara lapis totuka mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via l... |
| CVE-2023-43999 | MEDIUM | 5.4 | 0.4% | Jan 24, 2024 | An issue in COLORFUL_laundry mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leaka... |
| CVE-2023-43998 | MEDIUM | 5.4 | 0.4% | Jan 24, 2024 | An issue in Books-futaba mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage o... |
| CVE-2023-43997 | MEDIUM | 5.4 | 0.4% | Jan 24, 2024 | An issue in Yoruichi hobby base mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via le... |
| CVE-2023-43996 | MEDIUM | 5.4 | 0.4% | Jan 24, 2024 | An issue in Q co ltd mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of th... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now