2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-40031 | HIGH | 7.8 | 0.5% | Aug 25, 2023 | Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to heap buffer write ove... |
| CVE-2023-37249 | HIGH | 8.8 | 0.6% | Aug 25, 2023 | Infoblox NIOS through 8.5.1 has a faulty component that accepts malicious input without sanitization, resulting in shell... |
| CVE-2023-36199 | HIGH | 7.5 | 0.6% | Aug 25, 2023 | An issue in skalenetwork sgxwallet v.1.9.0 and below allows an attacker to cause a denial of service via the trustedGene... |
| CVE-2023-36198 | HIGH | 7.5 | 0.6% | Aug 25, 2023 | Buffer Overflow vulnerability in skalenetwork sgxwallet v.1.9.0 allows an attacker to cause a denial of service via the ... |
| CVE-2023-24621 | HIGH | 7.8 | 0.4% | Aug 25, 2023 | An issue was discovered in Esoteric YamlBeans through 1.15. It allows untrusted deserialisation to Java classes by defau... |
| CVE-2023-40798 | HIGH | 8.8 | 0.8% | Aug 25, 2023 | In Tenda AC23 v16.03.07.45_cn, the formSetIPv6status and formGetWanParameter functions do not authenticate user input pa... |
| CVE-2023-40797 | HIGH | 8.8 | 0.8% | Aug 25, 2023 | In Tenda AC23 v16.03.07.45_cn, the sub_4781A4 function does not validate the parameters entered by the user, resulting i... |
| CVE-2023-40796 | HIGH | 7.8 | 0.8% | Aug 25, 2023 | Phicomm k2 v22.6.529.216 was discovered to contain a command injection vulnerability via the function luci.sys.call. |
| CVE-2023-40915 | HIGH | 7.5 | 0.6% | Aug 25, 2023 | Tenda AX3 v16.03.12.11 has a stack buffer overflow vulnerability detected at function form_fast_setting_wifi_set. This v... |
| CVE-2023-40801 | HIGH | 8.8 | 0.7% | Aug 25, 2023 | The sub_451784 function does not validate the parameters entered by the user, resulting in a stack overflow vulnerabilit... |
| CVE-2023-40800 | HIGH | 8.8 | 0.8% | Aug 25, 2023 | The compare_parentcontrol_time function does not authenticate user input parameters, resulting in a post-authentication ... |
| CVE-2023-4478 | HIGH | 8.2 | 0.4% | Aug 25, 2023 | Mattermost fails to restrict which parameters' values it takes from the request during signup allowing an attacker to re... |
| CVE-2023-25649 | HIGH | 8.8 | 1.6% | Aug 25, 2023 | There is a command injection vulnerability in a mobile internet product of ZTE. Due to insufficient validation of SET_D... |
| CVE-2023-32756 | HIGH | 7.5 | 0.9% | Aug 25, 2023 | e-Excellence U-Office Force has a path traversal vulnerability within its file uploading and downloading functions. An ... |
| CVE-2023-41173 | HIGH | 7.5 | 0.6% | Aug 25, 2023 | AdGuard DNS before 2.2 allows remote attackers to cause a denial of service via malformed UDP packets. |
| CVE-2023-40599 | HIGH | 7.5 | 0.7% | Aug 25, 2023 | Regular expression Denial-of-Service (ReDoS) exists in multiple add-ons for Mailform Pro CGI 4.3.1.3 and earlier, which ... |
| CVE-2023-40022 | HIGH | 7.8 | 0.3% | Aug 24, 2023 | Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.6.0 and prior are vulnerable to ... |
| CVE-2023-40017 | HIGH | 7.5 | 0.6% | Aug 24, 2023 | GeoNode is an open source platform that facilitates the creation, sharing, and collaborative use of geospatial data. In ... |
| CVE-2023-37469 | HIGH | 8.8 | 1.3% | Aug 24, 2023 | CasaOS is an open-source personal cloud system. Prior to version 0.4.4, if an authenticated user using CasaOS is able to... |
| CVE-2023-32079 | HIGH | 8.8 | 0.7% | Aug 24, 2023 | Netmaker makes networks with WireGuard. A Mass assignment vulnerability was found in versions prior to 0.17.1 and 0.18.6... |
| CVE-2023-32078 | HIGH | 7.5 | 0.6% | Aug 24, 2023 | Netmaker makes networks with WireGuard. An Insecure Direct Object Reference (IDOR) vulnerability was found in versions p... |
| CVE-2023-32077 | HIGH | 7.5 | 3.1% | Aug 24, 2023 | Netmaker makes networks with WireGuard. Prior to versions 0.17.1 and 0.18.6, hardcoded DNS key usage has been found in N... |
| CVE-2023-4420 | HIGH | 7.4 | 0.2% | Aug 24, 2023 | A remote unprivileged attacker can intercept the communication via e.g. Man-In-The-Middle, due to the absence of Transpo... |
| CVE-2023-4419 | HIGH | 8.8 | 0.7% | Aug 24, 2023 | The LMS5xx uses hard-coded credentials, which potentially allow low-skilled unauthorized remote attackers to reconfigure... |
| CVE-2023-4418 | HIGH | 7.5 | 0.7% | Aug 24, 2023 | A remote unprivileged attacker can sent multiple packages to the LMS5xx to disrupt its availability through a TCP SYN-ba... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now