2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-43995 | MEDIUM | 5.4 | 0.4% | Jan 24, 2024 | An issue in picot.golf mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of ... |
| CVE-2023-43994 | MEDIUM | 5.4 | 0.4% | Jan 24, 2024 | An issue in Cleaning_makotoya mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leak... |
| CVE-2023-43993 | MEDIUM | 5.4 | 0.4% | Jan 24, 2024 | An issue in smaregi_app_market mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via lea... |
| CVE-2023-43992 | MEDIUM | 5.4 | 0.4% | Jan 24, 2024 | An issue in STOCKMAN GROUP mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage... |
| CVE-2023-43991 | MEDIUM | 5.4 | 0.4% | Jan 24, 2024 | An issue in PRIMA CLINIC mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage o... |
| CVE-2023-43990 | MEDIUM | 5.4 | 0.4% | Jan 24, 2024 | An issue in cherub-hair mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of... |
| CVE-2023-43989 | MEDIUM | 5.4 | 0.4% | Jan 24, 2024 | An issue in mokumoku chohu mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage... |
| CVE-2023-43988 | MEDIUM | 5.4 | 0.4% | Jan 24, 2024 | An issue in nature fitness saijo mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via l... |
| CVE-2023-51711 | HIGH | 7.8 | 0.2% | Jan 24, 2024 | An issue was discovered in Regify Regipay Client for Windows version 4.5.1.0 allows DLL hijacking: a user can trigger th... |
| CVE-2023-43317 | HIGH | 8.8 | 1.1% | Jan 24, 2024 | An issue in Coign CRM Portal v.06.06 allows a remote attacker to escalate privileges via the userPermissionsList paramet... |
| CVE-2023-31037 | HIGH | 7.2 | 0.7% | Jan 24, 2024 | NVIDIA Bluefield 2 and Bluefield 3 DPU BMC contains a vulnerability in ipmitool, where a root user may cause code injec... |
| CVE-2023-47115 | MEDIUM | 5.4 | 1.4% | Jan 23, 2024 | Label Studio is an a popular open source data labeling tool. Versions prior to 1.9.2 have a cross-site scripting (XSS) v... |
| CVE-2023-35837 | CRITICAL | 9.8 | 1.0% | Jan 23, 2024 | An issue was discovered in SolaX Pocket WiFi 3 through 3.001.02. Authentication for web interface is completed via an un... |
| CVE-2023-35836 | MEDIUM | 6.5 | 0.3% | Jan 23, 2024 | An issue was discovered in SolaX Pocket WiFi 3 through 3.001.02. An attacker within RF range can obtain a cleartext copy... |
| CVE-2023-35835 | CRITICAL | 9.8 | 0.5% | Jan 23, 2024 | An issue was discovered in SolaX Pocket WiFi 3 through 3.001.02. The device provides a WiFi access point for initial con... |
| CVE-2023-7237 | HIGH | 7.5 | 0.3% | Jan 23, 2024 | Lantronix XPort sends weakly encoded credentials within web request headers. |
| CVE-2023-51208 | — | — | — | Jan 23, 2024 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2023-51201 | — | — | — | Jan 23, 2024 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2023-51199 | — | — | — | Jan 23, 2024 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2023-36177 | CRITICAL | 9.8 | 28.9% | Jan 23, 2024 | An issue was discovered in badaix Snapcast version 0.27.0, allows remote attackers to execute arbitrary code and gain se... |
| CVE-2023-31654 | CRITICAL | 9.8 | 0.6% | Jan 23, 2024 | Redis raft master-1b8bd86 to master-7b46079 was discovered to contain an ODR violation via the component hiredisAllocFns... |
| CVE-2023-52338 | HIGH | 7.8 | 0.3% | Jan 23, 2024 | A link following vulnerability in the Trend Micro Deep Security 20.0 and Trend Micro Cloud One - Endpoint and Workload S... |
| CVE-2023-52337 | HIGH | 7.8 | 0.2% | Jan 23, 2024 | An improper access control vulnerability in Trend Micro Deep Security 20.0 and Trend Micro Cloud One - Endpoint and Work... |
| CVE-2023-52331 | HIGH | 7.1 | 0.6% | Jan 23, 2024 | A post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central could allow an attacke... |
| CVE-2023-52330 | MEDIUM | 6.1 | 2.4% | Jan 23, 2024 | A cross-site scripting vulnerability in Trend Micro Apex Central could allow a remote attacker to execute arbitrary code... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now