2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-41177 | MEDIUM | 6.1 | 0.5% | Jan 23, 2024 | Reflected cross-site scripting (XSS) vulnerabilities in Trend Micro Mobile Security (Enterprise) could allow an exploit ... |
| CVE-2023-41176 | MEDIUM | 6.1 | 1.8% | Jan 23, 2024 | Reflected cross-site scripting (XSS) vulnerabilities in Trend Micro Mobile Security (Enterprise) could allow an exploit ... |
| CVE-2023-38627 | MEDIUM | 5.4 | 0.4% | Jan 23, 2024 | A post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central 2019 (lower than build... |
| CVE-2023-38626 | MEDIUM | 5.4 | 0.4% | Jan 23, 2024 | A post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central 2019 (lower than build... |
| CVE-2023-38625 | MEDIUM | 5.4 | 0.4% | Jan 23, 2024 | A post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central 2019 (lower than build... |
| CVE-2023-38624 | MEDIUM | 5.4 | 0.4% | Jan 23, 2024 | A post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central 2019 (lower than build... |
| CVE-2023-7238 | MEDIUM | 6.1 | 0.3% | Jan 23, 2024 | A XSS payload can be uploaded as a DICOM study and when a user tries to view the infected study inside the Osimis WebVi... |
| CVE-2023-6926 | HIGH | 7.8 | 0.5% | Jan 23, 2024 | There is an OS command injection vulnerability in Crestron AM-300 firmware version 1.4499.00018 which may enable a user... |
| CVE-2023-46889 | MEDIUM | 5.7 | 0.2% | Jan 23, 2024 | Meross MSH30Q 4.5.23 is vulnerable to Cleartext Transmission of Sensitive Information. During the device setup phase, th... |
| CVE-2023-42144 | MEDIUM | 5.5 | 0.1% | Jan 23, 2024 | Cleartext Transmission during initial setup in Shelly TRV 20220811-15234 v.2.1.8 allows a local attacker to obtain the W... |
| CVE-2023-42143 | MEDIUM | 5.4 | 0.2% | Jan 23, 2024 | Missing Integrity Check in Shelly TRV 20220811-152343/v2.1.8@5afc928c allows malicious users to create a backdoor by red... |
| CVE-2023-51210 | CRITICAL | 9.8 | 1.1% | Jan 23, 2024 | SQL injection vulnerability in Webkul Bundle Product 6.0.1 allows a remote attacker to execute arbitrary code via the id... |
| CVE-2023-6573 | MEDIUM | 5.5 | 0.2% | Jan 23, 2024 | HPE OneView may have a missing passphrase during restore. |
| CVE-2023-45889 | MEDIUM | 6.1 | 0.4% | Jan 23, 2024 | A Universal Cross Site Scripting (UXSS) vulnerability in ClassLink OneClick Extension through 10.8 allows remote attacke... |
| CVE-2023-50275 | HIGH | 7.5 | 1.0% | Jan 23, 2024 | HPE OneView may allow clusterService Authentication Bypass resulting in denial of service. |
| CVE-2023-50274 | HIGH | 7.8 | 0.7% | Jan 23, 2024 | HPE OneView may allow command injection with local privilege escalation. |
| CVE-2023-49657 | MEDIUM | 5.4 | 0.8% | Jan 23, 2024 | A stored cross-site scripting (XSS) vulnerability exists in Apache Superset before 3.0.3. An authenticated attacker with... |
| CVE-2023-49783 | MEDIUM | 4.3 | 0.3% | Jan 23, 2024 | Silverstripe Admin provides a basic management interface for the Silverstripe Framework. In versions on the 1.x branch p... |
| CVE-2023-48714 | MEDIUM | 4.3 | 0.4% | Jan 23, 2024 | Silverstripe Framework is the framework that forms the base of the Silverstripe content management system. Prior to vers... |
| CVE-2023-44401 | MEDIUM | 5.3 | 0.4% | Jan 23, 2024 | The Silverstripe CMS GraphQL Server serves Silverstripe data as GraphQL representations. In versions 4.0.0 prior to 4.3.... |
| CVE-2023-51043 | HIGH | 7 | 0.2% | Jan 23, 2024 | In the Linux kernel before 6.4.5, drivers/gpu/drm/drm_atomic.c has a use-after-free during a race condition between a no... |
| CVE-2023-51042 | HIGH | 7.8 | 0.3% | Jan 23, 2024 | In the Linux kernel before 6.4.12, amdgpu_cs_wait_all_fences in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c has a fence use-a... |
| CVE-2023-46343 | MEDIUM | 5.5 | 0.2% | Jan 23, 2024 | In the Linux kernel before 6.5.9, there is a NULL pointer dereference in send_acknowledge in net/nfc/nci/spi.c. |
| CVE-2023-39197 | HIGH | 7.5 | 1.0% | Jan 23, 2024 | An out-of-bounds read vulnerability was found in Netfilter Connection Tracking (conntrack) in the Linux kernel. This fla... |
| CVE-2023-42937 | MEDIUM | 5.5 | 0.3% | Jan 23, 2024 | A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 16.7.5 an... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now