2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-50963 | MEDIUM | 5.4 | 0.3% | Jan 19, 2024 | IBM Storage Defender - Data Protect 1.0.0 through 1.4.1 is vulnerable to HTTP header injection, caused by improper valid... |
| CVE-2023-47718 | HIGH | 8.8 | 0.3% | Jan 19, 2024 | IBM Maximo Asset Management 7.6.1.3 and Manage Component 8.10 through 8.11 is vulnerable to cross-site request forgery w... |
| CVE-2023-32337 | MEDIUM | 5.4 | 0.3% | Jan 19, 2024 | IBM Maximo Spatial Asset Management 8.10 is vulnerable to server-side request forgery (SSRF). This may allow an authenti... |
| CVE-2023-40683 | HIGH | 8.8 | 0.7% | Jan 19, 2024 | IBM OpenPages with Watson 8.3 and 9.0 could allow remote attacker to bypass security restrictions, caused by insufficien... |
| CVE-2023-38738 | HIGH | 8.1 | 0.5% | Jan 19, 2024 | IBM OpenPages with Watson 8.3 and 9.0 could provide weaker than expected security in a OpenPages environment using Nati... |
| CVE-2023-35020 | MEDIUM | 5.3 | 0.5% | Jan 19, 2024 | IBM Sterling Control Center 6.3.0 could allow a remote attacker to traverse directories on the system. An attacker could... |
| CVE-2023-5131 | HIGH | 8.8 | 0.8% | Jan 18, 2024 | A heap buffer-overflow exists in Delta Electronics ISPSoft. An anonymous attacker can exploit this vulnerability by enti... |
| CVE-2023-5130 | HIGH | 8.8 | 0.6% | Jan 18, 2024 | A buffer overflow vulnerability exists in Delta Electronics WPLSoft. An anonymous attacker can exploit this vulnerabilit... |
| CVE-2023-50614 | HIGH | 7.5 | 0.4% | Jan 18, 2024 | An issue discovereed in EBYTE E880-IR01-V1.1 allows an attacker to obtain sensitive information via crafted POST request... |
| CVE-2023-43824 | HIGH | 7.8 | 1.0% | Jan 18, 2024 | A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wTitleTex... |
| CVE-2023-43823 | HIGH | 7.8 | 1.0% | Jan 18, 2024 | A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wTTitleLe... |
| CVE-2023-43822 | HIGH | 7.8 | 0.8% | Jan 18, 2024 | A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wLogTitle... |
| CVE-2023-43821 | HIGH | 7.8 | 1.0% | Jan 18, 2024 | A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wLogTitle... |
| CVE-2023-43820 | HIGH | 7.8 | 1.0% | Jan 18, 2024 | A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wLogTitle... |
| CVE-2023-43819 | HIGH | 7.8 | 1.0% | Jan 18, 2024 | A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the InitialMa... |
| CVE-2023-43818 | HIGH | 7.8 | 1.0% | Jan 18, 2024 | A buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft. A remote, unauthenticated attacker ca... |
| CVE-2023-43817 | HIGH | 7.8 | 0.5% | Jan 18, 2024 | A buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft version 2 when parsing the wMailConten... |
| CVE-2023-43816 | HIGH | 7.8 | 0.4% | Jan 18, 2024 | A buffer overflow vulnerability exists in Delta Electronics Delta Industrial Automation DOPSoft version 2 when parsing t... |
| CVE-2023-43815 | HIGH | 7.8 | 0.5% | Jan 18, 2024 | A buffer overflow vulnerability exists in Delta Electronics Delta Industrial Automation DOPSoft version 2 when parsing t... |
| CVE-2023-51258 | MEDIUM | 5.5 | 0.3% | Jan 18, 2024 | A memory leak issue discovered in YASM v.1.3.0 allows a local attacker to cause a denial of service via the new_Token fu... |
| CVE-2023-51217 | HIGH | 8.8 | 1.2% | Jan 18, 2024 | An issue discovered in TenghuTOS TWS-200 firmware version:V4.0-201809201424 allows a remote attacker to execute arbitrar... |
| CVE-2023-47092 | — | — | — | Jan 18, 2024 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further inv... |
| CVE-2023-49943 | MEDIUM | 5.4 | 1.8% | Jan 18, 2024 | Zoho ManageEngine ServiceDesk Plus MSP before 14504 allows stored XSS (by a low-privileged technician) via a task's name... |
| CVE-2023-34348 | HIGH | 7.5 | 0.6% | Jan 18, 2024 | AVEVA PI Server versions 2023 and 2018 SP3 P05 and prior contain a vulnerability that could allow an unauthenticated us... |
| CVE-2023-31274 | MEDIUM | 5.3 | 0.5% | Jan 18, 2024 | AVEVA PI Server versions 2023 and 2018 SP3 P05 and prior contain a vulnerability that could allow an unauthenticated us... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now