2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-48345 | MEDIUM | 5.5 | 0.1% | Jan 18, 2024 | In video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local deni... |
| CVE-2023-48344 | MEDIUM | 5.5 | 0.1% | Jan 18, 2024 | In video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local deni... |
| CVE-2023-48343 | MEDIUM | 5.5 | 0.1% | Jan 18, 2024 | In video decoder, there is a possible out of bounds write due to improper input validation. This could lead to local den... |
| CVE-2023-48342 | MEDIUM | 4.4 | 0.1% | Jan 18, 2024 | In media service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial... |
| CVE-2023-48341 | MEDIUM | 5.5 | 0.1% | Jan 18, 2024 | In video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local deni... |
| CVE-2023-48340 | MEDIUM | 5.5 | 0.1% | Jan 18, 2024 | In video decoder, there is a possible out of bounds write due to improper input validation. This could lead to local den... |
| CVE-2023-48339 | MEDIUM | 4.4 | 0.1% | Jan 18, 2024 | In jpg driver, there is a possible missing permission check. This could lead to local information disclosure with System... |
| CVE-2023-6184 | HIGH | 7.2 | 46.6% | Jan 18, 2024 | Cross SiteScripting vulnerability in Citrix Session Recording allows attacker to perform Cross Site Scripting |
| CVE-2023-6340 | MEDIUM | 5.5 | 0.2% | Jan 18, 2024 | SonicWall Capture Client version 3.7.10, NetExtender client version 10.2.337 and earlier versions are installed with sfp... |
| CVE-2023-6549 | HIGH | 7.5 | 57.6% | Jan 17, 2024 | Improper Restriction of Operations within the Bounds of a Memory Buffer in NetScaler ADC and NetScaler Gateway allows Un... |
| CVE-2023-5914 | MEDIUM | 6.1 | 73.1% | Jan 17, 2024 | Cross-site scripting (XSS) |
| CVE-2023-6548 | HIGH | 8.8 | 3.2% | Jan 17, 2024 | Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with... |
| CVE-2023-48858 | MEDIUM | 6.1 | 0.5% | Jan 17, 2024 | A Cross-site scripting (XSS) vulnerability in login page php code in Armex ABO.CMS 5.9 allows remote attackers to inject... |
| CVE-2023-44077 | CRITICAL | 9.8 | 0.4% | Jan 17, 2024 | Studio Network Solutions ShareBrowser before 7.0 on macOS mishandles signature verification, aka PMP-2636. |
| CVE-2023-7031 | MEDIUM | 4.3 | 0.3% | Jan 17, 2024 | Insecure Direct Object Reference vulnerabilities were discovered in the Avaya Aura Experience Portal Manager which may a... |
| CVE-2023-50950 | MEDIUM | 5.3 | 0.4% | Jan 17, 2024 | IBM QRadar SIEM 7.5 could disclose sensitive email information in responses from offense rules. IBM X-Force ID: 275709... |
| CVE-2023-23896 | HIGH | 8.8 | 0.5% | Jan 17, 2024 | Missing Authorization vulnerability in MyThemeShop URL Shortener by MyThemeShop.This issue affects URL Shortener by MyTh... |
| CVE-2023-23882 | MEDIUM | 4.3 | 0.3% | Jan 17, 2024 | Missing Authorization vulnerability in Brainstorm Force Ultimate Addons for Beaver Builder – Lite.This issue affects Ult... |
| CVE-2023-20271 | MEDIUM | 6.5 | 0.5% | Jan 17, 2024 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Netwo... |
| CVE-2023-20260 | MEDIUM | 6.7 | 0.2% | Jan 17, 2024 | A vulnerability in the application CLI of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager coul... |
| CVE-2023-20258 | HIGH | 7.2 | 0.7% | Jan 17, 2024 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an authenticated, remote... |
| CVE-2023-20257 | MEDIUM | 4.8 | 0.4% | Jan 17, 2024 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an authenticated, remote... |
| CVE-2023-34379 | MEDIUM | 4.3 | 0.4% | Jan 17, 2024 | Missing Authorization vulnerability in MagneticOne Cart2Cart: Magento to WooCommerce Migration.This issue affects Cart2C... |
| CVE-2023-5041 | HIGH | 8.8 | 0.9% | Jan 17, 2024 | The Track The Click WordPress plugin before 0.3.12 does not properly sanitize query parameters to the stats REST endpoin... |
| CVE-2023-5006 | MEDIUM | 6.5 | 0.3% | Jan 17, 2024 | The WP Discord Invite WordPress plugin before 2.5.1 does not protect some of its actions against CSRF attacks, allowing ... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now