2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-51719 | MEDIUM | 5.4 | 0.4% | Jan 17, 2024 | This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied in... |
| CVE-2023-52069 | MEDIUM | 5.4 | 0.3% | Jan 17, 2024 | kodbox v1.49.04 was discovered to contain a cross-site scripting (XSS) vulnerability via the URL parameter. |
| CVE-2023-46952 | MEDIUM | 6.1 | 0.6% | Jan 17, 2024 | Cross Site Scripting vulnerability in ABO.CMS v.5.9.3 allows an attacker to execute arbitrary code via a crafted payload... |
| CVE-2023-36235 | MEDIUM | 6.5 | 0.7% | Jan 17, 2024 | An issue in webkul qloapps before v1.6.0 allows an attacker to obtain sensitive information via the id_order parameter. |
| CVE-2023-25295 | MEDIUM | 6.1 | 0.4% | Jan 17, 2024 | A Cross Site Scripting (XSS) vulnerability in evewa3ajax.php in GRUEN eVEWA3 Community 31 through 53 allows attackers to... |
| CVE-2023-49515 | MEDIUM | 4.6 | 0.4% | Jan 17, 2024 | Insecure Permissiosn vulnerability in TP Link TC70 and C200 WIFI Camera v.3 firmware v.1.3.4 and fixed in v.1.3.11 allow... |
| CVE-2023-51807 | MEDIUM | 5.4 | 0.4% | Jan 16, 2024 | Cross Site Scripting vulnerability in OFCMS v.1.14 allows a remote attacker to obtain sensitive information via a crafte... |
| CVE-2023-52068 | MEDIUM | 6.1 | 0.3% | Jan 16, 2024 | kodbox v1.43 was discovered to contain a cross-site scripting (XSS) vulnerability via the operation and login logs. |
| CVE-2023-52042 | CRITICAL | 9.8 | 0.9% | Jan 16, 2024 | An issue discovered in sub_4117F8 function in TOTOLINK X6000R V9.4.0cu.852_B20230719 allows attackers to run arbitrary c... |
| CVE-2023-39691 | CRITICAL | 9.8 | 0.6% | Jan 16, 2024 | An issue discovered in kodbox through 1.43 allows attackers to arbitrarily add Administrator accounts via crafted GET re... |
| CVE-2023-36236 | MEDIUM | 4.8 | 0.6% | Jan 16, 2024 | Cross Site Scripting vulnerability in webkil Bagisto v.1.5.0 and before allows an attacker to execute arbitrary code via... |
| CVE-2023-21901 | HIGH | 7.4 | 0.3% | Jan 16, 2024 | Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Servic... |
| CVE-2023-48926 | MEDIUM | 5.3 | 0.3% | Jan 16, 2024 | An issue in 202 ecommerce Advanced Loyalty Program: Loyalty Points before v2.3.4 for PrestaShop allows unauthenticated a... |
| CVE-2023-6336 | HIGH | 7.8 | 0.2% | Jan 16, 2024 | Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce Access on MacOS allows Us... |
| CVE-2023-6335 | HIGH | 7.8 | 0.2% | Jan 16, 2024 | Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce Access on Windows allows ... |
| CVE-2023-6334 | HIGH | 7.8 | 0.1% | Jan 16, 2024 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in HYPR Workforce Access on Window... |
| CVE-2023-5097 | MEDIUM | 5.5 | 0.2% | Jan 16, 2024 | Improper Input Validation vulnerability in HYPR Workforce Access on Windows allows Path Traversal.This issue affects Wor... |
| CVE-2023-7234 | MEDIUM | 5.3 | 0.4% | Jan 16, 2024 | OPCUAServerToolkit will write a log message once an OPC UA client has successfully connected containing the client's se... |
| CVE-2023-52041 | CRITICAL | 9.8 | 0.9% | Jan 16, 2024 | An issue discovered in TOTOLINK X6000R V9.4.0cu.852_B20230719 allows attackers to run arbitrary code via the sub_410118 ... |
| CVE-2023-51381 | — | — | — | Jan 16, 2024 | Rejected reason: This CVE ID has been rejected or withdrawn by GitHub. |
| CVE-2023-49351 | CRITICAL | 9.8 | 0.6% | Jan 16, 2024 | A stack-based buffer overflow vulnerability in /bin/webs binary in Edimax BR6478AC V2 firmware veraion v1.23 allows atta... |
| CVE-2023-37523 | CRITICAL | 9.8 | 0.4% | Jan 16, 2024 | Missing or insecure tags in the HCL BigFix Bare OSD Metal Server WebUI version 311.19 or lower could allow an attacker t... |
| CVE-2023-22525 | — | — | — | Jan 16, 2024 | Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used. |
| CVE-2023-22520 | — | — | — | Jan 16, 2024 | Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used. |
| CVE-2023-22514 | HIGH | 7.8 | 0.4% | Jan 16, 2024 | This High severity RCE (Remote Code Execution) vulnerability was introduced in version 3.4.14 of Sourcetree for Mac and ... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now