2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-51806 | MEDIUM | 5.4 | 0.5% | Jan 12, 2024 | File Upload vulnerability in Ujcms v.8.0.2 allows a local attacker to execute arbitrary code via a crafted file. |
| CVE-2023-51790 | MEDIUM | 6.1 | 0.5% | Jan 12, 2024 | Cross Site Scripting vulnerability in piwigo v.14.0.0 allows a remote attacker to obtain sensitive information via the l... |
| CVE-2023-49569 | CRITICAL | 9.8 | 1.5% | Jan 12, 2024 | A path traversal vulnerability was discovered in go-git versions prior to v5.11. This vulnerability allows an attacker t... |
| CVE-2023-49568 | HIGH | 7.5 | 0.7% | Jan 12, 2024 | A denial of service (DoS) vulnerability was discovered in go-git versions prior to v5.11. This vulnerability allows an a... |
| CVE-2023-48909 | HIGH | 8.8 | 0.9% | Jan 12, 2024 | An issue was discovered in Jave2 version 3.3.1, allows attackers to execute arbitrary code via the FFmpeg function. |
| CVE-2023-30016 | CRITICAL | 9.8 | 1.0% | Jan 12, 2024 | SQL Injection vulnerability in oretnom23 Judging Management System v1.0, allows remote attackers to execute arbitrary co... |
| CVE-2023-30015 | CRITICAL | 9.8 | 1.0% | Jan 12, 2024 | SQL Injection vulnerability in oretnom23 Judging Management System v1.0, allows remote attackers to execute arbitrary co... |
| CVE-2023-30014 | CRITICAL | 9.8 | 1.0% | Jan 12, 2024 | SQL Injection vulnerability in oretnom23 Judging Management System v1.0, allows remote attackers to execute arbitrary co... |
| CVE-2023-6740 | HIGH | 7.8 | 0.2% | Jan 12, 2024 | Privilege escalation in jar_signature agent plugin in Checkmk before 2.2.0p18, 2.1.0p38 and 2.0.0p39 allows local user t... |
| CVE-2023-6735 | HIGH | 7.8 | 0.3% | Jan 12, 2024 | Privilege escalation in mk_tsm agent plugin in Checkmk before 2.2.0p18, 2.1.0p38 and 2.0.0p39 allows local user to escal... |
| CVE-2023-50920 | MEDIUM | 5.5 | 0.2% | Jan 12, 2024 | An issue was discovered on GL.iNet devices before version 4.5.0. They assign the same session ID after each user reboot,... |
| CVE-2023-50919 | CRITICAL | 9.8 | 47.8% | Jan 12, 2024 | An issue was discovered on GL.iNet devices before version 4.5.0. There is an NGINX authentication bypass via Lua string ... |
| CVE-2023-40362 | MEDIUM | 4.3 | 0.7% | Jan 12, 2024 | An issue was discovered in CentralSquare Click2Gov Building Permit before October 2023. Lack of access control protectio... |
| CVE-2023-31211 | MEDIUM | 6.5 | 0.5% | Jan 12, 2024 | Insufficient authentication flow in Checkmk before 2.2.0p18, 2.1.0p38 and 2.0.0p39 allows attacker to use locked credent... |
| CVE-2023-37117 | CRITICAL | 9.8 | 0.9% | Jan 12, 2024 | A heap-use-after-free vulnerability was found in live555 version 2023.05.10 while handling the SETUP. |
| CVE-2023-34061 | HIGH | 7.5 | 0.5% | Jan 12, 2024 | Cloud Foundry routing release versions from v0.163.0 to v0.283.0 are vulnerable to a DOS attack. An unauthenticated att... |
| CVE-2023-6040 | HIGH | 7.8 | 0.3% | Jan 12, 2024 | An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables:... |
| CVE-2023-52339 | MEDIUM | 6.5 | 1.1% | Jan 12, 2024 | In libebml before 1.4.5, an integer overflow in MemIOCallback.cpp can occur when reading or writing. It may result in bu... |
| CVE-2023-40250 | HIGH | 8.8 | 0.6% | Jan 12, 2024 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Hancom HCell on Windows allows O... |
| CVE-2023-36842 | MEDIUM | 6.5 | 0.3% | Jan 12, 2024 | An Improper Check for Unusual or Exceptional Conditions vulnerability in Juniper DHCP Daemon (jdhcpd) of Juniper Networ... |
| CVE-2023-51350 | CRITICAL | 9.8 | 1.3% | Jan 11, 2024 | A spoofing attack in ujcms v.8.0.2 allows a remote attacker to obtain sensitive information and execute arbitrary code v... |
| CVE-2023-46474 | HIGH | 7.2 | 23.4% | Jan 11, 2024 | File Upload vulnerability PMB v.7.4.8 allows a remote attacker to execute arbitrary code and escalate privileges via a c... |
| CVE-2023-7226 | MEDIUM | 6.5 | 0.4% | Jan 11, 2024 | A vulnerability was found in meetyoucrop big-whale 1.1 and classified as critical. Affected by this issue is some unknow... |
| CVE-2023-50129 | MEDIUM | 6.5 | 0.1% | Jan 11, 2024 | Missing encryption in the NFC tags of the Flient Smart Door Lock v1.0 allows attackers to create a cloned tag via brief ... |
| CVE-2023-50128 | MEDIUM | 5.3 | 0.2% | Jan 11, 2024 | The remote keyless system of the Hozard alarm system (alarmsystemen) v1.0 sends an identical radio frequency signal for ... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now