2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-50127 | MEDIUM | 5.9 | 0.4% | Jan 11, 2024 | Hozard alarm system (Alarmsysteem) v1.0 is vulnerable to Improper Authentication. Commands sent via the SMS functionalit... |
| CVE-2023-50126 | MEDIUM | 6.5 | 0.1% | Jan 11, 2024 | Missing encryption in the RFID tags of the Hozard alarm system (Alarmsysteem) v1.0 allow attackers to create a cloned ta... |
| CVE-2023-50125 | MEDIUM | 5.9 | 0.4% | Jan 11, 2024 | A default engineer password set on the Hozard alarm system (Alarmsysteem) v1.0 allows an attacker to bring the alarm sys... |
| CVE-2023-50124 | MEDIUM | 6.8 | 0.4% | Jan 11, 2024 | Flient Smart Door Lock v1.0 is vulnerable to Use of Default Credentials. Due to default credentials on a debug interface... |
| CVE-2023-50123 | HIGH | 8.1 | 0.6% | Jan 11, 2024 | The number of attempts to bring the Hozard Alarm system (alarmsystemen) v1.0 to a disarmed state is not limited. This co... |
| CVE-2023-51782 | HIGH | 7 | 0.3% | Jan 11, 2024 | An issue was discovered in the Linux kernel before 6.6.8. rose_ioctl in net/rose/af_rose.c has a use-after-free because ... |
| CVE-2023-51781 | HIGH | 7 | 0.3% | Jan 11, 2024 | An issue was discovered in the Linux kernel before 6.6.8. atalk_ioctl in net/appletalk/ddp.c has a use-after-free becaus... |
| CVE-2023-51780 | HIGH | 7 | 0.5% | Jan 11, 2024 | An issue was discovered in the Linux kernel before 6.6.8. do_vcc_ioctl in net/atm/ioctl.c has a use-after-free because o... |
| CVE-2023-50671 | HIGH | 7.8 | 0.4% | Jan 11, 2024 | In exiftags 1.01, nikon_prop1 in nikon.c has a heap-based buffer overflow (write of size 28) because snprintf can write ... |
| CVE-2023-6554 | MEDIUM | 6.5 | 0.6% | Jan 11, 2024 | When access to the "admin" folder is not protected by some external authorization mechanisms e.g. Apache Basic Auth, it ... |
| CVE-2023-5118 | MEDIUM | 5.4 | 0.3% | Jan 11, 2024 | The application is vulnerable to Stored Cross-Site Scripting (XSS) in the endpoint /sofer/DocumentService.asc/SaveAnnota... |
| CVE-2023-51989 | — | — | — | Jan 11, 2024 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2025-51987. Reason: This candidate is a reservation d... |
| CVE-2023-51987 | CRITICAL | 9.8 | 0.9% | Jan 11, 2024 | D-Link DIR-822+ V1.0.2 contains a login bypass in the HNAP1 interface, which allows attackers to log in to administrator... |
| CVE-2023-51984 | CRITICAL | 9.8 | 2.0% | Jan 11, 2024 | D-Link DIR-822+ V1.0.2 was found to contain a command injection in SetStaticRouteSettings function. allows remote attack... |
| CVE-2023-6938 | MEDIUM | 5.4 | 0.3% | Jan 11, 2024 | The Oxygen Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a custom field in all versions ... |
| CVE-2023-6244 | MEDIUM | 4.3 | 0.3% | Jan 11, 2024 | The EventON - WordPress Virtual Event Calendar Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery i... |
| CVE-2023-6242 | MEDIUM | 4.3 | 0.3% | Jan 11, 2024 | The EventON - WordPress Virtual Event Calendar Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery i... |
| CVE-2023-51751 | MEDIUM | 6.8 | 0.2% | Jan 11, 2024 | ScaleFusion 10.5.2 does not properly limit users to the Edge application because Alt-F4 can be used. This is fixed in 10... |
| CVE-2023-51750 | MEDIUM | 4.6 | 0.3% | Jan 11, 2024 | ScaleFusion 10.5.2 does not properly limit users to the Edge application because file downloads can occur. NOTE: the ven... |
| CVE-2023-51749 | HIGH | 8.8 | 0.3% | Jan 11, 2024 | ScaleFusion 10.5.2 does not properly limit users to the Edge application because a search can be made from a tooltip. NO... |
| CVE-2023-51748 | HIGH | 8.8 | 0.3% | Jan 11, 2024 | ScaleFusion 10.5.2 does not properly limit users to the Edge application because Ctrl-O and Ctrl-S can be used. This is ... |
| CVE-2023-50159 | HIGH | 8.8 | 0.3% | Jan 11, 2024 | In ScaleFusion (Windows Desktop App) agent 10.5.2, Kiosk mode application restrictions can be bypassed allowing arbitrar... |
| CVE-2023-20573 | LOW | 3.2 | 0.3% | Jan 11, 2024 | A privileged attacker can prevent delivery of debug exceptions to SEV-SNP guests potentially resulting in guests not rec... |
| CVE-2023-7071 | MEDIUM | 5.4 | 0.4% | Jan 11, 2024 | The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored ... |
| CVE-2023-7070 | MEDIUM | 5.4 | 0.4% | Jan 11, 2024 | The Email Encoder – Protect Email Addresses and Phone Numbers plugin for WordPress is vulnerable to Stored Cross-Site Sc... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now