2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-29447 | MEDIUM | 5.3 | 0.3% | Jan 10, 2024 | An insufficiently protected credentials vulnerability in KEPServerEX could allow an adversary to capture user credential... |
| CVE-2023-29446 | MEDIUM | 4.7 | 0.2% | Jan 10, 2024 | An improper input validation vulnerability has been discovered that could allow an adversary to inject a UNC path via a ... |
| CVE-2023-29445 | HIGH | 7.8 | 0.2% | Jan 10, 2024 | An uncontrolled search path element vulnerability (DLL hijacking) has been discovered that could allow a locally authent... |
| CVE-2023-51195 | — | — | — | Jan 10, 2024 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2023-31488 | CRITICAL | 9.8 | 0.7% | Jan 10, 2024 | Hyland Perceptive Filters releases before 2023-12-08 (e.g., 11.4.0.2647), as used in Cisco IronPort Email Security Appli... |
| CVE-2023-50916 | HIGH | 7.2 | 4.6% | Jan 10, 2024 | Kyocera Device Manager before 3.1.1213.0 allows NTLM credential exposure during UNC path authentication via a crafted ch... |
| CVE-2023-48783 | MEDIUM | 5.4 | 22.2% | Jan 10, 2024 | An Authorization Bypass Through User-Controlled Key vulnerability [CWE-639] affecting PortiPortal version 7.2.1 and belo... |
| CVE-2023-46712 | HIGH | 8.8 | 0.7% | Jan 10, 2024 | A improper access control in Fortinet FortiPortal version 7.0.0 through 7.0.6, Fortinet FortiPortal version 7.2.0 throug... |
| CVE-2023-44250 | HIGH | 8.8 | 0.9% | Jan 10, 2024 | An improper privilege management vulnerability [CWE-269] in a Fortinet FortiOS HA cluster version 7.4.0 through 7.4.1 an... |
| CVE-2023-37934 | MEDIUM | 6.5 | 0.6% | Jan 10, 2024 | An allocation of resources without limits or throttling vulnerability [CWE-770] in FortiPAM 1.0 all versions allows an a... |
| CVE-2023-37932 | MEDIUM | 6.5 | 0.6% | Jan 10, 2024 | An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability [CWE-22] in FortiVoiceEn... |
| CVE-2023-29444 | HIGH | 7.3 | 0.2% | Jan 10, 2024 | An uncontrolled search path element vulnerability (DLL hijacking) has been discovered that could allow a locally authent... |
| CVE-2023-51970 | CRITICAL | 9.8 | 0.7% | Jan 10, 2024 | Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function formSetIptv. |
| CVE-2023-51969 | CRITICAL | 9.8 | 0.7% | Jan 10, 2024 | Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function getIptvInfo. |
| CVE-2023-51968 | CRITICAL | 9.8 | 0.7% | Jan 10, 2024 | Tenda AX1803 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function getIptvInfo. |
| CVE-2023-51967 | CRITICAL | 9.8 | 0.7% | Jan 10, 2024 | Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.port parameter in the function getIptvInfo. |
| CVE-2023-51962 | CRITICAL | 9.8 | 0.7% | Jan 10, 2024 | Tenda AX1803 v1.0.0.1 contains a stack overflow via the iptv.stb.mode parameter in the function setIptvInfo. |
| CVE-2023-50172 | MEDIUM | 5.3 | 0.8% | Jan 10, 2024 | A recovery notification bypass vulnerability exists in the userRecoverPass.php captcha validation functionality of WWBN ... |
| CVE-2023-49864 | MEDIUM | 6.5 | 1.1% | Jan 10, 2024 | An information disclosure vulnerability exists in the aVideoEncoderReceiveImage.json.php image upload functionality of W... |
| CVE-2023-49863 | MEDIUM | 6.5 | 1.1% | Jan 10, 2024 | An information disclosure vulnerability exists in the aVideoEncoderReceiveImage.json.php image upload functionality of W... |
| CVE-2023-49862 | MEDIUM | 6.5 | 1.1% | Jan 10, 2024 | An information disclosure vulnerability exists in the aVideoEncoderReceiveImage.json.php image upload functionality of W... |
| CVE-2023-49810 | MEDIUM | 6.5 | 0.7% | Jan 10, 2024 | A login attempt restriction bypass vulnerability exists in the checkLoginAttempts functionality of WWBN AVideo dev maste... |
| CVE-2023-49738 | HIGH | 7.5 | 1.3% | Jan 10, 2024 | An information disclosure vulnerability exists in the image404Raw.php functionality of WWBN AVideo dev master commit 15f... |
| CVE-2023-49715 | HIGH | 8.8 | 1.4% | Jan 10, 2024 | A unrestricted php file upload vulnerability exists in the import.json.php temporary copy functionality of WWBN AVideo d... |
| CVE-2023-49599 | CRITICAL | 9.8 | 1.0% | Jan 10, 2024 | An insufficient entropy vulnerability exists in the salt generation functionality of WWBN AVideo dev master commit 15fed... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now