2023 CVE Vulnerabilities

31,509 CVEs published in 2023.

CVE IDSeverityCVSSDescription
CVE-2023-48242MEDIUM6.5The vulnerability allows an authenticated remote attacker to download arbitrary files in all paths of the system under t...
CVE-2023-51252MEDIUM5.4PublicCMS 4.0 is vulnerable to Cross Site Scripting (XSS). Because files can be uploaded and online preview function is ...
CVE-2023-50120MEDIUM5.5MP4Box GPAC version 2.3-DEV-rev636-gfbd7e13aa-master was discovered to contain an infinite loop in the function av1_uvlc...
CVE-2023-49619LOW3.1Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache Answ...
CVE-2023-49471HIGH8.8Blind Server-Side Request Forgery (SSRF) vulnerability in karlomikus Bar Assistant before version 3.2.0 does not validat...
CVE-2023-49427HIGH7.5Buffer Overflow vulnerability in Tenda AX12 V22.03.01.46, allows remote attackers to cause a denial of service (DoS) via...
CVE-2023-49394MEDIUM6.1Zentao versions 4.1.3 and before has a URL redirect vulnerability, which prevents the system from functioning properly.
CVE-2023-48864HIGH7.5SEMCMS v4.8 was discovered to contain a SQL injection vulnerability via the languageID parameter in /web_inc.php.
CVE-2023-41603MEDIUM5.3D-Link R15 before v1.08.02 was discovered to contain no firewall restrictions for IPv6 traffic. This allows attackers to...
CVE-2023-41781MEDIUM6.1 There is a Cross-site scripting (XSS)  vulnerability in ZTE MF258. Due to insufficient input validation of SMS interfac...
CVE-2023-31446CRITICAL9.8In Cassia Gateway firmware XC1000_2.1.1.2303082218 and XC2000_2.1.1.2303090947, the queueUrl parameter in /bypass/config...
CVE-2023-47997MEDIUM6.5An issue discovered in BitmapAccess.cpp::FreeImage_AllocateBitmap in FreeImage 3.18.0 leads to an infinite loop and allo...
CVE-2023-47996MEDIUM6.5An integer overflow vulnerability in Exif.cpp::jpeg_read_exif_dir in FreeImage 3.18.0 allows attackers to obtain informa...
CVE-2023-47995MEDIUM6.5Memory Allocation with Excessive Size Value discovered in BitmapAccess.cpp::FreeImage_AllocateBitmap in FreeImage 3.18.0...
CVE-2023-47994HIGH8.8An integer overflow vulnerability in LoadPixelDataRLE4 function in PluginBMP.cpp in Freeimage 3.18.0 allows attackers to...
CVE-2023-47993MEDIUM6.5A Buffer out-of-bound read vulnerability in Exif.cpp::ReadInt32 in FreeImage 3.18.0 allows attackers to cause a denial-o...
CVE-2023-47992HIGH8.8An integer overflow vulnerability in FreeImageIO.cpp::_MemoryReadProc in FreeImage 3.18.0 allows attackers to obtain sen...
CVE-2023-3043HIGH8.8 AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack-based buffer overflow via an ...
CVE-2023-37297HIGH8.8 AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent netw...
CVE-2023-37296HIGH8.8 AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack memory corruption via an adjacent n...
CVE-2023-37295HIGH8.8 AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent ...
CVE-2023-37294HIGH8.8 AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacen...
CVE-2023-37293HIGH8.8AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a stack-based buffer overflow via an adjacent ...
CVE-2023-34333HIGH7.8 AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause an untrusted pointer to dereference...
CVE-2023-34332HIGH7.8 AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause an untrusted pointer to dereference...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now