2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-6552 | MEDIUM | 6.1 | 0.5% | Jan 8, 2024 | Lack of "current" GET parameter validation during the action of changing a language leads to an open redirect vulnerabil... |
| CVE-2023-6921 | CRITICAL | 9.1 | 0.7% | Jan 8, 2024 | Blind SQL Injection vulnerability in PrestaShow Google Integrator (PrestaShop addon) allows for data extraction and modi... |
| CVE-2023-5091 | MEDIUM | 5.5 | 0.2% | Jan 8, 2024 | Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver allows a local non-privileged user to make improper GP... |
| CVE-2023-41710 | MEDIUM | 5.4 | 0.4% | Jan 8, 2024 | User-defined script code could be stored for a upsell related shop URL. This code was not correctly sanitized when addin... |
| CVE-2023-29052 | MEDIUM | 5.4 | 0.4% | Jan 8, 2024 | Users were able to define disclaimer texts for an upsell shop dialog that would contain script code that was not sanitiz... |
| CVE-2023-29051 | HIGH | 8.1 | 0.5% | Jan 8, 2024 | User-defined OXMF templates could be used to access a limited part of the internal OX App Suite Java API. The existing s... |
| CVE-2023-29050 | CRITICAL | 9.6 | 1.7% | Jan 8, 2024 | The optional "LDAP contacts provider" could be abused by privileged users to inject LDAP filter strings that allow to ac... |
| CVE-2023-29049 | MEDIUM | 6.1 | 0.6% | Jan 8, 2024 | The "upsell" widget at the portal page could be abused to inject arbitrary script code. Attackers that manage to lure us... |
| CVE-2023-29048 | HIGH | 8.8 | 1.3% | Jan 8, 2024 | A component for parsing OXMF templates could be abused to execute arbitrary system commands that would be executed as th... |
| CVE-2023-47140 | HIGH | 8.1 | 0.2% | Jan 8, 2024 | IBM CICS Transaction Gateway 9.3 could allow a user to transfer or view files due to improper access controls. |
| CVE-2023-7215 | MEDIUM | 6.1 | 0.5% | Jan 8, 2024 | A vulnerability, which was classified as problematic, has been found in Chanzhaoyu chatgpt-web 2.11.1. This issue affect... |
| CVE-2023-50948 | CRITICAL | 9.8 | 0.5% | Jan 8, 2024 | IBM Storage Fusion HCI 2.1.0 through 2.6.1 contains hard-coded credentials, such as a password or cryptographic key, whi... |
| CVE-2023-7214 | HIGH | 8.8 | 0.9% | Jan 7, 2024 | A vulnerability, which was classified as critical, has been found in Totolink N350RT 9.3.5u.6139_B20201216. Affected by ... |
| CVE-2023-7213 | HIGH | 8.8 | 0.9% | Jan 7, 2024 | A vulnerability classified as critical was found in Totolink N350RT 9.3.5u.6139_B20201216. Affected by this vulnerabilit... |
| CVE-2023-47145 | HIGH | 7.8 | 0.2% | Jan 7, 2024 | IBM Db2 for Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 could allow a local user to escalate their privil... |
| CVE-2023-7212 | CRITICAL | 9.8 | 0.6% | Jan 7, 2024 | A vulnerability classified as critical has been found in DeDeCMS up to 5.7.112. Affected is an unknown function of the f... |
| CVE-2023-7211 | HIGH | 8.1 | 0.9% | Jan 7, 2024 | A vulnerability was found in Uniway Router 2.0. It has been declared as critical. This vulnerability affects unknown cod... |
| CVE-2023-7210 | CRITICAL | 9.8 | 1.0% | Jan 7, 2024 | A vulnerability was found in OneNav up to 0.9.33. It has been classified as critical. This affects an unknown part of th... |
| CVE-2023-7209 | HIGH | 7.5 | 1.3% | Jan 7, 2024 | A vulnerability was found in Uniway Router up to 2.0. It has been rated as critical. Affected by this issue is some unkn... |
| CVE-2023-7208 | CRITICAL | 9.8 | 1.7% | Jan 7, 2024 | A vulnerability classified as critical was found in Totolink X2000R_V2 2.0.0-B20230727.10434. This vulnerability affects... |
| CVE-2023-51441 | HIGH | 7.2 | 1.2% | Jan 6, 2024 | ** UNSUPPORTED WHEN ASSIGNED ** Improper Input Validation vulnerability in Apache Axis allowed users with access to the ... |
| CVE-2023-6801 | MEDIUM | 5.4 | 0.3% | Jan 6, 2024 | The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is... |
| CVE-2023-6798 | MEDIUM | 5.4 | 0.3% | Jan 6, 2024 | The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is... |
| CVE-2023-50121 | MEDIUM | 5.7 | 0.4% | Jan 6, 2024 | Autel EVO NANO drone flight control firmware version 1.6.5 is vulnerable to denial of service (DoS). |
| CVE-2023-46953 | CRITICAL | 9.8 | 0.8% | Jan 6, 2024 | SQL Injection vulnerability in ABO.CMS v.5.9.3, allows remote attackers to execute arbitrary code via the d parameter in... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now