2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-43481 | CRITICAL | 9.8 | 1.1% | Dec 27, 2023 | An issue in Shenzhen TCL Browser TV Web BrowseHere (aka com.tcl.browser) 6.65.022_dab24cc6_231221_gp allows a remote att... |
| CVE-2023-52077 | CRITICAL | 9.8 | 0.7% | Dec 27, 2023 | Nexkey is a lightweight fork of Misskey v12 optimized for small to medium size servers. Prior to 12.23Q4.5, Nexkey allow... |
| CVE-2023-51700 | CRITICAL | 9.8 | 0.5% | Dec 27, 2023 | Unofficial Mobile BankID Integration for WordPress lets users employ Mobile BankID to authenticate themselves on your Wo... |
| CVE-2023-51664 | CRITICAL | 9.8 | 3.4% | Dec 27, 2023 | tj-actions/changed-files is a Github action to retrieve all files and directories. Prior to 41.0.0, the `tj-actions/chan... |
| CVE-2023-7116 | CRITICAL | 9.8 | 9.9% | Dec 27, 2023 | A vulnerability, which was classified as critical, has been found in WeiYe-Jing datax-web 2.1.2. Affected by this issue ... |
| CVE-2023-6190 | CRITICAL | 9.8 | 0.8% | Dec 27, 2023 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in İzmir Katip Çelebi Unive... |
| CVE-2023-5991 | CRITICAL | 9.8 | 3.3% | Dec 26, 2023 | The Hotel Booking Lite WordPress plugin before 4.8.5 does not validate file paths provided via user input, as well as do... |
| CVE-2023-51102 | CRITICAL | 9.8 | 0.7% | Dec 26, 2023 | Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function formWifiMacFilterSet. |
| CVE-2023-51101 | CRITICAL | 9.8 | 0.7% | Dec 26, 2023 | Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function formSetUplinkInfo. |
| CVE-2023-51100 | CRITICAL | 9.8 | 1.8% | Dec 26, 2023 | Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a command injection vulnerability via the function formGetDiagnoseI... |
| CVE-2023-51099 | CRITICAL | 9.8 | 1.9% | Dec 26, 2023 | Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a command injection vulnerability via the function formexeCommand . |
| CVE-2023-51098 | CRITICAL | 9.8 | 1.8% | Dec 26, 2023 | Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a command injection vulnerability via the function formSetDiagnoseI... |
| CVE-2023-51097 | CRITICAL | 9.8 | 0.8% | Dec 26, 2023 | Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function formSetAutoPing. |
| CVE-2023-51094 | CRITICAL | 9.8 | 1.1% | Dec 26, 2023 | Tenda M3 V1.0.0.12(4856) was discovered to contain a Command Execution vulnerability via the function TendaTelnet. |
| CVE-2023-51093 | CRITICAL | 9.8 | 0.8% | Dec 26, 2023 | Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function fromSetLocalVlanInfo. |
| CVE-2023-51092 | CRITICAL | 9.8 | 12.9% | Dec 26, 2023 | Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function upgrade. |
| CVE-2023-51091 | CRITICAL | 9.8 | 8.5% | Dec 26, 2023 | Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function R7WebsSecurityHandler. |
| CVE-2023-51090 | CRITICAL | 9.8 | 0.7% | Dec 26, 2023 | Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function formGetWeiXinConfig. |
| CVE-2023-51095 | CRITICAL | 9.8 | 0.8% | Dec 26, 2023 | Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function formDelWlRfPolicy. |
| CVE-2023-51467 | CRITICAL | 9.8 | 96.0% | Dec 26, 2023 | The vulnerability permits attackers to circumvent authentication processes, enabling them to remotely execute arbitrary ... |
| CVE-2023-7111 | CRITICAL | 9.8 | 0.6% | Dec 26, 2023 | A vulnerability, which was classified as critical, was found in code-projects Library Management System 2.0. Affected is... |
| CVE-2023-49954 | CRITICAL | 9.8 | 2.2% | Dec 25, 2023 | The CRM Integration in 3CX before 18.0.9.23 and 20 before 20.0.0.1494 allows SQL Injection via a first name, search stri... |
| CVE-2023-31224 | CRITICAL | 9.8 | 0.6% | Dec 25, 2023 | There is broken access control during authentication in Jamf Pro Server before 10.46.1. |
| CVE-2023-48654 | CRITICAL | 9.8 | 1.0% | Dec 25, 2023 | One Identity Password Manager before 5.13.1 allows Kiosk Escape. This product enables users to reset their Active Direct... |
| CVE-2023-51771 | CRITICAL | 9.8 | 0.7% | Dec 25, 2023 | In MicroHttpServer (aka Micro HTTP Server) through a8ab029, _ParseHeader in lib/server.c allows a one-byte recv buffer o... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now