2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-52286 | HIGH | 7.5 | 0.8% | Dec 31, 2023 | Tencent tdsqlpcloud through 1.8.5 allows unauthenticated remote attackers to discover database credentials via an index.... |
| CVE-2023-52284 | MEDIUM | 5.5 | 0.3% | Dec 31, 2023 | Bytecode Alliance wasm-micro-runtime (aka WebAssembly Micro Runtime or WAMR) before 1.3.0 can have an "double free or co... |
| CVE-2023-52277 | HIGH | 7.8 | 0.2% | Dec 31, 2023 | Royal RoyalTSX before 6.0.2.1 allows attackers to cause a denial of service (Heap Memory Corruption and application cras... |
| CVE-2023-52275 | LOW | 2.1 | 0.3% | Dec 31, 2023 | Gallery3d on Tecno Camon X CA7 devices allows attackers to view hidden images by navigating to data/com.android.gallery3... |
| CVE-2023-52269 | MEDIUM | 4.8 | 0.4% | Dec 31, 2023 | MDaemon SecurityGateway through 9.0.3 allows XSS via a crafted Message Content Filtering rule. This might allow domain a... |
| CVE-2023-52267 | HIGH | 7.5 | 0.7% | Dec 31, 2023 | ehttp 1.0.6 before 17405b9 has a simple_log.cpp _log out-of-bounds-read during error logging for long strings. |
| CVE-2023-52266 | HIGH | 7.5 | 0.7% | Dec 31, 2023 | ehttp 1.0.6 before 17405b9 has an epoll_socket.cpp read_func use-after-free. An attacker can make many connections over ... |
| CVE-2023-52265 | MEDIUM | 5.4 | 0.4% | Dec 30, 2023 | IDURAR (aka idurar-erp-crm) through 2.0.1 allows stored XSS via a PATCH request with a crafted JSON email template in th... |
| CVE-2023-52264 | MEDIUM | 6.1 | 0.4% | Dec 30, 2023 | The beesblog (aka Bees Blog) component before 1.6.2 for thirty bees allows Reflected XSS because controllers/front/post.... |
| CVE-2023-6998 | HIGH | 7.7 | 0.2% | Dec 30, 2023 | Improper privilege management vulnerability in CoolKit Technology eWeLink on Android and iOS allows application lockscre... |
| CVE-2023-52263 | MEDIUM | 6.1 | 0.5% | Dec 30, 2023 | Brave Browser before 1.59.40 does not properly restrict the schema for WebUI factory and redirect. This is related to br... |
| CVE-2023-52262 | CRITICAL | 9.8 | 0.9% | Dec 30, 2023 | outdoorbits little-backup-box (aka Little Backup Box) before f39f91c allows remote attackers to execute arbitrary code b... |
| CVE-2023-7181 | HIGH | 7.2 | 0.8% | Dec 30, 2023 | A vulnerability was found in Muyun DedeBIZ up to 6.2.12 and classified as critical. Affected by this issue is some unkno... |
| CVE-2023-7180 | MEDIUM | 4.3 | 0.5% | Dec 30, 2023 | A vulnerability has been found in Tongda OA 2017 up to 11.9 and classified as critical. Affected by this vulnerability i... |
| CVE-2023-7179 | HIGH | 8.8 | 0.7% | Dec 30, 2023 | A vulnerability, which was classified as critical, was found in Campcodes Online College Library System 1.0. Affected is... |
| CVE-2023-7178 | HIGH | 7.2 | 0.7% | Dec 30, 2023 | A vulnerability, which was classified as critical, has been found in Campcodes Online College Library System 1.0. This i... |
| CVE-2023-50651 | CRITICAL | 9.8 | 1.7% | Dec 30, 2023 | TOTOLINK X6000R v9.4.0cu.852_B20230719 was discovered to contain a remote command execution (RCE) vulnerability via the ... |
| CVE-2023-50589 | CRITICAL | 9.8 | 0.7% | Dec 30, 2023 | Grupo Embras GEOSIAP ERP v2.2.167.02 was discovered to contain a SQL injection vulnerability via the codLogin parameter ... |
| CVE-2023-50110 | HIGH | 7.5 | 0.7% | Dec 30, 2023 | TestLink through 1.9.20 allows type juggling for authentication bypass because === is not used. |
| CVE-2023-49299 | HIGH | 8.8 | 1.4% | Dec 30, 2023 | Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can cause arbitrary, unsandbox... |
| CVE-2023-7177 | HIGH | 8.8 | 0.7% | Dec 30, 2023 | A vulnerability classified as critical was found in Campcodes Online College Library System 1.0. This vulnerability affe... |
| CVE-2023-7176 | HIGH | 8.8 | 0.7% | Dec 30, 2023 | A vulnerability classified as critical has been found in Campcodes Online College Library System 1.0. This affects an un... |
| CVE-2023-51136 | CRITICAL | 9.8 | 0.6% | Dec 30, 2023 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formRebootSched... |
| CVE-2023-51135 | CRITICAL | 9.8 | 0.6% | Dec 30, 2023 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formPasswordSet... |
| CVE-2023-51133 | CRITICAL | 9.8 | 0.6% | Dec 30, 2023 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formRoute. |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now