2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-51094 | CRITICAL | 9.8 | 1.1% | Dec 26, 2023 | Tenda M3 V1.0.0.12(4856) was discovered to contain a Command Execution vulnerability via the function TendaTelnet. |
| CVE-2023-51093 | CRITICAL | 9.8 | 0.8% | Dec 26, 2023 | Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function fromSetLocalVlanInfo. |
| CVE-2023-51092 | CRITICAL | 9.8 | 12.9% | Dec 26, 2023 | Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function upgrade. |
| CVE-2023-51091 | CRITICAL | 9.8 | 8.5% | Dec 26, 2023 | Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function R7WebsSecurityHandler. |
| CVE-2023-51090 | CRITICAL | 9.8 | 0.7% | Dec 26, 2023 | Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function formGetWeiXinConfig. |
| CVE-2023-45251 | — | — | — | Dec 26, 2023 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further inv... |
| CVE-2023-43851 | — | — | — | Dec 26, 2023 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further inv... |
| CVE-2023-51095 | CRITICAL | 9.8 | 0.8% | Dec 26, 2023 | Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function formDelWlRfPolicy. |
| CVE-2023-51467 | CRITICAL | 9.8 | 96.0% | Dec 26, 2023 | The vulnerability permits attackers to circumvent authentication processes, enabling them to remotely execute arbitrary ... |
| CVE-2023-51107 | HIGH | 7.5 | 0.7% | Dec 26, 2023 | A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in functon compute_colo... |
| CVE-2023-51106 | HIGH | 7.5 | 0.7% | Dec 26, 2023 | A floating point exception (divide-by-zero) vulnerability was discovered in mupdf 1.23.4 in function pnm_binary_read_ima... |
| CVE-2023-51105 | HIGH | 7.5 | 0.9% | Dec 26, 2023 | A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in function bmp_decompr... |
| CVE-2023-51104 | HIGH | 7.5 | 0.9% | Dec 26, 2023 | A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in function pnm_binary_... |
| CVE-2023-51103 | HIGH | 7.5 | 0.9% | Dec 26, 2023 | A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in the function fz_new_... |
| CVE-2023-49949 | HIGH | 8.1 | 0.6% | Dec 26, 2023 | Passwork before 6.2.0 allows remote authenticated users to bypass 2FA by sending all one million of the possible 6-digit... |
| CVE-2023-50968 | HIGH | 7.5 | 63.4% | Dec 26, 2023 | Arbitrary file properties reading vulnerability in Apache Software Foundation Apache OFBiz when user operates an uri cal... |
| CVE-2023-5180 | HIGH | 7.8 | 0.2% | Dec 26, 2023 | An issue was discovered in Open Design Alliance Drawings SDK before 2024.12. A corrupted value of number of sectors used... |
| CVE-2023-51363 | MEDIUM | 6.5 | 0.3% | Dec 26, 2023 | VR-S1000 firmware Ver. 2.37 and earlier allows a network-adjacent unauthenticated attacker who can access the product's ... |
| CVE-2023-50339 | MEDIUM | 5.4 | 0.3% | Dec 26, 2023 | Stored cross-site scripting vulnerability exists in the User Management (/admin/users) page of GROWI versions prior to v... |
| CVE-2023-50332 | MEDIUM | 6.5 | 0.4% | Dec 26, 2023 | Improper authorization vulnerability exists in the User Management (/admin/users) page of GROWI versions prior to v6.0.6... |
| CVE-2023-50294 | MEDIUM | 6.5 | 0.3% | Dec 26, 2023 | The App Settings (/admin/app) page in GROWI versions prior to v6.0.6 stores sensitive information in cleartext form. As ... |
| CVE-2023-50175 | MEDIUM | 5.4 | 0.3% | Dec 26, 2023 | Stored cross-site scripting vulnerability exists in the App Settings (/admin/app) page, the Markdown Settings (/admin/ma... |
| CVE-2023-49807 | MEDIUM | 5.4 | 0.3% | Dec 26, 2023 | Stored cross-site scripting vulnerability when processing the MathJax exists in GROWI versions prior to v6.0.0. If this ... |
| CVE-2023-49779 | MEDIUM | 5.4 | 0.3% | Dec 26, 2023 | Stored cross-site scripting vulnerability exists in the anchor tag of GROWI versions prior to v6.0.0. If this vulnerabil... |
| CVE-2023-49598 | MEDIUM | 5.4 | 0.3% | Dec 26, 2023 | Stored cross-site scripting vulnerability exists in the event handlers of the pre tags in GROWI versions prior to v6.0.0... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now