2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-51012 | CRITICAL | 9.8 | 1.0% | Dec 22, 2023 | TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanGateway par... |
| CVE-2023-51011 | CRITICAL | 9.8 | 1.0% | Dec 22, 2023 | TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanPriDns para... |
| CVE-2023-50708 | CRITICAL | 9.8 | 0.7% | Dec 22, 2023 | yii2-authclient is an extension that adds OpenID, OAuth, OAuth2 and OpenId Connect consumers for the Yii framework 2.0. ... |
| CVE-2023-50147 | CRITICAL | 9.8 | 1.2% | Dec 22, 2023 | There is an arbitrary command execution vulnerability in the setDiagnosisCfg function of the cstecgi .cgi of the TOTOlin... |
| CVE-2023-51028 | CRITICAL | 9.8 | 1.0% | Dec 22, 2023 | TOTOLINK EX1800T 9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the apcliChannel pa... |
| CVE-2023-51027 | CRITICAL | 9.8 | 1.0% | Dec 22, 2023 | TOTOlink EX1800T V9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘apcliAuthMode... |
| CVE-2023-51026 | CRITICAL | 9.8 | 1.0% | Dec 22, 2023 | TOTOlink EX1800T V9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘hour’ paramet... |
| CVE-2023-51025 | CRITICAL | 9.8 | 1.0% | Dec 22, 2023 | TOTOlink EX1800T V9.1.0cu.2112_B20220316 is vulnerable to an unauthorized arbitrary command execution in the ‘admuser’ p... |
| CVE-2023-51024 | CRITICAL | 9.8 | 1.0% | Dec 22, 2023 | TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘tz’ parameter... |
| CVE-2023-51023 | CRITICAL | 9.8 | 1.0% | Dec 22, 2023 | TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to arbitrary command execution in the ‘host_time’ parameter of th... |
| CVE-2023-49792 | CRITICAL | 9.8 | 1.0% | Dec 22, 2023 | Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. In Nextcloud Server prior to versio... |
| CVE-2023-42017 | CRITICAL | 9.8 | 1.1% | Dec 22, 2023 | IBM Planning Analytics Local 2.0 could allow a remote attacker to upload arbitrary files, caused by the improper validat... |
| CVE-2023-7058 | CRITICAL | 9.8 | 0.7% | Dec 22, 2023 | A vulnerability was found in SourceCodester Simple Student Attendance System 1.0. It has been declared as critical. Affe... |
| CVE-2023-51707 | CRITICAL | 9.8 | 1.3% | Dec 22, 2023 | MotionPro in Array ArrayOS AG before 9.4.0.505 on AG and vxAG allows remote command execution via crafted packets. AG an... |
| CVE-2023-49689 | CRITICAL | 9.8 | 0.7% | Dec 22, 2023 | Job Portal v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'JobId' parameter of the Em... |
| CVE-2023-49688 | CRITICAL | 9.8 | 0.7% | Dec 22, 2023 | Job Portal v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'txtUser' parameter of the ... |
| CVE-2023-49681 | CRITICAL | 9.8 | 0.7% | Dec 21, 2023 | Job Portal v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'cmbQual' parameter of the ... |
| CVE-2023-49677 | CRITICAL | 9.8 | 0.7% | Dec 21, 2023 | Job Portal v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'cmbQual' parameter of the ... |
| CVE-2023-48722 | CRITICAL | 9.8 | 0.7% | Dec 21, 2023 | Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'clas... |
| CVE-2023-48720 | CRITICAL | 9.8 | 0.7% | Dec 21, 2023 | Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'pass... |
| CVE-2023-48718 | CRITICAL | 9.8 | 0.7% | Dec 21, 2023 | Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'clas... |
| CVE-2023-48716 | CRITICAL | 9.8 | 0.7% | Dec 21, 2023 | Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'clas... |
| CVE-2023-48689 | CRITICAL | 9.8 | 0.7% | Dec 21, 2023 | Railway Reservation System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'byname' pa... |
| CVE-2023-48687 | CRITICAL | 9.8 | 0.7% | Dec 21, 2023 | Railway Reservation System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'from' para... |
| CVE-2023-48685 | CRITICAL | 9.8 | 0.7% | Dec 21, 2023 | Railway Reservation System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'psd' param... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now