2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-6660 | MEDIUM | 6.5 | 0.6% | Dec 13, 2023 | When a program running on an affected system appends data to a file via an NFS client mount, the bug can cause the NFS c... |
| CVE-2023-6534 | HIGH | 7.5 | 0.7% | Dec 13, 2023 | In versions of FreeBSD 14.0-RELEASE before 14-RELEASE-p2, FreeBSD 13.2-RELEASE before 13.2-RELEASE-p7 and FreeBSD 12.4-R... |
| CVE-2023-44252 | HIGH | 8.8 | 0.7% | Dec 13, 2023 | ** UNSUPPORTED WHEN ASSIGNED **An improper authentication vulnerability [CWE-287] in Fortinet FortiWAN version 5.2.0 thr... |
| CVE-2023-44251 | HIGH | 8.8 | 0.8% | Dec 13, 2023 | ** UNSUPPORTED WHEN ASSIGNED **A improper limitation of a pathname to a restricted directory ('path traversal') vulnerab... |
| CVE-2023-31210 | HIGH | 7.8 | 0.5% | Dec 13, 2023 | Usage of user controlled LD_LIBRARY_PATH in agent in Checkmk 2.2.0p10 up to 2.2.0p16 allows malicious Checkmk site user ... |
| CVE-2023-47536 | MEDIUM | 5.3 | 0.6% | Dec 13, 2023 | An improper access control vulnerability [CWE-284] in FortiOS version 7.2.0, version 7.0.13 and below, version 6.4.14 an... |
| CVE-2023-45725 | MEDIUM | 5.7 | 1.2% | Dec 13, 2023 | Design document functions which receive a user http request object may expose authorization or session cookie headers of... |
| CVE-2023-6478 | HIGH | 7.5 | 1.6% | Dec 13, 2023 | A flaw was found in xorg-server. A specially crafted request to RRChangeProviderProperty or RRChangeOutputProperty can t... |
| CVE-2023-6377 | HIGH | 7.8 | 1.6% | Dec 13, 2023 | A flaw was found in xorg-server. Querying or changing XKB button actions such as moving from a touchpad to a mouse can r... |
| CVE-2023-48791 | HIGH | 8.8 | 1.3% | Dec 13, 2023 | An improper neutralization of special elements used in a command ('Command Injection') vulnerability [CWE-77] in FortiPo... |
| CVE-2023-48782 | HIGH | 8.8 | 2.7% | Dec 13, 2023 | A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM versio... |
| CVE-2023-46713 | MEDIUM | 5.3 | 0.5% | Dec 13, 2023 | An improper output neutralization for logs in Fortinet FortiWeb 6.2.0 - 6.2.8, 6.3.0 - 6.3.23, 7.0.0 - 7.0.9, 7.2.0 - 7.... |
| CVE-2023-46675 | MEDIUM | 6.5 | 0.6% | Dec 13, 2023 | An issue was discovered by Elastic whereby sensitive information may be recorded in Kibana logs in the event of an error... |
| CVE-2023-46671 | MEDIUM | 6.5 | 0.7% | Dec 13, 2023 | An issue was discovered by Elastic whereby sensitive information may be recorded in Kibana logs in the event of an error... |
| CVE-2023-45587 | MEDIUM | 5.4 | 0.4% | Dec 13, 2023 | An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiS... |
| CVE-2023-41844 | MEDIUM | 5.4 | 0.4% | Dec 13, 2023 | A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSa... |
| CVE-2023-41678 | HIGH | 8.8 | 1.1% | Dec 13, 2023 | A double free in Fortinet FortiOS versions 7.0.0 through 7.0.5, FortiPAM version 1.0.0 through 1.0.3, 1.1.0 through 1.1.... |
| CVE-2023-41673 | MEDIUM | 5.4 | 0.4% | Dec 13, 2023 | An improper authorization vulnerability [CWE-285] in Fortinet FortiADC version 7.4.0 and before 7.2.2 may allow a low pr... |
| CVE-2023-40716 | HIGH | 7.8 | 0.2% | Dec 13, 2023 | An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the command line interpr... |
| CVE-2023-36639 | HIGH | 8.8 | 1.1% | Dec 13, 2023 | A use of externally-controlled format string in Fortinet FortiProxy versions 7.2.0 through 7.2.4, 7.0.0 through 7.0.10, ... |
| CVE-2023-45801 | HIGH | 7.5 | 0.7% | Dec 13, 2023 | Improper Authentication vulnerability in Nadatel DVR allows Information Elicitation.This issue affects DVR: from 3.0.0 b... |
| CVE-2023-47579 | HIGH | 7.5 | 0.6% | Dec 13, 2023 | Relyum RELY-PCIe 22.2.1 devices suffer from a system group misconfiguration, allowing read access to the central passwor... |
| CVE-2023-47578 | HIGH | 8.8 | 0.3% | Dec 13, 2023 | Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 devices are susceptible to Cross Site Request Forgery (CSRF) attacks due to ... |
| CVE-2023-47577 | CRITICAL | 9.8 | 0.7% | Dec 13, 2023 | An issue discovered in Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 allows for unauthorized password changes due to no ch... |
| CVE-2023-47576 | HIGH | 8.8 | 1.5% | Dec 13, 2023 | An issue was discovered in Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 devices, allowing authenticated command injection... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now