2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-28042 | MEDIUM | 6.7 | 0.2% | Jun 23, 2023 | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator ... |
| CVE-2023-28041 | MEDIUM | 6.7 | 0.2% | Jun 23, 2023 | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator ... |
| CVE-2023-28040 | MEDIUM | 6.7 | 0.2% | Jun 23, 2023 | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator ... |
| CVE-2023-28039 | MEDIUM | 6.7 | 0.2% | Jun 23, 2023 | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator ... |
| CVE-2023-28035 | MEDIUM | 6.7 | 0.2% | Jun 23, 2023 | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator ... |
| CVE-2023-28033 | MEDIUM | 6.7 | 0.2% | Jun 23, 2023 | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator ... |
| CVE-2023-28032 | MEDIUM | 6.7 | 0.2% | Jun 23, 2023 | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator ... |
| CVE-2023-28030 | MEDIUM | 6.7 | 0.2% | Jun 23, 2023 | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator ... |
| CVE-2023-28029 | MEDIUM | 6.7 | 0.2% | Jun 23, 2023 | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator ... |
| CVE-2023-28028 | MEDIUM | 6.7 | 0.2% | Jun 23, 2023 | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator ... |
| CVE-2023-25937 | MEDIUM | 6.7 | 0.2% | Jun 23, 2023 | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator ... |
| CVE-2023-25936 | MEDIUM | 6.7 | 0.2% | Jun 23, 2023 | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator ... |
| CVE-2023-23344 | MEDIUM | 6.5 | 0.4% | Jun 23, 2023 | A permission issue in BigFix WebUI Insights site version 14 allows an authenticated, unprivileged operator to access an ... |
| CVE-2023-34462 | MEDIUM | 6.5 | 2.5% | Jun 22, 2023 | Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performan... |
| CVE-2023-28016 | MEDIUM | 6.1 | 0.3% | Jun 22, 2023 | Host Header Injection vulnerability in the HCL BigFix OSD Bare Metal Server version 311.12 or lower allows attacker to s... |
| CVE-2023-23343 | MEDIUM | 6.1 | 0.3% | Jun 22, 2023 | A clickjacking vulnerability in the HCL BigFix OSD Bare Metal Server version 311.12 or lower allows attacker to use tran... |
| CVE-2023-35132 | MEDIUM | 6.3 | 0.8% | Jun 22, 2023 | A limited SQL injection risk was identified on the Mnet SSO access control page. This flaw affects Moodle versions 4.2, ... |
| CVE-2023-35131 | MEDIUM | 6.1 | 0.7% | Jun 22, 2023 | Content on the groups page required additional sanitizing to prevent an XSS risk. This flaw affects Moodle versions 4.2,... |
| CVE-2023-34553 | MEDIUM | 6.5 | 0.3% | Jun 22, 2023 | An issue was discovered in WAFU Keyless Smart Lock v1.0 allows attackers to unlock a device via code replay attack. |
| CVE-2023-30347 | MEDIUM | 4.8 | 0.5% | Jun 22, 2023 | Cross Site Scripting (XSS) vulnerability in Neox Contact Center 2.3.9, via the serach_sms_api_name parameter to the SMA ... |
| CVE-2023-2991 | MEDIUM | 5.3 | 0.6% | Jun 22, 2023 | Fortra Globalscape EFT's administration server suffers from an information disclosure vulnerability where the serial num... |
| CVE-2023-28800 | MEDIUM | 6.1 | 0.5% | Jun 22, 2023 | When using local accounts for administration, the redirect url parameter was not encoded correctly, allowing for an XSS ... |
| CVE-2023-28799 | MEDIUM | 6.1 | 0.4% | Jun 22, 2023 | A URL parameter during login flow was vulnerable to injection. An attacker could insert a malicious domain in this param... |
| CVE-2023-34796 | MEDIUM | 6.1 | 0.7% | Jun 22, 2023 | Cross site scripting (XSS) vulnerabiliy in dmarcts-report-viewer dashboard versions 1.1 and thru commit 8a1d882b4c481a05... |
| CVE-2023-36093 | MEDIUM | 5.4 | 0.4% | Jun 22, 2023 | There is a storage type cross site scripting (XSS) vulnerability in the filing number of the Basic Information tab on th... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now