2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-49967 | HIGH | 7.5 | 0.8% | Dec 7, 2023 | Typecho v1.2.1 was discovered to be vulnerable to an XML Quadratic Blowup attack via the component /index.php/action/xml... |
| CVE-2023-49493 | MEDIUM | 6.1 | 0.4% | Dec 7, 2023 | DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the v parameter at ... |
| CVE-2023-49492 | MEDIUM | 6.1 | 0.4% | Dec 7, 2023 | DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the imgstick parame... |
| CVE-2023-49436 | CRITICAL | 9.8 | 2.4% | Dec 7, 2023 | Tenda AX9 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'list' parameter at /gofo... |
| CVE-2023-49435 | CRITICAL | 9.8 | 2.4% | Dec 7, 2023 | Tenda AX9 V22.03.01.46 is vulnerable to command injection. |
| CVE-2023-49434 | CRITICAL | 9.8 | 0.9% | Dec 7, 2023 | Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetNe... |
| CVE-2023-49433 | CRITICAL | 9.8 | 0.9% | Dec 7, 2023 | Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetVi... |
| CVE-2023-49432 | CRITICAL | 9.8 | 0.9% | Dec 7, 2023 | Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'deviceList' parameter at /goform... |
| CVE-2023-49431 | CRITICAL | 9.8 | 2.4% | Dec 7, 2023 | Tenda AX9 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'mac' parameter at /gofor... |
| CVE-2023-49430 | CRITICAL | 9.8 | 0.9% | Dec 7, 2023 | Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetSt... |
| CVE-2023-49429 | CRITICAL | 9.8 | 2.4% | Dec 7, 2023 | Tenda AX9 V22.03.01.46 was discovered to contain a SQL command injection vulnerability in the 'setDeviceInfo' feature th... |
| CVE-2023-49437 | CRITICAL | 9.8 | 2.4% | Dec 7, 2023 | Tenda AX12 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'list' parameter at /gof... |
| CVE-2023-49428 | CRITICAL | 9.8 | 2.5% | Dec 7, 2023 | Tenda AX12 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'mac' parameter at /gofo... |
| CVE-2023-49426 | CRITICAL | 9.8 | 0.9% | Dec 7, 2023 | Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the list parameter at /goform/SetStaticRouteCfg. |
| CVE-2023-49425 | CRITICAL | 9.8 | 0.9% | Dec 7, 2023 | Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the deviceList parameter at /goform/setMacFilterC... |
| CVE-2023-39171 | HIGH | 7.2 | 1.1% | Dec 7, 2023 | SENEC Storage Box V1,V2 and V3 accidentially expose a management UI accessible with publicly known admin credentials. |
| CVE-2023-39170 | — | — | — | Dec 7, 2023 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it's a duplicate of C... |
| CVE-2023-39169 | CRITICAL | 9.8 | 0.9% | Dec 7, 2023 | The affected devices use publicly available default credentials with administrative privileges. |
| CVE-2023-49424 | CRITICAL | 9.8 | 0.9% | Dec 7, 2023 | Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the list parameter at /goform/SetVirtualServerCfg... |
| CVE-2023-46974 | MEDIUM | 5.4 | 0.7% | Dec 7, 2023 | Cross Site Scripting vulnerability in Best Courier Management System v.1.000 allows a remote attacker to execute arbitra... |
| CVE-2023-39172 | CRITICAL | 9.1 | 0.6% | Dec 7, 2023 | The affected devices transmit sensitive information unencrypted allowing a remote unauthenticated attacker to capture an... |
| CVE-2023-39168 | — | — | — | Dec 7, 2023 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it's a duplicate of C... |
| CVE-2023-39167 | HIGH | 7.5 | 1.0% | Dec 7, 2023 | In SENEC Storage Box V1,V2 and V3 an unauthenticated remote attacker can obtain the devices' logfiles that contain sensi... |
| CVE-2023-49958 | HIGH | 7.5 | 0.6% | Dec 7, 2023 | An issue was discovered in Dalmann OCPP.Core through 1.2.0 for OCPP (Open Charge Point Protocol) for electric vehicles. ... |
| CVE-2023-49957 | HIGH | 7.5 | 0.5% | Dec 7, 2023 | An issue was discovered in Dalmann OCPP.Core before 1.3.0 for OCPP (Open Charge Point Protocol) for electric vehicles. I... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now