2023 CVE Vulnerabilities

31,509 CVEs published in 2023.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2023-1654HIGH7.8Denial of Service in GitHub repository gpac/gpac prior to 2.4.0.
CVE-2023-0955HIGH8.8The WP Statistics WordPress plugin before 14.0 does not escape a parameter, which could allow authenticated users to per...
CVE-2023-0441HIGH8.1The Gallery Blocks with Lightbox WordPress plugin before 3.0.8 has an AJAX endpoint that can be accessed by any authenti...
CVE-2023-27296HIGH8.8Deserialization of Untrusted Data vulnerability in Apache Software Foundation Apache InLong. It could be triggered by a...
CVE-2023-1655HIGH7.8Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.4.0.
CVE-2023-1145HIGH7.8 Delta Electronics InfraSuite Device Master versions prior to 1.0.5 are affected by a deserialization vulnerabilit...
CVE-2023-1144HIGH8.8Delta Electronics InfraSuite Device Master versions prior to 1.0.5 contains an improper access control vulnerability in ...
CVE-2023-1143HIGH8.8In Delta Electronics InfraSuite Device Master versions prior to 1.0.5, an attacker could use Lua scripts, which could al...
CVE-2023-1141HIGH8.8Delta Electronics InfraSuite Device Master versions prior to 1.0.5 contain a command injection vulnerability that could ...
CVE-2023-1139HIGH8.8Delta Electronics InfraSuite Device Master versions prior to 1.0.5 are affected by a deserialization vulnerability targe...
CVE-2023-1138HIGH7.5Delta Electronics InfraSuite Device Master versions prior to 1.0.5 contain an improper access control vulnerability, whi...
CVE-2023-1137HIGH8.8Delta Electronics InfraSuite Device Master versions prior to 1.0.5 contain a vulnerability in which a low-level user cou...
CVE-2023-1136HIGH7.5In Delta Electronics InfraSuite Device Master versions prior to 1.0.5, an unauthenticated attacker could generate a vali...
CVE-2023-1135HIGH7.8 In Delta Electronics InfraSuite Device Master versions prior to 1.0.5, an attacker could set in...
CVE-2023-1134HIGH8.8Delta Electronics InfraSuite Device Master versions prior to 1.0.5 are affected by a path traversal vulnerability, which...
CVE-2023-24094HIGH7.5An issue in the bridge2 component of MikroTik RouterOS v6.40.5 allows attackers to cause a Denial of Service (DoS) via c...
CVE-2023-25017HIGH8.1RIFARTEK IOT Wall has a vulnerability of incorrect authorization. An authenticated remote attacker with general user pri...
CVE-2023-24841HIGH7.2HGiga MailSherlock query function for connection log has a vulnerability of insufficient filtering for user input. An au...
CVE-2023-24840HIGH7.2HGiga MailSherlock mail query function has vulnerability of insufficient validation for user input. An authenticated rem...
CVE-2023-24837HIGH8.8HGiga PowerStation remote management function has insufficient filtering for user input. An authenticated remote attacke...
CVE-2023-24835HIGH7.2Softnext Technologies Corp.’s SPAM SQR has a vulnerability of Code Injection within its specific function. An authentica...
CVE-2023-28867HIGH7.5In GraphQL Java (aka graphql-java) before 20.1, an attacker can send a crafted GraphQL query that causes stack consumpti...
CVE-2023-1647HIGH8.8Improper Access Control in GitHub repository calcom/cal.com prior to 2.7.
CVE-2023-1646HIGH7.8A vulnerability was found in IObit Malware Fighter 9.4.0.776. It has been declared as critical. This vulnerability affec...
CVE-2023-27796HIGH8.8RG-EW1200G PRO Wireless Routers EW_3.0(1)B11P204, RG-EW1800GX PRO Wireless Routers EW_3.0(1)B11P204, and RG-EW3200GX PRO...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now