2023 CVE Vulnerabilities

31,509 CVEs published in 2023.

CVE IDSeverityCVSSDescription
CVE-2023-43453CRITICAL9.8An issue in TOTOLINK X6000R V9.4.0cu.652_B20230116 and V9.4.0cu.852_B20230719 allows a remote attacker to execute arbitr...
CVE-2023-43089LOW3.3 Dell Rugged Control Center, version prior to 4.7, contains insufficient protection for the Policy folder. A local malic...
CVE-2023-47307HIGH7.5Buffer Overflow vulnerability in /apply.cgi in Shenzhen Libituo Technology Co., Ltd LBT-T300-T310 v2.2.2.6 allows attack...
CVE-2023-47279HIGH7.5In Delta Electronics InfraSuite Device Master v.1.0.7, A vulnerability exists that allows an unauthenticated attacker to...
CVE-2023-46956HIGH7.2SQL injection vulnerability in Packers and Movers Management System v.1.0 allows a remote attacker to execute arbitrary ...
CVE-2023-46389HIGH7.5LOYTEC electronics GmbH LINX-212 and LINX-151 devices (all versions) are vulnerable to Incorrect Access Control via regi...
CVE-2023-46388HIGH7.5LOYTEC electronics GmbH LINX-212 and LINX-151 devices (all versions) are vulnerable to Insecure Permissions via dpal_con...
CVE-2023-46387HIGH7.5LOYTEC electronics GmbH LINX-212 and LINX-151 devices (all versions) are vulnerable to Incorrect Access Control via dpal...
CVE-2023-46386HIGH7.5LOYTEC electronics GmbH LINX-212 and LINX-151 devices (all versions) are vulnerable to Insecure Permissions via registry...
CVE-2023-46385HIGH7.5LOYTEC electronics GmbH LINX Configurator (all versions) is vulnerable to Insecure Permissions. An admin credential is p...
CVE-2023-46384HIGH7.5LOYTEC electronics GmbH LINX Configurator (all versions) is vulnerable to Insecure Permissions. Cleartext storage of cre...
CVE-2023-46383HIGH7.5LOYTEC electronics GmbH LINX Configurator (all versions) uses HTTP Basic Authentication, which transmits usernames and p...
CVE-2023-46326HIGH8.8ZStack Cloud version 3.10.38 and before allows unauthenticated API access to the list of active job UUIDs and the sessio...
CVE-2023-42917HIGH8.8A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1...
CVE-2023-42916MEDIUM6.5An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2,...
CVE-2023-5909HIGH7.5 KEPServerEX does not properly validate certificates from clients which may allow unauthenticated users to conne...
CVE-2023-5908CRITICAL9.1 KEPServerEX is vulnerable to a buffer overflow which may allow an attacker to crash the product being accessed or l...
CVE-2023-49735HIGH7.5** UNSUPPORTED WHEN ASSIGNED ** The value set as the DefaultLocaleResolver.LOCALE_KEY attribute on the session was not ...
CVE-2023-48894MEDIUM6.5Incorrect Access Control vulnerability in jshERP V3.3 allows attackers to obtain sensitive information via the doFilter ...
CVE-2023-47207CRITICAL9.8In Delta Electronics InfraSuite Device Master v.1.0.7, a vulnerability exists that allows an unauthenticated attacker to...
CVE-2023-46690HIGH8.8In Delta Electronics InfraSuite Device Master v.1.0.7, a vulnerability exists that allows an attacker to write to any fi...
CVE-2023-39226CRITICAL9.8In Delta Electronics InfraSuite Device Master v.1.0.7, a vulnerability exists that allows an unauthenticated attacker to...
CVE-2023-6442MEDIUM5.4A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0. It has been declared as problematic. ...
CVE-2023-6440MEDIUM5.4A vulnerability was found in SourceCodester Book Borrower System 1.0 and classified as problematic. This issue affects s...
CVE-2023-47454HIGH7.8An Untrusted search path vulnerability in NetEase CloudMusic 2.10.4 for Windows allows local users to gain escalated pri...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now