2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-3631 | CRITICAL | 9.8 | 0.8% | Nov 23, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Medart Health Serv... |
| CVE-2023-3377 | CRITICAL | 9.8 | 0.8% | Nov 23, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Veribilim Software... |
| CVE-2023-28813 | HIGH | 7.5 | 0.6% | Nov 23, 2023 | An attacker could exploit a vulnerability by sending crafted messages to computers installed with this plug-in to modify... |
| CVE-2023-28812 | CRITICAL | 9.8 | 1.0% | Nov 23, 2023 | There is a buffer overflow vulnerability in a web browser plug-in could allow an attacker to exploit the vulnerability b... |
| CVE-2023-44290 | HIGH | 7.8 | 0.2% | Nov 23, 2023 | Dell Command | Monitor versions prior to 10.10.0, contain an improper access control vulnerability. A local malicious s... |
| CVE-2023-44289 | HIGH | 7.8 | 0.2% | Nov 23, 2023 | Dell Command | Configure versions prior to 4.11.0, contain an improper access control vulnerability. A local malicious ... |
| CVE-2023-43086 | HIGH | 7.8 | 0.2% | Nov 23, 2023 | Dell Command | Configure, versions prior to 4.11.0, contains an improper access control vulnerability. A local maliciou... |
| CVE-2023-39253 | HIGH | 7.8 | 0.2% | Nov 23, 2023 | Dell OS Recovery Tool, versions 2.2.4013, 2.3.7012.0, and 2.3.7515.0 contain an Improper Access Control Vulnerability. ... |
| CVE-2023-28811 | MEDIUM | 6.5 | 0.4% | Nov 23, 2023 | There is a buffer overflow in the password recovery feature of Hikvision NVR/DVR models. If exploited, an attacker on th... |
| CVE-2023-41140 | HIGH | 7.8 | 0.3% | Nov 23, 2023 | A maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause a Heap-Based Buff... |
| CVE-2023-41139 | HIGH | 7.8 | 0.3% | Nov 23, 2023 | A maliciously crafted STP file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to dereference an untruste... |
| CVE-2023-29076 | CRITICAL | 9.8 | 1.0% | Nov 23, 2023 | A maliciously crafted MODEL, SLDASM, SAT or CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 could cause ... |
| CVE-2023-29075 | CRITICAL | 9.8 | 1.0% | Nov 23, 2023 | A maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause an Out-Of-Bounds ... |
| CVE-2023-29074 | CRITICAL | 9.8 | 1.1% | Nov 23, 2023 | A maliciously crafted CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause an Out-Of-Bou... |
| CVE-2023-29073 | CRITICAL | 9.8 | 1.1% | Nov 23, 2023 | A maliciously crafted MODEL file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause a Heap-Based Bu... |
| CVE-2023-47839 | MEDIUM | 5.4 | 0.4% | Nov 23, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in impleCode eCommerc... |
| CVE-2023-47835 | MEDIUM | 5.4 | 0.4% | Nov 23, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ARI Soft ARI Strea... |
| CVE-2023-47834 | MEDIUM | 5.4 | 0.4% | Nov 23, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ExpressTech Quiz A... |
| CVE-2023-47833 | MEDIUM | 4.8 | 0.4% | Nov 23, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeroen Schmit Thea... |
| CVE-2023-47790 | MEDIUM | 6.1 | 0.2% | Nov 23, 2023 | Cross-Site Request Forgery (CSRF) leading to Cross-Site Scripting (XSS) vulnerability in Poporon Pz-LinkCard plugin <= 2... |
| CVE-2023-47668 | HIGH | 7.5 | 1.0% | Nov 23, 2023 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in StellarWP Membership Plugin – Restrict Conte... |
| CVE-2023-40002 | MEDIUM | 6.5 | 0.6% | Nov 23, 2023 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Pluggabl LLC Booster for WooCommerce plugin ... |
| CVE-2023-30581 | HIGH | 7.5 | 1.1% | Nov 23, 2023 | The use of __proto__ in process.mainModule.__proto__.require() can bypass the policy mechanism and require modules outsi... |
| CVE-2023-23978 | MEDIUM | 6.5 | 0.7% | Nov 23, 2023 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SwitchWP WP Client Reports plugin <= 1.0.16 ... |
| CVE-2023-48107 | HIGH | 8.8 | 1.3% | Nov 22, 2023 | Buffer Overflow vulnerability in zlib-ng minizip-ng v.4.0.2 allows an attacker to execute arbitrary code via a crafted f... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now