2023 CVE Vulnerabilities

31,509 CVEs published in 2023.

CVE IDSeverityCVSSDescription
CVE-2023-47213CRITICAL9.8First Corporation's DVRs use a hard-coded password, which may allow a remote unauthenticated attacker to rewrite or obta...
CVE-2023-44296MEDIUM5.5 Dell ELab-Navigator, version 3.1.9 contains a hard-coded credential vulnerability. A local attacker could potentially e...
CVE-2023-43757MEDIUM6.5Inadequate encryption strength vulnerability in multiple routers provided by ELECOM CO.,LTD. and LOGITEC CORPORATION all...
CVE-2023-43752HIGH8OS command injection vulnerability in WRC-X3000GS2-W v1.05 and earlier, WRC-X3000GS2-B v1.05 and earlier, and WRC-X3000G...
CVE-2023-47335MEDIUM6.5Insecure permissions in the setNFZEnable function of Autel Robotics EVO Nano drone v1.6.5 allows attackers to breach the...
CVE-2023-47003CRITICAL9.8An issue in RedisGraph v.2.12.10 allows an attacker to execute arbitrary code and cause a denial of service via a crafte...
CVE-2023-43275HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in DedeCMS v5.7 in 110 backend management interface via /catalog_add.php...
CVE-2023-47471MEDIUM6.5Buffer Overflow vulnerability in strukturag libde265 v1.10.12 allows a local attacker to cause a denial of service via t...
CVE-2023-47470HIGH7.8Buffer Overflow vulnerability in Ffmpeg before github commit 4565747056a11356210ed8edcecb920105e40b60 allows a remote at...
CVE-2023-47264HIGH7.5Certain WithSecure products have a buffer over-read whereby processing certain fuzz file types may cause a denial of ser...
CVE-2023-47263HIGH7.5Certain WithSecure products allow a Denial of Service (DoS) in the antivirus engine when scanning a fuzzed PE32 file. Th...
CVE-2023-48204MEDIUM6.5An issue in PublicCMS v.4.0.202302.e allows a remote attacker to obtain sensitive information via the appToken and Param...
CVE-2023-5381MEDIUM4.8The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in ver...
CVE-2023-4723MEDIUM5.3The Elementor Addon Elements plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and...
CVE-2023-4690MEDIUM4.3The Elementor Addon Elements plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and inc...
CVE-2023-4689MEDIUM4.3The Elementor Addon Elements plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and inc...
CVE-2023-48200MEDIUM5.4Cross Site Scripting vulnerability in Grocy v.4.0.3 allows a local attacker to execute arbitrary code and obtain sensiti...
CVE-2023-48199HIGH7.8HTML Injection vulnerability in the 'manageApiKeys' component in Grocy <= 4.0.3 allows attackers to inject arbitrary HTM...
CVE-2023-48198MEDIUM5.4A Cross-Site Scripting (XSS) vulnerability in the 'product description' component within '/api/stock/products' of Grocy ...
CVE-2023-48197MEDIUM5.4Cross-Site Scripting (XSS) vulnerability in the ‘manageApiKeys’ component of Grocy 4.0.3 and earlier allows attackers to...
CVE-2023-48365CRITICAL9.9Qlik Sense Enterprise for Windows before August 2023 Patch 2 allows unauthenticated remote code execution, aka QB-21683....
CVE-2023-47444HIGH8.8An issue discovered in OpenCart 4.0.0.0 to 4.0.2.3 allows authenticated backend users having common/security write privi...
CVE-2023-47347HIGH7.5Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP messages w...
CVE-2023-47345HIGH7.5Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP message wi...
CVE-2023-41442CRITICAL9.8An issue in Kloudq Technologies Limited Tor Equip 1.0, Tor Loco Mini 1.0 through 3.1 allows a remote attacker to execute...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now