2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-45001 | CRITICAL | 9.8 | 0.6% | Nov 6, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Castos Seriously S... |
| CVE-2023-41685 | CRITICAL | 9.8 | 0.5% | Nov 6, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ilGhera Woocommerc... |
| CVE-2023-40609 | CRITICAL | 9.8 | 0.6% | Nov 6, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aiyaz, maheshpatel... |
| CVE-2023-40207 | CRITICAL | 9.8 | 0.5% | Nov 6, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RedNao Donations M... |
| CVE-2023-38382 | CRITICAL | 9.8 | 0.6% | Nov 6, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Daniel Söderström ... |
| CVE-2023-35911 | CRITICAL | 9.8 | 0.6% | Nov 6, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Creative Solutions... |
| CVE-2023-33924 | CRITICAL | 9.8 | 0.7% | Nov 6, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Felix Welberg SIS ... |
| CVE-2023-28748 | CRITICAL | 9.8 | 0.6% | Nov 6, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in biztechc Copy or M... |
| CVE-2023-27605 | CRITICAL | 9.8 | 0.7% | Nov 6, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Sajjad Hossain WP ... |
| CVE-2023-28794 | MEDIUM | 6.5 | 0.2% | Nov 6, 2023 | Origin Validation Error vulnerability in Zscaler Client Connector on Linux allows Privilege Abuse. This issue affects Zs... |
| CVE-2023-42669 | MEDIUM | 6.5 | 1.9% | Nov 6, 2023 | A vulnerability was found in Samba's "rpcecho" development server, a non-Windows RPC server used to test Samba's DCE/RPC... |
| CVE-2023-4699 | CRITICAL | 9.1 | 0.7% | Nov 6, 2023 | Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation MELSEC-F Series CPU module... |
| CVE-2023-47253 | CRITICAL | 9.8 | 14.4% | Nov 6, 2023 | Qualitor through 8.20 allows remote attackers to execute arbitrary code via PHP code in the html/ad/adpesquisasql/reques... |
| CVE-2023-38407 | HIGH | 7.5 | 0.9% | Nov 6, 2023 | bgpd/bgp_label.c in FRRouting (FRR) before 8.5 attempts to read beyond the end of the stream during labeled unicast pars... |
| CVE-2023-38406 | CRITICAL | 9.8 | 0.9% | Nov 6, 2023 | bgpd/bgp_flowspec.c in FRRouting (FRR) before 8.4.3 mishandles an nlri length of zero, aka a "flowspec overflow." |
| CVE-2023-4625 | MEDIUM | 5.3 | 0.9% | Nov 6, 2023 | Improper Restriction of Excessive Authentication Attempts vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F/i... |
| CVE-2023-32840 | MEDIUM | 6.5 | 0.2% | Nov 6, 2023 | In modem CCCI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatio... |
| CVE-2023-32839 | MEDIUM | 6.7 | 0.1% | Nov 6, 2023 | In dpe, there is a possible out of bounds write due to a missing valid range checking. This could lead to local escalati... |
| CVE-2023-32838 | MEDIUM | 6.7 | 0.1% | Nov 6, 2023 | In dpe, there is a possible out of bounds write due to a missing valid range checking. This could lead to local escalati... |
| CVE-2023-32837 | HIGH | 7.8 | 0.1% | Nov 6, 2023 | In video, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of ... |
| CVE-2023-32836 | MEDIUM | 6.7 | 0.1% | Nov 6, 2023 | In display, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of p... |
| CVE-2023-32835 | MEDIUM | 6.7 | 0.1% | Nov 6, 2023 | In keyinstall, there is a possible memory corruption due to type confusion. This could lead to local escalation of privi... |
| CVE-2023-32834 | MEDIUM | 6.7 | 0.1% | Nov 6, 2023 | In secmem, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege... |
| CVE-2023-32832 | HIGH | 7 | 0.1% | Nov 6, 2023 | In video, there is a possible memory corruption due to a race condition. This could lead to local escalation of privileg... |
| CVE-2023-32825 | MEDIUM | 5.5 | 0.1% | Nov 6, 2023 | In bluethooth service, there is a possible out of bounds reads due to improper input validation. This could lead to loca... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now