2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-45614 | CRITICAL | 9.8 | 2.1% | Nov 14, 2023 | There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code e... |
| CVE-2023-47130 | CRITICAL | 9.8 | 3.1% | Nov 14, 2023 | Yii is an open source PHP web framework. yiisoft/yii before version 1.1.29 are vulnerable to Remote Code Execution (RCE)... |
| CVE-2023-36049 | CRITICAL | 9.8 | 12.5% | Nov 14, 2023 | .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability |
| CVE-2023-34060 | CRITICAL | 9.8 | 1.3% | Nov 14, 2023 | VMware Cloud Director Appliance contains an authentication bypass vulnerability in case VMware Cloud Director Appliance ... |
| CVE-2023-31273 | CRITICAL | 9.8 | 0.7% | Nov 14, 2023 | Protection mechanism failure in some Intel DCM software before version 5.2 may allow an unauthenticated user to potentia... |
| CVE-2023-25603 | CRITICAL | 9.1 | 0.4% | Nov 14, 2023 | A permissive cross-domain policy with untrusted domains vulnerability in Fortinet FortiADC 7.1.0 - 7.1.1, FortiDDoS-F 6.... |
| CVE-2023-20596 | CRITICAL | 9.8 | 1.0% | Nov 14, 2023 | Improper input validation in the SMM Supervisor may allow an attacker with a compromised SMI handler to gain Ring0 acces... |
| CVE-2023-36553 | CRITICAL | 9.8 | 1.9% | Nov 14, 2023 | A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiSIEM versi... |
| CVE-2023-36397 | CRITICAL | 9.8 | 17.6% | Nov 14, 2023 | Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability |
| CVE-2023-36028 | CRITICAL | 9.8 | 2.9% | Nov 14, 2023 | Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability |
| CVE-2023-36018 | CRITICAL | 9.8 | 1.5% | Nov 14, 2023 | Visual Studio Code Jupyter Extension Spoofing Vulnerability |
| CVE-2023-34991 | CRITICAL | 9.8 | 28.8% | Nov 14, 2023 | A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWLM version 8.6.... |
| CVE-2023-6126 | CRITICAL | 9.8 | 0.7% | Nov 14, 2023 | Code Injection in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2. |
| CVE-2023-44373 | CRITICAL | 9.4 | 1.4% | Nov 14, 2023 | Affected devices do not properly sanitize an input field. This could allow an authenticated remote attacker with admini... |
| CVE-2023-43504 | CRITICAL | 9.8 | 0.9% | Nov 14, 2023 | A vulnerability has been identified in COMOS (All versions < V10.4.4). Ptmcast executable used for testing cache validat... |
| CVE-2023-31247 | CRITICAL | 9.8 | 1.7% | Nov 14, 2023 | A memory corruption vulnerability exists in the HTTP Server Host header parsing functionality of Weston Embedded uC-HTTP... |
| CVE-2023-28391 | CRITICAL | 9.8 | 1.5% | Nov 14, 2023 | A memory corruption vulnerability exists in the HTTP Server header parsing functionality of Weston Embedded uC-HTTP v3.0... |
| CVE-2023-28379 | CRITICAL | 9.8 | 1.7% | Nov 14, 2023 | A memory corruption vulnerability exists in the HTTP Server form boundary functionality of Weston Embedded uC-HTTP v3.01... |
| CVE-2023-27882 | CRITICAL | 9.8 | 1.8% | Nov 14, 2023 | A heap-based buffer overflow vulnerability exists in the HTTP Server form boundary functionality of Weston Embedded uC-H... |
| CVE-2023-25181 | CRITICAL | 9.8 | 1.7% | Nov 14, 2023 | A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01. ... |
| CVE-2023-24585 | CRITICAL | 9.8 | 1.2% | Nov 14, 2023 | An out-of-bounds write vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01. A spec... |
| CVE-2023-45878 | CRITICAL | 9.8 | 63.1% | Nov 14, 2023 | GibbonEdu Gibbon version 25.0.1 and before allows Arbitrary File Write because rubrics_visualise_saveAjax.phps does not ... |
| CVE-2023-43902 | CRITICAL | 9.8 | 0.8% | Nov 14, 2023 | Incorrect access control in the Forgot Your Password function of eMudhra emSigner v2.8.7 allows unauthenticated attacker... |
| CVE-2023-6102 | CRITICAL | 9.8 | 0.8% | Nov 13, 2023 | A vulnerability, which was classified as problematic, was found in Maiwei Safety Production Control Platform 4.1. Affect... |
| CVE-2023-6099 | CRITICAL | 9.8 | 0.9% | Nov 13, 2023 | A vulnerability classified as critical has been found in Shenzhen Youkate Industrial Facial Love Cloud Payment System up... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now