2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-44809 | CRITICAL | 9.8 | 0.9% | Oct 16, 2023 | D-Link device DIR-820L 1.05B03 is vulnerable to Insecure Permissions. |
| CVE-2023-44808 | CRITICAL | 9.8 | 0.9% | Oct 16, 2023 | D-Link DIR-820L 1.05B03 has a stack overflow vulnerability in the sub_4507CC function. |
| CVE-2023-36955 | CRITICAL | 9.8 | 0.7% | Oct 16, 2023 | TOTOLINK CP300+ <=V5.2cu.7594_B20200910 was discovered to contain a stack overflow via the File parameter in the functio... |
| CVE-2023-36954 | CRITICAL | 9.8 | 1.6% | Oct 16, 2023 | TOTOLINK CP300+ V5.2cu.7594_B20200910 and before is vulnerable to command injection. |
| CVE-2023-36953 | CRITICAL | 9.8 | 1.5% | Oct 16, 2023 | TOTOLINK CP300+ V5.2cu.7594_B20200910 and before is vulnerable to command injection. |
| CVE-2023-36950 | CRITICAL | 9.8 | 0.8% | Oct 16, 2023 | TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack over... |
| CVE-2023-36952 | CRITICAL | 9.8 | 0.7% | Oct 16, 2023 | TOTOLINK CP300+ V5.2cu.7594_B20200910 was discovered to contain a stack overflow via the pingIp parameter in the functio... |
| CVE-2023-36947 | CRITICAL | 9.8 | 0.8% | Oct 16, 2023 | TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack over... |
| CVE-2023-36340 | CRITICAL | 9.8 | 0.7% | Oct 16, 2023 | TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain a stack overflow via the http_host parameter in the fu... |
| CVE-2023-45898 | HIGH | 7.8 | 0.3% | Oct 16, 2023 | The Linux kernel before 6.5.4 has an es1 use-after-free in fs/ext4/extents_status.c, related to ext4_es_insert_extent. |
| CVE-2023-40791 | MEDIUM | 6.3 | 0.4% | Oct 16, 2023 | extract_user_to_sg in lib/scatterlist.c in the Linux kernel before 6.4.12 fails to unpin pages in a certain situation, a... |
| CVE-2023-40790 | — | — | — | Oct 16, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2023-38280 | HIGH | 7.8 | 0.2% | Oct 16, 2023 | IBM HMC (Hardware Management Console) 10.1.1010.0 and 10.2.1030.0 could allow a local user to escalate their privileges ... |
| CVE-2023-5591 | MEDIUM | 6.5 | 22.2% | Oct 16, 2023 | SQL Injection in GitHub repository librenms/librenms prior to 23.10.0. |
| CVE-2023-40377 | HIGH | 7.8 | 0.1% | Oct 16, 2023 | Backup, Recovery, and Media Services (BRMS) for IBM i 7.2, 7.3, and 7.4 contains a local privilege escalation vulnerabil... |
| CVE-2023-33836 | CRITICAL | 9.8 | 0.4% | Oct 16, 2023 | IBM Security Verify Governance 10.0 contains hard-coded credentials, such as a password or cryptographic key, which it u... |
| CVE-2023-35018 | HIGH | 7.2 | 0.4% | Oct 16, 2023 | IBM Security Verify Governance 10.0 could allow a privileged use to upload arbitrary files due to improper file validati... |
| CVE-2023-35013 | MEDIUM | 4.4 | 0.2% | Oct 16, 2023 | IBM Security Verify Governance 10.0, Identity Manager could allow a local privileged user to obtain sensitive informatio... |
| CVE-2023-5590 | HIGH | 7.5 | 0.9% | Oct 15, 2023 | NULL Pointer Dereference in GitHub repository seleniumhq/selenium prior to 4.14.0. |
| CVE-2023-5589 | CRITICAL | 9.8 | 0.7% | Oct 15, 2023 | A vulnerability was found in SourceCodester Judging Management System 1.0. It has been declared as critical. This vulner... |
| CVE-2023-5588 | MEDIUM | 5.3 | 0.6% | Oct 15, 2023 | A vulnerability was found in kphrx pleroma. It has been classified as problematic. This affects the function Pleroma.Emo... |
| CVE-2023-5587 | CRITICAL | 9.8 | 0.7% | Oct 15, 2023 | A vulnerability was found in SourceCodester Free Hospital Management System for Small Practices 1.0 and classified as cr... |
| CVE-2023-38312 | HIGH | 7.5 | 0.8% | Oct 15, 2023 | A directory traversal vulnerability in Valve Counter-Strike 8684 allows a client (with remote control access to a game s... |
| CVE-2023-40378 | HIGH | 7.8 | 0.1% | Oct 15, 2023 | IBM Directory Server for IBM i contains a local privilege escalation vulnerability. A malicious actor with command line... |
| CVE-2023-5586 | HIGH | 7.8 | 0.3% | Oct 15, 2023 | NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3.0-DEV. |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now