2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-45852 | CRITICAL | 9.8 | 14.0% | Oct 14, 2023 | In Vitogate 300 2.1.3.0, /cgi-bin/vitogate.cgi allows an unauthenticated attacker to bypass authentication and execute a... |
| CVE-2023-45674 | MEDIUM | 6.5 | 0.5% | Oct 14, 2023 | Farmbot-Web-App is a web control interface for the Farmbot farm automation platform. An SQL injection vulnerability was ... |
| CVE-2023-4257 | CRITICAL | 9.8 | 0.9% | Oct 13, 2023 | Unchecked user input length in /subsys/net/l2/wifi/wifi_shell.c can cause buffer overflows. |
| CVE-2023-4263 | HIGH | 8.8 | 0.5% | Oct 13, 2023 | Potential buffer overflow vulnerability in the Zephyr IEEE 802.15.4 nRF 15.4 driver |
| CVE-2023-36559 | MEDIUM | 4.2 | 0.8% | Oct 13, 2023 | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
| CVE-2023-34977 | MEDIUM | 5.4 | 0.3% | Oct 13, 2023 | A cross-site scripting (XSS) vulnerability has been reported to affect Video Station. If exploited, the vulnerability co... |
| CVE-2023-34976 | HIGH | 8.8 | 0.5% | Oct 13, 2023 | A SQL injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow aut... |
| CVE-2023-34975 | HIGH | 8.8 | 1.1% | Oct 13, 2023 | An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, ... |
| CVE-2023-32976 | HIGH | 7.2 | 1.1% | Oct 13, 2023 | An OS command injection vulnerability has been reported to affect Container Station. If exploited, the vulnerability cou... |
| CVE-2023-32974 | HIGH | 7.5 | 0.6% | Oct 13, 2023 | A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vul... |
| CVE-2023-32973 | HIGH | 7.2 | 0.5% | Oct 13, 2023 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system ver... |
| CVE-2023-32970 | MEDIUM | 4.9 | 0.5% | Oct 13, 2023 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploite... |
| CVE-2023-5449 | LOW | 3.3 | 0.2% | Oct 13, 2023 | A potential security vulnerability has been identified in certain HP Displays supporting the Theft Deterrence feature wh... |
| CVE-2023-5409 | MEDIUM | 6.8 | 0.3% | Oct 13, 2023 | HP is aware of a potential security vulnerability in HP t430 and t638 Thin Client PCs. These models may be susceptible t... |
| CVE-2023-4499 | HIGH | 7.5 | 0.5% | Oct 13, 2023 | A potential security vulnerability has been identified in the HP ThinUpdate utility (also known as HP Recovery Image and... |
| CVE-2023-45276 | HIGH | 8.8 | 0.2% | Oct 13, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in automatededitor.Com Automated Editor plugin <= 1.3 versions. |
| CVE-2023-45270 | HIGH | 8.8 | 0.2% | Oct 13, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in PINPOINT.WORLD Pinpoint Booking System plugin <= 2.9.9.4.0 versions. |
| CVE-2023-45269 | MEDIUM | 5.4 | 0.2% | Oct 13, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in David Cole Simple SEO plugin <= 2.0.25 versions. |
| CVE-2023-40682 | MEDIUM | 4.4 | 0.2% | Oct 13, 2023 | IBM App Connect Enterprise 12.0.1.0 through 12.0.8.0 contains an unspecified vulnerability that could allow a local priv... |
| CVE-2023-45268 | HIGH | 8.8 | 0.2% | Oct 13, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Hitsteps Hitsteps Web Analytics plugin <= 5.86 versions. |
| CVE-2023-45267 | HIGH | 8.8 | 0.2% | Oct 13, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Zizou1988 IRivYou plugin <= 2.2.1 versions. |
| CVE-2023-41843 | MEDIUM | 5.4 | 0.5% | Oct 13, 2023 | A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSa... |
| CVE-2023-41836 | MEDIUM | 6.1 | 0.4% | Oct 13, 2023 | An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiS... |
| CVE-2023-41682 | HIGH | 7.5 | 0.8% | Oct 13, 2023 | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox ... |
| CVE-2023-41681 | MEDIUM | 6.1 | 0.4% | Oct 13, 2023 | A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSa... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now