2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-45111 | CRITICAL | 9.8 | 0.7% | Nov 2, 2023 | Online Examination System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'email' para... |
| CVE-2023-44025 | CRITICAL | 9.8 | 0.8% | Nov 1, 2023 | SQL injection vulnerability in addify Addifyfreegifts v.1.0.2 and before allows a remote attacker to execute arbitrary c... |
| CVE-2023-39281 | CRITICAL | 9.8 | 0.5% | Nov 1, 2023 | A stack buffer overflow vulnerability discovered in AsfSecureBootDxe in Insyde InsydeH2O with kernel 5.0 through 5.5 all... |
| CVE-2023-46482 | CRITICAL | 9.8 | 1.2% | Nov 1, 2023 | SQL injection vulnerability in wuzhicms v.4.1.0 allows a remote attacker to execute arbitrary code via the Database Back... |
| CVE-2023-5766 | CRITICAL | 9.8 | 0.6% | Nov 1, 2023 | A remote code execution vulnerability in Remote Desktop Manager 2023.2.33 and earlier on Windows allows an attacker to... |
| CVE-2023-5765 | CRITICAL | 9.8 | 0.6% | Nov 1, 2023 | Improper access control in the password analyzer feature in Devolutions Remote Desktop Manager 2023.2.33 and earlier on ... |
| CVE-2023-20048 | CRITICAL | 9.9 | 15.8% | Nov 1, 2023 | A vulnerability in the web services interface of Cisco Firepower Management Center (FMC) Software could allow an authent... |
| CVE-2023-1719 | CRITICAL | 9.8 | 5.0% | Nov 1, 2023 | Global variable extraction in bitrix/modules/main/tools.php in Bitrix24 22.0.300 allows unauthenticated remote attackers... |
| CVE-2023-1717 | CRITICAL | 9.6 | 1.1% | Nov 1, 2023 | Prototype pollution in bitrix/templates/bitrix24/components/bitrix/menu/left_vertical/script.js in Bitrix24 22.0.300 al... |
| CVE-2023-1716 | CRITICAL | 9.6 | 0.7% | Nov 1, 2023 | Cross-site scripting (XSS) vulnerability in Invoice Edit Page in Bitrix24 22.0.300 allows attackers to execute arbitrar... |
| CVE-2023-46485 | CRITICAL | 9.8 | 1.2% | Oct 31, 2023 | An issue in TOTOlink X6000R V9.4.0cu.852_B20230719 allows a remote attacker to execute arbitrary code via the setTracero... |
| CVE-2023-46484 | CRITICAL | 9.8 | 1.2% | Oct 31, 2023 | An issue in TOTOlink X6000R V9.4.0cu.852_B20230719 allows a remote attacker to execute arbitrary code via the setLedCfg ... |
| CVE-2023-46256 | CRITICAL | 9.8 | 0.6% | Oct 31, 2023 | PX4-Autopilot provides PX4 flight control solution for drones. In versions 1.14.0-rc1 and prior, PX4-Autopilot has a hea... |
| CVE-2023-46249 | CRITICAL | 9.8 | 0.7% | Oct 31, 2023 | authentik is an open-source Identity Provider. Prior to versions 2023.8.4 and 2023.10.2, when the default admin user has... |
| CVE-2023-46993 | CRITICAL | 9.8 | 1.5% | Oct 31, 2023 | In TOTOLINK A3300R V17.0.0cu.557_B20221024 when dealing with setLedCfg request, there is no verification for the enable ... |
| CVE-2023-42425 | CRITICAL | 9.8 | 0.9% | Oct 31, 2023 | An issue in Turing Video Turing Edge+ EVC5FD v.1.38.6 allows remote attacker to execute arbitrary code and obtain sensit... |
| CVE-2023-37966 | CRITICAL | 9.8 | 0.5% | Oct 31, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Solwin Infotech Us... |
| CVE-2023-36508 | CRITICAL | 9.8 | 0.6% | Oct 31, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BestWebSoft Contac... |
| CVE-2023-35879 | CRITICAL | 9.8 | 0.6% | Oct 31, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WooCommerce Produc... |
| CVE-2023-33927 | CRITICAL | 9.8 | 0.7% | Oct 31, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeisle Multiple... |
| CVE-2023-31212 | CRITICAL | 9.8 | 0.8% | Oct 31, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CRM Perks Database... |
| CVE-2023-24410 | CRITICAL | 9.8 | 0.6% | Oct 31, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Contact Form - WPM... |
| CVE-2023-22518 | CRITICAL | 9.8 | 100.0% | Oct 31, 2023 | All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authoriz... |
| CVE-2023-5360 | CRITICAL | 9.8 | 81.7% | Oct 31, 2023 | The Royal Elementor Addons and Templates WordPress plugin before 1.3.79 does not properly validate uploaded files, which... |
| CVE-2023-46979 | CRITICAL | 9.8 | 1.5% | Oct 31, 2023 | TOTOLINK X6000R V9.4.0cu.852_B20230719 was discovered to contain a command injection vulnerability via the enable parame... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now