2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-44011 | CRITICAL | 9.8 | 1.4% | Oct 2, 2023 | An issue in mojoPortal v.2.7.0.0 allows a remote attacker to execute arbitrary code via a crafted script to the layout.m... |
| CVE-2023-43893 | CRITICAL | 9.8 | 1.9% | Oct 2, 2023 | Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the wakeup_mac parameter in the W... |
| CVE-2023-43892 | CRITICAL | 9.8 | 1.9% | Oct 2, 2023 | Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the Hostname parameter within the... |
| CVE-2023-43891 | CRITICAL | 9.8 | 1.9% | Oct 2, 2023 | Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability in the Changing Username and Password... |
| CVE-2023-44009 | CRITICAL | 9.8 | 1.4% | Oct 2, 2023 | File Upload vulnerability in mojoPortal v.2.7.0.0 allows a remote attacker to execute arbitrary code via the Skin Manage... |
| CVE-2023-44008 | CRITICAL | 9.8 | 1.3% | Oct 2, 2023 | File Upload vulnerability in mojoPortal v.2.7.0.0 allows a remote attacker to execute arbitrary code via the File Manage... |
| CVE-2023-43836 | MEDIUM | 6.5 | 0.6% | Oct 2, 2023 | There is a SQL injection vulnerability in the Jizhicms 2.4.9 backend, which users can use to obtain database information |
| CVE-2023-43361 | HIGH | 7.8 | 0.4% | Oct 2, 2023 | Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute arbitrary code and cause a deni... |
| CVE-2023-43297 | MEDIUM | 5.4 | 0.2% | Oct 2, 2023 | An issue in animal-art-lab v13.6.1 allows attackers to send crafted notifications via leakage of the channel access toke... |
| CVE-2023-43268 | HIGH | 8.8 | 0.9% | Oct 2, 2023 | Deyue Remote Vehicle Management System v1.1 was discovered to contain a deserialization vulnerability. |
| CVE-2023-43267 | MEDIUM | 5.4 | 0.3% | Oct 2, 2023 | A cross-site scripting (XSS) vulnerability in the publish article function of emlog pro v2.1.14 allows attackers to exec... |
| CVE-2023-5344 | HIGH | 7.5 | 1.2% | Oct 2, 2023 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969. |
| CVE-2023-44463 | MEDIUM | 5.3 | 0.5% | Oct 2, 2023 | An issue was discovered in pretix before 2023.7.1. Incorrect parsing of configuration files causes the application to tr... |
| CVE-2023-43890 | HIGH | 8.8 | 2.5% | Oct 2, 2023 | Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability in the diagnostic tools page. This vu... |
| CVE-2023-43835 | HIGH | 8.8 | 1.4% | Oct 2, 2023 | Super Store Finder 3.7 and below is vulnerable to authenticated Arbitrary PHP Code Injection that could lead to Remote C... |
| CVE-2023-3592 | HIGH | 7.5 | 0.7% | Oct 2, 2023 | In Mosquitto before 2.0.16, a memory leak occurs when clients send v5 CONNECT packets with a will message that contains ... |
| CVE-2023-37605 | MEDIUM | 5.5 | 0.2% | Oct 2, 2023 | Weak Exception Handling vulnerability in baramundi software GmbH EMM Agent 23.1.50 and before allows an attacker to caus... |
| CVE-2023-0809 | MEDIUM | 5.3 | 0.6% | Oct 2, 2023 | In Mosquitto before 2.0.16, excessive memory is allocated based on malicious initial packets that are not CONNECT packet... |
| CVE-2023-40744 | — | — | — | Oct 2, 2023 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requ... |
| CVE-2023-5290 | — | — | — | Oct 2, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes:... |
| CVE-2023-4659 | CRITICAL | 9.8 | 0.4% | Oct 2, 2023 | Cross-Site Request Forgery vulnerability, whose exploitation could allow an attacker to perform different actions on the... |
| CVE-2023-3770 | MEDIUM | 4.3 | 0.4% | Oct 2, 2023 | Incorrect validation vulnerability of the data entered, allowing an attacker with access to the network on which the a... |
| CVE-2023-3769 | HIGH | 7.5 | 0.6% | Oct 2, 2023 | Incorrect data input validation vulnerability, which could allow an attacker with access to the network to implement fuz... |
| CVE-2023-3744 | HIGH | 8.8 | 0.5% | Oct 2, 2023 | Server-Side Request Forgery vulnerability in SLims version 9.6.0. This vulnerability could allow an authenticated attack... |
| CVE-2023-41580 | HIGH | 7.5 | 0.7% | Oct 2, 2023 | Phpipam before v1.5.2 was discovered to contain a LDAP injection vulnerability via the dname parameter at /users/ad-sear... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now