2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-5215 | MEDIUM | 6.5 | 0.7% | Sep 28, 2023 | A flaw was found in libnbd. A server can reply with a block size larger than 2^63 (the NBD spec states the size is a 64-... |
| CVE-2023-43874 | MEDIUM | 5.4 | 0.6% | Sep 28, 2023 | Multiple Cross Site Scripting (XSS) vulnerability in e017 CMS v.2.3.2 allows a local attacker to execute arbitrary code ... |
| CVE-2023-43873 | MEDIUM | 5.4 | 0.5% | Sep 28, 2023 | A Cross Site Scripting (XSS) vulnerability in e017 CMS v.2.3.2 allows a local attacker to execute arbitrary code via a c... |
| CVE-2023-43872 | MEDIUM | 5.4 | 0.5% | Sep 28, 2023 | A File upload vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to upload a pdf file with hidden Cross Sit... |
| CVE-2023-43871 | MEDIUM | 5.4 | 0.4% | Sep 28, 2023 | A File upload vulnerability in WBCE v.1.6.1 allows a local attacker to upload a pdf file with hidden Cross Site Scriptin... |
| CVE-2023-43868 | HIGH | 7.5 | 0.8% | Sep 28, 2023 | D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via websGetVar function. |
| CVE-2023-43867 | HIGH | 7.5 | 0.8% | Sep 28, 2023 | D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWanL2TP function. |
| CVE-2023-43866 | HIGH | 7.5 | 0.8% | Sep 28, 2023 | D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWAN_Wizard7 function. |
| CVE-2023-43865 | HIGH | 7.5 | 0.8% | Sep 28, 2023 | D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWanPPTP function. |
| CVE-2023-43864 | HIGH | 7.5 | 0.8% | Sep 28, 2023 | D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWAN_Wizard55 function. |
| CVE-2023-43863 | HIGH | 7.5 | 0.8% | Sep 28, 2023 | D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWanDhcpplus function. |
| CVE-2023-43862 | HIGH | 7.5 | 0.7% | Sep 28, 2023 | D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formLanguageChange function. |
| CVE-2023-43861 | HIGH | 7.5 | 0.8% | Sep 28, 2023 | D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWanPPPoE function. |
| CVE-2023-43860 | HIGH | 7.5 | 0.7% | Sep 28, 2023 | D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWanNonLogin function. |
| CVE-2023-42756 | MEDIUM | 4.7 | 0.3% | Sep 28, 2023 | A flaw was found in the Netfilter subsystem of the Linux kernel. A race condition between IPSET_CMD_ADD and IPSET_CMD_SW... |
| CVE-2023-40307 | HIGH | 7.8 | 0.2% | Sep 28, 2023 | An attacker with standard privileges on macOS when requesting administrator privileges from the application can submit i... |
| CVE-2023-43869 | CRITICAL | 9.8 | 1.0% | Sep 28, 2023 | D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWAN_Wizard56 function. |
| CVE-2023-5233 | MEDIUM | 5.4 | 0.4% | Sep 28, 2023 | The Font Awesome Integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'fawesome' shortcode ... |
| CVE-2023-5232 | MEDIUM | 5.4 | 0.4% | Sep 28, 2023 | The Font Awesome More Icons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'icon' shortcode in ve... |
| CVE-2023-5230 | MEDIUM | 5.4 | 0.3% | Sep 28, 2023 | The TM WooCommerce Compare & Wishlist plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'tm_woo_wish... |
| CVE-2023-44276 | MEDIUM | 5.4 | 0.5% | Sep 28, 2023 | OPNsense before 23.7.5 allows XSS via the index.php sequence parameter to the Lobby Dashboard. |
| CVE-2023-44275 | MEDIUM | 5.4 | 0.5% | Sep 28, 2023 | OPNsense before 23.7.5 allows XSS via the index.php column_count parameter to the Lobby Dashboard. |
| CVE-2023-26149 | MEDIUM | 6.1 | 0.6% | Sep 28, 2023 | Versions of the package quill-mention before 4.0.0 are vulnerable to Cross-site Scripting (XSS) due to improper user-inp... |
| CVE-2023-26145 | HIGH | 8.1 | 2.9% | Sep 28, 2023 | This affects versions of the package pydash before 6.0.0. A number of pydash methods such as pydash.objects.invoke() and... |
| CVE-2023-44273 | CRITICAL | 9.8 | 0.8% | Sep 28, 2023 | Consensys gnark-crypto through 0.11.2 allows Signature Malleability. This occurs because deserialisation of EdDSA and EC... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now