2023 CVE Vulnerabilities

31,509 CVEs published in 2023.

CVE IDSeverityCVSSDescription
CVE-2023-44159HIGH7.5Sensitive information disclosure due to cleartext storage of sensitive information. The following products are affected:...
CVE-2023-44158HIGH7.5Sensitive information disclosure due to insufficient token field masking. The following products are affected: Acronis C...
CVE-2023-44157HIGH7.8Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protec...
CVE-2023-44156HIGH7.5Sensitive information disclosure due to spell-jacking. The following products are affected: Acronis Cyber Protect 15 (Li...
CVE-2023-44155HIGH7.5Sensitive information leak through log files. The following products are affected: Acronis Cyber Protect 15 (Linux, Wind...
CVE-2023-44154HIGH8.1Sensitive information disclosure and manipulation due to improper authorization. The following products are affected: Ac...
CVE-2023-44153HIGH7.5Sensitive information disclosure due to cleartext storage of sensitive information in memory. The following products are...
CVE-2023-44152CRITICAL9.1Sensitive information disclosure and manipulation due to improper authentication. The following products are affected: A...
CVE-2023-44129LOW3.3The vulnerability is that the Messaging ("com.android.mms") app patched by LG forwards attacker-controlled intents back ...
CVE-2023-44128LOW3.6he vulnerability is to delete arbitrary files in LGInstallService ("com.lge.lginstallservies") app. The app contains the...
CVE-2023-44127MEDIUM5.5he vulnerability is that the Call management ("com.android.server.telecom") app patched by LG launches implicit intents ...
CVE-2023-44126MEDIUM5.5The vulnerability is that the Call management ("com.android.server.telecom") app patched by LG sends a lot of LG-owned i...
CVE-2023-44125HIGH7.8The vulnerability is the use of implicit PendingIntents without the PendingIntent.FLAG_IMMUTABLE set that leads to theft...
CVE-2023-44124LOW3.3The vulnerability is to theft of arbitrary files with system privilege in the Screen recording ("com.lge.gametools.gamer...
CVE-2023-44123HIGH7.8The vulnerability is the use of implicit PendingIntents with the PendingIntent.FLAG_MUTABLE set that leads to theft and/...
CVE-2023-44122HIGH7.8The vulnerability is to theft of arbitrary files with system privilege in the LockScreenSettings ("com.lge.lockscreenset...
CVE-2023-44121MEDIUM6.3The vulnerability is an intent redirection in LG ThinQ Service ("com.lge.lms2") in the "com/lge/lms/things/ui/notificati...
CVE-2023-44044HIGH7.2Super Store Finder v3.6 and below was discovered to contain a SQL injection vulnerability via the Search parameter at /a...
CVE-2023-44043MEDIUM6.1A reflected cross-site scripting (XSS) vulnerability in /install/index.php of Black Cat CMS 1.4.1 allows attackers to ex...
CVE-2023-44042MEDIUM5.4A stored cross-site scripting (XSS) vulnerability in /settings/index.php of Black Cat CMS 1.4.1 allows attackers to exec...
CVE-2023-44023CRITICAL9.8Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the ssid parame...
CVE-2023-44022CRITICAL9.8Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the speed_dir p...
CVE-2023-44021CRITICAL9.8Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the formSetClie...
CVE-2023-44020CRITICAL9.8Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the security pa...
CVE-2023-44019CRITICAL9.8Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the mac paramet...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now