2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-44018 | CRITICAL | 9.8 | 15.4% | Sep 27, 2023 | Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the domain para... |
| CVE-2023-44017 | CRITICAL | 9.8 | 0.9% | Sep 27, 2023 | Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the timeZone pa... |
| CVE-2023-44016 | CRITICAL | 9.8 | 0.9% | Sep 27, 2023 | Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the deviceId pa... |
| CVE-2023-44015 | CRITICAL | 9.8 | 0.6% | Sep 27, 2023 | Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the schedEndTim... |
| CVE-2023-44014 | CRITICAL | 9.8 | 0.9% | Sep 27, 2023 | Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain multiple stack overflows in the form... |
| CVE-2023-44013 | CRITICAL | 9.8 | 0.9% | Sep 27, 2023 | Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the list parame... |
| CVE-2023-43857 | MEDIUM | 5.4 | 0.4% | Sep 27, 2023 | Dreamer CMS v4.1.3 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the component /admin/... |
| CVE-2023-43856 | HIGH | 7.5 | 0.8% | Sep 27, 2023 | Dreamer CMS v4.1.3 was discovered to contain an arbitrary file read vulnerability via the component /admin/TemplateContr... |
| CVE-2023-43830 | MEDIUM | 5.4 | 0.5% | Sep 27, 2023 | A Cross-site scripting (XSS) vulnerability in /panel/configuration/financial/ of Subrion v4.2.1 allows attackers to exec... |
| CVE-2023-43828 | MEDIUM | 5.4 | 0.5% | Sep 27, 2023 | A Cross-site scripting (XSS) vulnerability in /panel/languages/ of Subrion v4.2.1 allow attackers to execute arbitrary w... |
| CVE-2023-43825 | HIGH | 7.8 | 0.3% | Sep 27, 2023 | Relative path traversal vulnerability in Shihonkanri Plus Ver9.0.3 and earlier allows a local attacker to execute an arb... |
| CVE-2023-43775 | MEDIUM | 5.3 | 0.7% | Sep 27, 2023 | Denial-of-service vulnerability in the web server of the Eaton SMP Gateway allows attacker to potentially force an une... |
| CVE-2023-43646 | HIGH | 7.5 | 1.1% | Sep 27, 2023 | get-func-name is a module to retrieve a function's name securely and consistently both in NodeJS and the browser. Versio... |
| CVE-2023-43645 | MEDIUM | 5.9 | 0.8% | Sep 27, 2023 | OpenFGA is an authorization/permission engine built for developers and inspired by Google Zanzibar. OpenFGA is vulnerabl... |
| CVE-2023-43614 | MEDIUM | 6.1 | 0.6% | Sep 27, 2023 | Cross-site scripting vulnerability in Order Data Edit page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote ... |
| CVE-2023-43610 | HIGH | 8.8 | 0.9% | Sep 27, 2023 | SQL injection vulnerability in Order Data Edit page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with edit... |
| CVE-2023-43493 | MEDIUM | 4.9 | 0.8% | Sep 27, 2023 | SQL injection vulnerability in Item List page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with author or ... |
| CVE-2023-43484 | MEDIUM | 6.1 | 0.6% | Sep 27, 2023 | Cross-site scripting vulnerability in Item List page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauth... |
| CVE-2023-43381 | HIGH | 7.5 | 1.0% | Sep 27, 2023 | SQL Injection vulnerability in Tianchoy Blog v.1.8.8 allows a remote attacker to obtain sensitive information via the id... |
| CVE-2023-43331 | MEDIUM | 5.4 | 0.5% | Sep 27, 2023 | A cross-site scripting (XSS) vulnerability in the Add User function of Small CRM v3.0 allows attackers to execute arbitr... |
| CVE-2023-43291 | CRITICAL | 9.8 | 1.6% | Sep 27, 2023 | Deserialization of Untrusted Data in emlog pro v.2.1.15 and earlier allows a remote attacker to execute arbitrary code v... |
| CVE-2023-43263 | MEDIUM | 6.1 | 0.7% | Sep 27, 2023 | A Cross-site scripting (XSS) vulnerability in Froala Editor v.4.1.1 allows attackers to execute arbitrary code via the M... |
| CVE-2023-43234 | CRITICAL | 9.8 | 1.0% | Sep 27, 2023 | DedeBIZ v6.2.11 was discovered to contain multiple remote code execution (RCE) vulnerabilities at /admin/file_manage_con... |
| CVE-2023-43232 | MEDIUM | 5.4 | 0.4% | Sep 27, 2023 | A stored cross-site scripting (XSS) vulnerability in the Website column management function of DedeBIZ v6.2.11 allows at... |
| CVE-2023-43222 | CRITICAL | 9.8 | 0.8% | Sep 27, 2023 | SeaCMS v12.8 has an arbitrary code writing vulnerability in the /jxz7g2/admin_ping.php file. |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now