2023 CVE Vulnerabilities

31,509 CVEs published in 2023.

CVE IDSeverityCVSSDescription
CVE-2023-43236CRITICAL9.8D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter statuscheckpppoeuser in dir_setWan...
CVE-2023-43235CRITICAL9.8D-Link DIR-823G v1.0.2B05 was discovered to contain a stack overflow via parameter StartTime and EndTime in SetWifiDownS...
CVE-2023-4753MEDIUM5.5OpenHarmony v3.2.1 and prior version has a system call function usage error. Local attackers can crash kernel by the err...
CVE-2023-5104MEDIUM6.5Improper Input Validation in GitHub repository nocodb/nocodb prior to 0.96.0.
CVE-2023-4760CRITICAL9.8In Eclipse RAP versions from 3.0.0 up to and including 3.25.0, Remote Code Execution is possible on Windows when using t...
CVE-2023-4292MEDIUM5.3Frauscher Sensortechnik GmbH FDS101 for FAdC/FAdCi v1.4.24 and all previous versions are vulnerable to a SQL injection v...
CVE-2023-4291CRITICAL9.8Frauscher Sensortechnik GmbH FDS101 for FAdC/FAdCi v1.4.24 and all previous versions are vulnerable to a remote code exe...
CVE-2023-4152HIGH7.5Frauscher Sensortechnik GmbH FDS101 for FAdC/FAdCi v1.4.24 and all previous versions are vulnerable to a path traversal ...
CVE-2023-43669HIGH7.5The Tungstenite crate before 0.20.1 for Rust allows remote attackers to cause a denial of service (minutes of CPU consum...
CVE-2023-39252MEDIUM5.9 Dell SCG Policy Manager 5.16.00.14 contains a broken cryptographic algorithm vulnerability. A remote unauthenticated a...
CVE-2023-43135CRITICAL9.8There is an unauthorized access vulnerability in TP-LINK ER5120G 4.0 2.0.0 Build 210817 Rel.80868n, which allows attacke...
CVE-2023-39675CRITICAL9.8SimpleImportProduct Prestashop Module v6.2.9 was discovered to contain a SQL injection vulnerability via the key paramet...
CVE-2023-37279HIGH7.5Faktory is a language-agnostic persistent background job server. Prior to version 1.8.0, the Faktory web dashboard can s...
CVE-2023-36234MEDIUM5.4Cross Site Scripting (XSS) vulnerability in Netbox 3.5.1, allows attackers to execute arbitrary code via Name field in d...
CVE-2023-36109CRITICAL9.8Buffer Overflow vulnerability in JerryScript version 3.0, allows remote attackers to execute arbitrary code via ecma_str...
CVE-2023-34575CRITICAL9.8SQL injection vulnerability in PrestaShop opartsavecart through 2.0.7 allows remote attackers to run arbitrary SQL comma...
CVE-2023-42322CRITICAL9.8Insecure Permissions vulnerability in icmsdev iCMS v.7.0.16 allows a remote attacker to obtain sensitive information.
CVE-2023-42321HIGH8.8Cross Site Request Forgery (CSRF) vulnerability in icmsdev iCMSv.7.0.16 allows a remote attacker to execute arbitrary co...
CVE-2023-39677HIGH7.5MyPrestaModules Prestashop Module v6.2.9 and UpdateProducts Prestashop Module v3.6.9 were discovered to contain a PHPInf...
CVE-2023-38876MEDIUM6.1A reflected cross-site scripting (XSS) vulnerability in msaad1999's PHP-Login-System 2.0.1 allows remote attackers to ex...
CVE-2023-38875MEDIUM6.1A reflected cross-site scripting (XSS) vulnerability in msaad1999's PHP-Login-System 2.0.1 allows remote attackers to ex...
CVE-2023-22024MEDIUM5.5In the Unbreakable Enterprise Kernel (UEK), the RDS module in UEK has two setsockopt(2) options, RDS_CONN_RESET and RDS6...
CVE-2023-43138HIGH8.8TPLINK TL-ER5120G 4.0 2.0.0 Build 210817 Rel.80868n has a command injection vulnerability, when an attacker adds NAPT ru...
CVE-2023-43137HIGH8.8TPLINK TL-ER5120G 4.0 2.0.0 Build 210817 Rel.80868n has a command injection vulnerability, when an attacker adds ACL rul...
CVE-2023-43134CRITICAL9.8There is an unauthorized access vulnerability in Netis 360RAC1200 v1.3.4517, which allows attackers to obtain sensitive ...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now