2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-40834 | CRITICAL | 9.8 | 1.1% | Sep 12, 2023 | OpenCart CMS v4.0.2.2 was discovered to lack a protective mechanism on its login page against excessive login attempts, ... |
| CVE-2023-2071 | CRITICAL | 9.8 | 11.0% | Sep 12, 2023 | Rockwell Automation FactoryTalk View Machine Edition on the PanelView Plus, improperly verifies user’s input, which all... |
| CVE-2023-39150 | CRITICAL | 9.8 | 0.8% | Sep 12, 2023 | ConEmu before commit 230724 does not sanitize title responses correctly for control characters, potentially leading to a... |
| CVE-2023-39637 | CRITICAL | 9.8 | 2.1% | Sep 12, 2023 | D-Link DIR-816 A2 1.10 B05 was discovered to contain a command injection vulnerability via the component /goform/Diagnos... |
| CVE-2023-40622 | CRITICAL | 9.9 | 0.5% | Sep 12, 2023 | SAP BusinessObjects Business Intelligence Platform (Promotion Management) - versions 420, 430, under certain condition a... |
| CVE-2023-40309 | CRITICAL | 9.8 | 0.7% | Sep 12, 2023 | SAP CommonCryptoLib does not perform necessary authentication checks, which may result in missing or wrong authorization... |
| CVE-2023-39069 | CRITICAL | 9.8 | 0.7% | Sep 11, 2023 | An issue in StrangeBee TheHive v.5.0.8, v.4.1.21 and Cortex v.3.1.6 allows a remote attacker to gain privileges via Acti... |
| CVE-2023-4897 | CRITICAL | 9.8 | 0.8% | Sep 11, 2023 | Relative Path Traversal in GitHub repository mintplex-labs/anything-llm prior to 0.0.1. |
| CVE-2023-35681 | CRITICAL | 9.8 | 0.5% | Sep 11, 2023 | In eatt_l2cap_reconfig_completed of eatt_impl.h, there is a possible out of bounds write due to an integer overflow. Thi... |
| CVE-2023-40946 | CRITICAL | 9.8 | 0.6% | Sep 11, 2023 | Schoolmate 1.3 is vulnerable to SQL Injection in the variable $username from SESSION in ValidateLogin.php. |
| CVE-2023-40945 | CRITICAL | 9.8 | 0.7% | Sep 11, 2023 | Sourcecodester Doctor Appointment System 1.0 is vulnerable to SQL Injection in the variable $userid at doctors\myDetails... |
| CVE-2023-40944 | CRITICAL | 9.8 | 0.6% | Sep 11, 2023 | Schoolmate 1.3 is vulnerable to SQL Injection in the variable $schoolname from Database at ~\header.php. |
| CVE-2023-40150 | CRITICAL | 9.8 | 1.0% | Sep 11, 2023 | Softneta MedDream PACS does not perform an authentication check and performs some dangerous functionality, which could ... |
| CVE-2023-41256 | CRITICAL | 9.1 | 0.7% | Sep 11, 2023 | Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, and 3... |
| CVE-2023-31069 | CRITICAL | 9.8 | 1.9% | Sep 11, 2023 | An issue was discovered in TSplus Remote Access through 16.0.2.14. Credentials are stored as cleartext within the HTML s... |
| CVE-2023-31068 | CRITICAL | 9.8 | 2.8% | Sep 11, 2023 | An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on so... |
| CVE-2023-31067 | CRITICAL | 9.8 | 2.9% | Sep 11, 2023 | An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on so... |
| CVE-2023-30058 | CRITICAL | 9.8 | 0.8% | Sep 11, 2023 | novel-plus 3.6.2 is vulnerable to SQL Injection. |
| CVE-2023-36140 | CRITICAL | 9.8 | 0.4% | Sep 11, 2023 | In PHPJabbers Cleaning Business Software 1.0, there is no encryption on user passwords allowing an attacker to gain acce... |
| CVE-2023-42471 | CRITICAL | 9.8 | 1.4% | Sep 11, 2023 | The wave.ai.browser application through 1.0.35 for Android allows a remote attacker to execute arbitrary JavaScript code... |
| CVE-2023-42470 | CRITICAL | 9.8 | 2.0% | Sep 11, 2023 | The Imou Life com.mm.android.smartlifeiot application through 6.8.0 for Android allows Remote Code Execution via a craft... |
| CVE-2023-40039 | CRITICAL | 9.8 | 0.9% | Sep 11, 2023 | An issue was discovered on ARRIS TG852G, TG862G, and TG1672G devices. A remote attacker (in proximity to a Wi-Fi network... |
| CVE-2023-4873 | CRITICAL | 9.8 | 74.9% | Sep 10, 2023 | A vulnerability, which was classified as critical, was found in Byzoro Smart S45F Multi-Service Secure Gateway Intellige... |
| CVE-2023-4872 | CRITICAL | 9.8 | 0.7% | Sep 10, 2023 | A vulnerability, which was classified as critical, has been found in SourceCodester Contact Manager App 1.0. This issue ... |
| CVE-2023-4871 | CRITICAL | 9.8 | 0.7% | Sep 10, 2023 | A vulnerability classified as critical was found in SourceCodester Contact Manager App 1.0. This vulnerability affects u... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now