2023 CVE Vulnerabilities

31,411 CVEs published in 2023.

CVE IDSeverityCVSSDescription
CVE-2023-25089HIGH7.2Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of a...
CVE-2023-25088HIGH7.2Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of a...
CVE-2023-25087HIGH7.2Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of a...
CVE-2023-25086HIGH7.2Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of a...
CVE-2023-25085HIGH7.2Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of a...
CVE-2023-25084HIGH7.2Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of a...
CVE-2023-25083HIGH7.2Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of a...
CVE-2023-25082HIGH7.2Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of a...
CVE-2023-25081HIGH7.2Multiple buffer overflow vulnerabilities exist in the vtysh_ubus binary of Milesight UR32L v32.3.0.5 due to the use of a...
CVE-2023-24595HIGH7.2An OS command injection vulnerability exists in the ys_thirdparty system_user_script functionality of Milesight UR32L v3...
CVE-2023-24583HIGH8.8Two OS command injection vulnerabilities exist in the urvpn_client cmd_name_action functionality of Milesight UR32L v32....
CVE-2023-24582HIGH8.8Two OS command injection vulnerabilities exist in the urvpn_client cmd_name_action functionality of Milesight UR32L v32....
CVE-2023-24520HIGH8.8Two OS command injection vulnerability exist in the vtysh_ubus toolsh_excute.constprop.1 functionality of Milesight UR32...
CVE-2023-24519HIGH8.8Two OS command injection vulnerability exist in the vtysh_ubus toolsh_excute.constprop.1 functionality of Milesight UR32...
CVE-2023-24497MEDIUM4.7Cross-site scripting (xss) vulnerabilities exist in the requestHandlers.js detail_device functionality of Milesight VPN ...
CVE-2023-24496MEDIUM4.7Cross-site scripting (xss) vulnerabilities exist in the requestHandlers.js detail_device functionality of Milesight VPN ...
CVE-2023-24019HIGH8.1A stack-based buffer overflow vulnerability exists in the urvpn_client http_connection_readcb functionality of Milesight...
CVE-2023-24018HIGH8.8A stack-based buffer overflow vulnerability exists in the libzebra.so.0.0.0 security_decrypt_password functionality of M...
CVE-2023-23907HIGH7.5A directory traversal vulnerability exists in the server.js start functionality of Milesight VPN v2.0.2. A specially-cra...
CVE-2023-23902CRITICAL9.8A buffer overflow vulnerability exists in the uhttpd login functionality of Milesight UR32L v32.3.0.5. A specially craft...
CVE-2023-23571HIGH7.5An access violation vulnerability exists in the eventcore functionality of Milesight UR32L v32.3.0.5. A specially crafte...
CVE-2023-23550HIGH7.2An OS command injection vulnerability exists in the ys_thirdparty user_delete functionality of Milesight UR32L v32.3.0.5...
CVE-2023-23547MEDIUM6.5A directory traversal vulnerability exists in the luci2-io file-export mib functionality of Milesight UR32L v32.3.0.5. A...
CVE-2023-23546HIGH8.1A misconfiguration vulnerability exists in the urvpn_client functionality of Milesight UR32L v32.3.0.5. A specially-craf...
CVE-2023-22844CRITICAL9.8An authentication bypass vulnerability exists in the requestHandlers.js verifyToken functionality of Milesight VPN v2.0....

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now