2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-6603 | HIGH | 7.5 | 0.5% | Dec 31, 2024 | A flaw was found in FFmpeg's HLS playlist parsing. This vulnerability allows a denial of service via a maliciously craft... |
| CVE-2023-6602 | MEDIUM | 5.3 | 0.4% | Dec 31, 2024 | A flaw was found in FFmpeg's TTY Demuxer. This vulnerability allows possible data exfiltration via improper parsing of n... |
| CVE-2023-50850 | MEDIUM | 4.3 | 0.4% | Dec 31, 2024 | Missing Authorization vulnerability in Woo WooCommerce Subscriptions allows Exploiting Incorrectly Configured Access Con... |
| CVE-2023-48775 | MEDIUM | 5.3 | 0.4% | Dec 31, 2024 | Missing Authorization vulnerability in Gfazioli WP Cleanfix allows Exploiting Incorrectly Configured Access Control Secu... |
| CVE-2023-52718 | HIGH | 8.1 | 0.1% | Dec 28, 2024 | A connection hijacking vulnerability exists in some Huawei home routers. Successful exploitation of this vulnerability m... |
| CVE-2023-7266 | HIGH | 8.1 | 0.3% | Dec 28, 2024 | Some Huawei home routers have a connection hijacking vulnerability. Successful exploitation of this vulnerability may ca... |
| CVE-2023-7263 | HIGH | 7.3 | 0.3% | Dec 28, 2024 | Some Huawei home music system products have a path traversal vulnerability. Successful exploitation of this vulnerabilit... |
| CVE-2023-7300 | HIGH | 8 | 0.3% | Dec 26, 2024 | Huawei Home Music System has a path traversal vulnerability. Successful exploitation of this vulnerability may cause the... |
| CVE-2023-5117 | LOW | 3.7 | 0.3% | Dec 25, 2024 | An issue was discovered in GitLab CE/EE affecting all versions before 17.6.0 in which users were unaware that files uplo... |
| CVE-2023-31280 | MEDIUM | 5.3 | 0.4% | Dec 21, 2024 | An AirVantage online Warranty Checker tool vulnerability could allow an attacker to perform bulk enumeration of IMEI an... |
| CVE-2023-31279 | HIGH | 8.1 | 0.4% | Dec 21, 2024 | The AirVantage platform is vulnerable to an unauthorized attacker registering previously unregistered devices on the Ai... |
| CVE-2023-42867 | HIGH | 7.8 | 0.2% | Dec 20, 2024 | This issue was addressed with improved validation of the process entitlement and Team ID. This issue is fixed in GarageB... |
| CVE-2023-7005 | HIGH | 7.5 | 0.2% | Dec 19, 2024 | A specially crafted message can be sent to the TTLock App that downgrades the encryption protocol used for communication... |
| CVE-2023-4617 | CRITICAL | 10 | 0.6% | Dec 19, 2024 | Incorrect authorization vulnerability in HTTP POST method in Govee Home application on Android and iOS allows remote att... |
| CVE-2023-30443 | MEDIUM | 6.5 | 0.4% | Dec 19, 2024 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of servic... |
| CVE-2023-23357 | MEDIUM | 4.8 | 0.3% | Dec 19, 2024 | A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If exploi... |
| CVE-2023-23356 | HIGH | 7.2 | 0.7% | Dec 19, 2024 | A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the ... |
| CVE-2023-23354 | HIGH | 8.7 | 0.4% | Dec 19, 2024 | A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If exploi... |
| CVE-2023-21586 | MEDIUM | 5.5 | 2.1% | Dec 19, 2024 | Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are ... |
| CVE-2023-50956 | MEDIUM | 4.9 | 0.3% | Dec 18, 2024 | IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.9 could allow a privileged user to obtain highly sensitive... |
| CVE-2023-34990 | CRITICAL | 9.8 | 24.9% | Dec 18, 2024 | A relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to ex... |
| CVE-2023-37940 | MEDIUM | 4.8 | 0.3% | Dec 17, 2024 | Cross-site scripting (XSS) vulnerability in the edit Service Access Policy page in Liferay Portal 7.0.0 through 7.4.3.87... |
| CVE-2023-29476 | CRITICAL | 9.1 | 0.4% | Dec 14, 2024 | In Menlo On-Premise Appliance before 2.88, web policy may not be consistently applied properly to intentionally malforme... |
| CVE-2023-44149 | MEDIUM | 5.3 | 0.5% | Dec 13, 2024 | Missing Authorization vulnerability in BeRocket Brands for WooCommerce brands-for-woocommerce allows Exploiting Incorrec... |
| CVE-2023-44147 | MEDIUM | 5.3 | 0.5% | Dec 13, 2024 | Missing Authorization vulnerability in apasionados Comment Blacklist Updater comment-blacklist-updater allows Exploiting... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now