2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-34545 | CRITICAL | 9.8 | 0.6% | Aug 9, 2023 | A SQL injection vulnerability in CSZCMS 1.3.0 allows remote attackers to run arbitrary SQL commands via p parameter or t... |
| CVE-2023-3632 | CRITICAL | 9.8 | 0.6% | Aug 9, 2023 | Use of Hard-coded Cryptographic Key vulnerability in Sifir Bes Education and Informatics Kunduz - Homework Helper App al... |
| CVE-2023-33934 | CRITICAL | 9.1 | 1.1% | Aug 9, 2023 | Improper Input Validation vulnerability in Apache Software Foundation Apache Traffic Server.This issue affects Apache Tr... |
| CVE-2023-26310 | CRITICAL | 9.8 | 1.0% | Aug 9, 2023 | There is a command injection problem in the old version of the mobile phone backup app. |
| CVE-2023-39213 | CRITICAL | 9.8 | 1.3% | Aug 8, 2023 | Improper neutralization of special elements in Zoom Desktop Client for Windows and Zoom VDI Client before 5.15.2 may all... |
| CVE-2023-40042 | CRITICAL | 9.8 | 1.4% | Aug 8, 2023 | TOTOLINK T10_v2 5.9c.5061_B20200511 has a stack-based buffer overflow in setStaticDhcpConfig in /lib/cste_modules/lan.so... |
| CVE-2023-40041 | CRITICAL | 9.8 | 0.9% | Aug 8, 2023 | TOTOLINK T10_v2 5.9c.5061_B20200511 has a stack-based buffer overflow in setWiFiWpsConfig in /lib/cste_modules/wps.so. A... |
| CVE-2023-39216 | CRITICAL | 9.8 | 1.1% | Aug 8, 2023 | Improper input validation in Zoom Desktop Client for Windows before 5.14.7 may allow an unauthenticated user to enable a... |
| CVE-2023-38186 | CRITICAL | 9.8 | 1.3% | Aug 8, 2023 | Windows Mobile Device Management Elevation of Privilege Vulnerability |
| CVE-2023-36911 | CRITICAL | 9.8 | 1.7% | Aug 8, 2023 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
| CVE-2023-36910 | CRITICAL | 9.8 | 2.5% | Aug 8, 2023 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
| CVE-2023-36903 | CRITICAL | 9.8 | 1.6% | Aug 8, 2023 | Windows System Assessment Tool Elevation of Privilege Vulnerability |
| CVE-2023-36534 | CRITICAL | 9.8 | 1.4% | Aug 8, 2023 | Path traversal in Zoom Desktop Client for Windows before 5.14.7 may allow an unauthenticated user to enable an escalatio... |
| CVE-2023-35385 | CRITICAL | 9.8 | 2.5% | Aug 8, 2023 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
| CVE-2023-21709 | CRITICAL | 9.8 | 2.1% | Aug 8, 2023 | Microsoft Exchange Server Elevation of Privilege Vulnerability |
| CVE-2023-20586 | CRITICAL | 9.8 | 0.8% | Aug 8, 2023 | A potential vulnerability was reported in Radeon™ Software Crimson ReLive Edition which may allow escalation of privile... |
| CVE-2023-39532 | CRITICAL | 9.8 | 1.2% | Aug 8, 2023 | SES is a JavaScript environment that allows safe execution of arbitrary programs in Compartments. In version 0.18.0 prio... |
| CVE-2023-3522 | CRITICAL | 9.8 | 0.5% | Aug 8, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in a2 License Portal ... |
| CVE-2023-3386 | CRITICAL | 9.8 | 0.5% | Aug 8, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in a2 Camera Trap Tra... |
| CVE-2023-3651 | CRITICAL | 9.8 | 0.6% | Aug 8, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Digital Ant E-Comm... |
| CVE-2023-3716 | CRITICAL | 9.8 | 0.5% | Aug 8, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Oduyo Online Colle... |
| CVE-2023-37682 | CRITICAL | 9.8 | 0.6% | Aug 8, 2023 | Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php-jms/... |
| CVE-2023-3717 | CRITICAL | 9.8 | 0.5% | Aug 8, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Farmakom Remote Ad... |
| CVE-2023-37372 | CRITICAL | 9.8 | 0.7% | Aug 8, 2023 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.4). The affected applications is vulnerable... |
| CVE-2023-28561 | CRITICAL | 9.8 | 0.4% | Aug 8, 2023 | Memory corruption in QESL while processing payload from external ESL device to firmware. |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now