2023 CVE Vulnerabilities
31,510 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-30943 | MEDIUM | 5.3 | 6.6% | May 2, 2023 | The vulnerability was found Moodle which exists because the application allows a user to control path of the older to cr... |
| CVE-2023-30403 | HIGH | 7.5 | 14.9% | May 2, 2023 | An issue in the time-based authentication mechanism of Aigital Aigital Wireless-N Repeater Mini_Router v0.131229 allows ... |
| CVE-2023-29778 | CRITICAL | 9.8 | 17.7% | May 2, 2023 | GL.iNET MT3000 4.1.0 Release 2 is vulnerable to OS Command Injection via /usr/lib/oui-httpd/rpc/logread. |
| CVE-2023-26546 | HIGH | 8.8 | 1.4% | May 2, 2023 | European Chemicals Agency IUCLID before 6.27.6 allows remote authenticated users to execute arbitrary code via Server Si... |
| CVE-2023-26089 | CRITICAL | 9.8 | 1.1% | May 2, 2023 | European Chemicals Agency IUCLID 6.x before 6.27.6 allows authentication bypass because a weak hard-coded secret is used... |
| CVE-2023-30861 | HIGH | 7.5 | 1.3% | May 2, 2023 | Flask is a lightweight WSGI web application framework. When all of the following conditions are met, a response containi... |
| CVE-2023-29918 | MEDIUM | 5.4 | 2.2% | May 2, 2023 | RosarioSIS 10.8.4 is vulnerable to CSV injection via the Periods Module. |
| CVE-2023-29868 | MEDIUM | 6.5 | 1.0% | May 2, 2023 | Zammad 5.3.x (Fixed in 5.4.0) is vulnerable to Incorrect Access Control. An authenticated attacker with agent and custom... |
| CVE-2023-29867 | MEDIUM | 6.5 | 0.5% | May 2, 2023 | Zammad 5.3.x (Fixed 5.4.0) is vulnerable to Incorrect Access Control. An authenticated attacker could gain information a... |
| CVE-2023-2479 | CRITICAL | 9.8 | 22.0% | May 2, 2023 | OS Command Injection in GitHub repository appium/appium-desktop prior to v1.22.3-4. |
| CVE-2023-29856 | CRITICAL | 9.8 | 0.9% | May 2, 2023 | D-Link DIR-868L Hardware version A1, firmware version 1.12 is vulnerable to Buffer Overflow. The vulnerability is in sca... |
| CVE-2023-2477 | MEDIUM | 6.1 | 0.5% | May 2, 2023 | A vulnerability was found in Funadmin up to 3.2.3. It has been declared as problematic. Affected by this vulnerability i... |
| CVE-2023-2476 | MEDIUM | 5.4 | 0.5% | May 2, 2023 | A vulnerability was found in Dromara J2eeFAST up to 2.6.0. It has been classified as problematic. Affected is an unknown... |
| CVE-2023-2445 | MEDIUM | 4.9 | 1.0% | May 2, 2023 | Improper access control in Subscriptions Folder path filter in Devolutions Server 2023.1.1 and earlier allows attackers ... |
| CVE-2023-2475 | MEDIUM | 5.4 | 0.5% | May 2, 2023 | A vulnerability was found in Dromara J2eeFAST up to 2.6.0 and classified as problematic. This issue affects some unknown... |
| CVE-2023-2474 | MEDIUM | 4.3 | 0.4% | May 2, 2023 | A vulnerability has been found in Rebuild 3.2 and classified as problematic. This vulnerability affects unknown code. Th... |
| CVE-2023-2473 | MEDIUM | 4.3 | 0.9% | May 2, 2023 | A vulnerability was found in Dreamer CMS up to 4.1.3. It has been declared as problematic. This vulnerability affects th... |
| CVE-2023-29772 | MEDIUM | 5.2 | 11.6% | May 2, 2023 | A Cross-site scripting (XSS) vulnerability in the System Log/General Log page of the administrator web UI in ASUS RT-AC5... |
| CVE-2023-23723 | MEDIUM | 4.8 | 0.4% | May 2, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Winwar Media WP Email Capture plugin <= 3.9.3 versions... |
| CVE-2023-30869 | CRITICAL | 9.8 | 3.1% | May 2, 2023 | Improper Authentication vulnerability in Easy Digital Downloads plugin allows unauth. Privilege Escalation. This issue a... |
| CVE-2023-32007 | HIGH | 8.8 | 75.8% | May 2, 2023 | ** UNSUPPORTED WHEN ASSIGNED ** The Apache Spark UI offers the possibility to enable ACLs via the configuration option s... |
| CVE-2023-31207 | MEDIUM | 5.5 | 0.2% | May 2, 2023 | Transmission of credentials within query parameters in Checkmk <= 2.1.0p26, <= 2.0.0p35, and <= 2.2.0b6 (beta) may cause... |
| CVE-2023-2000 | MEDIUM | 5.4 | 0.4% | May 2, 2023 | Mattermost Desktop App fails to validate a mattermost server redirection and navigates to an arbitrary website |
| CVE-2023-1196 | HIGH | 8.8 | 1.1% | May 2, 2023 | The Advanced Custom Fields (ACF) Free and Pro WordPress plugins 6.x before 6.1.0 and 5.x before 5.12.5 unserialize user ... |
| CVE-2023-1911 | MEDIUM | 4.3 | 0.5% | May 2, 2023 | The Blocksy Companion WordPress plugin before 1.8.82 does not ensure that posts to be accessed via a shortcode are alrea... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now