2023 CVE Vulnerabilities
31,510 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-2207 | HIGH | 7.5 | 0.6% | Apr 21, 2023 | A vulnerability classified as critical was found in Campcodes Retro Basketball Shoes Online Store 1.0. This vulnerabilit... |
| CVE-2023-2206 | CRITICAL | 9.8 | 0.7% | Apr 21, 2023 | A vulnerability classified as critical has been found in Campcodes Retro Basketball Shoes Online Store 1.0. This affects... |
| CVE-2023-2205 | HIGH | 7.5 | 0.6% | Apr 21, 2023 | A vulnerability was found in Campcodes Retro Basketball Shoes Online Store 1.0. It has been rated as critical. Affected ... |
| CVE-2023-2204 | HIGH | 7.5 | 0.6% | Apr 21, 2023 | A vulnerability was found in Campcodes Retro Basketball Shoes Online Store 1.0. It has been declared as critical. Affect... |
| CVE-2023-27752 | — | — | — | Apr 21, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2023-27751 | — | — | — | Apr 21, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2023-1892 | CRITICAL | 9.6 | 2.7% | Apr 21, 2023 | Cross-site Scripting (XSS) - Reflected in GitHub repository sidekiq/sidekiq prior to 7.0.8. |
| CVE-2023-2202 | MEDIUM | 6.5 | 0.5% | Apr 21, 2023 | Improper Access Control in GitHub repository francoisjacquet/rosariosis prior to 10.9.3. |
| CVE-2023-27355 | HIGH | 8.8 | 0.8% | Apr 20, 2023 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Sp... |
| CVE-2023-27354 | MEDIUM | 6.5 | 0.6% | Apr 20, 2023 | This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Sono... |
| CVE-2023-27353 | MEDIUM | 6.5 | 0.6% | Apr 20, 2023 | This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Sono... |
| CVE-2023-27352 | HIGH | 8.8 | 0.8% | Apr 20, 2023 | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Sonos One Sp... |
| CVE-2023-2194 | MEDIUM | 6.7 | 0.2% | Apr 20, 2023 | An out-of-bounds write vulnerability was found in the Linux kernel's SLIMpro I2C device driver. The userspace "data->blo... |
| CVE-2023-2177 | MEDIUM | 5.5 | 0.2% | Apr 20, 2023 | A null pointer dereference issue was found in the sctp network protocol in net/sctp/stream_sched.c in Linux Kernel. If s... |
| CVE-2023-2176 | HIGH | 7.8 | 0.2% | Apr 20, 2023 | A vulnerability was found in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA in the Linux Kernel. The imp... |
| CVE-2023-2131 | CRITICAL | 9.8 | 1.7% | Apr 20, 2023 | Versions of INEA ME RTU firmware prior to 3.36 are vulnerable to OS command injection, which could allow an attacker to ... |
| CVE-2023-28459 | MEDIUM | 6.5 | 6.6% | Apr 20, 2023 | pretalx 2.3.1 before 2.3.2 allows path traversal in HTML export (a non-default feature). Users were able to upload craft... |
| CVE-2023-28458 | MEDIUM | 4.3 | 3.4% | Apr 20, 2023 | pretalx 2.3.1 before 2.3.2 allows path traversal in HTML export (a non-default feature). Organizers can trigger the over... |
| CVE-2023-20873 | CRITICAL | 9.8 | 1.1% | Apr 20, 2023 | In Spring Boot versions 3.0.0 - 3.0.5, 2.7.0 - 2.7.10, and older unsupported versions, an application that is deployed t... |
| CVE-2023-20865 | HIGH | 7.2 | 1.7% | Apr 20, 2023 | VMware Aria Operations for Logs contains a command injection vulnerability. A malicious actor with administrative privil... |
| CVE-2023-20864 | CRITICAL | 9.8 | 71.7% | Apr 20, 2023 | VMware Aria Operations for Logs contains a deserialization vulnerability. An unauthenticated, malicious actor with netwo... |
| CVE-2023-27090 | MEDIUM | 5.4 | 0.4% | Apr 20, 2023 | Cross Site Scripting vulnerability found in TeaCMS storage allows attacker to cause a leak of sensitive information via ... |
| CVE-2023-30076 | CRITICAL | 9.8 | 0.8% | Apr 20, 2023 | Sourcecodester Judging Management System v1.0 is vulnerable to SQL Injection via /php-jms/print_judges.php?print_judges.... |
| CVE-2023-23579 | HIGH | 7.8 | 0.2% | Apr 20, 2023 | Datakit CrossCadWare_x64.dll contains an out-of-bounds write past the end of an allocated buffer while parsing ... |
| CVE-2023-22846 | MEDIUM | 5.5 | 0.2% | Apr 20, 2023 | Datakit CrossCadWare_x64.dll contains an out-of-bounds read past the end of an allocated buffer while parsing a s... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now