2023 CVE Vulnerabilities
31,510 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-28863 | CRITICAL | 9.1 | 0.4% | Apr 18, 2023 | AMI MegaRAC SPx12 and SPx13 devices have Insufficient Verification of Data Authenticity. |
| CVE-2023-2151 | CRITICAL | 9.8 | 0.8% | Apr 18, 2023 | A vulnerability, which was classified as critical, was found in SourceCodester Student Study Center Desk Management Syst... |
| CVE-2023-2150 | HIGH | 7.2 | 0.7% | Apr 18, 2023 | A vulnerability, which was classified as critical, has been found in SourceCodester Task Reminder System 1.0. This issue... |
| CVE-2023-2149 | CRITICAL | 9.8 | 0.8% | Apr 18, 2023 | A vulnerability classified as critical was found in Campcodes Online Thesis Archiving System 1.0. This vulnerability aff... |
| CVE-2023-2148 | CRITICAL | 9.8 | 0.8% | Apr 18, 2023 | A vulnerability classified as critical has been found in Campcodes Online Thesis Archiving System 1.0. This affects an u... |
| CVE-2023-2147 | CRITICAL | 9.8 | 0.8% | Apr 18, 2023 | A vulnerability was found in Campcodes Online Thesis Archiving System 1.0. It has been rated as critical. Affected by th... |
| CVE-2023-2146 | CRITICAL | 9.8 | 0.8% | Apr 18, 2023 | A vulnerability was found in Campcodes Online Thesis Archiving System 1.0. It has been declared as critical. Affected by... |
| CVE-2023-2020 | MEDIUM | 4.3 | 0.4% | Apr 18, 2023 | Insufficient permission checks in the REST API in Tribe29 Checkmk <= 2.1.0p27 and <= 2.2.0b4 (beta) allow unauthorized u... |
| CVE-2023-27092 | MEDIUM | 6.1 | 0.4% | Apr 18, 2023 | Cross Site Scripting vulnerability found in Jbootfly allows attackers to obtain sensitive information via the username p... |
| CVE-2023-2145 | CRITICAL | 9.8 | 1.0% | Apr 18, 2023 | A vulnerability was found in Campcodes Online Thesis Archiving System 1.0. It has been classified as critical. Affected ... |
| CVE-2023-2144 | CRITICAL | 9.8 | 1.0% | Apr 18, 2023 | A vulnerability was found in Campcodes Online Thesis Archiving System 1.0 and classified as critical. This issue affects... |
| CVE-2023-2120 | MEDIUM | 6.1 | 0.6% | Apr 18, 2023 | The Thumbnail carousel slider plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search_term p... |
| CVE-2023-2119 | MEDIUM | 6.1 | 0.6% | Apr 18, 2023 | The Responsive Filterable Portfolio plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search_... |
| CVE-2023-2138 | CRITICAL | 9.8 | 0.7% | Apr 18, 2023 | Use of Hard-coded Credentials in GitHub repository nuxtlabs/github-module prior to 1.6.2. |
| CVE-2023-30547 | CRITICAL | 10 | 72.1% | Apr 17, 2023 | vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. There exists a vulnerability in e... |
| CVE-2023-30543 | MEDIUM | 5.7 | 0.4% | Apr 17, 2023 | @web3-react is a framework for building Ethereum Apps . In affected versions the `chainId` may be outdated if the user c... |
| CVE-2023-30541 | MEDIUM | 5.3 | 0.8% | Apr 17, 2023 | OpenZeppelin Contracts is a library for secure smart contract development. A function in the implementation contract may... |
| CVE-2023-30540 | MEDIUM | 4.3 | 0.7% | Apr 17, 2023 | Nextcloud Talk is a chat, video & audio call extension for Nextcloud. In affected versions a user that was added later t... |
| CVE-2023-30539 | HIGH | 8.8 | 0.6% | Apr 17, 2023 | Nextcloud is a personal home server system. Depending on the set up tags and other workflows this issue can be used to l... |
| CVE-2023-30536 | MEDIUM | 6.5 | 0.7% | Apr 17, 2023 | slim/psr7 is a PSR-7 implementation for use with Slim 4. In versions prior to 1.6.1 an attacker could sneak in a newline... |
| CVE-2023-29213 | HIGH | 8.8 | 0.4% | Apr 17, 2023 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected ver... |
| CVE-2023-29197 | HIGH | 7.5 | 1.2% | Apr 17, 2023 | guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Affected versions are subject to improper header ... |
| CVE-2023-28984 | MEDIUM | 5.3 | 0.2% | Apr 17, 2023 | A Use After Free vulnerability in the Layer 2 Address Learning Manager (l2alm) of Juniper Networks Junos OS on QFX Serie... |
| CVE-2023-28983 | HIGH | 8.8 | 1.5% | Apr 17, 2023 | An OS Command Injection vulnerability in gRPC Network Operations Interface (gNOI) server module of Juniper Networks Juno... |
| CVE-2023-28982 | HIGH | 7.5 | 0.6% | Apr 17, 2023 | A Missing Release of Memory after Effective Lifetime vulnerability in the routing protocol daemon of Juniper Networks Ju... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now