2023 CVE Vulnerabilities

31,510 CVEs published in 2023.

CVE IDSeverityCVSSDescription
CVE-2023-26980HIGH7PAX Technology PAX A920 Pro PayDroid 8.1suffers from a Race Condition vulnerability, which allows attackers to bypass th...
CVE-2023-26559MEDIUM5.3A directory traversal vulnerability in Oxygen XML Web Author before 25.0.0.3 build 2023021715 and Oxygen Content Fusion ...
CVE-2023-2052HIGH8.8A vulnerability classified as critical was found in Campcodes Advanced Online Voting System 1.0. Affected by this vulner...
CVE-2023-2051HIGH8.8A vulnerability classified as critical has been found in Campcodes Advanced Online Voting System 1.0. Affected is an unk...
CVE-2023-2050HIGH8.8A vulnerability was found in Campcodes Advanced Online Voting System 1.0. It has been rated as critical. This issue affe...
CVE-2023-29584HIGH8.8mp4v2 v2.0.0 was discovered to contain a heap buffer overflow via the MP4GetVideoProfileLevel function at /src/mp4.cpp.
CVE-2023-29569MEDIUM5.5Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via ffi_cb_impl_wpwwwww at src/mjs_ffi.c. This vulner...
CVE-2023-27666MEDIUM6.1Auto Dealer Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the name par...
CVE-2023-27653HIGH7.5An issue found in WHOv.1.0.28, v.1.0.30, v.1.0.32 allows an attacker to cause a denial of service via the SharedPreferen...
CVE-2023-27651HIGH7.8An issue found in Ego Studio SuperClean v.1.1.9 and v.1.1.5 allows an attacker to gain privileges via the update_info fi...
CVE-2023-27649HIGH7.5SQL injection vulnerability found in Trusted Tools Free Music v.2.1.0.47, v.2.0.0.46, v.1.9.1.45, v.1.8.2.43 allows a re...
CVE-2023-27648CRITICAL9.8Directory Traversal vulnerability found in T-ME Studios Change Color of Keypad v.1.275.1.277 allows a remote attacker to...
CVE-2023-27643HIGH7.5An issue found in POWERAMP 925-bundle-play and Poweramp 954-uni allows a remote attacker to cause a denial of service vi...
CVE-2023-27193HIGH7.8An issue found in DUALSPACE v.1.1.3 allows a local attacker to gain privileges via the key_ad_new_user_avoid_time field.
CVE-2023-26756HIGH7.5The login page of Revive Adserver v5.4.1 is vulnerable to brute force attacks. NOTE: The vendor's position is that this ...
CVE-2023-1617CRITICAL9.8Improper Authentication vulnerability in B&R Industrial Automation B&R VC4 (VNC-Server modules).  This vulnerability may...
CVE-2023-2049HIGH8.8A vulnerability was found in Campcodes Advanced Online Voting System 1.0. It has been declared as critical. This vulnera...
CVE-2023-2048HIGH8.8A vulnerability was found in Campcodes Advanced Online Voting System 1.0. It has been classified as critical. This affec...
CVE-2023-2047HIGH8.8A vulnerability was found in Campcodes Advanced Online Voting System 1.0 and classified as critical. Affected by this is...
CVE-2023-2044MEDIUM6.1A vulnerability has been found in Control iD iDSecure 4.7.29.1 and classified as problematic. This vulnerability affects...
CVE-2023-2043CRITICAL9.8A vulnerability, which was classified as problematic, was found in Control iD RHiD 23.3.19.0. This affects an unknown pa...
CVE-2023-2042HIGH8.8A vulnerability, which was classified as problematic, has been found in DataGear up to 4.7.0/5.1.0. Affected by this iss...
CVE-2023-2041HIGH8.8A vulnerability classified as critical was found in novel-plus 3.6.2. Affected by this vulnerability is an unknown funct...
CVE-2023-2040HIGH8.8A vulnerability classified as critical has been found in novel-plus 3.6.2. Affected is an unknown function of the file /...
CVE-2023-1863CRITICAL9.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eskom Water Meteri...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now