2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-33743 | CRITICAL | 9.8 | 0.9% | Jul 27, 2023 | TeleAdapt RoomCast TA-2400 1.0 through 3.1 is vulnerable to Improper Access Control; specifically, Android Debug Bridge ... |
| CVE-2023-38495 | CRITICAL | 9.8 | 0.7% | Jul 27, 2023 | Crossplane is a framework for building cloud native control planes without needing to write code. In versions prior to 1... |
| CVE-2023-3975 | CRITICAL | 9.8 | 1.9% | Jul 27, 2023 | OS Command Injection in GitHub repository jgraph/drawio prior to 21.5.0. |
| CVE-2023-3974 | CRITICAL | 9.8 | 1.1% | Jul 27, 2023 | OS Command Injection in GitHub repository jgraph/drawio prior to 21.4.0. |
| CVE-2023-38490 | CRITICAL | 10 | 1.5% | Jul 27, 2023 | Kirby is a content management system. A vulnerability in versions prior to 3.5.8.3, 3.6.6.3, 3.7.5.2, 3.8.4.1, and 3.9.6... |
| CVE-2023-3956 | CRITICAL | 9.8 | 0.8% | Jul 27, 2023 | The InstaWP Connect plugin for WordPress is vulnerable to unauthorized access of data, modification of data and loss of ... |
| CVE-2023-31465 | CRITICAL | 9.8 | 44.5% | Jul 26, 2023 | An issue was discovered in FSMLabs TimeKeeper 8.0.17 through 8.0.28. By intercepting requests from various timekeeper st... |
| CVE-2023-33308 | CRITICAL | 9.8 | 1.9% | Jul 26, 2023 | A stack-based overflow vulnerability [CWE-124] in Fortinet FortiOS version 7.0.0 through 7.0.10 and 7.2.0 through 7.2.3 ... |
| CVE-2023-26859 | CRITICAL | 9.8 | 0.6% | Jul 26, 2023 | SQL injection vulnerability found in PrestaShop sendinblue v.4.0.15 and before allow a remote attacker to gain privilege... |
| CVE-2023-38673 | CRITICAL | 9.8 | 2.0% | Jul 26, 2023 | PaddlePaddle before 2.5.0 has a command injection in fs.py. This resulted in the ability to execute arbitrary commands o... |
| CVE-2023-38671 | CRITICAL | 9.8 | 0.6% | Jul 26, 2023 | Heap buffer overflow in paddle.trace in PaddlePaddle before 2.5.0. This flaw can lead to a denial of service, informatio... |
| CVE-2023-38669 | CRITICAL | 9.8 | 0.7% | Jul 26, 2023 | Use after free in paddle.diagonal in PaddlePaddle before 2.5.0. This resulted in a potentially exploitable condition. |
| CVE-2023-38647 | CRITICAL | 9.8 | 1.5% | Jul 26, 2023 | An attacker can use SnakeYAML to deserialize java.net.URLClassLoader and make it load a JAR from a specified URL, and th... |
| CVE-2023-37920 | CRITICAL | 9.8 | 0.5% | Jul 25, 2023 | Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verify... |
| CVE-2023-37677 | CRITICAL | 9.8 | 1.1% | Jul 25, 2023 | Pligg CMS v2.0.2 (also known as Kliqqi) was discovered to contain a remote code execution (RCE) vulnerability in the com... |
| CVE-2023-37460 | CRITICAL | 9.8 | 2.1% | Jul 25, 2023 | Plexis Archiver is a collection of Plexus components to create archives or extract archives to a directory with a unifie... |
| CVE-2023-37258 | CRITICAL | 9.8 | 0.9% | Jul 25, 2023 | DataEase is an open source data visualization analysis tool. Prior to version 1.18.9, DataEase has a SQL injection vulne... |
| CVE-2023-34798 | CRITICAL | 9.8 | 0.7% | Jul 25, 2023 | An arbitrary file upload vulnerability in eoffice before v9.5 allows attackers to execute arbitrary code via uploading a... |
| CVE-2023-35982 | CRITICAL | 9.8 | 1.6% | Jul 25, 2023 | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code... |
| CVE-2023-35981 | CRITICAL | 9.8 | 1.6% | Jul 25, 2023 | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code... |
| CVE-2023-35980 | CRITICAL | 9.8 | 1.6% | Jul 25, 2023 | There are buffer overflow vulnerabilities in multiple underlying services that could lead to unauthenticated remote code... |
| CVE-2023-35941 | CRITICAL | 9.8 | 0.7% | Jul 25, 2023 | Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to versions 1.27.0, 1.26.4,... |
| CVE-2023-37895 | CRITICAL | 9.8 | 2.7% | Jul 25, 2023 | Java object deserialization issue in Jackrabbit webapp/standalone on all platforms allows attacker to remotely execute c... |
| CVE-2023-3548 | CRITICAL | 9.8 | 0.4% | Jul 25, 2023 | An unauthorized user could gain account access to IQ Wifi 6 versions prior to 2.0.2 by conducting a brute force authenti... |
| CVE-2023-35088 | CRITICAL | 9.8 | 1.2% | Jul 25, 2023 | Improper Neutralization of Special Elements Used in an SQL Command ('SQL Injection') vulnerability in Apache Software Fo... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now