2023 CVE Vulnerabilities
31,510 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-2039 | HIGH | 8.8 | 0.8% | Apr 14, 2023 | A vulnerability was found in novel-plus 3.6.2. It has been rated as critical. This issue affects some unknown processing... |
| CVE-2023-2038 | HIGH | 7.5 | 0.6% | Apr 14, 2023 | A vulnerability was found in Campcodes Video Sharing Website 1.0. It has been declared as critical. This vulnerability a... |
| CVE-2023-2037 | CRITICAL | 9.8 | 0.8% | Apr 14, 2023 | A vulnerability was found in Campcodes Video Sharing Website 1.0. It has been classified as critical. This affects an un... |
| CVE-2023-2036 | HIGH | 7.5 | 0.7% | Apr 14, 2023 | A vulnerability was found in Campcodes Video Sharing Website 1.0 and classified as critical. Affected by this issue is s... |
| CVE-2023-2035 | HIGH | 7.5 | 0.7% | Apr 14, 2023 | A vulnerability has been found in Campcodes Video Sharing Website 1.0 and classified as critical. Affected by this vulne... |
| CVE-2023-26123 | MEDIUM | 6.1 | 0.6% | Apr 14, 2023 | Versions of the package raysan5/raylib before 4.5.0 are vulnerable to Cross-site Scripting (XSS) such that the SetClipbo... |
| CVE-2023-1285 | MEDIUM | 5.9 | 0.7% | Apr 14, 2023 | Signal Handler Race Condition vulnerability in Mitsubishi Electric India GC-ENET-COM whose first 2 digits of 11-digit se... |
| CVE-2023-29627 | HIGH | 8.8 | 1.0% | Apr 14, 2023 | Online Pizza Ordering v1.0 was discovered to contain an arbitrary file upload vulnerability which allows attackers to ex... |
| CVE-2023-29626 | HIGH | 7.5 | 0.7% | Apr 14, 2023 | Yoga Class Registration System 1.0 was discovered to contain a SQL injection vulnerability via the cid parameter at /adm... |
| CVE-2023-29625 | HIGH | 8.8 | 1.0% | Apr 14, 2023 | Employee Performance Evaluation System v1.0 was discovered to contain an arbitrary file upload vulnerability which allow... |
| CVE-2023-29623 | MEDIUM | 6.1 | 1.3% | Apr 14, 2023 | Purchase Order Management v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the pa... |
| CVE-2023-29622 | CRITICAL | 9.8 | 1.7% | Apr 14, 2023 | Purchase Order Management v1.0 was discovered to contain a SQL injection vulnerability via the password parameter at /pu... |
| CVE-2023-29621 | HIGH | 8.8 | 1.0% | Apr 14, 2023 | Purchase Order Management v1.0 was discovered to contain an arbitrary file upload vulnerability which allows attackers t... |
| CVE-2023-26969 | HIGH | 7.5 | 1.1% | Apr 14, 2023 | Atropim 1.5.26 is vulnerable to Directory Traversal. |
| CVE-2023-2034 | HIGH | 8.8 | 73.2% | Apr 14, 2023 | Unrestricted Upload of File with Dangerous Type in GitHub repository froxlor/froxlor prior to 2.0.14. |
| CVE-2023-29491 | HIGH | 7.8 | 0.9% | Apr 14, 2023 | ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory c... |
| CVE-2023-29132 | MEDIUM | 5.3 | 0.8% | Apr 14, 2023 | Irssi 1.3.x and 1.4.x before 1.4.4 has a use-after-free because of use of a stale special collector reference. This occu... |
| CVE-2023-27890 | MEDIUM | 5.4 | 0.6% | Apr 14, 2023 | The Export User plugin through 2.0 for MyBB allows XSS during the process of an admin generating DSGVO data for a user, ... |
| CVE-2023-30638 | HIGH | 7.2 | 1.0% | Apr 14, 2023 | Atos Unify OpenScape SBC 10 before 10R3.1.3, OpenScape Branch 10 before 10R3.1.2, and OpenScape BCF 10 before 10R10.7.0 ... |
| CVE-2023-26918 | CRITICAL | 9.8 | 6.1% | Apr 14, 2023 | Diasoft File Replication Pro 7.5.0 allows attackers to escalate privileges by replacing a legitimate file with a Trojan ... |
| CVE-2023-30637 | HIGH | 7.5 | 0.7% | Apr 13, 2023 | Baidu braft 1.1.2 has a memory leak related to use of the new operator in example/atomic/atomic_server. NOTE: installati... |
| CVE-2023-30636 | HIGH | 7.5 | 1.0% | Apr 13, 2023 | TiKV 6.1.2 allows remote attackers to cause a denial of service (fatal error, with RpcStatus UNAVAILABLE for "not leader... |
| CVE-2023-30635 | HIGH | 7.5 | 1.0% | Apr 13, 2023 | TiKV 6.1.2 allows remote attackers to cause a denial of service (fatal error) upon an attempt to get a timestamp from th... |
| CVE-2023-1326 | HIGH | 7.8 | 0.9% | Apr 13, 2023 | A privilege escalation attack was found in apport-cli 2.26.0 and earlier which is similar to CVE-2023-26604. If a system... |
| CVE-2023-29573 | MEDIUM | 5.5 | 0.3% | Apr 13, 2023 | Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp4info component. |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now