2023 CVE Vulnerabilities
31,510 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-27748 | CRITICAL | 9.8 | 0.7% | Apr 13, 2023 | BlackVue DR750-2CH LTE v.1.012_2022.10.26 does not employ authenticity check for uploaded firmware. This can allow attac... |
| CVE-2023-27747 | HIGH | 7.5 | 1.1% | Apr 13, 2023 | BlackVue DR750-2CH LTE v.1.012_2022.10.26 does not employ authentication in its web server. This vulnerability allows at... |
| CVE-2023-27746 | CRITICAL | 9.8 | 1.8% | Apr 13, 2023 | BlackVue DR750-2CH LTE v.1.012_2022.10.26 was discovered to contain a weak default passphrase which can be easily cracke... |
| CVE-2023-27667 | CRITICAL | 9.8 | 0.7% | Apr 13, 2023 | Auto Dealer Management System v1.0 was discovered to contain a SQL injection vulnerability. |
| CVE-2023-26416 | HIGH | 7.8 | 0.4% | Apr 13, 2023 | Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that ... |
| CVE-2023-26415 | HIGH | 7.8 | 0.3% | Apr 13, 2023 | Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by an out-of-bounds write vulnerability that could ... |
| CVE-2023-26414 | HIGH | 7.8 | 0.4% | Apr 13, 2023 | Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by a Use After Free vulnerability that could result... |
| CVE-2023-26413 | HIGH | 7.8 | 0.4% | Apr 13, 2023 | Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that ... |
| CVE-2023-26412 | HIGH | 7.8 | 0.4% | Apr 13, 2023 | Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by a Stack-based Buffer Overflow vulnerability that... |
| CVE-2023-26411 | HIGH | 7.8 | 0.3% | Apr 13, 2023 | Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing... |
| CVE-2023-26410 | HIGH | 7.8 | 0.4% | Apr 13, 2023 | Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by a Use After Free vulnerability that could result... |
| CVE-2023-26409 | HIGH | 7.8 | 0.3% | Apr 13, 2023 | Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing... |
| CVE-2023-26398 | HIGH | 7.8 | 0.3% | Apr 13, 2023 | Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing... |
| CVE-2023-24509 | HIGH | 7.8 | 0.2% | Apr 13, 2023 | On affected modular platforms running Arista EOS equipped with both redundant supervisor modules and having the redundan... |
| CVE-2023-22951 | HIGH | 8.8 | 0.8% | Apr 13, 2023 | An issue was discovered in TigerGraph Enterprise Free Edition 3.x. It creates an authentication token for internal syste... |
| CVE-2023-20866 | MEDIUM | 6.5 | 0.7% | Apr 13, 2023 | In Spring Session version 3.0.0, the session id can be logged to the standard output stream. This vulnerability exposes ... |
| CVE-2023-20863 | MEDIUM | 6.5 | 1.1% | Apr 13, 2023 | In spring framework versions prior to 5.2.24 release+ ,5.3.27+ and 6.0.8+ , it is possible for a user to provide a speci... |
| CVE-2023-1271 | — | — | — | Apr 13, 2023 | Rejected reason: Duplicate. Please use CVE-2023-24421. |
| CVE-2023-29084 | HIGH | 7.2 | 98.4% | Apr 13, 2023 | Zoho ManageEngine ADManager Plus before 7181 allows for authenticated users to exploit command injection via Proxy setti... |
| CVE-2023-26264 | MEDIUM | 5.5 | 0.2% | Apr 13, 2023 | All versions of Talend Data Catalog before 8.0-20220907 are potentially vulnerable to XML External Entity (XXE) attacks ... |
| CVE-2023-26263 | MEDIUM | 5.5 | 0.2% | Apr 13, 2023 | All versions of Talend Data Catalog before 8.0-20230110 are potentially vulnerable to XML External Entity (XXE) attacks ... |
| CVE-2023-22948 | MEDIUM | 4.9 | 0.4% | Apr 13, 2023 | An issue was discovered in TigerGraph Enterprise Free Edition 3.x. There is unsecured read access to an SSH private key.... |
| CVE-2023-27772 | HIGH | 7.5 | 0.9% | Apr 13, 2023 | libiec61850 v1.5.1 was discovered to contain a segmentation violation via the function ControlObjectClient_setOrigin() a... |
| CVE-2023-22950 | MEDIUM | 6.5 | 0.7% | Apr 13, 2023 | An issue was discovered in TigerGraph Enterprise Free Edition 3.x. Data loading jobs in gsql_server, created by any user... |
| CVE-2023-27779 | CRITICAL | 9.8 | 1.0% | Apr 13, 2023 | AM Presencia v3.7.3 was discovered to contain a SQL injection vulnerability via the user parameter in the login form. |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now