2023 CVE Vulnerabilities
31,510 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-30526 | MEDIUM | 6.5 | 0.5% | Apr 12, 2023 | A missing permission check in Jenkins Report Portal Plugin 0.5 and earlier allows attackers with Overall/Read permission... |
| CVE-2023-30525 | HIGH | 8.8 | 0.8% | Apr 12, 2023 | A cross-site request forgery (CSRF) vulnerability in Jenkins Report Portal Plugin 0.5 and earlier allows attackers to co... |
| CVE-2023-30524 | MEDIUM | 4.3 | 0.4% | Apr 12, 2023 | Jenkins Report Portal Plugin 0.5 and earlier does not mask ReportPortal access tokens displayed on the configuration for... |
| CVE-2023-30523 | MEDIUM | 4.3 | 0.3% | Apr 12, 2023 | Jenkins Report Portal Plugin 0.5 and earlier stores ReportPortal access tokens unencrypted in job config.xml files on th... |
| CVE-2023-30522 | MEDIUM | 4.3 | 0.4% | Apr 12, 2023 | A missing permission check in Jenkins Fogbugz Plugin 2.2.17 and earlier allows attackers with Item/Read permission to tr... |
| CVE-2023-30521 | MEDIUM | 5.3 | 0.5% | Apr 12, 2023 | A missing permission check in Jenkins Assembla merge request builder Plugin 1.1.13 and earlier allows unauthenticated at... |
| CVE-2023-30520 | MEDIUM | 5.4 | 0.5% | Apr 12, 2023 | Jenkins Quay.io trigger Plugin 0.1 and earlier does not limit URL schemes for repository homepage URLs submitted via Qua... |
| CVE-2023-30519 | MEDIUM | 5.3 | 0.5% | Apr 12, 2023 | A missing permission check in Jenkins Quay.io trigger Plugin 0.1 and earlier allows unauthenticated attackers to trigger... |
| CVE-2023-30518 | MEDIUM | 4.3 | 0.5% | Apr 12, 2023 | A missing permission check in Jenkins Thycotic Secret Server Plugin 1.0.2 and earlier allows attackers with Overall/Read... |
| CVE-2023-30517 | MEDIUM | 5.3 | 0.3% | Apr 12, 2023 | Jenkins NeuVector Vulnerability Scanner Plugin 1.22 and earlier unconditionally disables SSL/TLS certificate and hostnam... |
| CVE-2023-30516 | MEDIUM | 6.5 | 0.5% | Apr 12, 2023 | Jenkins Image Tag Parameter Plugin 2.0 improperly introduces an option to opt out of SSL/TLS certificate validation when... |
| CVE-2023-30515 | HIGH | 7.5 | 0.4% | Apr 12, 2023 | Jenkins Thycotic DevOps Secrets Vault Plugin 1.0.0 and earlier does not properly mask (i.e., replace with asterisks) cre... |
| CVE-2023-30514 | HIGH | 7.5 | 0.5% | Apr 12, 2023 | Jenkins Azure Key Vault Plugin 187.va_cd5fecd198a_ and earlier does not properly mask (i.e., replace with asterisks) cre... |
| CVE-2023-30513 | HIGH | 7.5 | 0.5% | Apr 12, 2023 | Jenkins Kubernetes Plugin 3909.v1f2c633e8590 and earlier does not properly mask (i.e., replace with asterisks) credentia... |
| CVE-2023-27216 | HIGH | 8.8 | 4.5% | Apr 12, 2023 | An issue found in D-Link DSL-3782 v.1.03 allows remote authenticated users to execute arbitrary code as root via the net... |
| CVE-2023-26852 | HIGH | 7.2 | 2.0% | Apr 12, 2023 | An arbitrary file upload vulnerability in the upload plugin of Textpattern v4.8.8 and below allows attackers to execute ... |
| CVE-2023-0006 | MEDIUM | 6.3 | 0.1% | Apr 12, 2023 | A local file deletion vulnerability in the Palo Alto Networks GlobalProtect app on Windows devices enables a user to del... |
| CVE-2023-0005 | MEDIUM | 4.9 | 0.3% | Apr 12, 2023 | A vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to expose the plaintext val... |
| CVE-2023-0004 | MEDIUM | 6.5 | 1.1% | Apr 12, 2023 | A local file deletion vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to dele... |
| CVE-2023-29581 | MEDIUM | 5.5 | 0.3% | Apr 12, 2023 | yasm 1.3.0.55.g101bc has a segmentation violation in the function delete_Token at modules/preprocs/nasm/nasm-pp.c. NOTE:... |
| CVE-2023-28488 | MEDIUM | 6.5 | 1.0% | Apr 12, 2023 | client.c in gdhcp in ConnMan through 1.41 could be used by network-adjacent attackers (operating a crafted DHCP server) ... |
| CVE-2023-27703 | LOW | 3.3 | 0.3% | Apr 12, 2023 | The Android version of pikpak v1.29.2 was discovered to contain an information leak via the debug interface. |
| CVE-2023-1872 | HIGH | 7 | 0.3% | Apr 12, 2023 | A use-after-free vulnerability in the Linux Kernel io_uring system can be exploited to achieve local privilege escalatio... |
| CVE-2023-29571 | MEDIUM | 5.5 | 0.3% | Apr 12, 2023 | Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via gc_sweep at src/mjs_gc.c. This vulnerability can ... |
| CVE-2023-27830 | CRITICAL | 9 | 1.1% | Apr 12, 2023 | TightVNC before v2.8.75 allows attackers to escalate privileges on the host operating system via replacing legitimate fi... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now