2023 CVE Vulnerabilities
31,510 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-27775 | MEDIUM | 5.4 | 0.7% | Apr 12, 2023 | A stored HTML injection vulnerability in LiveAction LiveSP v21.1.2 allows attackers to execute arbitrary code via a craf... |
| CVE-2023-27704 | MEDIUM | 5.5 | 0.4% | Apr 12, 2023 | Void Tools Everything lower than v1.4.1.1022 was discovered to contain a Regular Expression Denial of Service (ReDoS). |
| CVE-2023-27032 | CRITICAL | 9.8 | 3.0% | Apr 12, 2023 | Prestashop advancedpopupcreator v1.1.21 to v1.1.24 was discovered to contain a SQL injection vulnerability via the compo... |
| CVE-2023-23591 | MEDIUM | 4.9 | 0.6% | Apr 12, 2023 | The Logback component in Terminalfour before 8.3.14.1 allows OS administrators to obtain sensitive information from appl... |
| CVE-2023-1874 | HIGH | 8.8 | 2.7% | Apr 12, 2023 | The WP Data Access plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 5.3.7. T... |
| CVE-2023-29580 | MEDIUM | 5.5 | 0.3% | Apr 12, 2023 | yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the component yasm_expr_create at /libyasm/e... |
| CVE-2023-29574 | MEDIUM | 5.5 | 0.3% | Apr 12, 2023 | Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp42avc component. |
| CVE-2023-27826 | HIGH | 8.8 | 11.8% | Apr 12, 2023 | SeowonIntech SWC 5100W WIMAX Bootloader 1.18.19.0, HW 0.0.7.0, and FW 1.11.0.1, 1.9.9.4 are vulnerable to OS Command Inj... |
| CVE-2023-22616 | HIGH | 7.8 | 0.4% | Apr 12, 2023 | An issue was discovered in Insyde InsydeH2O with kernel 5.2 through 5.5. The Save State register is not checked before u... |
| CVE-2023-1829 | HIGH | 7.8 | 1.0% | Apr 12, 2023 | A use-after-free vulnerability in the Linux Kernel traffic control index filter (tcindex) can be exploited to achieve lo... |
| CVE-2023-30512 | MEDIUM | 6.5 | 0.5% | Apr 12, 2023 | CubeFS through 3.2.1 allows Kubernetes cluster-level privilege escalation. This occurs because DaemonSet has cfs-csi-clu... |
| CVE-2023-22613 | HIGH | 8.8 | 0.2% | Apr 11, 2023 | An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. It is possible to write to an attac... |
| CVE-2023-29576 | MEDIUM | 5.5 | 0.3% | Apr 11, 2023 | Bento4 v1.6.0-639 was discovered to contain a segmentation violation via the AP4_TrunAtom::SetDataOffset(int) function i... |
| CVE-2023-28808 | CRITICAL | 9.8 | 0.8% | Apr 11, 2023 | Some Hikvision Hybrid SAN/Cluster Storage products have an access control vulnerability which can be used to obtain the ... |
| CVE-2023-28314 | MEDIUM | 6.1 | 0.7% | Apr 11, 2023 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability |
| CVE-2023-28313 | MEDIUM | 6.1 | 0.7% | Apr 11, 2023 | Microsoft Dynamics 365 Customer Voice Cross-Site Scripting Vulnerability |
| CVE-2023-28312 | MEDIUM | 6.5 | 1.8% | Apr 11, 2023 | Azure Machine Learning Information Disclosure Vulnerability |
| CVE-2023-28311 | HIGH | 7.8 | 2.7% | Apr 11, 2023 | Microsoft Word Remote Code Execution Vulnerability |
| CVE-2023-28309 | MEDIUM | 5.4 | 0.7% | Apr 11, 2023 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability |
| CVE-2023-28308 | MEDIUM | 6.6 | 0.9% | Apr 11, 2023 | Windows DNS Server Remote Code Execution Vulnerability |
| CVE-2023-28307 | MEDIUM | 6.6 | 0.9% | Apr 11, 2023 | Windows DNS Server Remote Code Execution Vulnerability |
| CVE-2023-28306 | MEDIUM | 6.6 | 0.9% | Apr 11, 2023 | Windows DNS Server Remote Code Execution Vulnerability |
| CVE-2023-28305 | MEDIUM | 6.6 | 0.9% | Apr 11, 2023 | Windows DNS Server Remote Code Execution Vulnerability |
| CVE-2023-28304 | HIGH | 7.8 | 0.8% | Apr 11, 2023 | Microsoft ODBC and OLE DB Remote Code Execution Vulnerability |
| CVE-2023-28302 | HIGH | 7.5 | 93.6% | Apr 11, 2023 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now