2023 CVE Vulnerabilities

31,509 CVEs published in 2023.

CVE IDSeverityCVSSDescription
CVE-2023-7299CRITICAL9.8A vulnerability was found in DataGear up to 4.60. It has been declared as critical. This vulnerability affects unknown c...
CVE-2023-52335HIGH7.5Advantech iView ConfigurationServlet SQL Injection Information Disclosure Vulnerability. This vulnerability allows remot...
CVE-2023-52334MEDIUM6.5Allegra downloadAttachmentGlobal Directory Traversal Information Disclosure Vulnerability. This vulnerability allows rem...
CVE-2023-52333HIGH7.3Allegra saveFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to ...
CVE-2023-52332HIGH7.5Allegra serveMathJaxLibraries Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote...
CVE-2023-51648MEDIUM6.5Allegra getFileContentAsString Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remot...
CVE-2023-51647MEDIUM4.7Allegra saveInlineEdit Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attacke...
CVE-2023-51646MEDIUM4.7Allegra uploadSimpleFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attac...
CVE-2023-51645MEDIUM4.7Allegra unzipFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to...
CVE-2023-51644HIGH7.3Allegra SiteConfigAction Improper Access Control Remote Code Execution Vulnerability. This vulnerability allows remote a...
CVE-2023-51643MEDIUM4.7Allegra uploadFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers t...
CVE-2023-51642MEDIUM6.3Allegra loadFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows ...
CVE-2023-51641MEDIUM6.3Allegra renderFieldMatch Deserialization of Unstrusted Data Remote Code Execution Vulnerability. This vulnerability allo...
CVE-2023-51640MEDIUM4.7Allegra extarctZippedFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote atta...
CVE-2023-51639CRITICAL9.8Allegra downloadExportedChart Directory Traversal Authentication Bypass Vulnerability. This vulnerability allows remote ...
CVE-2023-51638CRITICAL9.8Allegra Hard-coded Credentials Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass...
CVE-2023-51635HIGH8.8NETGEAR RAX30 fing_dil Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows networ...
CVE-2023-51634HIGH7.5NETGEAR RAX30 Improper Certificate Validation Remote Code Execution Vulnerability. This vulnerability allows network-adj...
CVE-2023-39470HIGH7.2PaperCut NG print.script.sandboxed Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability al...
CVE-2023-24467CRITICAL9.8Possible Command Injection in iManager GET parameter has been discovered in OpenText™ iManager 3.2.6.0000.
CVE-2023-24466CRITICAL9.8Possible XML External Entity Injection in iManager GET parameter has been discovered in OpenText™ iManager 3.2.6.0200...
CVE-2023-27609MEDIUM4.8Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in NetTantra W...
CVE-2023-21270HIGH7.8In restorePermissionState of PermissionManagerServiceImpl.java, there is a possible way for an app to keep permissions t...
CVE-2023-52921HIGH7.8In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix possible UAF in amdgpu_cs_pass1() ...
CVE-2023-49952HIGH7.5Mastodon 4.1.x before 4.1.17 and 4.2.x before 4.2.9 allows a bypass of rate limiting via a crafted HTTP request header.

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now