2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-36859 | CRITICAL | 9.8 | 0.6% | Jul 6, 2023 | PiiGAB M-Bus SoftwarePack 900S does not correctly sanitize user input, which could allow an attacker to inject arbit... |
| CVE-2023-35987 | CRITICAL | 9.8 | 0.6% | Jul 6, 2023 | PiiGAB M-Bus contains hard-coded credentials which it uses for authentication. |
| CVE-2023-33868 | CRITICAL | 9.8 | 0.5% | Jul 6, 2023 | The number of login attempts is not limited. This could allow an attacker to perform a brute force on HTTP basic auth... |
| CVE-2023-29824 | CRITICAL | 9.8 | 1.1% | Jul 6, 2023 | A use-after-free issue was discovered in Py_FindObjects() function in SciPy versions prior to 1.8.0. NOTE: the vendor an... |
| CVE-2023-36460 | CRITICAL | 9.9 | 37.3% | Jul 6, 2023 | Mastodon is a free, open-source social network server based on ActivityPub. Starting in version 3.5.0 and prior to versi... |
| CVE-2023-3528 | CRITICAL | 9.8 | 0.4% | Jul 6, 2023 | A vulnerability was found in ThinuTech ThinuCMS 1.5. It has been rated as critical. Affected by this issue is some unkno... |
| CVE-2023-34192 | CRITICAL | 9 | 77.3% | Jul 6, 2023 | Cross Site Scripting vulnerability in Zimbra ZCS v.8.8.15 allows a remote authenticated attacker to execute arbitrary co... |
| CVE-2023-30321 | CRITICAL | 9 | 0.9% | Jul 6, 2023 | Cross Site Scripting (XSS) vulnerability in textMessage field in /src/chatbotapp/LoginServlet.java in wliang6 ChatEngine... |
| CVE-2023-30320 | CRITICAL | 9 | 0.9% | Jul 6, 2023 | Cross Site Scripting (XSS) vulnerability in textMessage field in /src/chatbotapp/chatWindow.java in wliang6 ChatEngine c... |
| CVE-2023-30319 | CRITICAL | 9.6 | 0.8% | Jul 6, 2023 | Cross Site Scripting (XSS) vulnerability in username field in /src/chatbotapp/LoginServlet.java in wliang6 ChatEngine co... |
| CVE-2023-29382 | CRITICAL | 9.8 | 1.0% | Jul 6, 2023 | An issue in Zimbra Collaboration ZCS v.8.8.15 and v.9.0 allows an attacker to execute arbitrary code via the sfdc_preaut... |
| CVE-2023-29381 | CRITICAL | 9.8 | 1.0% | Jul 6, 2023 | An issue in Zimbra Collaboration (ZCS) v.8.8.15 and v.9.0 allows a remote attacker to escalate privileges and obtain sen... |
| CVE-2023-23902 | CRITICAL | 9.8 | 1.9% | Jul 6, 2023 | A buffer overflow vulnerability exists in the uhttpd login functionality of Milesight UR32L v32.3.0.5. A specially craft... |
| CVE-2023-22844 | CRITICAL | 9.8 | 0.7% | Jul 6, 2023 | An authentication bypass vulnerability exists in the requestHandlers.js verifyToken functionality of Milesight VPN v2.0.... |
| CVE-2023-22319 | CRITICAL | 9.8 | 0.8% | Jul 6, 2023 | A sql injection vulnerability exists in the requestHandlers.js LoginAuth functionality of Milesight VPN v2.0.2. A specia... |
| CVE-2023-36188 | CRITICAL | 9.8 | 1.6% | Jul 6, 2023 | An issue in langchain v.0.0.64 allows a remote attacker to execute arbitrary code via the PALChain parameter in the Pyth... |
| CVE-2023-37245 | CRITICAL | 9.1 | 0.4% | Jul 6, 2023 | Buffer overflow vulnerability in the modem pinctrl module. Successful exploitation of this vulnerability may affect the ... |
| CVE-2023-37242 | CRITICAL | 9.8 | 0.4% | Jul 6, 2023 | Vulnerability of commands from the modem being intercepted in the atcmdserver module. Attackers may exploit this vulnera... |
| CVE-2023-37240 | CRITICAL | 9.1 | 0.4% | Jul 6, 2023 | Vulnerability of missing input length verification in the distributed file system. Successful exploitation of this vul... |
| CVE-2023-36808 | CRITICAL | 9.8 | 44.6% | Jul 5, 2023 | GLPI is a free asset and IT management software package. Starting in version 0.80 and prior to version 10.0.8, Computer ... |
| CVE-2023-35924 | CRITICAL | 9.8 | 49.4% | Jul 5, 2023 | GLPI is a free asset and IT management software package. Starting in version 10.0.0 and prior to version 10.0.8, GLPI in... |
| CVE-2023-34338 | CRITICAL | 9.8 | 0.2% | Jul 5, 2023 | AMI SPx contains a vulnerability in the BMC where an Attacker may cause a use of hard-coded cryptographic key by a hard-... |
| CVE-2023-36934 | CRITICAL | 9.1 | 94.8% | Jul 5, 2023 | In Progress MOVEit Transfer before 2020.1.11 (12.1.11), 2021.0.9 (13.0.9), 2021.1.7 (13.1.7), 2022.0.7 (14.0.7), 2022.1.... |
| CVE-2023-36665 | CRITICAL | 9.8 | 1.4% | Jul 5, 2023 | "protobuf.js (aka protobufjs) 6.10.0 through 7.x before 7.2.5 allows Prototype Pollution, a different vulnerability than... |
| CVE-2023-3455 | CRITICAL | 9.1 | 0.4% | Jul 5, 2023 | Key management vulnerability on system. Successful exploitation of this vulnerability may affect service availability an... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now