2023 CVE Vulnerabilities

31,442 CVEs published in 2023.

CVE IDSeverityCVSSDescription
CVE-2023-27115MEDIUM5.5WebAssembly v1.0.29 was discovered to contain a segmentation fault via the component wabt::cat_compute_size.
CVE-2023-27114MEDIUM5.5radare2 v5.8.3 was discovered to contain a segmentation fault via the component wasm_dis at p/wasm/wasm.c.
CVE-2023-1307CRITICAL9.8Authentication Bypass by Primary Weakness in GitHub repository froxlor/froxlor prior to 2.0.13.
CVE-2023-20064MEDIUM4.6A vulnerability in the GRand Unified Bootloader (GRUB) for Cisco IOS XR Software could allow an unauthenticated attacker...
CVE-2023-20049HIGH7.5A vulnerability in the bidirectional forwarding detection (BFD) hardware offload feature of Cisco IOS XR Software for Ci...
CVE-2023-1303CRITICAL9.8A vulnerability was found in UCMS 1.6 and classified as critical. This issue affects some unknown processing of the file...
CVE-2023-1302MEDIUM6.1A vulnerability, which was classified as problematic, was found in SourceCodester File Tracker Manager System 1.0. This ...
CVE-2023-1301CRITICAL9.8A vulnerability, which was classified as critical, has been found in SourceCodester Friendly Island Pizza Website and Or...
CVE-2023-1300CRITICAL9.8A vulnerability classified as critical was found in SourceCodester COVID 19 Testing Management System 1.0. Affected by t...
CVE-2023-1072MEDIUM5.3An issue has been discovered in GitLab affecting all versions starting from 9.0 before 15.7.8, all versions starting fro...
CVE-2023-0623HIGH7.8Cscape Envision RV version 4.60 is vulnerable to an out-of-bounds write vulnerability when parsing project (i.e. HMI) fi...
CVE-2023-0622HIGH7.8Cscape Envision RV version 4.60 is vulnerable to an out-of-bounds write vulnerability when parsing project (i.e. HMI) fi...
CVE-2023-0621HIGH7.8Cscape Envision RV version 4.60 is vulnerable to an out-of-bounds read vulnerability when parsing project (i.e. HMI) fil...
CVE-2023-0050MEDIUM5.4An issue has been discovered in GitLab affecting all versions starting from 13.7 before 15.7.8, all versions starting fr...
CVE-2023-27490HIGH8.8NextAuth.js is an open source authentication solution for Next.js applications. `next-auth` applications using OAuth pro...
CVE-2023-27484MEDIUM4.9crossplane-runtime is a set of go libraries used to build Kubernetes controllers in Crossplane and its related stacks. I...
CVE-2023-27483HIGH7.5crossplane-runtime is a set of go libraries used to build Kubernetes controllers in Crossplane and its related stacks. A...
CVE-2023-27214CRITICAL9.8Online Student Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities via the fromdate ...
CVE-2023-27213CRITICAL9.8Online Student Management System v1.0 was discovered to contain a SQL injection vulnerability via the searchdata paramet...
CVE-2023-27212MEDIUM6.1A cross-site scripting (XSS) vulnerability in /php-opos/signup.php of Online Pizza Ordering System 1.0 allows attackers ...
CVE-2023-27211MEDIUM6.1A cross-site scripting (XSS) vulnerability in /admin/navbar.php of Online Pizza Ordering System 1.0 allows attackers to ...
CVE-2023-27210CRITICAL9.8Online Pizza Ordering System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/...
CVE-2023-27208MEDIUM6.1A cross-site scripting (XSS) vulnerability in /php-opos/login.php of Online Pizza Ordering System 1.0 allows attackers t...
CVE-2023-27207CRITICAL9.8Online Pizza Ordering System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/...
CVE-2023-27206MEDIUM6.1A cross-site scripting (XSS) vulnerability in /kruxton/navbar.php of Best POS Management System 1.0 allows attackers to ...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now