2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-23302 | CRITICAL | 9.8 | 1.3% | May 23, 2023 | The `Toybox.GenericChannel.setDeviceConfig` API method in CIQ API version 1.2.0 through 4.1.7 does not validate its para... |
| CVE-2023-23301 | CRITICAL | 9.8 | 1.1% | May 23, 2023 | The `news` MonkeyC operation code in CIQ API version 1.0.0 through 4.1.7 fails to check that string resources are not ex... |
| CVE-2023-23300 | CRITICAL | 9.8 | 1.3% | May 23, 2023 | The `Toybox.Cryptography.Cipher.initialize` API method in CIQ API version 3.0.0 through 4.1.7 does not validate its para... |
| CVE-2023-23298 | CRITICAL | 9.8 | 1.5% | May 23, 2023 | The `Toybox.Graphics.BufferedBitmap.initialize` API method in CIQ API version 2.3.0 through 4.1.7 does not validate its ... |
| CVE-2023-33362 | CRITICAL | 9.8 | 9.1% | May 23, 2023 | Piwigo 13.6.0 is vulnerable to SQL Injection via in the "profile" function. |
| CVE-2023-33361 | CRITICAL | 9.8 | 0.9% | May 23, 2023 | Piwigo 13.6.0 is vulnerable to SQL Injection via /admin/permalinks.php. |
| CVE-2023-33338 | CRITICAL | 9.8 | 3.7% | May 23, 2023 | Old Age Home Management 1.0 is vulnerable to SQL Injection via the username parameter. |
| CVE-2023-28413 | CRITICAL | 9.8 | 2.0% | May 23, 2023 | Directory traversal vulnerability in Snow Monkey Forms versions v5.0.6 and earlier allows a remote unauthenticated attac... |
| CVE-2023-28409 | CRITICAL | 9.8 | 1.2% | May 23, 2023 | Unrestricted upload of file with dangerous type exists in MW WP Form versions v4.4.2 and earlier, which may allow a remo... |
| CVE-2023-28408 | CRITICAL | 9.8 | 1.8% | May 23, 2023 | Directory traversal vulnerability in MW WP Form versions v4.4.2 and earlier allows a remote unauthenticated attacker to ... |
| CVE-2023-27507 | CRITICAL | 9.8 | 1.3% | May 23, 2023 | MicroEngine Mailform version 1.1.0 to 1.1.8 contains a path traversal vulnerability. If the product's file upload functi... |
| CVE-2023-27397 | CRITICAL | 9.8 | 0.9% | May 23, 2023 | Unrestricted upload of file with dangerous type exists in MicroEngine Mailform version 1.1.0 to 1.1.8. If the product's ... |
| CVE-2023-27388 | CRITICAL | 9.8 | 1.3% | May 23, 2023 | Improper authentication vulnerability in T&D Corporation and ESPEC MIC CORP. data logger products allows a remote unauth... |
| CVE-2023-25953 | CRITICAL | 9.8 | 0.6% | May 23, 2023 | Code injection vulnerability in Drive Explorer for macOS versions 3.5.4 and earlier allows an attacker who can login to ... |
| CVE-2023-31814 | CRITICAL | 9.8 | 0.9% | May 23, 2023 | D-Link DIR-300 firmware <=REVA1.06 and <=REVB2.06 is vulnerable to File inclusion via /model/__lang_msg.php. |
| CVE-2023-29919 | CRITICAL | 9.1 | 60.2% | May 23, 2023 | SolarView Compact <= 6.0 is vulnerable to Insecure Permissions. Any file on the server can be read or modified because t... |
| CVE-2023-27068 | CRITICAL | 9.8 | 1.7% | May 23, 2023 | Deserialization of Untrusted Data in Sitecore Experience Platform through 10.2 allows remote attackers to run arbitrary ... |
| CVE-2023-2504 | CRITICAL | 9.8 | 0.5% | May 22, 2023 | Files present on firmware images could allow an attacker to gain unauthorized access as a root user using hard-code... |
| CVE-2023-31689 | CRITICAL | 9.8 | 21.8% | May 22, 2023 | In Wcms 0.3.2, an attacker can send a crafted request from a vulnerable web application backend server /wcms/wex/html.ph... |
| CVE-2023-31241 | CRITICAL | 10 | 0.8% | May 22, 2023 | Snap One OvrC cloud servers contain a route an attacker can use to bypass requirements and claim devices outright. |
| CVE-2023-31240 | CRITICAL | 9.8 | 0.5% | May 22, 2023 | Snap One OvrC Pro versions prior to 7.2 have their own locally running web server accessible both from the local network... |
| CVE-2023-28386 | CRITICAL | 9.8 | 0.4% | May 22, 2023 | Snap One OvrC Pro devices versions 7.2 and prior do not validate firmware updates correctly. The device only calculates ... |
| CVE-2023-2840 | CRITICAL | 9.8 | 0.7% | May 22, 2023 | NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.2.2. |
| CVE-2023-2838 | CRITICAL | 9.1 | 0.7% | May 22, 2023 | Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2. |
| CVE-2023-33294 | CRITICAL | 9.8 | 0.9% | May 22, 2023 | An issue was discovered in KaiOS 3.0 before 3.1. The /system/bin/tctweb_server binary exposes a local web server that re... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now