2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-30613 | CRITICAL | 9 | 1.0% | Apr 24, 2023 | Kiwi TCMS, an open source test management system, allows users to upload attachments to test plans, test cases, etc. In ... |
| CVE-2023-27524 | CRITICAL | 9.8 | 97.4% | Apr 24, 2023 | Session Validation attacks in Apache Superset versions up to and including 2.0.1. Installations that have not altered th... |
| CVE-2023-24823 | CRITICAL | 9.8 | 1.0% | Apr 24, 2023 | RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to proc... |
| CVE-2023-30378 | CRITICAL | 9.8 | 0.8% | Apr 24, 2023 | In Tenda AC15 V15.03.05.19, the function "sub_8EE8" contains a stack-based buffer overflow vulnerability. |
| CVE-2023-30376 | CRITICAL | 9.8 | 0.8% | Apr 24, 2023 | In Tenda AC15 V15.03.05.19, the function "henan_pppoe_user" contains a stack-based buffer overflow vulnerability. |
| CVE-2023-30375 | CRITICAL | 9.8 | 0.8% | Apr 24, 2023 | In Tenda AC15 V15.03.05.19, the function "getIfIp" contains a stack-based buffer overflow vulnerability. |
| CVE-2023-30373 | CRITICAL | 9.8 | 0.8% | Apr 24, 2023 | In Tenda AC15 V15.03.05.19, the function "xian_pppoe_user" contains a stack-based buffer overflow vulnerability. |
| CVE-2023-30372 | CRITICAL | 9.8 | 0.8% | Apr 24, 2023 | In Tenda AC15 V15.03.05.19, The function "xkjs_ver32" contains a stack-based buffer overflow vulnerability. |
| CVE-2023-30371 | CRITICAL | 9.8 | 0.8% | Apr 24, 2023 | In Tenda AC15 V15.03.05.19, the function "sub_ED14" contains a stack-based buffer overflow vulnerability. |
| CVE-2023-30370 | CRITICAL | 9.8 | 0.8% | Apr 24, 2023 | In Tenda AC15 V15.03.05.19, the function GetValue contains a stack-based buffer overflow vulnerability. |
| CVE-2023-24819 | CRITICAL | 9.8 | 1.0% | Apr 24, 2023 | RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to proc... |
| CVE-2023-30369 | CRITICAL | 9.8 | 0.8% | Apr 24, 2023 | Tenda AC15 V15.03.05.19 is vulnerable to Buffer Overflow. |
| CVE-2023-30368 | CRITICAL | 9.8 | 0.8% | Apr 24, 2023 | Tenda AC5 V15.03.06.28 is vulnerable to Buffer Overflow via the initWebs function. |
| CVE-2023-25133 | CRITICAL | 9.8 | 1.0% | Apr 24, 2023 | Improper privilege management vulnerability in default.cmd file in PowerPanel Business Local/Remote for Windows v4.8.6 a... |
| CVE-2023-25132 | CRITICAL | 9.8 | 1.1% | Apr 24, 2023 | Unrestricted upload of file with dangerous type vulnerability in default.cmd file in PowerPanel Business Local/Remote fo... |
| CVE-2023-25131 | CRITICAL | 9.8 | 1.0% | Apr 24, 2023 | Use of default password vulnerability in PowerPanel Business Local/Remote for Windows v4.8.6 and earlier, PowerPanel Bus... |
| CVE-2023-22581 | CRITICAL | 9.8 | 0.7% | Apr 24, 2023 | White Rabbit Switch contains a vulnerability which makes it possible for an attacker to perform system commands under th... |
| CVE-2023-28131 | CRITICAL | 9.6 | 23.2% | Apr 24, 2023 | A vulnerability in the expo.io framework allows an attacker to take over accounts and steal credentials on an applicatio... |
| CVE-2023-31060 | CRITICAL | 9.8 | 1.2% | Apr 24, 2023 | Repetier Server through 1.4.10 executes as SYSTEM. This can be leveraged in conjunction with CVE-2023-31059 for full com... |
| CVE-2023-23753 | CRITICAL | 9.8 | 0.8% | Apr 23, 2023 | The 'Visforms Base Package for Joomla 3' extension is vulnerable to SQL Injection as concatenation is used to construct ... |
| CVE-2023-2246 | CRITICAL | 9.8 | 3.6% | Apr 23, 2023 | A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. This vulne... |
| CVE-2023-2244 | CRITICAL | 9.8 | 0.7% | Apr 22, 2023 | A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been classified as critical. This affects an... |
| CVE-2023-30621 | CRITICAL | 9.8 | 1.9% | Apr 21, 2023 | Gipsy is a multi-purpose discord bot which aim to be as modular and user-friendly as possible. In versions prior to 1.3 ... |
| CVE-2023-29924 | CRITICAL | 9.8 | 1.1% | Apr 21, 2023 | PowerJob V4.3.1 is vulnerable to Incorrect Access Control that allows for remote code execution. |
| CVE-2023-26556 | CRITICAL | 9.1 | 0.9% | Apr 21, 2023 | io.finnet tss-lib before 2.0.0 can leak a secret key via a timing side-channel attack because it relies on the scalar-mu... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now