2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-29492 | CRITICAL | 9.8 | 2.7% | Apr 11, 2023 | Novi Survey before 8.9.43676 allows remote attackers to execute arbitrary code on the server in the context of the servi... |
| CVE-2023-26122 | CRITICAL | 10 | 2.1% | Apr 11, 2023 | All versions of the package safe-eval are vulnerable to Sandbox Bypass due to improper input sanitization. The vulnerabi... |
| CVE-2023-26121 | CRITICAL | 10 | 1.1% | Apr 11, 2023 | All versions of the package safe-eval are vulnerable to Prototype Pollution via the safeEval function, due to improper s... |
| CVE-2023-28765 | CRITICAL | 9.8 | 14.9% | Apr 11, 2023 | An attacker with basic privileges in SAP BusinessObjects Business Intelligence Platform (Promotion Management) - version... |
| CVE-2023-27497 | CRITICAL | 9.8 | 0.8% | Apr 11, 2023 | Due to missing authentication and input sanitization of code the EventLogServiceCollector of SAP Diagnostics Agent - ver... |
| CVE-2023-27178 | CRITICAL | 9.8 | 1.4% | Apr 10, 2023 | An arbitrary file upload vulnerability in the upload function of GDidees CMS 3.9.1 allows attackers to execute arbitrary... |
| CVE-2023-27076 | CRITICAL | 9.8 | 22.9% | Apr 10, 2023 | Command injection vulnerability found in Tenda G103 v.1.0.0.5 allows attacker to execute arbitrary code via a the langua... |
| CVE-2023-26070 | CRITICAL | 9.8 | 0.7% | Apr 10, 2023 | Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 4 of 4). |
| CVE-2023-26069 | CRITICAL | 9.8 | 0.7% | Apr 10, 2023 | Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 3 of 4). |
| CVE-2023-26068 | CRITICAL | 9.8 | 11.6% | Apr 10, 2023 | Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 2 of 4). |
| CVE-2023-26066 | CRITICAL | 9.8 | 0.7% | Apr 10, 2023 | Certain Lexmark devices through 2023-02-19 have Improper Validation of an Array Index. |
| CVE-2023-26065 | CRITICAL | 9.8 | 0.7% | Apr 10, 2023 | Certain Lexmark devices through 2023-02-19 have an Integer Overflow. |
| CVE-2023-26064 | CRITICAL | 9.8 | 0.7% | Apr 10, 2023 | Certain Lexmark devices through 2023-02-19 have an Out-of-bounds Write. |
| CVE-2023-26063 | CRITICAL | 9.8 | 0.7% | Apr 10, 2023 | Certain Lexmark devices through 2023-02-19 access a Resource By Using an Incompatible Type. |
| CVE-2023-27650 | CRITICAL | 9.8 | 2.1% | Apr 10, 2023 | An issue found in APUS Group Launcher v.3.10.73 and v.3.10.88 allows a remote attacker to execute arbitrary code via the... |
| CVE-2023-1969 | CRITICAL | 9.8 | 0.8% | Apr 10, 2023 | A vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. This vulnerability affects u... |
| CVE-2023-29375 | CRITICAL | 9.8 | 0.8% | Apr 10, 2023 | An issue was discovered in Progress Sitefinity 13.3 before 13.3.7647, 14.0 before 14.0.7736, 14.1 before 14.1.7826, 14.2... |
| CVE-2023-1478 | CRITICAL | 9.8 | 1.1% | Apr 10, 2023 | The Hummingbird WordPress plugin before 3.4.2 does not validate the generated file path for page cache files before writ... |
| CVE-2023-29216 | CRITICAL | 9.8 | 2.1% | Apr 10, 2023 | In Apache Linkis <=1.3.1, because the parameters are not effectively filtered, the attacker uses the MySQL data source a... |
| CVE-2023-29215 | CRITICAL | 9.8 | 2.1% | Apr 10, 2023 | In Apache Linkis <=1.3.1, due to the lack of effective filtering of parameters, an attacker configuring malicious Mysql ... |
| CVE-2023-27987 | CRITICAL | 9.1 | 0.8% | Apr 10, 2023 | In Apache Linkis <=1.3.1, due to the default token generated by Linkis Gateway deployment being too simple, it is easy ... |
| CVE-2023-27603 | CRITICAL | 9.8 | 1.8% | Apr 10, 2023 | In Apache Linkis <=1.3.1, due to the Manager module engineConn material upload does not check the zip path, This is a... |
| CVE-2023-27602 | CRITICAL | 9.8 | 2.0% | Apr 10, 2023 | In Apache Linkis <=1.3.1, The PublicService module uploads files without restrictions on the path to the uploaded files,... |
| CVE-2023-27720 | CRITICAL | 9.8 | 1.4% | Apr 9, 2023 | D-Link DIR878 1.30B08 was discovered to contain a stack overflow in the sub_48d630 function. This vulnerability allows a... |
| CVE-2023-27719 | CRITICAL | 9.8 | 1.4% | Apr 9, 2023 | D-Link DIR878 1.30B08 was discovered to contain a stack overflow in the sub_478360 function. This vulnerability allows a... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now