2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-27100 | CRITICAL | 9.8 | 9.8% | Mar 22, 2023 | Improper restriction of excessive authentication attempts in the SSHGuard component of Netgate pfSense Plus software v22... |
| CVE-2023-27060 | CRITICAL | 9.8 | 1.3% | Mar 22, 2023 | LightCMS v1.3.7 was discovered to contain a remote code execution (RCE) vulnerability via the image:make function. |
| CVE-2023-28667 | CRITICAL | 9.8 | 1.1% | Mar 22, 2023 | The Lead Generated WordPress Plugin, version <= 1.23, was affected by an unauthenticated insecure deserialization issue.... |
| CVE-2023-28662 | CRITICAL | 9.8 | 42.2% | Mar 22, 2023 | The Gift Cards (Gift Vouchers and Packages) WordPress Plugin, version <= 4.3.1, is affected by an unauthenticated SQL in... |
| CVE-2023-27224 | CRITICAL | 9.8 | 1.2% | Mar 22, 2023 | An issue found in NginxProxyManager v.2.9.19 allows an attacker to execute arbitrary code via a lua script to the config... |
| CVE-2023-1571 | CRITICAL | 9.8 | 0.9% | Mar 22, 2023 | A vulnerability, which was classified as critical, was found in DataGear up to 4.5.0. This affects an unknown part of th... |
| CVE-2023-1566 | CRITICAL | 9.8 | 0.5% | Mar 22, 2023 | A vulnerability was found in SourceCodester Medical Certificate Generator App 1.0. It has been declared as critical. Thi... |
| CVE-2023-27638 | CRITICAL | 9.8 | 3.3% | Mar 22, 2023 | An issue was discovered in the tshirtecommerce (aka Custom Product Designer) component 2.1.4 for PrestaShop. An HTTP req... |
| CVE-2023-27637 | CRITICAL | 9.8 | 3.3% | Mar 22, 2023 | An issue was discovered in the tshirtecommerce (aka Custom Product Designer) component 2.1.4 for PrestaShop. An HTTP req... |
| CVE-2023-1564 | CRITICAL | 9.8 | 0.8% | Mar 22, 2023 | A vulnerability was found in SourceCodester Air Cargo Management System 1.0 and classified as critical. Affected by this... |
| CVE-2023-1563 | CRITICAL | 9.8 | 0.8% | Mar 22, 2023 | A vulnerability has been found in SourceCodester Student Study Center Desk Management System 1.0 and classified as criti... |
| CVE-2023-1561 | CRITICAL | 9.8 | 0.8% | Mar 22, 2023 | A vulnerability, which was classified as critical, was found in code-projects Simple Online Hotel Reservation System 1.0... |
| CVE-2023-1558 | CRITICAL | 9.8 | 0.7% | Mar 22, 2023 | A vulnerability classified as critical has been found in Simple and Beautiful Shopping Cart System 1.0. This affects an ... |
| CVE-2023-1557 | CRITICAL | 9.8 | 0.5% | Mar 22, 2023 | A vulnerability was found in SourceCodester E-Commerce System 1.0. It has been rated as critical. Affected by this issue... |
| CVE-2023-1556 | CRITICAL | 9.8 | 0.7% | Mar 22, 2023 | A vulnerability was found in SourceCodester Judging Management System 1.0. It has been declared as critical. Affected by... |
| CVE-2023-25589 | CRITICAL | 9.8 | 1.0% | Mar 22, 2023 | A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote ... |
| CVE-2023-28725 | CRITICAL | 9.1 | 20.6% | Mar 22, 2023 | General Bytes Crypto Application Server (CAS) 20230120, as distributed with General Bytes BATM devices, allows remote at... |
| CVE-2023-27855 | CRITICAL | 9.8 | 13.5% | Mar 22, 2023 | In affected versions, a path traversal exists when processing a message in Rockwell Automation's ThinManager ThinServer... |
| CVE-2023-26497 | CRITICAL | 9.8 | 24.1% | Mar 21, 2023 | An issue was discovered in Samsung Baseband Modem Chipset for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1... |
| CVE-2023-1529 | CRITICAL | 9.8 | 1.1% | Mar 21, 2023 | Out of bounds memory access in WebHID in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially ... |
| CVE-2023-25684 | CRITICAL | 9.8 | 1.0% | Mar 21, 2023 | IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 is vulnerable to SQL injection. A remote att... |
| CVE-2023-27570 | CRITICAL | 9.8 | 0.6% | Mar 21, 2023 | The eo_tags package before 1.4.19 for PrestaShop allows SQL injection via a crafted _ga cookie. |
| CVE-2023-27569 | CRITICAL | 9.8 | 0.9% | Mar 21, 2023 | The eo_tags package before 1.3.0 for PrestaShop allows SQL injection via an HTTP User-Agent or Referer header. |
| CVE-2023-1153 | CRITICAL | 9.8 | 0.7% | Mar 21, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Pacsrapor allows S... |
| CVE-2023-1537 | CRITICAL | 9.8 | 0.8% | Mar 21, 2023 | Authentication Bypass by Capture-replay in GitHub repository answerdev/answer prior to 1.0.6. |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now