2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-27239 | CRITICAL | 9.8 | 0.8% | Mar 15, 2023 | Tenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the shareSpeed parameter at /goform/WifiGuestSet. |
| CVE-2023-28371 | CRITICAL | 9.8 | 1.5% | Mar 15, 2023 | In Stellarium through 1.2, attackers can write to files that are typically unintended, such as ones with absolute pathna... |
| CVE-2023-27757 | CRITICAL | 9.8 | 0.9% | Mar 15, 2023 | An arbitrary file upload vulnerability in the /admin/user/uploadImg component of PerfreeBlog v3.1.1 allows attackers to ... |
| CVE-2023-1327 | CRITICAL | 9.8 | 0.9% | Mar 14, 2023 | Netgear RAX30 (AX2400), prior to version 1.0.6.74, was affected by an authentication bypass vulnerability, allowing an u... |
| CVE-2023-26511 | CRITICAL | 9.8 | 0.9% | Mar 14, 2023 | A Hard Coded Admin Credentials issue in the Web-UI Admin Panel in Propius MachineSelector 6.6.0 and 6.6.1 allows remote ... |
| CVE-2023-28343 | CRITICAL | 9.8 | 85.3% | Mar 14, 2023 | OS command injection affects Altenergy Power Control Software C1.2.5 via shell metacharacters in the index.php/managemen... |
| CVE-2023-23415 | CRITICAL | 9.8 | 3.5% | Mar 14, 2023 | Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability |
| CVE-2023-23397 | CRITICAL | 9.8 | 97.4% | Mar 14, 2023 | Microsoft Outlook Elevation of Privilege Vulnerability |
| CVE-2023-23392 | CRITICAL | 9.8 | 1.7% | Mar 14, 2023 | HTTP Protocol Stack Remote Code Execution Vulnerability |
| CVE-2023-21708 | CRITICAL | 9.8 | 1.5% | Mar 14, 2023 | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
| CVE-2023-27074 | CRITICAL | 9.8 | 0.6% | Mar 14, 2023 | BP Monitoring Management System v1.0 was discovered to contain a SQL injection vulnerability via the emailid parameter i... |
| CVE-2023-1394 | CRITICAL | 9.8 | 0.7% | Mar 14, 2023 | A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0. It has been classified as critical. This ... |
| CVE-2023-1392 | CRITICAL | 9.8 | 0.9% | Mar 14, 2023 | A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. Affected b... |
| CVE-2023-1391 | CRITICAL | 9.8 | 0.7% | Mar 14, 2023 | A vulnerability, which was classified as problematic, was found in SourceCodester Online Tours & Travels Management Syst... |
| CVE-2023-27501 | CRITICAL | 9.6 | 1.0% | Mar 14, 2023 | SAP NetWeaver AS for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, ... |
| CVE-2023-27269 | CRITICAL | 9.6 | 1.0% | Mar 14, 2023 | SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754,... |
| CVE-2023-27582 | CRITICAL | 9.8 | 1.0% | Mar 13, 2023 | maddy is a composable, all-in-one mail server. Starting with version 0.2.0 and prior to version 0.6.3, maddy allows a fu... |
| CVE-2023-27052 | CRITICAL | 9.8 | 0.8% | Mar 13, 2023 | E-Commerce System v1.0 ws discovered to contain a SQL injection vulnerability via the id parameter at /admin/delete_user... |
| CVE-2023-27583 | CRITICAL | 9.8 | 0.9% | Mar 13, 2023 | PanIndex is a network disk directory index. In Panindex prior to version 3.1.3, a hard-coded JWT key `PanIndex` is used... |
| CVE-2023-0354 | CRITICAL | 9.1 | 0.6% | Mar 13, 2023 | The Akuvox E11 web server can be accessed without any user authentication, and this could allow an attacker to access se... |
| CVE-2023-0353 | CRITICAL | 9.8 | 0.4% | Mar 13, 2023 | Akuvox E11 uses a weak encryption algorithm for stored passwords and uses a hard-coded password for decryption which cou... |
| CVE-2023-0352 | CRITICAL | 9.1 | 0.6% | Mar 13, 2023 | The Akuvox E11 password recovery webpage can be accessed without authentication, and an attacker could download the devi... |
| CVE-2023-0349 | CRITICAL | 9.1 | 0.6% | Mar 13, 2023 | The Akuvox E11 libvoice library provides unauthenticated access to the camera capture for image and video. This could al... |
| CVE-2023-0345 | CRITICAL | 9.8 | 0.7% | Mar 13, 2023 | The Akuvox E11 secure shell (SSH) server is enabled by default and can be accessed by the root user. This password canno... |
| CVE-2023-25207 | CRITICAL | 9.8 | 0.9% | Mar 13, 2023 | PrestaShop dpdfrance <6.1.3 is vulnerable to SQL Injection via dpdfrance/ajax.php. |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now