2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-24734 | CRITICAL | 9.8 | 20.7% | Mar 6, 2023 | An arbitrary file upload vulnerability in the camera_upload.php component of PMB v7.4.6 allows attackers to execute arbi... |
| CVE-2023-24776 | CRITICAL | 9.8 | 1.4% | Mar 6, 2023 | Funadmin v3.2.0 was discovered to contain a remote code execution (RCE) vulnerability via the component \controller\Addo... |
| CVE-2023-0979 | CRITICAL | 9.8 | 0.7% | Mar 6, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in MedData MedDataPAC... |
| CVE-2023-0839 | CRITICAL | 9.8 | 0.6% | Mar 6, 2023 | Improper Protection for Outbound Error Messages and Alert Signals vulnerability in ProMIS Process Co. InSCADA allows Acc... |
| CVE-2023-22344 | CRITICAL | 9.8 | 0.9% | Mar 6, 2023 | Use of hard-coded credentials vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud Agent Ver.2.1.8 and e... |
| CVE-2023-22336 | CRITICAL | 9.8 | 1.1% | Mar 6, 2023 | Path traversal vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier allows a... |
| CVE-2023-27290 | CRITICAL | 9.1 | 8.6% | Mar 3, 2023 | Docker based datastores for IBM Instana (IBM Observability with Instana 239-0 through 239-2, 241-0 through 241-2, and 24... |
| CVE-2023-26779 | CRITICAL | 9.8 | 1.4% | Mar 3, 2023 | CleverStupidDog yf-exam v 1.8.0 is vulnerable to Deserialization which can lead to remote code execution (RCE). |
| CVE-2023-27574 | CRITICAL | 9.8 | 0.4% | Mar 3, 2023 | ShadowsocksX-NG 1.10.0 signs with com.apple.security.get-task-allow entitlements because of CODE_SIGNING_INJECT_BASE_ENT... |
| CVE-2023-24643 | CRITICAL | 9.8 | 0.8% | Mar 3, 2023 | Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the sid parameter at /php-jms... |
| CVE-2023-24642 | CRITICAL | 9.8 | 0.8% | Mar 3, 2023 | Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the sid parameter at /php-jms... |
| CVE-2023-24641 | CRITICAL | 9.8 | 0.8% | Mar 3, 2023 | Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the sid parameter at /php-jms... |
| CVE-2023-20078 | CRITICAL | 9.8 | 10.4% | Mar 3, 2023 | Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unauthenticated... |
| CVE-2023-0957 | CRITICAL | 9.6 | 0.4% | Mar 3, 2023 | An issue was discovered in Gitpod versions prior to release-2022.11.2.16. There is a Cross-Site WebSocket Hijacking (CSW... |
| CVE-2023-26055 | CRITICAL | 9.9 | 1.2% | Mar 2, 2023 | XWiki Commons are technical libraries common to several other top level XWiki projects. Starting in version 3.1-mileston... |
| CVE-2023-26477 | CRITICAL | 9.8 | 74.8% | Mar 2, 2023 | XWiki Platform is a generic wiki platform. Starting in versions 6.3-rc-1 and 6.2.4, it's possible to inject arbitrary wi... |
| CVE-2023-26780 | CRITICAL | 9.8 | 0.8% | Mar 2, 2023 | CleverStupidDog yf-exam v 1.8.0 is vulnerable to SQL Injection. |
| CVE-2023-1151 | CRITICAL | 9.8 | 0.7% | Mar 2, 2023 | A vulnerability was found in SourceCodester Electronic Medical Records System 1.0. It has been declared as critical. Aff... |
| CVE-2023-26053 | CRITICAL | 9.8 | 1.0% | Mar 2, 2023 | Gradle is a build tool with a focus on build automation and support for multi-language development. This is a collision ... |
| CVE-2023-1130 | CRITICAL | 9.8 | 0.7% | Mar 1, 2023 | A vulnerability, which was classified as critical, was found in SourceCodester Computer Parts Sales and Inventory System... |
| CVE-2023-1097 | CRITICAL | 9.8 | 1.2% | Mar 1, 2023 | Baicells EG7035-M11 devices with firmware through BCE-ODU-1.0.8 are vulnerable to improper code exploitation via HTTP G... |
| CVE-2023-23315 | CRITICAL | 9.8 | 0.9% | Mar 1, 2023 | The PrestaShop e-commerce platform module stripejs contains a Blind SQL injection vulnerability up to version 4.5.5. The... |
| CVE-2023-1114 | CRITICAL | 9.8 | 0.7% | Mar 1, 2023 | Missing Authorization vulnerability in Eskom e-Belediye allows Information Elicitation. This issue affects e-Belediye: ... |
| CVE-2023-1064 | CRITICAL | 9.8 | 0.7% | Mar 1, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Uzay Baskul Weighb... |
| CVE-2023-1112 | CRITICAL | 9.8 | 3.0% | Mar 1, 2023 | A vulnerability was found in Drag and Drop Multiple File Upload Contact Form 7 5.0.6.1 on WordPress. It has been classif... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now