2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-23551 | CRITICAL | 9.8 | 0.9% | Feb 13, 2023 | Control By Web X-600M devices run Lua scripts and are vulnerable to code injection, which could allow an attacker to ... |
| CVE-2023-0789 | CRITICAL | 9.8 | 1.7% | Feb 12, 2023 | Command Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11. |
| CVE-2023-0788 | CRITICAL | 9.8 | 0.9% | Feb 12, 2023 | Code Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11. |
| CVE-2023-0784 | CRITICAL | 9.8 | 0.8% | Feb 12, 2023 | A vulnerability classified as critical has been found in SourceCodester Best Online News Portal 1.0. Affected is an unkn... |
| CVE-2023-0783 | CRITICAL | 9.8 | 0.9% | Feb 11, 2023 | A vulnerability was found in EcShop 4.1.5. It has been classified as critical. This affects an unknown part of the file ... |
| CVE-2023-0782 | CRITICAL | 9.8 | 1.5% | Feb 11, 2023 | A vulnerability was found in Tenda AC23 16.03.07.45 and classified as critical. Affected by this issue is the function f... |
| CVE-2023-0781 | CRITICAL | 9.8 | 0.7% | Feb 11, 2023 | A vulnerability was found in SourceCodester Canteen Management System 1.0. It has been declared as critical. This vulner... |
| CVE-2023-25562 | CRITICAL | 9.8 | 0.4% | Feb 11, 2023 | DataHub is an open-source metadata platform. In versions of DataHub prior to 0.8.45 Session cookies are only cleared on ... |
| CVE-2023-25561 | CRITICAL | 9.8 | 0.4% | Feb 11, 2023 | DataHub is an open-source metadata platform. In the event a system is using Java Authentication and Authorization Servic... |
| CVE-2023-25560 | CRITICAL | 9.8 | 0.6% | Feb 11, 2023 | DataHub is an open-source metadata platform. The AuthServiceClient which is responsible for creation of new accounts, ve... |
| CVE-2023-25557 | CRITICAL | 9.1 | 0.7% | Feb 11, 2023 | DataHub is an open-source metadata platform. The DataHub frontend acts as a proxy able to forward any REST or GraphQL re... |
| CVE-2023-0776 | CRITICAL | 10 | 1.2% | Feb 11, 2023 | Baicells Nova 436Q, Nova 430E, Nova 430I, and Neutrino 430 LTE TDD eNodeB devices with firmware through QRTB 2.12.7 are ... |
| CVE-2023-23163 | CRITICAL | 9.8 | 4.4% | Feb 10, 2023 | Art Gallery Management System Project v1.0 was discovered to contain a SQL injection vulnerability via the editid parame... |
| CVE-2023-23162 | CRITICAL | 9.8 | 4.4% | Feb 10, 2023 | Art Gallery Management System Project v1.0 was discovered to contain a SQL injection vulnerability via the cid parameter... |
| CVE-2023-0777 | CRITICAL | 9.8 | 15.1% | Feb 10, 2023 | Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to 2.0.4. |
| CVE-2023-24352 | CRITICAL | 9.8 | 1.2% | Feb 10, 2023 | D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the webpage parameter at /gofo... |
| CVE-2023-24351 | CRITICAL | 9.8 | 1.2% | Feb 10, 2023 | D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the FILECODE parameter at /gof... |
| CVE-2023-24350 | CRITICAL | 9.8 | 1.2% | Feb 10, 2023 | D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the config.smtp_email_subject ... |
| CVE-2023-24349 | CRITICAL | 9.8 | 1.2% | Feb 10, 2023 | D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the curTime parameter at /gofo... |
| CVE-2023-24348 | CRITICAL | 9.8 | 1.2% | Feb 10, 2023 | D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the curTime parameter at /gofo... |
| CVE-2023-0774 | CRITICAL | 9.8 | 0.5% | Feb 10, 2023 | A vulnerability has been found in SourceCodester Medical Certificate Generator App 1.0 and classified as critical. This ... |
| CVE-2023-0745 | CRITICAL | 9.8 | 0.5% | Feb 9, 2023 | The High Availability functionality of Yugabyte Anywhere can be abused to write arbitrary ... |
| CVE-2023-0575 | CRITICAL | 9.8 | 0.8% | Feb 9, 2023 | External Control of Critical State Data, Improper Control of Generation of Code ('Code Injection') vulnerability in Yuga... |
| CVE-2023-0574 | CRITICAL | 9.8 | 0.6% | Feb 9, 2023 | Server-Side Request Forgery (SSRF), Improperly Controlled Modification of Dynamically-Determined Object Attributes, Impr... |
| CVE-2023-0758 | CRITICAL | 9.8 | 0.6% | Feb 9, 2023 | A vulnerability was found in glorylion JFinalOA 1.0.2 and classified as critical. This issue affects some unknown proces... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now