2023 CVE Vulnerabilities

31,475 CVEs published in 2023.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2023-43752HIGH8OS command injection vulnerability in WRC-X3000GS2-W v1.05 and earlier, WRC-X3000GS2-B v1.05 and earlier, and WRC-X3000G...
CVE-2023-43275HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in DedeCMS v5.7 in 110 backend management interface via /catalog_add.php...
CVE-2023-47470HIGH7.8Buffer Overflow vulnerability in Ffmpeg before github commit 4565747056a11356210ed8edcecb920105e40b60 allows a remote at...
CVE-2023-47264HIGH7.5Certain WithSecure products have a buffer over-read whereby processing certain fuzz file types may cause a denial of ser...
CVE-2023-47263HIGH7.5Certain WithSecure products allow a Denial of Service (DoS) in the antivirus engine when scanning a fuzzed PE32 file. Th...
CVE-2023-48199HIGH7.8HTML Injection vulnerability in the 'manageApiKeys' component in Grocy <= 4.0.3 allows attackers to inject arbitrary HTM...
CVE-2023-47444HIGH8.8An issue discovered in OpenCart 4.0.0.0 to 4.0.2.3 allows authenticated backend users having common/security write privi...
CVE-2023-47347HIGH7.5Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP messages w...
CVE-2023-47345HIGH7.5Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP message wi...
CVE-2023-47637HIGH8.8Pimcore is an Open Source Data & Experience Management Platform. In affected versions the `/admin/object/grid-proxy` end...
CVE-2023-22818HIGH7.8Multiple DLL Search Order Hijack vulnerabilities were addressed in the SanDisk Security Installer for Windows that could...
CVE-2023-48014HIGH7.8GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to contain a stack overflow via the hevc_parse_vps_extension funct...
CVE-2023-48013HIGH7.8GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to contain a double free via the gf_filterpacket_del function at /...
CVE-2023-48011HIGH7.8GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to contain a heap-use-after-free via the flush_ref_samples functio...
CVE-2023-6112HIGH8.8Use after free in Navigation in Google Chrome prior to 119.0.6045.159 allowed a remote attacker to potentially exploit h...
CVE-2023-5997HIGH8.8Use after free in Garbage Collection in Google Chrome prior to 119.0.6045.159 allowed a remote attacker to potentially e...
CVE-2023-34982HIGH7.1 This external control vulnerability, if exploited, could allow a local OS-authenticated user with standard privileges t...
CVE-2023-33873HIGH7.8 This privilege escalation vulnerability, if exploited, cloud allow a local OS-authenticated user with standard privileg...
CVE-2023-48089HIGH8.8xxl-job-admin 2.4.0 is vulnerable to Remote Code Execution (RCE) via /xxl-job-admin/jobcode/save.
CVE-2023-5720HIGH7.5A flaw was found in Quarkus, where it does not properly sanitize artifacts created using the Gradle plugin, allowing cer...
CVE-2023-34062HIGH7.5In Reactor Netty HTTP Server, versions 1.1.x prior to 1.1.13 and versions 1.0.x prior to 1.0.39, a malicious user can se...
CVE-2023-47586HIGH7.8Multiple heap-based buffer overflow vulnerabilities exist in V-Server V4.0.18.0 and earlier and V-Server Lite V4.0.18.0 ...
CVE-2023-47585HIGH7.8Out-of-bounds read vulnerability exists in V-Server V4.0.18.0 and earlier and V-Server Lite V4.0.18.0 and earlier. If a ...
CVE-2023-47584HIGH7.8Out-of-bounds write vulnerability exists in V-Server V4.0.18.0 and earlier and V-Server Lite V4.0.18.0 and earlier. If a...
CVE-2023-47583HIGH7.8Multiple out-of-bounds read vulnerabilities exist in TELLUS Simulator V4.0.17.0 and earlier. If a user opens a specially...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now