2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-41524 | HIGH | 8.8 | 0.3% | Aug 7, 2025 | Student Attendance Management System v1 was discovered to contain a SQL injection vulnerability via the username paramet... |
| CVE-2023-41523 | HIGH | 8.8 | 0.3% | Aug 7, 2025 | Student Attendance Management System v1 was discovered to contain a SQL injection vulnerability via the emailAddress par... |
| CVE-2023-41522 | HIGH | 8.8 | 0.3% | Aug 7, 2025 | Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createStuden... |
| CVE-2023-41521 | HIGH | 8.8 | 0.3% | Aug 7, 2025 | Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createSessio... |
| CVE-2023-41520 | HIGH | 8.8 | 0.3% | Aug 7, 2025 | Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createClassA... |
| CVE-2023-32256 | HIGH | 7.5 | 0.5% | Aug 1, 2025 | A flaw was found in the Linux kernel's ksmbd component. A race condition between smb2 close operation and logoff in mult... |
| CVE-2023-53157 | HIGH | 7.5 | 0.5% | Jul 28, 2025 | The rosenpass crate before 0.2.1 for Rust allows remote attackers to cause a denial of service (panic) via a one-byte UD... |
| CVE-2023-53155 | HIGH | 7.2 | 0.5% | Jul 25, 2025 | goform/formTest in EmbedThis GoAhead 2.5 allows HTML injection via the name parameter. |
| CVE-2023-7306 | HIGH | 7.5 | 0.3% | Jul 25, 2025 | The Frontend File Manager Plugin plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capabi... |
| CVE-2023-47356 | HIGH | 8.8 | 0.7% | Jul 17, 2025 | Mingyu Security Gateway before v3.0-5.3p was discovered to contain a remote command execution (RCE) vulnerability via th... |
| CVE-2023-41566 | HIGH | 8.1 | 0.3% | Jul 17, 2025 | OA EKP v16 was discovered to contain an arbitrary download vulnerability via the component /ui/sys_ui_extend/sysUiExtend... |
| CVE-2023-52236 | HIGH | 7 | 0.2% | Jul 8, 2025 | A vulnerability has been identified in RUGGEDCOM i800 (All versions), RUGGEDCOM i801 (All versions), RUGGEDCOM i802 (All... |
| CVE-2023-51232 | HIGH | 7.5 | 0.9% | Jul 7, 2025 | Directory Traversal vulnerability in dagster-webserver Dagster thru 1.5.11 allows remote attackers to obtain sensitive i... |
| CVE-2023-28910 | HIGH | 8 | 0.3% | Jun 28, 2025 | A specific flaw exists within the Bluetooth stack of the MIB3 infotainment system. The issue results from the disabled a... |
| CVE-2023-28909 | HIGH | 8 | 0.5% | Jun 28, 2025 | A specific flaw exists within the Bluetooth stack of the MIB3 unit. The issue results from the lack of proper validation... |
| CVE-2023-28906 | HIGH | 7.8 | 0.7% | Jun 28, 2025 | A command injection in the networking service of the MIB3 infotainment allows an attacker already presenting in the syst... |
| CVE-2023-28905 | HIGH | 8 | 0.4% | Jun 28, 2025 | A heap buffer overflow in the image processing binary of the MIB3 infotainment unit allows an attacker to execute arbitr... |
| CVE-2023-25998 | HIGH | 8.1 | 0.5% | Jun 27, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2023-44915 | HIGH | 7.1 | 0.3% | Jun 25, 2025 | A cross-site scripting (XSS) vulnerability in the component /Login.php of c3crm up to v3.0.4 allows attackers to execute... |
| CVE-2023-50450 | HIGH | 8.4 | 0.1% | Jun 23, 2025 | An issue was discovered in Sensopart VISOR Vision Sensors before 2.10.0.2 allows local users to perform unspecified acti... |
| CVE-2023-47294 | HIGH | 8.1 | 0.3% | Jun 23, 2025 | An issue in NCR Terminal Handler v1.5.1 allows low-level privileged authenticated attackers to arbitrarily deactivate, l... |
| CVE-2023-20599 | HIGH | 7.9 | 0.2% | Jun 10, 2025 | Improper register access control in ASP may allow a privileged attacker to perform unauthorized access to ASP’s Crypto C... |
| CVE-2023-26005 | HIGH | 8.1 | 0.5% | Jun 9, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2023-25999 | HIGH | 8.1 | 0.5% | Jun 9, 2025 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2023-26003 | HIGH | 7.6 | 0.4% | Jun 6, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in vipul Jariwala WP ... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now