2023 CVE Vulnerabilities

31,475 CVEs published in 2023.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2023-20095HIGH8.6A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower...
CVE-2023-20083HIGH8.6A vulnerability in ICMPv6 inspection when configured with the Snort 2 detection engine for Cisco Firepower Threat Defens...
CVE-2023-20063HIGH8.2A vulnerability in the inter-device communication mechanisms between devices that are running Cisco Firepower Threat Def...
CVE-2023-20042HIGH8.6A vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepowe...
CVE-2023-5178HIGH8.8A use-after-free vulnerability was found in drivers/nvme/target/tcp.c` in `nvmet_tcp_free_crypto` due to a logical bug i...
CVE-2023-20244HIGH8.6A vulnerability in the internal packet processing of Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 2...
CVE-2023-20195HIGH7.2Two vulnerabilities in Cisco ISE could allow an authenticated, remote attacker to upload arbitrary files to an affected ...
CVE-2023-20086HIGH8.6A vulnerability in ICMPv6 processing of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defe...
CVE-2023-5847HIGH7.3 Under certain conditions, a low privileged attacker could load a specially crafted file during installation or upgrade ...
CVE-2023-5627HIGH7.5A vulnerability has been identified in NPort 6000 Series, making the authentication mechanism vulnerable. This vulnerabi...
CVE-2023-40062HIGH8.8SolarWinds Platform Incomplete List of Disallowed Inputs Remote Code Execution Vulnerability. If executed, this vulnerab...
CVE-2023-40061HIGH8.8 Insecure job execution mechanism vulnerability. This vulnerability can lead to other attacks as a result.
CVE-2023-3972HIGH7.8A vulnerability was found in insights-client. This security issue occurs because of insecure file operations or unsafe h...
CVE-2023-33227HIGH8.8The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability This vuln...
CVE-2023-33226HIGH8.8The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability. This vu...
CVE-2023-4452HIGH7.5A vulnerability has been identified in the EDR-810, EDR-G902, and EDR-G903 Series, making them vulnerable to the denial...
CVE-2023-5625HIGH7.5A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, r...
CVE-2023-1720HIGH8Lack of mime type response header in Bitrix24 22.0.300 allows authenticated remote attackers to execute arbitrary JavaSc...
CVE-2023-1718HIGH7.5 Improper file stream access in /desktop_app/file.ajax.php?action=uploadfile in Bitrix24 22.0.300 allows unauthenticated...
CVE-2023-1714HIGH8.8Unsafe variable extraction in bitrix/modules/main/classes/general/user_options.php in Bitrix24 22.0.300 allows remote au...
CVE-2023-1713HIGH8.8Insecure temporary file creation in bitrix/modules/crm/lib/order/import/instagram.php in Bitrix24 22.0.300 hosted on Apa...
CVE-2023-4197HIGH8.8Improper input validation in Dolibarr ERP CRM <= v18.0.1 fails to strip certain PHP code from user-supplied input when c...
CVE-2023-5899HIGH8.8Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
CVE-2023-5898HIGH8.8Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
CVE-2023-5897HIGH8.8Cross-Site Request Forgery (CSRF) in GitHub repository pkp/customLocale prior to 1.2.0-1.

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now