2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-40825 | HIGH | 7.2 | 1.0% | Aug 28, 2023 | An issue in Perfree PerfreeBlog v.3.1.2 allows a remote attacker to execute arbitrary code via crafted plugin listed in ... |
| CVE-2023-39059 | HIGH | 8.8 | 1.4% | Aug 28, 2023 | An issue in ansible semaphore v.2.8.90 allows a remote attacker to execute arbitrary code via a crafted payload to the e... |
| CVE-2023-35785 | HIGH | 8.1 | 2.4% | Aug 28, 2023 | Zoho ManageEngine Active Directory 360 versions 4315 and below, ADAudit Plus 7202 and below, ADManager Plus 7200 and bel... |
| CVE-2023-39810 | HIGH | 7.8 | 0.7% | Aug 28, 2023 | An issue in the CPIO command of Busybox v1.33.2 allows attackers to execute a directory traversal. |
| CVE-2023-40590 | HIGH | 7.8 | 0.5% | Aug 28, 2023 | GitPython is a python library used to interact with Git repositories. When resolving a program, Python/Windows look for... |
| CVE-2023-1997 | HIGH | 8.8 | 1.7% | Aug 28, 2023 | An OS Command Injection vulnerability exists in SIMULIA 3DOrchestrate from Release 3DEXPERIENCE R2021x through Release 3... |
| CVE-2023-40754 | HIGH | 8.8 | 0.7% | Aug 28, 2023 | In PHPJabbers Car Rental Script 3.0, lack of verification when changing an email address and/or password (on the Profile... |
| CVE-2023-36481 | HIGH | 7.5 | 0.5% | Aug 28, 2023 | An issue was discovered in Samsung Exynos Mobile Processor and Wearable Processor 9810, 9610, 9820, 980, 850, 1080, 2100... |
| CVE-2023-34758 | HIGH | 8.1 | 0.6% | Aug 28, 2023 | Sliver from v1.5.x to v1.5.39 has an improper cryptographic implementation, which allows attackers to execute a man-in-t... |
| CVE-2023-26095 | HIGH | 7.5 | 0.6% | Aug 28, 2023 | ASQ in Stormshield Network Security (SNS) 4.3.15 before 4.3.16 and 4.6.x before 4.6.3 allows a crash when analysing a cr... |
| CVE-2023-40195 | HIGH | 8.8 | 1.4% | Aug 28, 2023 | Deserialization of Untrusted Data, Inclusion of Functionality from Untrusted Control Sphere vulnerability in Apache Soft... |
| CVE-2023-27604 | HIGH | 8.8 | 1.2% | Aug 28, 2023 | Apache Airflow Sqoop Provider, versions before 4.0.0, is affected by a vulnerability that allows an attacker pass parame... |
| CVE-2023-38030 | HIGH | 7.5 | 0.6% | Aug 28, 2023 | Saho’s attendance devices ADM100 and ADM-100FP have a vulnerability of missing authentication for critical functions. A... |
| CVE-2023-26271 | HIGH | 7.5 | 0.5% | Aug 28, 2023 | IBM Security Guardium Data Encryption (IBM Guardium Cloud Key Manager (GCKM) 1.10.3)) uses an inadequate account lockout... |
| CVE-2023-24959 | HIGH | 7.5 | 0.6% | Aug 28, 2023 | IBM InfoSphere Information Systems 11.7 could expose information about the host system and environment configuration. I... |
| CVE-2023-23473 | HIGH | 8.8 | 0.3% | Aug 28, 2023 | IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to exec... |
| CVE-2023-22877 | HIGH | 8.8 | 0.6% | Aug 28, 2023 | IBM InfoSphere Information Server 11.7 is potentially vulnerable to CSV Injection. A remote attacker could execute arbit... |
| CVE-2023-38730 | HIGH | 7.5 | 0.3% | Aug 27, 2023 | IBM Storage Copy Data Management 2.2.0.0 through 2.2.19.0 uses weaker than expected cryptographic algorithms that could ... |
| CVE-2023-36741 | HIGH | 7.5 | 1.8% | Aug 26, 2023 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
| CVE-2023-41121 | HIGH | 7.5 | 0.6% | Aug 25, 2023 | Array AG OS before 9.4.0.499 allows denial of service: remote attackers can cause system service processes to crash thro... |
| CVE-2023-39289 | HIGH | 7.5 | 0.5% | Aug 25, 2023 | A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2208.101 could allow an un... |
| CVE-2023-34723 | HIGH | 7.5 | 2.5% | Aug 25, 2023 | An issue was discovered in TechView LA-5570 Wireless Gateway 1.0.19_T53, allows attackers to gain sensitive information ... |
| CVE-2023-40586 | HIGH | 7.5 | 0.6% | Aug 25, 2023 | OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. Due to the misuse of `log.Fatalf`,... |
| CVE-2023-40585 | HIGH | 7.5 | 0.4% | Aug 25, 2023 | ironic-image is a container image to run OpenStack Ironic as part of Metal³. Prior to version capm3-v1.4.3, if Ironic is... |
| CVE-2023-40583 | HIGH | 7.5 | 0.8% | Aug 25, 2023 | libp2p is a networking stack and library modularized out of The IPFS Project, and bundled separately for other tools to ... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now