2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-31412 | HIGH | 7.5 | 0.3% | Aug 24, 2023 | The LMS5xx uses weak hash generation methods, resulting in the creation of insecure hashs. If an attacker manages to ret... |
| CVE-2023-40710 | HIGH | 7.5 | 0.4% | Aug 24, 2023 | An adversary could cause a continuous restart loop to the entire device by sending a large quantity of HTTP GET requests... |
| CVE-2023-40709 | HIGH | 7.5 | 0.4% | Aug 24, 2023 | An adversary could crash the entire device by sending a large quantity of ICMP requests if the controller has the built-... |
| CVE-2023-40707 | HIGH | 7.5 | 0.5% | Aug 24, 2023 | There are no requirements for setting a complex password in the built-in web server of the SNAP PAC S1 Firmware version ... |
| CVE-2023-34971 | HIGH | 8.8 | 0.1% | Aug 24, 2023 | An inadequate encryption strength vulnerability has been reported to affect QNAP operating systems. If exploited, the vu... |
| CVE-2023-34040 | HIGH | 7.8 | 2.2% | Aug 24, 2023 | In Spring for Apache Kafka 3.0.9 and earlier and versions 2.9.10 and earlier, a possible deserialization attack vector e... |
| CVE-2023-3705 | HIGH | 7.5 | 1.1% | Aug 24, 2023 | The vulnerability exists in CP-Plus NVR due to an improper input handling at the web-based management interface of the a... |
| CVE-2023-4513 | HIGH | 7.5 | 0.5% | Aug 24, 2023 | BT SDP dissector memory leak in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injecti... |
| CVE-2023-4512 | HIGH | 7.5 | 0.5% | Aug 24, 2023 | CBOR dissector crash in Wireshark 4.0.0 to 4.0.6 allows denial of service via packet injection or crafted capture file |
| CVE-2023-4511 | HIGH | 7.5 | 0.4% | Aug 24, 2023 | BT SDP dissector infinite loop in Wireshark 4.0.0 to 4.0.7 and 3.6.0 to 3.6.15 allows denial of service via packet injec... |
| CVE-2023-40573 | HIGH | 8.8 | 1.0% | Aug 24, 2023 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki supports ... |
| CVE-2023-40572 | HIGH | 8 | 0.5% | Aug 24, 2023 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The create acti... |
| CVE-2023-32559 | HIGH | 7.5 | 1.5% | Aug 24, 2023 | A privilege escalation vulnerability exists in the experimental policy mechanism in all active release lines: 16.x, 18.x... |
| CVE-2023-41028 | HIGH | 8.8 | 0.8% | Aug 23, 2023 | A stack-based buffer overflow exists in Juplink RX4-1500, a WiFi router, in versions 1.0.2 through 1.0.5. An authenticat... |
| CVE-2023-3453 | HIGH | 8.1 | 0.3% | Aug 23, 2023 | ETIC Telecom RAS versions 4.7.0 and prior the web management portal authentication disabled by default. This could allo... |
| CVE-2023-38422 | HIGH | 7.5 | 0.5% | Aug 23, 2023 | Walchem Intuition 9 firmware versions prior to v4.21 are missing authentication for some of the API routes of the manage... |
| CVE-2023-32202 | HIGH | 8.8 | 0.5% | Aug 23, 2023 | Walchem Intuition 9 firmware versions prior to v4.21 are vulnerable to improper authentication. Login credentials are st... |
| CVE-2023-40185 | HIGH | 8.6 | 0.6% | Aug 23, 2023 | shescape is simple shell escape library for JavaScript. This may impact users that use Shescape on Windows in a threaded... |
| CVE-2023-40177 | HIGH | 8.8 | 1.0% | Aug 23, 2023 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any registered ... |
| CVE-2023-40035 | HIGH | 7.2 | 1.9% | Aug 23, 2023 | Craft is a CMS for creating custom digital experiences on the web and beyond. Bypassing the validatePath function can le... |
| CVE-2023-40025 | HIGH | 7.1 | 0.5% | Aug 23, 2023 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. All versions of Argo CD starting from version ... |
| CVE-2023-40612 | HIGH | 8 | 0.4% | Aug 23, 2023 | In OpenMNS Horizon 31.0.8 and versions earlier than 32.0.2, the file editor which is accessible to any user with ROLE_FI... |
| CVE-2023-20169 | HIGH | 7.4 | 0.3% | Aug 23, 2023 | A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) protocol of Cisco NX-OS Software for the Cisco... |
| CVE-2023-38831 | HIGH | 7.8 | 97.8% | Aug 23, 2023 | RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a... |
| CVE-2023-40273 | HIGH | 8 | 1.4% | Aug 23, 2023 | The session fixation vulnerability allowed the authenticated user to continue accessing Airflow webserver even after the... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now