2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-37427 | HIGH | 7.2 | 0.9% | Aug 22, 2023 | A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated re... |
| CVE-2023-37426 | HIGH | 7.5 | 0.4% | Aug 22, 2023 | EdgeConnect SD-WAN Orchestrator instances prior to the versions resolved in this advisory were found to have shared stat... |
| CVE-2023-37424 | HIGH | 8.1 | 0.6% | Aug 22, 2023 | A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an unauthenticated ... |
| CVE-2023-34853 | HIGH | 7.8 | 0.4% | Aug 22, 2023 | Buffer Overflow vulnerability in Supermicro motherboard X12DPG-QR 1.4b allows local attackers to hijack control flow via... |
| CVE-2023-24517 | HIGH | 7.2 | 0.9% | Aug 22, 2023 | Unrestricted Upload of File with Dangerous Type vulnerability in the Pandora FMS File Manager component, allows an attac... |
| CVE-2023-23564 | HIGH | 8.8 | 1.8% | Aug 22, 2023 | An issue was discovered in Geomatika IsiGeo Web 6.0. It allows remote authenticated users to execute commands. |
| CVE-2023-25915 | HIGH | 8.8 | 0.8% | Aug 21, 2023 | Due to improper input validation, an authenticated remote attacker could execute arbitrary commands on the target system... |
| CVE-2023-25914 | HIGH | 8.8 | 0.7% | Aug 21, 2023 | Due to improper restriction, authenticated attackers could retrieve and read system files of the underlying server throu... |
| CVE-2023-25913 | HIGH | 7.5 | 0.5% | Aug 21, 2023 | Because of an authentication flaw an attacker would be capable of generating a web report that discloses sensitive infor... |
| CVE-2023-36787 | HIGH | 8.8 | 1.8% | Aug 21, 2023 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
| CVE-2023-40352 | HIGH | 7.2 | 0.7% | Aug 21, 2023 | McAfee Safe Connect before 2.16.1.126 may allow an adversary with system privileges to achieve privilege escalation by l... |
| CVE-2023-3604 | HIGH | 7.5 | 0.7% | Aug 21, 2023 | The Change WP Admin Login WordPress plugin before 1.1.4 discloses the URL of the hidden login page when accessing a craf... |
| CVE-2023-39106 | HIGH | 8.8 | 1.1% | Aug 21, 2023 | An issue in Nacos Group Nacos Spring Project v.1.1.1 and before allows a remote attacker to execute arbitrary code via t... |
| CVE-2023-38976 | HIGH | 7.5 | 1.7% | Aug 21, 2023 | An issue in weaviate v.1.20.0 allows a remote attacker to cause a denial of service via the handleUnbatchedGraphQLReques... |
| CVE-2023-38836 | HIGH | 8.8 | 73.0% | Aug 21, 2023 | File Upload vulnerability in BoidCMS v.2.0.0 allows a remote attacker to execute arbitrary code by adding a GIF header t... |
| CVE-2023-40735 | HIGH | 7.5 | 0.6% | Aug 21, 2023 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Cavo – Connecting for a Safer World BUTTERFL... |
| CVE-2023-38899 | HIGH | 7.8 | 0.4% | Aug 21, 2023 | SQL injection vulnerability in berkaygediz O_Blog v.1.0 allows a local attacker to escalate privileges via the secure_fi... |
| CVE-2023-39748 | HIGH | 7.5 | 0.6% | Aug 21, 2023 | An issue in the component /userRpm/NetworkCfgRpm of TP-Link TL-WR1041N V2 allows attackers to cause a Denial of Service ... |
| CVE-2023-39745 | HIGH | 7.5 | 0.6% | Aug 21, 2023 | TP-Link TL-WR940N V2, TP-Link TL-WR941ND V5 and TP-Link TL-WR841N V8 were discovered to contain a buffer overflow via th... |
| CVE-2023-4449 | HIGH | 8.8 | 0.7% | Aug 21, 2023 | A vulnerability was found in SourceCodester Free and Open Source Inventory Management System 1.0. It has been classified... |
| CVE-2023-39786 | HIGH | 7.5 | 0.8% | Aug 21, 2023 | Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the time parameter in the sscanf function. |
| CVE-2023-39785 | HIGH | 7.5 | 0.8% | Aug 21, 2023 | Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the list parameter in the set_qosMib_list functi... |
| CVE-2023-39784 | HIGH | 7.5 | 0.8% | Aug 21, 2023 | Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the list parameter in the save_virtualser_data f... |
| CVE-2023-37250 | HIGH | 7 | 0.3% | Aug 20, 2023 | Unity Parsec has a TOCTOU race condition that permits local attackers to escalate privileges to SYSTEM if Parsec was ins... |
| CVE-2023-37369 | HIGH | 7.5 | 1.3% | Aug 20, 2023 | In Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2, there can be an application crash in QXmlS... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now