2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-40711 | HIGH | 7.5 | 0.7% | Aug 20, 2023 | Veilid before 0.1.9 does not check the size of uncompressed data during decompression upon an envelope receipt, which al... |
| CVE-2023-2316 | HIGH | 7.4 | 0.6% | Aug 19, 2023 | Improper path handling in Typora before 1.6.7 on Windows and Linux allows a crafted webpage to access local files and ex... |
| CVE-2023-2110 | HIGH | 7.1 | 0.3% | Aug 19, 2023 | Improper path handling in Obsidian desktop before 1.2.8 on Windows, Linux and macOS allows a crafted webpage to access l... |
| CVE-2023-40173 | HIGH | 7.5 | 0.5% | Aug 18, 2023 | Social media skeleton is an uncompleted/framework social media project implemented using a php, css ,javascript and html... |
| CVE-2023-40172 | HIGH | 8.8 | 0.2% | Aug 18, 2023 | Social media skeleton is an uncompleted/framework social media project implemented using a php, css ,javascript and html... |
| CVE-2023-38839 | HIGH | 7.5 | 0.7% | Aug 18, 2023 | SQL injection vulnerability in Kidus Minimati v.1.0.0 allows a remote attacker to obtain sensitive information via theID... |
| CVE-2023-20212 | HIGH | 7.5 | 2.6% | Aug 18, 2023 | A vulnerability in the AutoIt module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of serv... |
| CVE-2023-38890 | HIGH | 8.8 | 1.0% | Aug 18, 2023 | Online Shopping Portal Project 3.1 allows remote attackers to execute arbitrary SQL commands/queries via the login form,... |
| CVE-2023-4415 | HIGH | 8.8 | 56.1% | Aug 18, 2023 | A vulnerability was found in Ruijie RG-EW1200G 07161417 r483. It has been rated as critical. Affected by this issue is s... |
| CVE-2023-4409 | HIGH | 8.8 | 0.8% | Aug 18, 2023 | A vulnerability, which was classified as critical, has been found in NBS&HappySoftWeChat 1.1.6. Affected by this issue i... |
| CVE-2023-40072 | HIGH | 8.8 | 1.6% | Aug 18, 2023 | OS command injection vulnerability in ELECOM wireless LAN access point devices allows an authenticated user to execute a... |
| CVE-2023-39944 | HIGH | 8.8 | 1.2% | Aug 18, 2023 | OS command injection vulnerability in WRC-F1167ACF all versions, and WRC-1750GHBK all versions allows an attacker who ca... |
| CVE-2023-39455 | HIGH | 8.8 | 1.3% | Aug 18, 2023 | OS command injection vulnerability in ELECOM wireless LAN routers allows an authenticated user to execute an arbitrary O... |
| CVE-2023-39445 | HIGH | 8.8 | 0.5% | Aug 18, 2023 | Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an unauthenticat... |
| CVE-2023-39416 | HIGH | 7.2 | 0.9% | Aug 18, 2023 | Proself Enterprise/Standard Edition Ver5.61 and earlier, Proself Gateway Edition Ver1.62 and earlier, and Proself Mail S... |
| CVE-2023-39415 | HIGH | 7.5 | 0.8% | Aug 18, 2023 | Improper authentication vulnerability in Proself Enterprise/Standard Edition Ver5.61 and earlier, Proself Gateway Editio... |
| CVE-2023-38576 | HIGH | 8 | 0.4% | Aug 18, 2023 | Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an authenticated... |
| CVE-2023-38132 | HIGH | 8.8 | 0.3% | Aug 18, 2023 | LAN-W451NGR all versions provided by LOGITEC CORPORATION contains an improper access control vulnerability, which allows... |
| CVE-2023-39669 | HIGH | 7.5 | 1.0% | Aug 18, 2023 | D-Link DIR-880 A1_FW107WWb08 was discovered to contain a NULL pointer dereference in the function FUN_00010824. |
| CVE-2023-39125 | HIGH | 7.5 | 0.6% | Aug 18, 2023 | NTSC-CRT 2.2.1 has an integer overflow and out-of-bounds write in loadBMP in bmp_rw.c because a file's width, height, an... |
| CVE-2023-40171 | HIGH | 7.5 | 0.8% | Aug 17, 2023 | Dispatch is an open source security incident management tool. The server response includes the JWT Secret Key used for s... |
| CVE-2023-40315 | HIGH | 8 | 2.5% | Aug 17, 2023 | In OpenMNS Horizon 31.0.8 and versions earlier than 32.0.2 and related Meridian versions, any user that has the ROLE_FIL... |
| CVE-2023-36106 | HIGH | 7.5 | 0.7% | Aug 17, 2023 | An incorrect access control vulnerability in powerjob 4.3.2 and earlier allows remote attackers to obtain sensitive info... |
| CVE-2023-31946 | HIGH | 7.2 | 1.2% | Aug 17, 2023 | File Upload vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code ... |
| CVE-2023-31945 | HIGH | 7.2 | 1.1% | Aug 17, 2023 | SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary cod... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now