2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-50753 | CRITICAL | 9.8 | 0.7% | Jan 4, 2024 | Online Notice Board System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'dd' parame... |
| CVE-2023-50752 | CRITICAL | 9.8 | 0.7% | Jan 4, 2024 | Online Notice Board System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'e' paramet... |
| CVE-2023-50743 | CRITICAL | 9.8 | 0.7% | Jan 4, 2024 | Online Notice Board System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'dd' parame... |
| CVE-2023-49666 | CRITICAL | 9.8 | 0.7% | Jan 4, 2024 | Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'custmer_details' par... |
| CVE-2023-49665 | CRITICAL | 9.8 | 0.7% | Jan 4, 2024 | Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'quantity[]' paramete... |
| CVE-2023-49658 | CRITICAL | 9.8 | 0.7% | Jan 4, 2024 | Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'bank_details' parame... |
| CVE-2023-49639 | CRITICAL | 9.8 | 0.7% | Jan 4, 2024 | Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'customer_details' pa... |
| CVE-2023-49633 | CRITICAL | 9.8 | 0.7% | Jan 4, 2024 | Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'buyer_address' param... |
| CVE-2023-49625 | CRITICAL | 9.8 | 0.7% | Jan 4, 2024 | Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' parameter of the... |
| CVE-2023-49624 | CRITICAL | 9.8 | 0.7% | Jan 4, 2024 | Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'cancelid' parameter ... |
| CVE-2023-49622 | CRITICAL | 9.8 | 0.7% | Jan 4, 2024 | Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'itemnameid' paramete... |
| CVE-2023-49442 | CRITICAL | 9.8 | 38.5% | Jan 3, 2024 | Deserialization of Untrusted Data in jeecgFormDemoController in JEECG 4.0 and earlier allows attackers to run arbitrary ... |
| CVE-2023-50090 | CRITICAL | 9.8 | 0.8% | Jan 3, 2024 | Arbitrary File Write vulnerability in the saveReportFile method of ureport2 2.2.9 and before allows attackers to write a... |
| CVE-2023-46741 | CRITICAL | 9.8 | 0.3% | Jan 3, 2024 | CubeFS is an open-source cloud-native file storage system. A vulnerability was found in CubeFS prior to version 3.3.1 th... |
| CVE-2023-46740 | CRITICAL | 9.8 | 0.4% | Jan 3, 2024 | CubeFS is an open-source cloud-native file storage system. Prior to version 3.3.1, CubeFS used an insecure random string... |
| CVE-2023-39655 | CRITICAL | 9.6 | 0.5% | Jan 3, 2024 | A host header injection vulnerability exists in the NPM package @perfood/couch-auth versions <= 0.20.0. By sending a spe... |
| CVE-2023-51784 | CRITICAL | 9.8 | 1.7% | Jan 3, 2024 | Improper Control of Generation of Code ('Code Injection') vulnerability in Apache InLong.This issue affects Apache InLon... |
| CVE-2023-52314 | CRITICAL | 9.8 | 1.2% | Jan 3, 2024 | PaddlePaddle before 2.6.0 has a command injection in convert_shape_compare. This resulted in the ability to execute arbi... |
| CVE-2023-52311 | CRITICAL | 9.8 | 1.2% | Jan 3, 2024 | PaddlePaddle before 2.6.0 has a command injection in _wget_download. This resulted in the ability to execute arbitrary c... |
| CVE-2023-52310 | CRITICAL | 9.8 | 1.2% | Jan 3, 2024 | PaddlePaddle before 2.6.0 has a command injection in get_online_pass_interval. This resulted in the ability to execute a... |
| CVE-2023-52309 | CRITICAL | 9.8 | 0.5% | Jan 3, 2024 | Heap buffer overflow in paddle.repeat_interleave in PaddlePaddle before 2.6.0. This flaw can lead to a denial of service... |
| CVE-2023-52307 | CRITICAL | 9.8 | 0.5% | Jan 3, 2024 | Stack overflow in paddle.linalg.lu_unpack in PaddlePaddle before 2.6.0. This flaw can lead to a denial of service, or ev... |
| CVE-2023-52304 | CRITICAL | 9.8 | 0.6% | Jan 3, 2024 | Stack overflow in paddle.searchsorted in PaddlePaddle before 2.6.0. This flaw can lead to a denial of service, or even m... |
| CVE-2023-50921 | CRITICAL | 9.8 | 0.5% | Jan 3, 2024 | An issue was discovered on GL.iNet devices through 4.5.0. Attackers can invoke the add_user interface in the system modu... |
| CVE-2023-46308 | CRITICAL | 9.8 | 0.9% | Jan 3, 2024 | In Plotly plotly.js before 2.25.2, plot API calls have a risk of __proto__ being polluted in expandObjectPaths or nested... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now