2023 CVE Vulnerabilities

31,475 CVEs published in 2023.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2023-3518HIGH7.3HashiCorp Consul and Consul Enterprise 1.16.0 when using JWT Auth for service mesh incorrectly allows/denies access rega...
CVE-2023-33953HIGH7.5gRPC contains a vulnerability that allows hpack table accounting errors could lead to unwanted disconnects between clien...
CVE-2023-32782HIGH7.2A command injection was identified in PRTG 23.2.84.1566 and earlier versions in the Dicom C-ECHO sensor where an authent...
CVE-2023-32781HIGH7.2A command injection vulnerability was identified in PRTG 23.2.84.1566 and earlier versions in the HL7 sensor where an au...
CVE-2023-31452HIGH8.8A cross-site request forgery (CSRF) token bypass was identified in PRTG 23.2.84.1566 and earlier versions that allows re...
CVE-2023-38212HIGH7.8Adobe Dimension version 3.4.9 is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary c...
CVE-2023-38211HIGH7.8Adobe Dimension version 3.4.9 is affected by a Use After Free vulnerability that could result in arbitrary code executio...
CVE-2023-23574HIGH8.8A blind SQL Injection vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in the alerts_...
CVE-2023-38208HIGH7.2Adobe Commerce versions 2.4.6-p1 (and earlier), 2.4.5-p3 (and earlier) and 2.4.4-p4 (and earlier) are affected by an Imp...
CVE-2023-38207HIGH7.5Adobe Commerce versions 2.4.6-p1 (and earlier), 2.4.5-p3 (and earlier) and 2.4.4-p4 (and earlier) are affected by a XML ...
CVE-2023-24477HIGH7In certain conditions, depending on timing and the usage of the Chrome web browser, Guardian/CMC versions before 22.6.2 ...
CVE-2023-37864HIGH7.2In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with SNMPv2 write privileges...
CVE-2023-37863HIGH7.2In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with SNMPv2 write privileges...
CVE-2023-37862HIGH8.2In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an unauthenticated remote attacker can access ...
CVE-2023-37861HIGH8.8In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an authenticated remote attacker can execute c...
CVE-2023-37860HIGH7.5In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote unauthenticated attacker can obtain t...
CVE-2023-37859HIGH7.2In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 the SNMP daemon is running with root privilege...
CVE-2023-37857HIGH7.2In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an authenticated, remote attacker with admin p...
CVE-2023-2905HIGH8.8Due to a failure in validating the length of a provided MQTT_CMD_PUBLISH parsed message with a variable length header, C...
CVE-2023-4243HIGH8.8The FULL - Customer plugin for WordPress is vulnerable to Arbitrary File Upload via the /install-plugin REST route in ve...
CVE-2023-39910HIGH7.5The cryptocurrency wallet entropy seeding mechanism used in Libbitcoin Explorer 3.0.0 through 3.6.0 is weak, aka the Mil...
CVE-2023-39214HIGH8.1Exposure of sensitive information in Zoom Client SDK's before 5.15.5 may allow an authenticated user to enable a denial ...
CVE-2023-39211HIGH7.8Improper privilege management in Zoom Desktop Client for Windows and Zoom Rooms for Windows before 5.15.5 may allow an a...
CVE-2023-39086HIGH7.5ASUS RT-AC66U B1 3.0.0.4.286_51665 was discovered to transmit sensitive information in cleartext.
CVE-2023-36344HIGH7.8An issue in Diebold Nixdorf Vynamic View Console v.5.3.1 and before allows a local attacker to execute arbitrary code vi...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now