2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-33913 | HIGH | 7.2 | 0.4% | Aug 7, 2023 | In DRM/oemcrypto, there is a possible out of bounds write due to an incorrect calculation of buffer size.This could lead... |
| CVE-2023-4195 | HIGH | 8.8 | 0.8% | Aug 6, 2023 | PHP Remote File Inclusion in GitHub repository cockpit-hq/cockpit prior to 2.6.3. |
| CVE-2023-4172 | HIGH | 7.5 | 0.8% | Aug 5, 2023 | A vulnerability, which was classified as problematic, has been found in Chengdu Flash Flood Disaster Monitoring and Warn... |
| CVE-2023-4169 | HIGH | 8.8 | 47.1% | Aug 5, 2023 | A vulnerability was found in Ruijie RG-EW1200G 1.0(1)B1P5. It has been declared as critical. Affected by this vulnerabil... |
| CVE-2023-4168 | HIGH | 7.5 | 36.2% | Aug 5, 2023 | A vulnerability was found in Templatecookie Adlisting 2.14.0. It has been classified as problematic. Affected is an unkn... |
| CVE-2023-39508 | HIGH | 8.8 | 2.4% | Aug 5, 2023 | Execution with Unnecessary Privileges, : Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apa... |
| CVE-2023-38943 | HIGH | 8.8 | 1.5% | Aug 5, 2023 | ShuiZe_0x727 v1.0 was discovered to contain a remote command execution (RCE) vulnerability via the component /iniFile/co... |
| CVE-2023-39344 | HIGH | 8.8 | 1.3% | Aug 4, 2023 | social-media-skeleton is an uncompleted social media project. A SQL injection vulnerability in the project allows UNION ... |
| CVE-2023-38702 | HIGH | 8.8 | 1.1% | Aug 4, 2023 | Knowage is an open source analytics and business intelligence suite. Starting in the 6.x.x branch and prior to version 8... |
| CVE-2023-4159 | HIGH | 8.8 | 0.8% | Aug 4, 2023 | Unrestricted Upload of File with Dangerous Type in GitHub repository omeka/omeka-s prior to 4.0.3. |
| CVE-2023-38688 | HIGH | 7.5 | 0.4% | Aug 4, 2023 | twitch-tui provides Twitch chat in a terminal. Prior to version 2.4.1, the connection is not using TLS for communication... |
| CVE-2023-38497 | HIGH | 7.3 | 0.8% | Aug 4, 2023 | Cargo downloads the Rust project’s dependencies and compiles the project. Cargo prior to version 0.72.2, bundled with Ru... |
| CVE-2023-38494 | HIGH | 7.5 | 0.4% | Aug 4, 2023 | MeterSphere is an open-source continuous testing platform. Prior to version 2.10.4 LTS, some interfaces of the Cloud ver... |
| CVE-2023-38487 | HIGH | 8.2 | 0.7% | Aug 4, 2023 | HedgeDoc is software for creating real-time collaborative markdown notes. Prior to version 1.9.9, the API of HedgeDoc 1 ... |
| CVE-2023-37896 | HIGH | 7.5 | 0.9% | Aug 4, 2023 | Nuclei is a vulnerability scanner. Prior to version 2.9.9, a security issue in the Nuclei project affected users utilizi... |
| CVE-2023-29505 | HIGH | 8.8 | 0.9% | Aug 4, 2023 | An issue was discovered in Zoho ManageEngine Network Configuration Manager 12.6.165. The WebSocket endpoint allows Cross... |
| CVE-2023-39379 | HIGH | 7.5 | 0.4% | Aug 4, 2023 | Fujitsu Software Infrastructure Manager (ISM) stores sensitive information at the product's maintenance data (ismsnap) i... |
| CVE-2023-4142 | HIGH | 8.8 | 1.2% | Aug 4, 2023 | The WP Ultimate CSV Importer plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and includin... |
| CVE-2023-4141 | HIGH | 8.8 | 1.2% | Aug 4, 2023 | The WP Ultimate CSV Importer plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and includin... |
| CVE-2023-4140 | HIGH | 8.8 | 0.6% | Aug 4, 2023 | The WP Ultimate CSV Importer plugin for WordPress is vulnerable to privilege escalation in versions up to, and including... |
| CVE-2023-4139 | HIGH | 7.5 | 0.6% | Aug 4, 2023 | The WP Ultimate CSV Importer plugin for WordPress is vulnerable to Sensitive Information Exposure via Directory Listing... |
| CVE-2023-38708 | HIGH | 8.8 | 0.5% | Aug 4, 2023 | Pimcore is an Open Source Data & Experience Management Platform: PIM, MDM, CDP, DAM, DXP/CMS & Digital Commerce. A path ... |
| CVE-2023-30146 | HIGH | 7.5 | 0.6% | Aug 4, 2023 | Assmann Digitus Plug&View IP Camera HT-IP211HDP, version 2.000.022 allows unauthenticated attackers to download a copy o... |
| CVE-2023-36135 | HIGH | 7.5 | 0.5% | Aug 4, 2023 | User enumeration is found in in PHPJabbers Class Scheduling System v1.0. This issue occurs during password recovery, whe... |
| CVE-2023-30297 | HIGH | 7 | 0.2% | Aug 4, 2023 | An issue found in N-able Technologies N-central Server before 2023.4 allows a local attacker to execute arbitrary code v... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now