2023 CVE Vulnerabilities

31,475 CVEs published in 2023.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2023-38750HIGH7.5In Zimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41, 9 before 9.0.0 Patch 34, and 10 before 10.0.2, internal JSP and ...
CVE-2023-33534HIGH8.8A Cross-Site Request Forgery (CSRF) in Guanzhou Tozed Kangwei Intelligent Technology ZLTS10G software version S10G_3.11....
CVE-2023-34359HIGH7.5ASUS RT-AX88U's httpd is subject to an unauthenticated DoS condition. A remote attacker can send a specially crafted req...
CVE-2023-34358HIGH7.5ASUS RT-AX88U's httpd is subject to an unauthenticated DoS condition. A remote attacker can send a specially crafted req...
CVE-2023-35019HIGH8.8IBM Security Verify Governance, Identity Manager 10.0 could allow a remote authenticated attacker to execute arbitrary c...
CVE-2023-37219HIGH7.8 Tadiran Telecom Composit - CWE-1236: Improper Neutralization of Formula Elements in a CSV File
CVE-2023-37218HIGH7.5 Tadiran Telecom Aeonix - CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-32225HIGH7.2 Sysaid - CWE-434: Unrestricted Upload of File with Dangerous Type -  A malicious user with administrative privileges m...
CVE-2023-36542HIGH8.8Apache NiFi 0.0.2 through 1.22.0 include Processors and Controller Services that support HTTP URL references for retriev...
CVE-2023-2313HIGH8.8Inappropriate implementation in Sandbox in Google Chrome on Windows prior to 112.0.5615.49 allowed a remote attacker who...
CVE-2023-3598HIGH8.8Out of bounds read and write in ANGLE in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially e...
CVE-2023-38684HIGH7.5Discourse is an open source discussion platform. Prior to version 3.0.6 of the `stable` branch and version 3.1.0.beta7 o...
CVE-2023-31937HIGH7.2Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary cod...
CVE-2023-31936HIGH7.2Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary cod...
CVE-2023-31933HIGH7.2Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary cod...
CVE-2023-31932HIGH7.2Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary cod...
CVE-2023-3670HIGH7.3In CODESYS Development System 3.5.9.0 to 3.5.17.0 and CODESYS Scripting 4.0.0.0 to 4.1.0.0 unsafe directory permissions ...
CVE-2023-38609HIGH7.5An injection issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13.5. An app may b...
CVE-2023-38601HIGH7.5This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Big Sur 11.7.9, macOS Monterey 12...
CVE-2023-38592HIGH8.8A logic issue was addressed with improved restrictions. This issue is fixed in iOS 16.6 and iPadOS 16.6, watchOS 9.6, tv...
CVE-2023-38590HIGH8.8A buffer overflow issue was addressed with improved memory handling. This issue is fixed in watchOS 9.6, macOS Big Sur 1...
CVE-2023-38571HIGH7.5This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Big Sur 11.7.9, macOS Monter...
CVE-2023-32444HIGH7.5A logic issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.7.9, macOS Monterey 12.6.8...
CVE-2023-33742HIGH7.5TeleAdapt RoomCast TA-2400 1.0 through 3.1 suffers from Cleartext Storage of Sensitive Information: RSA private key in U...
CVE-2023-23764HIGH7.1An incorrect comparison vulnerability was identified in GitHub Enterprise Server that allowed commit smuggling by displa...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now