2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-31998 | HIGH | 7.5 | 0.7% | Jul 18, 2023 | A heap overflow vulnerability found in EdgeRouters and Aircubes allows a malicious actor to interrupt UPnP service to sa... |
| CVE-2023-37479 | HIGH | 7.5 | 0.6% | Jul 17, 2023 | Open Enclave is a hardware-agnostic open source library for developing applications that utilize Hardware-based Trusted ... |
| CVE-2023-3724 | HIGH | 8.8 | 0.5% | Jul 17, 2023 | If a TLS 1.3 client gets neither a PSK (pre shared key) extension nor a KSE (key share extension) when connecting to a m... |
| CVE-2023-37476 | HIGH | 7.8 | 0.6% | Jul 17, 2023 | OpenRefine is a free, open source tool for data processing. A carefully crafted malicious OpenRefine project tar file ca... |
| CVE-2023-38405 | HIGH | 7.5 | 0.5% | Jul 17, 2023 | On Crestron 3-Series Control Systems before 1.8001.0187, crafting and sending a specific BACnet packet can cause a crash... |
| CVE-2023-38404 | HIGH | 8.8 | 0.8% | Jul 17, 2023 | The XPRTLD web application in Veritas InfoScale Operations Manager (VIOM) before 8.0.0.410 allows an authenticated attac... |
| CVE-2023-38403 | HIGH | 7.5 | 1.7% | Jul 17, 2023 | iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field. |
| CVE-2023-34141 | HIGH | 8 | 0.6% | Jul 17, 2023 | A command injection vulnerability in the access point (AP) management feature of the Zyxel ATP series firmware versions ... |
| CVE-2023-34139 | HIGH | 8.8 | 0.7% | Jul 17, 2023 | A command injection vulnerability in the Free Time WiFi hotspot feature of the Zyxel USG FLEX series firmware versions 4... |
| CVE-2023-34138 | HIGH | 8 | 0.6% | Jul 17, 2023 | A command injection vulnerability in the hotspot management feature of the Zyxel ATP series firmware versions 4.60 throu... |
| CVE-2023-33012 | HIGH | 8.8 | 10.1% | Jul 17, 2023 | A command injection vulnerability in the configuration parser of the Zyxel ATP series firmware versions 5.10 through 5.3... |
| CVE-2023-33011 | HIGH | 8.8 | 0.3% | Jul 17, 2023 | A format string vulnerability in the Zyxel ATP series firmware versions 5.10 through 5.36 Patch 2, USG FLEX series firmw... |
| CVE-2023-37475 | HIGH | 7.5 | 0.8% | Jul 17, 2023 | Hamba avro is a go lang encoder/decoder implementation of the avro codec specification. In affected versions a well-craf... |
| CVE-2023-34669 | HIGH | 7.5 | 0.7% | Jul 17, 2023 | TOTOLINK CP300+ V5.2cu.7594 contains a Denial of Service vulnerability in function RebootSystem of the file lib/cste_mod... |
| CVE-2023-28767 | HIGH | 8.8 | 0.4% | Jul 17, 2023 | The configuration parser fails to sanitize user-controlled input in the Zyxel ATP series firmware versions 5.10 through ... |
| CVE-2023-3615 | HIGH | 8.1 | 0.3% | Jul 17, 2023 | Mattermost iOS app fails to properly validate the server certificate while initializing the TLS connection allowing a ne... |
| CVE-2023-3591 | HIGH | 8.2 | 0.3% | Jul 17, 2023 | Mattermost fails to invalidate previously generated password reset tokens when a new reset token was created. |
| CVE-2023-3590 | HIGH | 7.5 | 0.4% | Jul 17, 2023 | Mattermost fails to delete card attachments in Boards, allowing an attacker to access deleted attachments. |
| CVE-2023-3581 | HIGH | 8.1 | 0.2% | Jul 17, 2023 | Mattermost fails to properly validate the origin of a websocket connection allowing a MITM attacker on Mattermost to acc... |
| CVE-2023-37985 | HIGH | 8.8 | 0.2% | Jul 17, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in FiveStarPlugins Restaurant Menu and Food Ordering plugin <= 2.4.6 ver... |
| CVE-2023-37974 | HIGH | 8.8 | 0.2% | Jul 17, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Justin Klein WP Social AutoConnect plugin <= 4.6.1 versions. |
| CVE-2023-37968 | HIGH | 8.8 | 0.2% | Jul 17, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Faboba Falang multilanguage for WordPress plugin <= 1.3.39 versions. |
| CVE-2023-36514 | HIGH | 8.8 | 0.3% | Jul 17, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce Shipping Multiple Addresses plugin <= 3.8.5 versions. |
| CVE-2023-36513 | HIGH | 8.8 | 0.2% | Jul 17, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce AutomateWoo plugin <= 5.7.5 versions. |
| CVE-2023-36511 | HIGH | 8.8 | 0.2% | Jul 17, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce WooCommerce Order Barcodes plugin <= 1.6.4 versions. |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now