2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-32778 | LOW | 3.3 | 0.2% | Sep 14, 2026 | An issue was discovered in ILIAS 6.23, 7 before 7.22, and 8.1. An attacker can execute arbitrary code via ZIP upload. |
| CVE-2023-29377 | MEDIUM | 6.6 | 0.5% | Sep 14, 2026 | An issue was discovered in Softing OPC UA C++ SDK through 6.20 and Softing Secure Integration Server through 1.22. By us... |
| CVE-2023-28148 | HIGH | 7.2 | 0.2% | Sep 14, 2026 | A bodyclass XSS issue was discovered in Paessler PRTG before 23.3.86.1520. |
| CVE-2023-24291 | LOW | 2.9 | 0.1% | Sep 14, 2026 | Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the record length par... |
| CVE-2023-24288 | LOW | 2.9 | 0.1% | Sep 14, 2026 | An issue in Portable Puzzle Collection before 20230116.5782e29 allows attackers to cause a Denial of Service (DoS) via c... |
| CVE-2023-24287 | LOW | 2.9 | 0.1% | Sep 14, 2026 | Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the "M" command. |
| CVE-2023-24286 | LOW | 2.9 | 0.1% | Sep 14, 2026 | Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the game description ... |
| CVE-2023-24285 | LOW | 2.9 | 0.1% | Sep 14, 2026 | Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow which is triggered when a... |
| CVE-2023-24284 | LOW | 2.9 | 0.1% | Sep 14, 2026 | Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the is_markable() fun... |
| CVE-2023-24283 | LOW | 2.9 | 0.1% | Sep 14, 2026 | Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow which allows attackers to... |
| CVE-2023-24035 | LOW | 3.5 | 0.8% | Sep 14, 2026 | An issue was discovered in Nagios XI before 5.9.3. The is_insecure_login_authenticated function uses a insecure timing c... |
| CVE-2023-24034 | LOW | 3.1 | 0.5% | Sep 14, 2026 | An issue was discovered in twilio_ajax_handler.php in Nagios XI before 5.9.3. An attacker can force a user to visit a ma... |
| CVE-2023-22632 | LOW | 2.7 | 0.2% | Sep 14, 2026 | PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the FTP Server Count Sensor. |
| CVE-2023-22631 | LOW | 2.7 | 0.2% | Sep 14, 2026 | PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the HTTP XML/REST Sensor. |
| CVE-2023-54396 | MEDIUM | 6.5 | 0.4% | Sep 9, 2026 | PocketMine-MP versions before 4.8.1 fail to validate dye color IDs in banner NBT data during deserialization. Attackers ... |
| CVE-2023-54395 | MEDIUM | 4.3 | 0.3% | Sep 9, 2026 | PocketMine-MP versions before 4.12.5 contain a denial-of-service vulnerability in ModalFormResponsePacket processing tha... |
| CVE-2023-54394 | MEDIUM | 4.3 | 0.4% | Sep 9, 2026 | PocketMine-MP before 4.18.0-ALPHA2 fails to rate-limit mismatch type InventoryTransactionPacket requests, allowing attac... |
| CVE-2023-54393 | HIGH | 7.5 | 0.4% | Sep 9, 2026 | PocketMine-MP versions before 4.20.5 contain a denial of service vulnerability in LoginPacket JSON parsing due to improp... |
| CVE-2023-54392 | MEDIUM | 6.5 | 0.4% | Sep 9, 2026 | PocketMine-MP versions >= 4.20.0 before 4.22.3 (and before 5.2.1 in the 5.x branch) fail to validate NBT tag types in Bl... |
| CVE-2023-54390 | HIGH | 7.5 | 0.3% | Sep 9, 2026 | PocketMine-MP versions before 5.3.1 and 4.23.1 contain a denial of service vulnerability in LoginPacket JSON parsing due... |
| CVE-2023-54355 | HIGH | 7.5 | 0.2% | Sep 9, 2026 | PocketMine-MP versions before 5.3.1 and 4.23.1 fail to validate that the identityPublicKey in LoginPacket uses the requi... |
| CVE-2023-20577 | HIGH | 7.4 | 0.2% | Sep 2, 2026 | A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI fl... |
| CVE-2023-20576 | HIGH | 7.7 | 0.1% | Sep 2, 2026 | Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM data potentially result... |
| CVE-2023-3360 | LOW | 3.3 | 0.1% | Sep 2, 2026 | The Weaver Show Posts WordPress plugin before 1.8.1 unserialises the content of an imported file, which could lead to PH... |
| CVE-2023-54391 | CRITICAL | 9.8 | 1.7% | Sep 1, 2026 | Proxmox Virtual Environment (VE) 7.0 through 8.0 contains an authentication bypass vulnerability in libpve-access-contro... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now