2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-36925 | HIGH | 7.2 | 0.5% | Jul 11, 2023 | SAP Solution Manager (Diagnostics agent) - version 7.20, allows an unauthenticated attacker to blindly execute HTTP requ... |
| CVE-2023-36922 | HIGH | 8.8 | 0.7% | Jul 11, 2023 | Due to programming error in function module and report, IS-OIL component in SAP ECC and SAP S/4HANA allows an authentica... |
| CVE-2023-36921 | HIGH | 7.2 | 0.5% | Jul 11, 2023 | SAP Solution Manager (Diagnostics agent) - version 7.20, allows an attacker to tamper with headers in a client request. ... |
| CVE-2023-36917 | HIGH | 7.5 | 0.5% | Jul 11, 2023 | SAP BusinessObjects Business Intelligence Platform - version 420, 430, allows an unauthorized attacker who had hijacked ... |
| CVE-2023-35874 | HIGH | 7.4 | 0.3% | Jul 11, 2023 | SAP NetWeaver Application Server ABAP and ABAP Platform - version KRNL64NUC, 7.22, KRNL64NUC 7.22EXT, KRNL64UC 7.22, KRN... |
| CVE-2023-35870 | HIGH | 7.3 | 0.3% | Jul 11, 2023 | When creating a journal entry template in SAP S/4HANA (Manage Journal Entry Template) - versions S4CORE 104, 105, 106, 1... |
| CVE-2023-33990 | HIGH | 7.1 | 0.1% | Jul 11, 2023 | SAP SQL Anywhere - version 17.0, allows an attacker to prevent legitimate users from accessing the service by crashing t... |
| CVE-2023-33989 | HIGH | 8.1 | 0.8% | Jul 11, 2023 | An attacker with non-administrative authorizations in SAP NetWeaver (BI CONT ADD ON) - versions 707, 737, 747, 757, can ... |
| CVE-2023-2079 | HIGH | 7.1 | 0.3% | Jul 11, 2023 | The "Buy Me a Coffee – Button and Widget Plugin" plugin for WordPress is vulnerable to Cross-Site Request Forgery due to... |
| CVE-2023-3608 | HIGH | 8.8 | 10.9% | Jul 10, 2023 | A vulnerability was found in Ruijie BCR810W 2.5.10. It has been rated as critical. This issue affects some unknown proce... |
| CVE-2023-3607 | HIGH | 8 | 5.9% | Jul 10, 2023 | A vulnerability was found in kodbox 1.26. It has been declared as critical. This vulnerability affects the function Exec... |
| CVE-2023-3606 | HIGH | 8.8 | 5.9% | Jul 10, 2023 | A vulnerability was found in TamronOS up to 20230703. It has been classified as critical. This affects an unknown part o... |
| CVE-2023-34432 | HIGH | 7.8 | 0.4% | Jul 10, 2023 | A heap buffer overflow vulnerability was found in sox, in the lsx_readbuf function at sox/src/formats_i.c:98:16. This fl... |
| CVE-2023-24487 | HIGH | 7.5 | 1.1% | Jul 10, 2023 | Arbitrary file read in Citrix ADC and Citrix Gateway |
| CVE-2023-22835 | HIGH | 7.7 | 0.6% | Jul 10, 2023 | A security defect was identified that enabled a user of Foundry Issues to perform a Denial of Service attack by submitti... |
| CVE-2023-34316 | HIGH | 7.5 | 0.6% | Jul 10, 2023 | An attacker could bypass the latest Delta Electronics InfraSuite Device Master (versions prior to 1.0.7) patch, which c... |
| CVE-2023-34318 | HIGH | 7.8 | 0.3% | Jul 10, 2023 | A heap buffer overflow vulnerability was found in sox, in the startread function at sox/src/hcom.c:160:41. This flaw can... |
| CVE-2023-3579 | HIGH | 8.8 | 0.5% | Jul 10, 2023 | A vulnerability, which was classified as problematic, has been found in HadSky 7.11.8. Affected by this issue is some un... |
| CVE-2023-3273 | HIGH | 7.5 | 0.8% | Jul 10, 2023 | Improper Access Control in the SICK ICR890-4 could allow an unauthenticated remote attacker to affect the availability o... |
| CVE-2023-3272 | HIGH | 7.5 | 0.4% | Jul 10, 2023 | Cleartext Transmission of Sensitive Information in the SICK ICR890-4 could allow a remote attacker to gather sensitive i... |
| CVE-2023-3271 | HIGH | 7.5 | 0.7% | Jul 10, 2023 | Improper Access Control in the SICK ICR890-4 could allow an unauthenticated remote attacker to gather information about ... |
| CVE-2023-3270 | HIGH | 7.5 | 0.7% | Jul 10, 2023 | Exposure of Sensitive Information to an Unauthorized Actor in the SICK ICR890-4 could allow an unauthenticated remote at... |
| CVE-2023-37392 | HIGH | 8.8 | 0.3% | Jul 10, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Deepak Anand WP Dummy Content Generator plugin <= 2.3.0 versions. |
| CVE-2023-36691 | HIGH | 8.8 | 0.3% | Jul 10, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Albert Peschar WebwinkelKeur plugin <= 3.24 versions. |
| CVE-2023-35912 | HIGH | 8.8 | 0.3% | Jul 10, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in WP Zone Potent Donations for WooCommerce plugin <= 1.1.9 versions. |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now