2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-34932 | HIGH | 7.5 | 0.7% | Jun 28, 2023 | A stack overflow in the UpdateWanMode function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (... |
| CVE-2023-34931 | HIGH | 7.5 | 0.7% | Jun 28, 2023 | A stack overflow in the EditWlanMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service... |
| CVE-2023-34930 | HIGH | 7.5 | 0.7% | Jun 28, 2023 | A stack overflow in the EditMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (Do... |
| CVE-2023-34929 | HIGH | 7.5 | 0.7% | Jun 28, 2023 | A stack overflow in the AddMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS... |
| CVE-2023-34928 | HIGH | 7.5 | 1.0% | Jun 28, 2023 | A stack overflow in the Edit_BasicSSID function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service ... |
| CVE-2023-1295 | HIGH | 7 | 0.2% | Jun 28, 2023 | A time-of-check to time-of-use issue exists in io_uring subsystem's IORING_OP_CLOSE operation in the Linux kernel's vers... |
| CVE-2023-3333 | HIGH | 7.2 | 0.6% | Jun 28, 2023 | Improper Neutralization of Special Elements used in an OS Command vulnerability in NEC Corporation Aterm WG2600HP2, WG26... |
| CVE-2023-25002 | HIGH | 7.8 | 0.3% | Jun 27, 2023 | A maliciously crafted SKP file in Autodesk products is used to trigger use-after-free vulnerability. Exploitation of thi... |
| CVE-2023-25001 | HIGH | 7.8 | 0.3% | Jun 27, 2023 | A maliciously crafted SKP file in Autodesk Navisworks 2023 and 2022 be used to trigger use-after-free vulnerability. Exp... |
| CVE-2023-30993 | HIGH | 7.5 | 0.6% | Jun 27, 2023 | IBM Cloud Pak for Security (CP4S) 1.9.0.0 through 1.9.2.0 could allow an attacker with a valid API key for one tenant to... |
| CVE-2023-29068 | HIGH | 7.8 | 0.2% | Jun 27, 2023 | A maliciously crafted file consumed through pskernel.dll file could lead to memory corruption vulnerabilities. These vul... |
| CVE-2023-25004 | HIGH | 7.8 | 0.2% | Jun 27, 2023 | A maliciously crafted pskernel.dll file in Autodesk products is used to trigger integer overflow vulnerabilities. Exploi... |
| CVE-2023-22593 | HIGH | 7.8 | 0.2% | Jun 27, 2023 | IBM Robotic Process Automation for Cloud Pak 21.0.1 through 21.0.7.3 and 23.0.0 through 23.0.3 is vulnerable to securit... |
| CVE-2023-28857 | HIGH | 7.5 | 0.4% | Jun 27, 2023 | Apereo CAS is an open source multilingual single sign-on solution for the web. Apereo CAS can be configured to use authe... |
| CVE-2023-26276 | HIGH | 7.5 | 0.4% | Jun 27, 2023 | IBM QRadar SIEM 7.5.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly ... |
| CVE-2023-3405 | HIGH | 7.5 | 0.7% | Jun 27, 2023 | Unchecked parameter value in M-Files Server in versions before 23.6.12695.3 (excluding 23.2 SR2 and newer) allows anonym... |
| CVE-2023-2996 | HIGH | 8.8 | 4.8% | Jun 27, 2023 | The Jetpack WordPress plugin before 12.1.1 does not validate uploaded files, allowing users with author roles or above t... |
| CVE-2023-2877 | HIGH | 8.8 | 22.3% | Jun 27, 2023 | The Formidable Forms WordPress plugin before 6.3.1 does not adequately authorize the user or validate the plugin URL in ... |
| CVE-2023-2842 | HIGH | 8.1 | 0.4% | Jun 27, 2023 | The WP Inventory Manager WordPress plugin before 2.1.0.14 does not have CSRF checks, which could allow attackers to make... |
| CVE-2023-2744 | HIGH | 7.2 | 2.6% | Jun 27, 2023 | The ERP WordPress plugin before 1.12.4 does not properly sanitise and escape the `type` parameter in the `erp/v1/account... |
| CVE-2023-2628 | HIGH | 8.8 | 0.4% | Jun 27, 2023 | The KiviCare WordPress plugin before 3.2.1 does not have CSRF checks (either flawed or missing completely) in various AJ... |
| CVE-2023-2592 | HIGH | 7.2 | 0.9% | Jun 27, 2023 | The FormCraft WordPress plugin before 3.9.7 does not properly sanitise and escape a parameter before using it in a SQL s... |
| CVE-2023-2482 | HIGH | 7.2 | 0.9% | Jun 27, 2023 | The Responsive CSS EDITOR WordPress plugin through 1.0 does not properly sanitise and escape a parameter before using it... |
| CVE-2023-34395 | HIGH | 7.8 | 0.7% | Jun 27, 2023 | Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Apache Software Foun... |
| CVE-2023-3423 | HIGH | 8.8 | 0.6% | Jun 27, 2023 | Weak Password Requirements in GitHub repository cloudexplorer-dev/cloudexplorer-lite prior to v 1.2.0. |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now