2023 CVE Vulnerabilities

31,509 CVEs published in 2023.

CVE IDSeverityCVSSDescription
CVE-2023-47091HIGH7.5An issue was discovered in Stormshield Network Security (SNS) SNS 4.3.13 through 4.3.22 before 4.3.23, SNS 4.6.0 through...
CVE-2023-37188HIGH7.5C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the function zfp_rate_decompress at zfp/b...
CVE-2023-37187HIGH7.5C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the zfp/blosc2-zfp.c zfp_acc_decompress. ...
CVE-2023-37186HIGH7.5C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference in ndlz/ndlz8x8.c via a NULL pointer to memse...
CVE-2023-37185HIGH7.5C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the function zfp_prec_decompress at zfp/b...
CVE-2023-31297MEDIUM4.8An issue was discovered in SESAMI planfocus CPTO (Cash Point & Transport Optimizer) 6.3.8.6 718. There is XSS via the Na...
CVE-2023-28872HIGH8.8Support Assistant in NCP Secure Enterprise Client before 13.10 allows attackers to execute DLL files with SYSTEM privile...
CVE-2023-51772HIGH8.8One Identity Password Manager before 5.13.1 allows Kiosk Escape. This product enables users to reset their Active Direct...
CVE-2023-49328HIGH7.2On a Wolters Kluwer B.POINT 23.70.00 server running Linux on premises, during the authentication phase, a validated syst...
CVE-2023-48654CRITICAL9.8One Identity Password Manager before 5.13.1 allows Kiosk Escape. This product enables users to reset their Active Direct...
CVE-2023-40236MEDIUM5.3In Pexip VMR self-service portal before 3, the same SSH host key is used across different customers' installations, whic...
CVE-2023-37225MEDIUM6.1Pexip Infinity before 32 allows Webapp1 XSS via preconfigured links.
CVE-2023-31455HIGH7.5Pexip Infinity before 31.2 has Improper Input Validation for RTCP, allowing remote attackers to trigger an abort.
CVE-2023-31289HIGH7.5Pexip Infinity before 31.2 has Improper Input Validation for signalling, allowing remote attackers to trigger an abort.
CVE-2023-51771CRITICAL9.8In MicroHttpServer (aka Micro HTTP Server) through a8ab029, _ParseHeader in lib/server.c allows a one-byte recv buffer o...
CVE-2023-30451MEDIUM4.9In TYPO3 11.5.24, the filelist component allows attackers (who have access to the administrator panel) to read arbitrary...
CVE-2023-7100CRITICAL9.8A vulnerability, which was classified as critical, was found in PHPGurukul Restaurant Table Booking System 1.0. Affected...
CVE-2023-7099CRITICAL9.8A vulnerability, which was classified as critical, has been found in PHPGurukul Nipah Virus Testing Management System 1....
CVE-2023-49880HIGH7.5In the Message Entry and Repair (MER) facility of IBM Financial Transaction Manager for SWIFT Services 3.2.4 the sending...
CVE-2023-43064HIGH7.8Facsimile Support for IBM i 7.2, 7.3, 7.4, and 7.5 could allow a local user to gain elevated privileges due to an unqual...
CVE-2023-7098MEDIUM5.3** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as problematic was found in icret EasyImages 2.8.3. This vuln...
CVE-2023-7097CRITICAL9.8A vulnerability classified as critical has been found in code-projects Water Billing System 1.0. This affects an unknown...
CVE-2023-7096CRITICAL9.8A flaw has been found in code-projects Faculty Management System 1.0. The affected element is an unknown function of the...
CVE-2023-7095CRITICAL9.8A vulnerability, which was classified as critical, has been found in Totolink A7100RU 7.4cu.2313_B20191024. Affected by ...
CVE-2023-7094HIGH7.5A vulnerability classified as problematic was found in Netentsec NS-ASG Application Security Gateway 6.3. Affected by th...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now