2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-7093 | HIGH | 7.8 | 0.9% | Dec 25, 2023 | A vulnerability classified as critical has been found in KylinSoft kylin-system-updater up to 2.0.5.16-0k2.33. Affected ... |
| CVE-2023-7092 | MEDIUM | 4.3 | 0.4% | Dec 24, 2023 | A vulnerability was found in Uniway UW-302VP 2.0. It has been rated as problematic. This issue affects some unknown proc... |
| CVE-2023-7102 | CRITICAL | 9.8 | 43.3% | Dec 24, 2023 | Use of a Third Party library produced a vulnerability in Barracuda Networks Inc. Barracuda ESG Appliance which allowed P... |
| CVE-2023-7101 | HIGH | 7.8 | 16.7% | Dec 24, 2023 | Spreadsheet::ParseExcel version 0.65 is a Perl module used for parsing Excel files. Spreadsheet::ParseExcel is vulnerabl... |
| CVE-2023-7091 | HIGH | 8.8 | 0.9% | Dec 24, 2023 | A vulnerability was found in Dreamer CMS 4.1.3. It has been declared as problematic. This vulnerability affects unknown ... |
| CVE-2023-51714 | CRITICAL | 9.8 | 1.0% | Dec 24, 2023 | An issue was discovered in the HTTP2 implementation in Qt before 5.15.17, 6.x before 6.2.11, 6.3.x through 6.5.x before ... |
| CVE-2023-51767 | HIGH | 7 | 0.7% | Dec 24, 2023 | OpenSSH through 10.0, when common types of DRAM are used, might allow row hammer attacks (for authentication bypass) bec... |
| CVE-2023-51766 | MEDIUM | 5.3 | 1.1% | Dec 24, 2023 | Exim before 4.97.1 allows SMTP smuggling in certain PIPELINING/CHUNKING configurations. Remote attackers can use a publi... |
| CVE-2023-51765 | MEDIUM | 5.3 | 1.1% | Dec 24, 2023 | sendmail through 8.17.2 allows SMTP smuggling in certain configurations. Remote attackers can use a published exploitati... |
| CVE-2023-51764 | MEDIUM | 5.3 | 2.6% | Dec 24, 2023 | Postfix through 3.8.5 allows SMTP smuggling unless configured with smtpd_data_restrictions=reject_unauth_pipelining and ... |
| CVE-2023-51763 | CRITICAL | 9.8 | 0.9% | Dec 24, 2023 | csv_builder.rb in ActiveAdmin (aka Active Admin) before 3.2.0 allows CSV injection. |
| CVE-2023-7090 | HIGH | 8.8 | 0.7% | Dec 23, 2023 | A flaw was found in sudo in the handling of ipa_hostname, where ipa_hostname from /etc/sssd/sssd.conf was not propagated... |
| CVE-2023-49594 | MEDIUM | 6.5 | 1.2% | Dec 23, 2023 | An information disclosure vulnerability exists in the challenge functionality of instipod DuoUniversalKeycloakAuthentica... |
| CVE-2023-7008 | MEDIUM | 5.9 | 0.8% | Dec 23, 2023 | A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed ... |
| CVE-2023-6744 | MEDIUM | 5.4 | 0.3% | Dec 23, 2023 | The Divi theme for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'et_pb_text' shortcode in all... |
| CVE-2023-5962 | MEDIUM | 6.5 | 0.3% | Dec 23, 2023 | A weak cryptographic algorithm vulnerability has been identified in ioLogik E1200 Series firmware versions v3.3 and prio... |
| CVE-2023-5961 | HIGH | 8.8 | 0.4% | Dec 23, 2023 | A Cross-Site Request Forgery (CSRF) vulnerability has been identified in ioLogik E1200 Series firmware versions v3.3 and... |
| CVE-2023-7002 | HIGH | 7.2 | 45.9% | Dec 23, 2023 | The Backup Migration plugin for WordPress is vulnerable to OS Command Injection in all versions up to, and including, 1.... |
| CVE-2023-6972 | CRITICAL | 9.8 | 1.4% | Dec 23, 2023 | The Backup Migration plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.3.9 vi... |
| CVE-2023-6971 | CRITICAL | 9.8 | 6.4% | Dec 23, 2023 | The Backup Migration plugin for WordPress is vulnerable to Remote File Inclusion in versions 1.0.8 to 1.3.9 via the 'con... |
| CVE-2023-51386 | LOW | 3.3 | 0.2% | Dec 22, 2023 | Sandbox Accounts for Events provides multiple, temporary AWS accounts to a number of authenticated users simultaneously ... |
| CVE-2023-51651 | LOW | 3.3 | 0.4% | Dec 22, 2023 | AWS SDK for PHP is the Amazon Web Services software development kit for PHP. Within the scope of requests to S3 object k... |
| CVE-2023-51650 | HIGH | 7.5 | 0.9% | Dec 22, 2023 | Hertzbeat is an open source, real-time monitoring system. Prior to version 1.4.1, Spring Boot permission configuration i... |
| CVE-2023-51451 | MEDIUM | 4.3 | 0.5% | Dec 22, 2023 | Symbolicator is a service used in Sentry. Starting in Symbolicator version 0.3.3 and prior to version 21.12.1, an attack... |
| CVE-2023-51449 | HIGH | 7.5 | 2.3% | Dec 22, 2023 | Gradio is an open-source Python package that allows you to quickly build a demo or web application for your machine lear... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now