2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-36367 | HIGH | 7.5 | 0.7% | Jun 22, 2023 | An issue in the BLOBcmp component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service... |
| CVE-2023-36366 | HIGH | 7.5 | 0.7% | Jun 22, 2023 | An issue in the log_create_delta component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause Denial of ... |
| CVE-2023-36365 | HIGH | 7.5 | 0.7% | Jun 22, 2023 | An issue in the sql_trans_copy_key component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial... |
| CVE-2023-36364 | HIGH | 7.5 | 0.8% | Jun 22, 2023 | An issue in the rel_deps component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Servic... |
| CVE-2023-36363 | HIGH | 7.5 | 0.8% | Jun 22, 2023 | An issue in the __nss_database_lookup component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Den... |
| CVE-2023-36362 | HIGH | 7.5 | 0.8% | Jun 22, 2023 | An issue in the rel_sequences component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of S... |
| CVE-2023-20896 | HIGH | 7.5 | 0.9% | Jun 22, 2023 | The VMware vCenter Server contains an out-of-bounds read vulnerability in the implementation of the DCERPC protocol. A m... |
| CVE-2023-35917 | HIGH | 8.8 | 0.3% | Jun 22, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce PayPal Payments plugin <= 2.0.4 versions. |
| CVE-2023-31867 | HIGH | 7.2 | 0.8% | Jun 22, 2023 | Sage X3 version 12.14.0.50-0 is vulnerable to CSV Injection. |
| CVE-2023-23795 | HIGH | 8.8 | 0.3% | Jun 22, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Muneeb Form Builder plugin <= 1.9.9.0 versions. |
| CVE-2023-29709 | HIGH | 7.5 | 0.7% | Jun 22, 2023 | An issue was discovered in /cgi-bin/login_rj.cgi in Wildix WSG24POE version 103SP7D190822, allows attackers to bypass au... |
| CVE-2023-29708 | HIGH | 7.5 | 15.3% | Jun 22, 2023 | An issue was discovered in /cgi-bin/adm.cgi in WavLink WavRouter version RPT70HA1.x, allows attackers to force a factory... |
| CVE-2023-32449 | HIGH | 7.8 | 0.1% | Jun 22, 2023 | Dell PowerStore versions prior to 3.5 contain an improper verification of cryptographic signature vulnerability. An att... |
| CVE-2023-26115 | HIGH | 7.5 | 1.7% | Jun 22, 2023 | All versions of the package word-wrap are vulnerable to Regular Expression Denial of Service (ReDoS) due to the usage of... |
| CVE-2023-28956 | HIGH | 7.8 | 0.2% | Jun 22, 2023 | IBM Spectrum Protect Backup-Archive Client 8.1.0.0 through 8.1.17.2 may allow a local user to escalate their privileges ... |
| CVE-2023-24261 | HIGH | 7.2 | 18.8% | Jun 21, 2023 | A vulnerability in GL.iNET GL-E750 Mudi before firmware v3.216 allows authenticated attackers to execute arbitrary code ... |
| CVE-2023-3110 | HIGH | 8.8 | 0.4% | Jun 21, 2023 | Description: A vulnerability in SiLabs Unify Gateway 1.3.1 and earlier allows an unauthenticated attacker within Z-Wave ... |
| CVE-2023-33289 | HIGH | 7.5 | 1.2% | Jun 21, 2023 | The urlnorm crate through 0.1.4 for Rust allows Regular Expression Denial of Service (ReDos) via a crafted URL to lib.rs... |
| CVE-2023-0972 | HIGH | 8.8 | 0.4% | Jun 21, 2023 | Description: A vulnerability in SiLabs Z/IP Gateway 7.18.01 and earlier allows an unauthenticated attacker within Z-Wave... |
| CVE-2023-0971 | HIGH | 8.8 | 0.3% | Jun 21, 2023 | A logic error in SiLabs Z/IP Gateway SDK 7.18.02 and earlier allows authentication to be bypassed, remote administration... |
| CVE-2023-2911 | HIGH | 7.5 | 2.5% | Jun 21, 2023 | If the `recursive-clients` quota is reached on a BIND 9 resolver configured with both `stale-answer-enable yes;` and `st... |
| CVE-2023-2829 | HIGH | 7.5 | 0.9% | Jun 21, 2023 | A `named` instance configured to run as a DNSSEC-validating recursive resolver with the Aggressive Use of DNSSEC-Validat... |
| CVE-2023-2828 | HIGH | 7.5 | 3.7% | Jun 21, 2023 | Every `named` instance configured to run as a recursive resolver maintains a cache database holding the responses to the... |
| CVE-2023-0026 | HIGH | 7.5 | 0.6% | Jun 21, 2023 | An Improper Input Validation vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos O... |
| CVE-2023-27243 | HIGH | 7.5 | 0.4% | Jun 21, 2023 | An access control issue in Makves DCAP v3.0.0.122 allows unauthenticated attackers to obtain cleartext credentials via a... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now