2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-34253 | HIGH | 7.2 | 2.1% | Jun 14, 2023 | Grav is a flat-file content management system. Prior to version 1.7.42, the denylist introduced in commit 9d6a2d to prev... |
| CVE-2023-34252 | HIGH | 7.2 | 2.1% | Jun 14, 2023 | Grav is a flat-file content management system. Prior to version 1.7.42, there is a logic flaw in the `GravExtension.filt... |
| CVE-2023-34251 | HIGH | 7.2 | 2.3% | Jun 14, 2023 | Grav is a flat-file content management system. Versions prior to 1.7.42 are vulnerable to server side template injection... |
| CVE-2023-30082 | HIGH | 7.5 | 1.0% | Jun 14, 2023 | A denial of service attack might be launched against the server if an unusually lengthy password (more than 10000000 cha... |
| CVE-2023-26062 | HIGH | 7.8 | 0.2% | Jun 14, 2023 | A mobile network solution internal fault is found in Nokia Web Element Manager before 22 R1, in which an authenticated, ... |
| CVE-2023-25434 | HIGH | 8.8 | 0.8% | Jun 14, 2023 | libtiff 4.5.0 is vulnerable to Buffer Overflow via extractContigSamplesBytes() at /libtiff/tools/tiffcrop.c:3215. |
| CVE-2023-25369 | HIGH | 7.5 | 0.8% | Jun 14, 2023 | Siglent SDS 1104X-E SDS1xx4X-E_V6.1.37R9.ADS is vulnerable to Denial of Service on the user interface triggered by malfo... |
| CVE-2023-25368 | HIGH | 7.5 | 0.8% | Jun 14, 2023 | Siglent SDS 1104X-E SDS1xx4X-E_V6.1.37R9.ADS is vulnerable to Incorrect Access Control. An unauthenticated attacker can ... |
| CVE-2023-2976 | HIGH | 7.1 | 0.2% | Jun 14, 2023 | Use of Java's default temporary directory for file creation in `FileBackedOutputStream` in Google Guava versions 1.0 to ... |
| CVE-2023-0009 | HIGH | 7.8 | 0.2% | Jun 14, 2023 | A local privilege escalation (PE) vulnerability in the Palo Alto Networks GlobalProtect app on Windows enables a local u... |
| CVE-2023-34868 | HIGH | 7.5 | 0.7% | Jun 14, 2023 | Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the parser_parse_for_statement_start... |
| CVE-2023-34867 | HIGH | 7.5 | 0.7% | Jun 14, 2023 | Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the ecma_property_hashmap_create at ... |
| CVE-2023-32031 | HIGH | 8.8 | 81.8% | Jun 14, 2023 | Microsoft Exchange Server Remote Code Execution Vulnerability |
| CVE-2023-32030 | HIGH | 7.5 | 2.2% | Jun 14, 2023 | .NET and Visual Studio Denial of Service Vulnerability |
| CVE-2023-29337 | HIGH | 7.1 | 1.1% | Jun 14, 2023 | NuGet Client Remote Code Execution Vulnerability |
| CVE-2023-29331 | HIGH | 7.5 | 2.6% | Jun 14, 2023 | .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability |
| CVE-2023-29326 | HIGH | 7.8 | 0.9% | Jun 14, 2023 | .NET Framework Remote Code Execution Vulnerability |
| CVE-2023-28310 | HIGH | 8 | 25.0% | Jun 14, 2023 | Microsoft Exchange Server Remote Code Execution Vulnerability |
| CVE-2023-24936 | HIGH | 7.5 | 1.6% | Jun 14, 2023 | .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability |
| CVE-2023-24897 | HIGH | 7.8 | 1.2% | Jun 14, 2023 | .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability |
| CVE-2023-24895 | HIGH | 7.8 | 1.1% | Jun 14, 2023 | .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability |
| CVE-2023-35110 | HIGH | 7.5 | 0.8% | Jun 14, 2023 | An issue was discovered jjson thru 0.1.7 allows attackers to cause a denial of service or other unspecified impacts via ... |
| CVE-2023-34878 | HIGH | 7.5 | 0.7% | Jun 14, 2023 | An issue was discovered in Ujcms v6.0.2 allows attackers to gain sensitive information via the dir parameter to /api/bac... |
| CVE-2023-34624 | HIGH | 7.5 | 1.0% | Jun 14, 2023 | An issue was discovered htmlcleaner thru = 2.28 allows attackers to cause a denial of service or other unspecified impac... |
| CVE-2023-34623 | HIGH | 7.5 | 0.9% | Jun 14, 2023 | An issue was discovered jtidy thru r938 allows attackers to cause a denial of service or other unspecified impacts via c... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now