2023 CVE Vulnerabilities

31,475 CVEs published in 2023.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2023-34620HIGH7.5An issue was discovered hjson thru 3.0.0 allows attackers to cause a denial of service or other unspecified impacts via ...
CVE-2023-34617HIGH7.5An issue was discovered genson thru 1.6 allows attackers to cause a denial of service or other unspecified impacts via c...
CVE-2023-34616HIGH7.5An issue was discovered pbjson thru 0.4.0 allows attackers to cause a denial of service or other unspecified impacts via...
CVE-2023-34615HIGH7.5An issue was discovered JSONUtil thru 5.0 allows attackers to cause a denial of service or other unspecified impacts via...
CVE-2023-34614HIGH7.5An issue was discovered jmarsden/jsonij thru 0.5.2 allows attackers to cause a denial of service or other unspecified im...
CVE-2023-34613HIGH7.5An issue was discovered sojo thru 1.1.1 allows attackers to cause a denial of service or other unspecified impacts via c...
CVE-2023-34612HIGH7.5An issue was discovered ph-json thru 9.5.5 allows attackers to cause a denial of service or other unspecified impacts vi...
CVE-2023-34611HIGH7.5An issue was discovered mjson thru 1.4.1 allows attackers to cause a denial of service or other unspecified impacts via ...
CVE-2023-34610HIGH7.5An issue was discovered json-io thru 4.14.0 allows attackers to cause a denial of service or other unspecified impacts v...
CVE-2023-34609HIGH7.5An issue was discovered flexjson thru 3.3 allows attackers to cause a denial of service or other unspecified impacts via...
CVE-2023-32465HIGH8.8 Dell Power Protect Cyber Recovery, contains an Authentication Bypass vulnerability. An attacker could potentially explo...
CVE-2023-35142HIGH8.1Jenkins Checkmarx Plugin 2022.4.3 and earlier disables SSL/TLS validation for connections to the Checkmarx server by def...
CVE-2023-35141HIGH8In Jenkins 2.399 and earlier, LTS 2.387.3 and earlier, POST requests are sent in order to load the list of context actio...
CVE-2023-3040HIGH7.5A debug function in the lua-resty-json package, up to commit id 3ef9492bd3a44d9e51301d6adc3cd1789c8f534a (merged in PR #...
CVE-2023-3036HIGH7.5An unchecked read in NTP server in github.com/cloudflare/cfnts prior to commit 783490b https://github.com/cloudflare/cf...
CVE-2023-3241HIGH7.5A vulnerability was found in OTCMS up to 6.62 and classified as problematic. Affected by this issue is some unknown func...
CVE-2023-3239HIGH7.5A vulnerability, which was classified as problematic, was found in OTCMS up to 6.62. Affected is an unknown function of ...
CVE-2023-3001HIGH7.8 A CWE-502: Deserialization of Untrusted Data vulnerability exists in the Dashboard module that could cause an interpret...
CVE-2023-34396HIGH7.5Allocation of Resources Without Limits or Throttling vulnerability in Apache Software Foundation Apache Struts.This issu...
CVE-2023-34000HIGH7.5Unauth. IDOR vulnerability leading to PII Disclosure in WooCommerce Stripe Payment Gateway plugin <= 7.4.0 versions.
CVE-2023-33933HIGH7.5Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache Traffic Se...
CVE-2023-30631HIGH7.5Improper Input Validation vulnerability in Apache Software Foundation Apache Traffic Server.  The configuration option p...
CVE-2023-2570HIGH7.8 A CWE-129: Improper Validation of Array Index vulnerability exists that could cause local denial-of-service, and pote...
CVE-2023-2569HIGH7.8 A CWE-787: Out-of-Bounds Write vulnerability exists that could cause local denial-of-service, elevation of privilege, a...
CVE-2023-1049HIGH7.8 A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause execution of ...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now