2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-26297 | HIGH | 8.8 | 1.6% | Jun 12, 2023 | Previous versions of HP Device Manager (prior to HPDM 5.0.10) could potentially allow command injection and/or elevation... |
| CVE-2023-26296 | HIGH | 8.8 | 1.6% | Jun 12, 2023 | Previous versions of HP Device Manager (prior to HPDM 5.0.10) could potentially allow command injection and/or elevation... |
| CVE-2023-26294 | HIGH | 7.8 | 0.7% | Jun 12, 2023 | Previous versions of HP Device Manager (prior to HPDM 5.0.10) could potentially allow command injection and/or elevation... |
| CVE-2023-32221 | HIGH | 7.8 | 0.2% | Jun 12, 2023 | EaseUS Todo Backup version 20220111.390 - An omission during installation may allow a local attacker to perform privileg... |
| CVE-2023-32219 | HIGH | 7.5 | 0.5% | Jun 12, 2023 | A Mazda model (2015-2016) can be unlocked via an unspecified method. |
| CVE-2023-34942 | HIGH | 7.5 | 0.7% | Jun 12, 2023 | Asus RT-N10LX Router v2.0.0.39 was discovered to contain a stack overflow via the mac parameter at /start-apply.html. NO... |
| CVE-2023-34940 | HIGH | 7.5 | 0.8% | Jun 12, 2023 | Asus RT-N10LX Router v2.0.0.39 was discovered to contain a stack overflow via the url parameter at /start-apply.html. NO... |
| CVE-2023-28478 | HIGH | 8.8 | 0.3% | Jun 12, 2023 | TP-Link EC-70 devices through 2.3.4 Build 20220902 rel.69498 have a Buffer Overflow. |
| CVE-2023-1899 | HIGH | 7.5 | 0.3% | Jun 12, 2023 | Atlas Copco Power Focus 6000 web server is not a secure connection by default, which could allow an attacker to gain sen... |
| CVE-2023-1898 | HIGH | 7.5 | 0.6% | Jun 12, 2023 | Atlas Copco Power Focus 6000 web server uses a small amount of session ID numbers. An attacker could enter a session ID ... |
| CVE-2023-1897 | HIGH | 7.5 | 0.3% | Jun 12, 2023 | Atlas Copco Power Focus 6000 web server does not sanitize the login information stored by the authenticated user’s brows... |
| CVE-2023-34343 | HIGH | 8.8 | 0.8% | Jun 12, 2023 | AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can inject arbitrar... |
| CVE-2023-34336 | HIGH | 8.8 | 0.7% | Jun 12, 2023 | AMI BMC contains a vulnerability in the IPMI handler, where an attacker with the required privileges can cause a buffer ... |
| CVE-2023-34334 | HIGH | 8.8 | 0.8% | Jun 12, 2023 | AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can inject arbitrar... |
| CVE-2023-34341 | HIGH | 8.8 | 0.8% | Jun 12, 2023 | AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can read and write ... |
| CVE-2023-34105 | HIGH | 7.5 | 8.8% | Jun 12, 2023 | SRS is a real-time video server supporting RTMP, WebRTC, HLS, HTTP-FLV, SRT, MPEG-DASH, and GB28181. Prior to versions 5... |
| CVE-2023-30198 | HIGH | 7.5 | 5.5% | Jun 12, 2023 | Prestashop winbizpayment <= 1.0.2 is vulnerable to Incorrect Access Control via modules/winbizpayment/downloads/download... |
| CVE-2023-35053 | HIGH | 7.5 | 0.6% | Jun 12, 2023 | In JetBrains YouTrack before 2023.1.10518 a DoS attack was possible via Helpdesk forms |
| CVE-2023-34468 | HIGH | 8.8 | 63.4% | Jun 12, 2023 | The DBCPConnectionPool and HikariCPConnectionPool Controller Services in Apache NiFi 0.0.2 through 1.21.0 allow an authe... |
| CVE-2023-3208 | HIGH | 8.8 | 0.7% | Jun 12, 2023 | A vulnerability, which was classified as critical, has been found in RoadFlow Visual Process Engine .NET Core Mvc 2.13.3... |
| CVE-2023-3206 | HIGH | 7.5 | 18.7% | Jun 12, 2023 | A vulnerability classified as problematic was found in Chengdu VEC40G 3.0. Affected by this vulnerability is an unknown ... |
| CVE-2023-34494 | HIGH | 7.5 | 0.7% | Jun 12, 2023 | NanoMQ 0.16.5 is vulnerable to heap-use-after-free in the nano_ctx_send function of nmq_mqtt.c. |
| CVE-2023-34488 | HIGH | 7.8 | 0.5% | Jun 12, 2023 | NanoMQ 0.17.5 has a one-byte heap-based buffer over-read in the conn_handler function of mqtt_parser.c when it processes... |
| CVE-2023-33290 | HIGH | 7.5 | 0.8% | Jun 12, 2023 | The git-url-parse crate through 0.4.4 for Rust allows Regular Expression Denial of Service (ReDos) via a crafted URL to ... |
| CVE-2023-33253 | HIGH | 8.8 | 2.5% | Jun 12, 2023 | LabCollector 6.0 though 6.15 allows remote code execution. An authenticated remote low-privileged user can upload an exe... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now