2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-35035 | HIGH | 8.8 | 1.6% | Jun 12, 2023 | Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8, Assistant V10 R0, Manager V10 R1 before V... |
| CVE-2023-35033 | HIGH | 8.8 | 1.6% | Jun 12, 2023 | Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8, Assistant V10 R0, Manager V10 R1 before V... |
| CVE-2023-35032 | HIGH | 8.8 | 1.6% | Jun 12, 2023 | Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8 and Manager V10 R1 before V10 R1.42.0 and ... |
| CVE-2023-35031 | HIGH | 8.8 | 1.6% | Jun 12, 2023 | Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8, Assistant V10 R0, Manager V10 R1 before V... |
| CVE-2023-25911 | HIGH | 8.8 | 2.3% | Jun 11, 2023 | The Danfoss AK-EM100 web applications allow for an authenticated user to perform OS command injection through the web ap... |
| CVE-2023-22586 | HIGH | 7.5 | 0.7% | Jun 11, 2023 | The Danfoss AK-EM100 web applications allow for Local File Inclusion in the file parameter. |
| CVE-2023-22584 | HIGH | 7.5 | 0.5% | Jun 11, 2023 | The Danfoss AK-EM100 stores login credentials in cleartext. |
| CVE-2023-26132 | HIGH | 7.5 | 1.1% | Jun 10, 2023 | Versions of the package dottie before 2.0.4 are vulnerable to Prototype Pollution due to insufficient checks, via the se... |
| CVE-2023-3141 | HIGH | 7.1 | 0.4% | Jun 9, 2023 | A use-after-free flaw was found in r592_remove in drivers/memstick/host/r592.c in media access in the Linux Kernel. This... |
| CVE-2023-29766 | HIGH | 7.8 | 0.3% | Jun 9, 2023 | An issue found in CrossX v.1.15.3 for Android allows a local attacker to cause an escalation of Privileges via the datab... |
| CVE-2023-29757 | HIGH | 7.8 | 0.4% | Jun 9, 2023 | An issue found in Blue Light Filter v.1.5.5 for Android allows unauthorized apps to cause escalation of privilege attack... |
| CVE-2023-29755 | HIGH | 7.8 | 0.4% | Jun 9, 2023 | An issue found in Twilight v.13.3 for Android allows unauthorized apps to cause escalation of privilege attacks by manip... |
| CVE-2023-29752 | HIGH | 7.8 | 0.4% | Jun 9, 2023 | An issue found in Facemoji Emoji Keyboard v.2.9.1.2 for Android allows unauthorized apps to cause escalation of privileg... |
| CVE-2023-29749 | HIGH | 7.8 | 0.4% | Jun 9, 2023 | An issue found in Yandex Navigator v.6.60 for Android allows unauthorized apps to cause escalation of privilege attacks ... |
| CVE-2023-2454 | HIGH | 7.2 | 1.2% | Jun 9, 2023 | schema_element defeats protective search_path changes; It was found that certain database calls in PostgreSQL could perm... |
| CVE-2023-27706 | HIGH | 7.1 | 0.6% | Jun 9, 2023 | Bitwarden Windows desktop application versions prior to v2023.4.0 store biometric keys in Windows Credential Manager, ac... |
| CVE-2023-33557 | HIGH | 8.8 | 0.8% | Jun 9, 2023 | Fuel CMS v1.5.2 was discovered to contain a SQL injection vulnerability via the id parameter at /controllers/Blocks.php. |
| CVE-2023-30262 | HIGH | 8.8 | 0.8% | Jun 9, 2023 | An issue found in MIM software Inc MIM License Server and MIMpacs services v.6.9 thru v.7.0 fixed in v.7.0.10 allows a r... |
| CVE-2023-32731 | HIGH | 7.5 | 0.5% | Jun 9, 2023 | When gRPC HTTP2 stack raised a header size exceeded error, it skipped parsing the rest of the HPACK frame. This caused a... |
| CVE-2023-1428 | HIGH | 7.5 | 0.4% | Jun 9, 2023 | There exists an vulnerability causing an abort() to be called in gRPC. The following headers cause gRPC's C++ implement... |
| CVE-2023-3177 | HIGH | 8.8 | 0.7% | Jun 9, 2023 | A vulnerability has been found in SourceCodester Lost and Found Information System 1.0 and classified as critical. Affec... |
| CVE-2023-3176 | HIGH | 8.8 | 0.7% | Jun 9, 2023 | A vulnerability, which was classified as critical, was found in SourceCodester Lost and Found Information System 1.0. Af... |
| CVE-2023-2607 | HIGH | 7.2 | 0.8% | Jun 9, 2023 | The Multiple Page Generator Plugin for WordPress is vulnerable to time-based SQL Injection via the orderby and order par... |
| CVE-2023-2249 | HIGH | 8.8 | 60.8% | Jun 9, 2023 | The wpForo Forum plugin for WordPress is vulnerable to Local File Include, Server-Side Request Forgery, and PHAR Deseria... |
| CVE-2023-2237 | HIGH | 8.8 | 0.8% | Jun 9, 2023 | The WP Replicate Post plugin for WordPress is vulnerable to SQL Injection via the post_id parameter in versions up to, a... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now