2023 CVE Vulnerabilities
31,248 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-3145 | HIGH | 8.8 | 0.8% | Jun 7, 2023 | A vulnerability, which was classified as critical, has been found in SourceCodester Online Discussion Forum Site 1.0. Af... |
| CVE-2023-20889 | HIGH | 7.5 | 79.1% | Jun 7, 2023 | Aria Operations for Networks contains an information disclosure vulnerability. A malicious actor with network access to ... |
| CVE-2023-20888 | HIGH | 8.8 | 82.3% | Jun 7, 2023 | Aria Operations for Networks contains an authenticated deserialization vulnerability. A malicious actor with network acc... |
| CVE-2023-33498 | HIGH | 8.8 | 0.7% | Jun 7, 2023 | alist <=3.16.3 is vulnerable to Incorrect Access Control. Low privilege accounts can upload any file. |
| CVE-2023-30576 | HIGH | 8.1 | 1.1% | Jun 7, 2023 | Apache Guacamole 0.9.10 through 1.5.1 may continue to reference a freed RDP audio input buffer. Depending on timing, thi... |
| CVE-2023-30575 | HIGH | 7.5 | 1.2% | Jun 7, 2023 | Apache Guacamole 1.5.1 and older may incorrectly calculate the lengths of instruction elements sent during the Guacamole... |
| CVE-2023-1388 | HIGH | 8.1 | 0.6% | Jun 7, 2023 | A heap-based overflow vulnerability in TA prior to version 5.7.9 allows a remote user to alter the page heap in the mac... |
| CVE-2023-0976 | HIGH | 7.8 | 0.6% | Jun 7, 2023 | A command Injection Vulnerability in TA for mac-OS prior to version 5.7.9 allows local users to place an arbitrary file... |
| CVE-2023-33538 | HIGH | 8.8 | 42.6% | Jun 7, 2023 | TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a command injection vulnerabili... |
| CVE-2023-33537 | HIGH | 8.1 | 0.9% | Jun 7, 2023 | TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a buffer overflow via the compo... |
| CVE-2023-33536 | HIGH | 8.1 | 0.9% | Jun 7, 2023 | TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a buffer overflow via the compo... |
| CVE-2023-3124 | HIGH | 8.8 | 22.7% | Jun 7, 2023 | The Elementor Pro plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check... |
| CVE-2023-33601 | HIGH | 8.8 | 0.9% | Jun 7, 2023 | An arbitrary file upload vulnerability in /admin.php?c=upload of phpok v6.4.100 allows attackers to execute arbitrary co... |
| CVE-2023-33782 | HIGH | 8.8 | 42.9% | Jun 7, 2023 | D-Link DIR-842V2 v1.0.3 was discovered to contain a command injection vulnerability via the iperf3 diagnostics function. |
| CVE-2023-33781 | HIGH | 8.8 | 36.0% | Jun 7, 2023 | An issue in D-Link DIR-842V2 v1.0.3 allows attackers to execute arbitrary commands via importing a crafted file. |
| CVE-2023-33569 | HIGH | 7.2 | 1.1% | Jun 6, 2023 | Sourcecodester Faculty Evaluation System v1.0 is vulnerable to arbitrary code execution via ip/eval/ajax.php?action=upda... |
| CVE-2023-2603 | HIGH | 7.8 | 0.6% | Jun 6, 2023 | A vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer overf... |
| CVE-2023-33959 | HIGH | 8.8 | 0.4% | Jun 6, 2023 | notation is a CLI tool to sign and verify OCI artifacts and container images. An attacker who has compromised a registry... |
| CVE-2023-33653 | HIGH | 8.8 | 2.1% | Jun 6, 2023 | Sitecore Experience Platform (XP) v9.3 was discovered to contain an authenticated remote code execution (RCE) vulnerabil... |
| CVE-2023-33652 | HIGH | 8.8 | 2.5% | Jun 6, 2023 | Sitecore Experience Platform (XP) v9.3 was discovered to contain an authenticated remote code execution (RCE) vulnerabil... |
| CVE-2023-33651 | HIGH | 7.5 | 1.4% | Jun 6, 2023 | An issue in the MVC Device Simulator of Sitecore Experience Platform (XP), Experience Manager (XM), and Experience Comme... |
| CVE-2023-34104 | HIGH | 7.5 | 1.1% | Jun 6, 2023 | fast-xml-parser is an open source, pure javascript xml parser. fast-xml-parser allows special characters in entity names... |
| CVE-2023-33747 | HIGH | 7.8 | 0.5% | Jun 6, 2023 | CloudPanel v2.2.2 allows attackers to execute a path traversal. |
| CVE-2023-32203 | HIGH | 7.8 | 0.2% | Jun 6, 2023 | Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI). This coul... |
| CVE-2023-31606 | HIGH | 7.5 | 1.5% | Jun 6, 2023 | A Regular Expression Denial of Service (ReDoS) issue was discovered in the sanitize_html function of redcloth gem v4.0.0... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now