2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-1388 | HIGH | 8.1 | 0.6% | Jun 7, 2023 | A heap-based overflow vulnerability in TA prior to version 5.7.9 allows a remote user to alter the page heap in the mac... |
| CVE-2023-0976 | HIGH | 7.8 | 0.6% | Jun 7, 2023 | A command Injection Vulnerability in TA for mac-OS prior to version 5.7.9 allows local users to place an arbitrary file... |
| CVE-2023-33538 | HIGH | 8.8 | 42.6% | Jun 7, 2023 | TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a command injection vulnerabili... |
| CVE-2023-33537 | HIGH | 8.1 | 0.9% | Jun 7, 2023 | TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a buffer overflow via the compo... |
| CVE-2023-33536 | HIGH | 8.1 | 0.9% | Jun 7, 2023 | TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a buffer overflow via the compo... |
| CVE-2023-3124 | HIGH | 8.8 | 22.7% | Jun 7, 2023 | The Elementor Pro plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check... |
| CVE-2023-33601 | HIGH | 8.8 | 0.9% | Jun 7, 2023 | An arbitrary file upload vulnerability in /admin.php?c=upload of phpok v6.4.100 allows attackers to execute arbitrary co... |
| CVE-2023-33782 | HIGH | 8.8 | 42.9% | Jun 7, 2023 | D-Link DIR-842V2 v1.0.3 was discovered to contain a command injection vulnerability via the iperf3 diagnostics function. |
| CVE-2023-33781 | HIGH | 8.8 | 36.0% | Jun 7, 2023 | An issue in D-Link DIR-842V2 v1.0.3 allows attackers to execute arbitrary commands via importing a crafted file. |
| CVE-2023-33569 | HIGH | 7.2 | 1.1% | Jun 6, 2023 | Sourcecodester Faculty Evaluation System v1.0 is vulnerable to arbitrary code execution via ip/eval/ajax.php?action=upda... |
| CVE-2023-2603 | HIGH | 7.8 | 0.6% | Jun 6, 2023 | A vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer overf... |
| CVE-2023-33959 | HIGH | 8.8 | 0.4% | Jun 6, 2023 | notation is a CLI tool to sign and verify OCI artifacts and container images. An attacker who has compromised a registry... |
| CVE-2023-33653 | HIGH | 8.8 | 2.1% | Jun 6, 2023 | Sitecore Experience Platform (XP) v9.3 was discovered to contain an authenticated remote code execution (RCE) vulnerabil... |
| CVE-2023-33652 | HIGH | 8.8 | 2.5% | Jun 6, 2023 | Sitecore Experience Platform (XP) v9.3 was discovered to contain an authenticated remote code execution (RCE) vulnerabil... |
| CVE-2023-33651 | HIGH | 7.5 | 1.4% | Jun 6, 2023 | An issue in the MVC Device Simulator of Sitecore Experience Platform (XP), Experience Manager (XM), and Experience Comme... |
| CVE-2023-34104 | HIGH | 7.5 | 1.1% | Jun 6, 2023 | fast-xml-parser is an open source, pure javascript xml parser. fast-xml-parser allows special characters in entity names... |
| CVE-2023-33747 | HIGH | 7.8 | 0.5% | Jun 6, 2023 | CloudPanel v2.2.2 allows attackers to execute a path traversal. |
| CVE-2023-32203 | HIGH | 7.8 | 0.2% | Jun 6, 2023 | Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI). This coul... |
| CVE-2023-31606 | HIGH | 7.5 | 1.5% | Jun 6, 2023 | A Regular Expression Denial of Service (ReDoS) issue was discovered in the sanitize_html function of redcloth gem v4.0.0... |
| CVE-2023-31278 | HIGH | 7.8 | 0.2% | Jun 6, 2023 | Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI). This coul... |
| CVE-2023-31244 | HIGH | 7.8 | 0.2% | Jun 6, 2023 | The affected product does not properly validate user-supplied data. If a user opens a maliciously for... |
| CVE-2023-2132 | HIGH | 7.5 | 1.3% | Jun 6, 2023 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 before 15.10.8, all versions star... |
| CVE-2023-29503 | HIGH | 7.8 | 0.2% | Jun 6, 2023 | The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). Th... |
| CVE-2023-28653 | HIGH | 7.8 | 0.2% | Jun 6, 2023 | The affected application lacks proper validation of user-supplied data when parsing project files (e.g.... |
| CVE-2023-27916 | HIGH | 7.8 | 0.2% | Jun 6, 2023 | The affected application lacks proper validation of user-supplied data when parsing font files (e.g., FNT... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now