2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-30864 | HIGH | 7.8 | 0.1% | Jun 6, 2023 | In Connectivity Service, there is a possible missing permission check. This could lead to local escalation of privilege ... |
| CVE-2023-30863 | HIGH | 7.8 | 0.1% | Jun 6, 2023 | In Connectivity Service, there is a possible missing permission check. This could lead to local escalation of privilege ... |
| CVE-2023-2546 | HIGH | 8.8 | 1.4% | Jun 6, 2023 | The WP User Switch plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.0.2. ... |
| CVE-2023-22450 | HIGH | 7.2 | 0.8% | Jun 6, 2023 | In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file upload vulnerability that could allow an att... |
| CVE-2023-34102 | HIGH | 8.8 | 1.6% | Jun 5, 2023 | Avo is an open source ruby on rails admin panel creation framework. The polymorphic field type stores the classes to ope... |
| CVE-2023-3079 | HIGH | 8.8 | 32.1% | Jun 5, 2023 | Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corr... |
| CVE-2023-3027 | HIGH | 7.8 | 0.2% | Jun 5, 2023 | The grc-policy-propagator allows security escalation within the cluster. The propagator allows policies which contain so... |
| CVE-2023-24510 | HIGH | 7.5 | 0.6% | Jun 5, 2023 | On the affected platforms running EOS, a malformed DHCP packet might cause the DHCP relay agent to restart. |
| CVE-2023-3111 | HIGH | 7.8 | 0.4% | Jun 5, 2023 | A use after free vulnerability was found in prepare_to_relocate in fs/btrfs/relocation.c in btrfs in the Linux Kernel. T... |
| CVE-2023-34097 | HIGH | 8.8 | 0.7% | Jun 5, 2023 | hoppscotch is an open source API development ecosystem. In versions prior to 2023.4.5 the database password is exposed i... |
| CVE-2023-33410 | HIGH | 8.8 | 1.2% | Jun 5, 2023 | Minical 1.0.0 and earlier contains a CSV injection vulnerability which allows an attacker to execute remote code. The vu... |
| CVE-2023-31893 | HIGH | 7.5 | 0.9% | Jun 5, 2023 | Telefnica Brasil Vivo Play (IPTV) Firmware: 2023.04.04.01.06.15 is vulnerable to Denial of Service (DoS) via DNS Recursi... |
| CVE-2023-29344 | HIGH | 7.8 | 0.9% | Jun 5, 2023 | Microsoft Office Remote Code Execution Vulnerability |
| CVE-2023-33733 | HIGH | 7.8 | 2.3% | Jun 5, 2023 | Reportlab up to v3.6.12 allows attackers to execute arbitrary code via supplying a crafted PDF file. |
| CVE-2023-0900 | HIGH | 7.2 | 3.2% | Jun 5, 2023 | The Pricing Table Builder WordPress plugin through 1.1.6 does not properly sanitise and escape a parameter before using ... |
| CVE-2023-3066 | HIGH | 8.1 | 0.6% | Jun 5, 2023 | Incorrect Authorization vulnerability in Mobatime mobile application AMXGT100 allows a low-privileged user to impersonat... |
| CVE-2023-3099 | HIGH | 7.1 | 0.3% | Jun 5, 2023 | A vulnerability classified as critical was found in KylinSoft youker-assistant on KylinOS. Affected by this vulnerabilit... |
| CVE-2023-3098 | HIGH | 7.8 | 0.7% | Jun 5, 2023 | A vulnerability classified as critical has been found in KylinSoft youker-assistant on KylinOS. Affected is the function... |
| CVE-2023-3097 | HIGH | 7.8 | 2.1% | Jun 5, 2023 | A vulnerability was found in KylinSoft kylin-software-properties on KylinOS. It has been rated as critical. This issue a... |
| CVE-2023-3096 | HIGH | 7.8 | 0.3% | Jun 5, 2023 | A vulnerability was found in KylinSoft kylin-software-properties on KylinOS. It has been declared as critical. This vuln... |
| CVE-2023-34411 | HIGH | 7.5 | 1.2% | Jun 5, 2023 | The xml-rs crate before 0.8.14 for Rust and Crab allows a denial of service (panic) via an invalid <! token (such as <!D... |
| CVE-2023-32217 | HIGH | 8.8 | 0.6% | Jun 5, 2023 | IdentityIQ 8.3 and all 8.3 patch levels prior to 8.3p3, IdentityIQ 8.2 and all 8.2 patch levels prior to 8.2p6, Identity... |
| CVE-2023-34407 | HIGH | 7.5 | 1.2% | Jun 5, 2023 | OfflinePlayerService.exe in Harbinger Offline Player 4.0.6.0.2 allows directory traversal as LocalSystem via ..\ in a UR... |
| CVE-2023-0041 | HIGH | 8.8 | 0.5% | Jun 5, 2023 | IBM Security Guardium 11.5 could allow a user to take over another user's session due to insufficient session expiration... |
| CVE-2023-27285 | HIGH | 7.8 | 0.2% | Jun 5, 2023 | IBM Aspera Connect 4.2.5 and IBM Aspera Cargo 4.2.5 is vulnerable to a buffer overflow, caused by improper bounds checki... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now