2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-27744 | HIGH | 7.8 | 0.8% | Jun 2, 2023 | An issue was discovered in South River Technologies TitanFTP NextGen server that allows for a vertical privilege escalat... |
| CVE-2023-29723 | HIGH | 7.5 | 0.8% | Jun 1, 2023 | The Glitter Unicorn Wallpaper app for Android 7.0 thru 8.0 allows unauthorized applications to actively request permissi... |
| CVE-2023-27640 | HIGH | 7.5 | 3.6% | Jun 1, 2023 | An issue was discovered in the tshirtecommerce (aka Custom Product Designer) component 2.1.4 for PrestaShop. An HTTP req... |
| CVE-2023-27639 | HIGH | 7.5 | 3.6% | Jun 1, 2023 | An issue was discovered in the tshirtecommerce (aka Custom Product Designer) component 2.1.4 for PrestaShop. An HTTP req... |
| CVE-2023-34092 | HIGH | 7.5 | 3.2% | Jun 1, 2023 | Vite provides frontend tooling. Prior to versions 2.9.16, 3.2.7, 4.0.5, 4.1.5, 4.2.3, and 4.3.9, Vite Server Options (`s... |
| CVE-2023-33960 | HIGH | 7.5 | 1.3% | Jun 1, 2023 | OpenProject is web-based project management software. For any OpenProject installation, a `robots.txt` file is generated... |
| CVE-2023-32714 | HIGH | 8.1 | 42.8% | Jun 1, 2023 | In the Splunk App for Lookup File Editing versions below 4.0.1, a low-privileged user can, with a specially crafted web ... |
| CVE-2023-32708 | HIGH | 8.8 | 0.7% | Jun 1, 2023 | In Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, and Splunk Cloud Platform versions below 9.0.2303.100, a ... |
| CVE-2023-32707 | HIGH | 8.8 | 73.5% | Jun 1, 2023 | In versions of Splunk Enterprise below 9.0.5, 8.2.11, and 8.1.14, and Splunk Cloud Platform below version 9.0.2303.100, ... |
| CVE-2023-32690 | HIGH | 7.5 | 0.7% | Jun 1, 2023 | libspdm is a sample implementation that follows the DMTF SPDM specifications. Prior to versions 2.3.3 and 3.0, following... |
| CVE-2023-32310 | HIGH | 8.1 | 1.0% | Jun 1, 2023 | DataEase is an open source data visualization and analysis tool. The API interface for DataEase delete dashboard and del... |
| CVE-2023-28066 | HIGH | 7.8 | 0.2% | Jun 1, 2023 | Dell OS Recovery Tool, versions 2.2.4013 and 2.3.7012.0, contain an Improper Access Control Vulnerability. A local auth... |
| CVE-2023-33965 | HIGH | 8.8 | 1.6% | Jun 1, 2023 | Brook is a cross-platform programmable network tool. The `tproxy` server is vulnerable to a drive-by command injection. ... |
| CVE-2023-33552 | HIGH | 7.8 | 0.7% | Jun 1, 2023 | Heap Buffer Overflow in the erofs_read_one_data function at data.c in erofs-utils v1.6 allows remote attackers to execut... |
| CVE-2023-33551 | HIGH | 7.8 | 0.8% | Jun 1, 2023 | Heap Buffer Overflow in the erofsfsck_dirent_iter function in fsck/main.c in erofs-utils v1.6 allows remote attackers to... |
| CVE-2023-22648 | HIGH | 8.8 | 0.5% | Jun 1, 2023 | A Improper Privilege Management vulnerability in SUSE Rancher causes permission changes in Azure AD not to be reflected ... |
| CVE-2023-22647 | HIGH | 8 | 0.7% | Jun 1, 2023 | An Improper Privilege Management vulnerability in SUSE Rancher allowed standard users to leverage their existing permiss... |
| CVE-2023-3029 | HIGH | 8.8 | 0.4% | Jun 1, 2023 | A vulnerability has been found in Guangdong Pythagorean OA Office System up to 4.50.31 and classified as problematic. Th... |
| CVE-2023-34312 | HIGH | 7.8 | 0.6% | Jun 1, 2023 | In Tencent QQ through 9.7.8.29039 and TIM through 3.4.7.22084, QQProtect.exe and QQProtectEngine.dll do not validate poi... |
| CVE-2023-29748 | HIGH | 7.5 | 1.2% | Jun 1, 2023 | Story Saver for Instragram - Video Downloader 1.0.6 for Android has an exposed component that provides a method to modif... |
| CVE-2023-29159 | HIGH | 7.5 | 2.0% | Jun 1, 2023 | Directory traversal vulnerability in Starlette versions 0.13.5 and later and prior to 0.27.0 allows a remote unauthentic... |
| CVE-2023-29154 | HIGH | 7.2 | 41.4% | Jun 1, 2023 | SQL injection vulnerability exists in the CONPROSYS HMI System (CHS) versions prior to 3.5.3. A user who can access the ... |
| CVE-2023-28937 | HIGH | 8.8 | 0.8% | Jun 1, 2023 | DataSpider Servista version 4.4 and earlier uses a hard-coded cryptographic key. DataSpider Servista is data integration... |
| CVE-2023-28713 | HIGH | 8.1 | 0.4% | Jun 1, 2023 | Plaintext storage of a password exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. Because account informatio... |
| CVE-2023-28657 | HIGH | 8.8 | 0.7% | Jun 1, 2023 | Improper access control vulnerability exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. A user of the PC whe... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now