2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-3430 | HIGH | 7.5 | 0.9% | Dec 18, 2023 | A vulnerability was found in OpenImageIO, where a heap buffer overflow exists in the src/gif.imageio/gifinput.cpp file. ... |
| CVE-2023-39509 | HIGH | 7.2 | 1.5% | Dec 18, 2023 | A command injection vulnerability exists in Bosch IP cameras that allows an authenticated user with administrative right... |
| CVE-2023-35867 | MEDIUM | 5.9 | 0.6% | Dec 18, 2023 | An improper handling of a malformed API answer packets to API clients in Bosch BT software products can allow an unauthe... |
| CVE-2023-32230 | HIGH | 7.5 | 0.7% | Dec 18, 2023 | An improper handling of a malformed API request to an API server in Bosch BT software products can allow an unauthentica... |
| CVE-2023-28053 | MEDIUM | 5.3 | 0.4% | Dec 18, 2023 | Dell NetWorker Virtual Edition versions 19.8 and below contain the use of deprecated cryptographic algorithms in the SS... |
| CVE-2023-50372 | HIGH | 8.8 | 0.3% | Dec 18, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Hiroaki Miyashita Custom Post Type Page Template.This issue affects C... |
| CVE-2023-49855 | HIGH | 8.8 | 0.3% | Dec 18, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in BinaryCarpenter Menu Bar Cart Icon For WooCommerce By Binary Carpente... |
| CVE-2023-49854 | HIGH | 8.8 | 0.3% | Dec 18, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Tribe Interactive Caddy – Smart Side Cart for WooCommerce.This issue ... |
| CVE-2023-32728 | CRITICAL | 9.8 | 0.8% | Dec 18, 2023 | The Zabbix Agent 2 item key smart.disk.get does not sanitize its parameters before passing them to a shell command resul... |
| CVE-2023-32727 | HIGH | 7.2 | 0.9% | Dec 18, 2023 | An attacker who has the privilege to configure Zabbix items can use function icmpping() with additional malicious comman... |
| CVE-2023-32726 | HIGH | 8.1 | 0.7% | Dec 18, 2023 | The vulnerability is caused by improper check for check if RDLENGTH does not overflow the buffer in response from DNS se... |
| CVE-2023-32725 | HIGH | 8.8 | 0.8% | Dec 18, 2023 | The website configured in the URL widget will receive a session cookie when testing or executing scheduled reports. The ... |
| CVE-2023-6911 | MEDIUM | 4.8 | 0.4% | Dec 18, 2023 | Multiple WSO2 products have been identified as vulnerable due to improper output encoding, a Stored Cross Site Scripting... |
| CVE-2023-41314 | HIGH | 8.2 | 0.9% | Dec 18, 2023 | The api /api/snapshot and /api/get_log_file would allow unauthenticated access. It could allow a DoS attack or get arbit... |
| CVE-2023-6483 | CRITICAL | 9.8 | 1.2% | Dec 18, 2023 | The vulnerability exists in ADiTaaS (Allied Digital Integrated Tool-as-a-Service) version 5.1 due to an improper authent... |
| CVE-2023-6909 | HIGH | 7.5 | 89.7% | Dec 18, 2023 | Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2. |
| CVE-2023-6908 | MEDIUM | 5.9 | 0.8% | Dec 18, 2023 | A vulnerability, which was classified as problematic, was found in DFIRKuiper Kuiper 2.3.4. This affects the function un... |
| CVE-2023-6907 | CRITICAL | 9.1 | 1.2% | Dec 18, 2023 | A vulnerability has been found in codelyfe Stupid Simple CMS up to 1.2.4 and classified as critical. Affected by this vu... |
| CVE-2023-6906 | CRITICAL | 9.8 | 1.8% | Dec 18, 2023 | A vulnerability, which was classified as critical, was found in Totolink A7100RU 7.4cu.2313_B20191024. Affected is the f... |
| CVE-2023-50981 | HIGH | 7.5 | 0.8% | Dec 18, 2023 | ModularSquareRoot in Crypto++ (aka cryptopp) through 8.9.0 allows attackers to cause a denial of service (infinite loop)... |
| CVE-2023-50980 | HIGH | 7.5 | 0.8% | Dec 18, 2023 | gf2n.cpp in Crypto++ (aka cryptopp) through 8.9.0 allows attackers to cause a denial of service (application crash) via ... |
| CVE-2023-50979 | MEDIUM | 5.9 | 0.6% | Dec 18, 2023 | Crypto++ (aka cryptopp) through 8.9.0 has a Marvin side channel during decryption with PKCS#1 v1.5 padding. |
| CVE-2023-6905 | CRITICAL | 9.8 | 0.7% | Dec 18, 2023 | A vulnerability, which was classified as problematic, has been found in Jahastech NxFilter 4.3.2.5. This issue affects s... |
| CVE-2023-50976 | CRITICAL | 9.8 | 1.0% | Dec 18, 2023 | Redpanda before 23.1.21 and 23.2.x before 23.2.18 has missing authorization checks in the Transactions API. |
| CVE-2023-6904 | HIGH | 8.8 | 0.3% | Dec 17, 2023 | A vulnerability classified as problematic was found in Jahastech NxFilter 4.3.2.5. This vulnerability affects unknown co... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now