2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-27514 | HIGH | 8.8 | 1.9% | May 23, 2023 | OS command injection vulnerability in the download page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and... |
| CVE-2023-27512 | HIGH | 7.2 | 1.0% | May 23, 2023 | Use of hard-coded credentials exists in SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10, and SV-CPT-MC310F ver... |
| CVE-2023-27387 | HIGH | 8.8 | 0.5% | May 23, 2023 | Cross-site request forgery (CSRF) in T&D Corporation and ESPEC MIC CORP. data logger products allows a remote unauthenti... |
| CVE-2023-25946 | HIGH | 8.8 | 0.4% | May 23, 2023 | Authentication bypass vulnerability in Qrio Lock (Q-SL2) firmware version 2.0.9 and earlier allows a network-adjacent at... |
| CVE-2023-31996 | HIGH | 8.8 | 1.5% | May 23, 2023 | Hanwha IP Camera ANE-L7012R 1.41.01 is vulnerable to Command Injection due to improper sanitization of special character... |
| CVE-2023-31826 | HIGH | 7.8 | 0.3% | May 23, 2023 | Skyscreamer Open Source Nevado JMS v1.3.2 does not perform security checks when receiving messages. This allows attacker... |
| CVE-2023-31741 | HIGH | 7.2 | 2.7% | May 23, 2023 | There is a command injection vulnerability in the Linksys E2000 router with firmware version 1.0.06. If an attacker gain... |
| CVE-2023-31740 | HIGH | 7.2 | 2.7% | May 23, 2023 | There is a command injection vulnerability in the Linksys E2000 router with firmware version 1.0.06. If an attacker gain... |
| CVE-2023-31670 | HIGH | 7.5 | 0.8% | May 23, 2023 | An issue in wasm2c 1.0.32, wasm2wat 1.0.32, wasm-decompile 1.0.32, and wasm-validate 1.0.32 allows attackers to cause a ... |
| CVE-2023-2505 | HIGH | 8.8 | 0.3% | May 22, 2023 | The affected products have a CSRF vulnerability that could allow an attacker to execute code and upload malicious files... |
| CVE-2023-25183 | HIGH | 7.2 | 0.6% | May 22, 2023 | In Snap One OvrC Pro versions prior to 7.2, when logged into the superuser account, a n... |
| CVE-2023-31193 | HIGH | 7.5 | 0.4% | May 22, 2023 | Snap One OvrC Pro versions prior to 7.3 use HTTP connections when downloading a program from their servers.... |
| CVE-2023-29838 | HIGH | 7.8 | 0.2% | May 22, 2023 | Insecure Permission vulnerability found in Botkind/Siber Systems SyncApp v.19.0.3.0 allows a local attacker toe escalate... |
| CVE-2023-28649 | HIGH | 7.5 | 0.5% | May 22, 2023 | The Hub in the Snap One OvrC cloud platform is a device used to centralize and manage nested devices connected to it. A ... |
| CVE-2023-27067 | HIGH | 7.5 | 1.6% | May 22, 2023 | Directory Traversal vulnerability in Sitecore Experience Platform through 10.2 allows remote attackers to download arbit... |
| CVE-2023-2839 | HIGH | 7.5 | 0.6% | May 22, 2023 | Divide By Zero in GitHub repository gpac/gpac prior to 2.2.2. |
| CVE-2023-31742 | HIGH | 7.2 | 10.6% | May 22, 2023 | There is a command injection vulnerability in the Linksys WRT54GL router with firmware version 4.30.18.006. If an attack... |
| CVE-2023-32350 | HIGH | 8.8 | 1.5% | May 22, 2023 | Versions 00.07.00 through 00.07.03 of Teltonika’s RUT router firmware contain an operating system (OS) command injectio... |
| CVE-2023-32349 | HIGH | 8.8 | 1.0% | May 22, 2023 | Version 00.07.03.4 and prior of Teltonika’s RUT router firmware contain a packet dump utility that contains proper vali... |
| CVE-2023-31103 | HIGH | 7.5 | 1.3% | May 22, 2023 | Exposure of Resource to Wrong Sphere Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache... |
| CVE-2023-31064 | HIGH | 7.5 | 1.2% | May 22, 2023 | Files or Directories Accessible to External Parties vulnerability in Apache Software Foundation Apache InLong.This issue... |
| CVE-2023-2588 | HIGH | 8.8 | 1.1% | May 22, 2023 | Teltonika’s Remote Management System versions prior to 4.10.0 have a feature allowing users to access managed devices’ ... |
| CVE-2023-2587 | HIGH | 8.3 | 0.9% | May 22, 2023 | Teltonika’s Remote Management System versions prior to 4.10.0 contain a cross-site scripting (XSS) vulnerability in the... |
| CVE-2023-31923 | HIGH | 8.8 | 0.9% | May 22, 2023 | Suprema BioStar 2 before 2022 Q4, v2.9.1 has Insecure Permissions. A vulnerability in the web application allows an auth... |
| CVE-2023-25448 | HIGH | 8.8 | 0.2% | May 22, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Eric Teubert Archivist – Custom Archive Templates plugin <= 1.7.4 ver... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now