2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-31724 | HIGH | 7.8 | 0.3% | May 17, 2023 | yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function do_directive at /nasm/nasm-pp.c... |
| CVE-2023-31722 | HIGH | 7.8 | 0.3% | May 17, 2023 | There exists a heap buffer overflow in nasm 2.16.02rc1 (GitHub commit: b952891). |
| CVE-2023-31701 | HIGH | 8.8 | 2.5% | May 17, 2023 | TP-Link TL-WPA4530 KIT V2 (EU)_170406 and V2 (EU)_161115 is vulnerable to Command Injection via _httpRpmPlcDeviceRemove. |
| CVE-2023-31700 | HIGH | 8.8 | 2.5% | May 17, 2023 | TP-Link TL-WPA4530 KIT V2 (EU)_170406 and V2 (EU)_161115 is vulnerable to Command Injection via _httpRpmPlcDeviceAdd. |
| CVE-2023-31904 | HIGH | 7.5 | 1.3% | May 17, 2023 | savysoda Wifi HD Wireless Disk Drive 11 is vulnerable to Local File Inclusion. |
| CVE-2023-31702 | HIGH | 7.2 | 4.3% | May 17, 2023 | SQL injection in the View User Profile in MicroWorld eScan Management Console 14.0.1400.2281 allows remote attacker to d... |
| CVE-2023-30438 | HIGH | 8.8 | 0.2% | May 17, 2023 | An internally discovered vulnerability in PowerVM on IBM Power9 and Power10 systems could allow an attacker with privile... |
| CVE-2023-2756 | HIGH | 7.2 | 0.9% | May 17, 2023 | SQL Injection in GitHub repository pimcore/customer-data-framework prior to 3.3.10. |
| CVE-2023-31208 | HIGH | 8.8 | 1.0% | May 17, 2023 | Improper neutralization of livestatus command delimiters in the RestAPI in Checkmk < 2.0.0p36, < 2.1.0p28, and < 2.2.0b8... |
| CVE-2023-0863 | HIGH | 8.8 | 0.3% | May 17, 2023 | Improper Authentication vulnerability in ABB Terra AC wallbox (UL40/80A), ABB Terra AC wallbox (UL32A), ABB Terra AC wal... |
| CVE-2023-2706 | HIGH | 8.1 | 1.7% | May 17, 2023 | The OTP Login Woocommerce & Gravity Forms plugin for WordPress is vulnerable to authentication bypass. This is due to th... |
| CVE-2023-31848 | HIGH | 8.8 | 0.6% | May 17, 2023 | davinci 0.3.0-rc is vulnerable to Server-side request forgery (SSRF). |
| CVE-2023-2528 | HIGH | 8.8 | 0.3% | May 17, 2023 | The Contact Form by Supsystic plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and in... |
| CVE-2023-25394 | HIGH | 7 | 0.3% | May 17, 2023 | Videostream macOS app 0.5.0 and 0.4.3 has a Race Condition. The Updater privileged script attempts to update Videostream... |
| CVE-2023-31679 | HIGH | 7.5 | 0.8% | May 16, 2023 | Incorrect access control in Videogo v6.8.1 allows attackers to access images from other devices via modification of the ... |
| CVE-2023-31677 | HIGH | 7.5 | 0.8% | May 16, 2023 | Insecure permissions in luowice 3.5.18 allow attackers to view information for other alarm devices via modification of t... |
| CVE-2023-30506 | HIGH | 8.8 | 1.1% | May 16, 2023 | Vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface that allow remote authenticated users t... |
| CVE-2023-30505 | HIGH | 8.8 | 1.0% | May 16, 2023 | Vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface that allow remote authenticated users t... |
| CVE-2023-30504 | HIGH | 8.8 | 1.0% | May 16, 2023 | Vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface that allow remote authenticated users t... |
| CVE-2023-30503 | HIGH | 8.8 | 1.0% | May 16, 2023 | Vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface that allow remote authenticated users t... |
| CVE-2023-30502 | HIGH | 8.8 | 1.1% | May 16, 2023 | Vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface that allow remote authenticated users t... |
| CVE-2023-30501 | HIGH | 8.8 | 1.0% | May 16, 2023 | Vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface that allow remote authenticated users t... |
| CVE-2023-2726 | HIGH | 8.8 | 0.7% | May 16, 2023 | Inappropriate implementation in WebApp Installs in Google Chrome prior to 113.0.5672.126 allowed an attacker who convinc... |
| CVE-2023-2725 | HIGH | 8.8 | 24.7% | May 16, 2023 | Use after free in Guest View in Google Chrome prior to 113.0.5672.126 allowed an attacker who convinced a user to instal... |
| CVE-2023-2724 | HIGH | 8.8 | 29.1% | May 16, 2023 | Type confusion in V8 in Google Chrome prior to 113.0.5672.126 allowed a remote attacker to potentially exploit heap corr... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now