2023 CVE Vulnerabilities

31,509 CVEs published in 2023.

CVE IDSeverityCVSSDescription
CVE-2023-47575MEDIUM6.1An issue was discovered on Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 devices. The web interfaces of the Relyum devices...
CVE-2023-47574MEDIUM5.9An issue was discovered on Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 devices. There is a Weak SMB configuration with s...
CVE-2023-47573HIGH8.8An issue discovered in Relyum RELY-PCIe 22.2.1 devices. The authorization mechanism is not enforced in the web interface...
CVE-2023-45800HIGH7.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Hanbiro Hanbiro gr...
CVE-2023-45864MEDIUM4.7A race condition issue discovered in Samsung Mobile Processor Exynos 9820, 980, 1080, 2100, 2200, 1280, and 1380 allows ...
CVE-2023-43122MEDIUM4.6Samsung Mobile Processor and Wearable Processor (Exynos 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, and W920) allow In...
CVE-2023-42483MEDIUM4.7A TOCTOU race condition in Samsung Mobile Processor Exynos 9820, Exynos 980, Exynos 1080, Exynos 2100, Exynos 2200, Exyn...
CVE-2023-6753HIGH8.8Path Traversal in GitHub repository mlflow/mlflow prior to 2.9.2.
CVE-2023-50263MEDIUM5.3Nautobot is a Network Source of Truth and Network Automation Platform built as a web application atop the Django Python ...
CVE-2023-3517HIGH8.8 Hitachi Vantara Pentaho Data Integration & Analytics versions before 9.5.0.1 and 9.3.0.5, including 8.3.x does not res...
CVE-2023-6710MEDIUM5.4A flaw was found in the mod_proxy_cluster in the Apache server. This issue may allow a malicious user to add a script in...
CVE-2023-5764HIGH7.8A template injection flaw was found in Ansible where a user's controller internal templating operations may remove the u...
CVE-2023-5379HIGH7.5A flaw was found in Undertow. When an AJP request is sent that exceeds the max-header-size attribute in ajp-listener, JB...
CVE-2023-50252CRITICAL9.8php-svg-lib is an SVG file parsing / rendering library. Prior to version 0.5.1, when handling `<use>` tag that reference...
CVE-2023-50251HIGH7.5php-svg-lib is an SVG file parsing / rendering library. Prior to version 0.5.1, when parsing the attributes passed to a ...
CVE-2023-48225CRITICAL9.1Laf is a cloud development platform. Prior to version 1.0.0-beta.13, the control of LAF app enV is not strict enough, an...
CVE-2023-50247HIGH7.5h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. The QUIC stack (quicly), as used by H2O up to commit...
CVE-2023-49279MEDIUM5.4Umbraco is an ASP.NET content management system (CMS). Starting in version 7.0.0 and prior to versions 7.15.11, 8.18.9, ...
CVE-2023-49278MEDIUM5.3Umbraco is an ASP.NET content management system (CMS). Starting in version 8.0.0 and prior to versions 8.18.10, 10.8.1, ...
CVE-2023-49274MEDIUM5.3Umbraco is an ASP.NET content management system (CMS). Starting in version 8.0.0 and prior to versions 8.18.10, 10.8.1, ...
CVE-2023-41337MEDIUM6.7h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. In version 2.3.0-beta2 and prior, when h2o is config...
CVE-2023-34064MEDIUM4.6Workspace ONE Launcher contains a Privilege Escalation Vulnerability. A malicious actor with physical access to Workspac...
CVE-2023-6687MEDIUM6.5An issue was discovered by Elastic whereby Elastic Agent would log a raw event in its own logs at the WARN or ERROR leve...
CVE-2023-49922MEDIUM6.5An issue was discovered by Elastic whereby Beats and Elastic Agent would log a raw event in its own logs at the WARN or ...
CVE-2023-49273MEDIUM5.4Umbraco is an ASP.NET content management system (CMS). Starting in version 8.0.0 and prior to versions 8.18.10, 10.8.1, ...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now