2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-27568 | HIGH | 8.8 | 1.2% | May 4, 2023 | SQL injection vulnerability inSpryker Commerce OS 0.9 that allows for access to sensitive data via customer/order?orderS... |
| CVE-2023-25438 | HIGH | 7.8 | 2.1% | May 4, 2023 | An issue was discovered in Genomedics MilleGP5 5.9.2, allows remote attackers to execute arbitrary code and gain escalat... |
| CVE-2023-2182 | HIGH | 8.8 | 1.0% | May 3, 2023 | An issue has been discovered in GitLab EE affecting all versions starting from 15.10 before 15.10.5, all versions starti... |
| CVE-2023-27999 | HIGH | 7.8 | 0.5% | May 3, 2023 | An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in FortiADC 7.2.0, 7.1.0 thr... |
| CVE-2023-27993 | HIGH | 7.1 | 0.2% | May 3, 2023 | A relative path traversal [CWE-23] in Fortinet FortiADC version 7.2.0 and before 7.1.1 allows a privileged attacker to d... |
| CVE-2023-26203 | HIGH | 7.8 | 0.2% | May 3, 2023 | A use of hard-coded credentials vulnerability [CWE-798] in FortiNAC-F version 7.2.0, FortiNAC version 9.4.2 and below, 9... |
| CVE-2023-22640 | HIGH | 8.8 | 0.9% | May 3, 2023 | A out-of-bounds write vulnerability in Fortinet FortiOS 7.2.0 through 7.2.3, FortiOS 7.0.0 through 7.0.10, FortiOS 6.4.0... |
| CVE-2023-0805 | HIGH | 8.1 | 0.8% | May 3, 2023 | An issue has been discovered in GitLab EE affecting all versions starting from 15.2 before 15.9.6, all versions starting... |
| CVE-2023-0756 | HIGH | 8 | 1.0% | May 3, 2023 | An issue has been discovered in GitLab affecting all versions before 15.9.6, all versions starting from 15.10 before 15.... |
| CVE-2023-25967 | HIGH | 8.8 | 0.3% | May 3, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in PeepSo Community by PeepSo plugin <= 6.0.2.0 versions. |
| CVE-2023-29163 | HIGH | 7.5 | 0.6% | May 3, 2023 | When UDP profile with idle timeout set to immediate or the value 0 is configured on a virtual server, undisclosed traff... |
| CVE-2023-28742 | HIGH | 8.8 | 1.5% | May 3, 2023 | When DNS is provisioned, an authenticated remote command execution vulnerability exists in DNS iQuery mesh. Note: ... |
| CVE-2023-28724 | HIGH | 7.1 | 0.2% | May 3, 2023 | NGINX Management Suite default file permissions are set such that an authenticated attacker may be able to modify sensit... |
| CVE-2023-28656 | HIGH | 8.1 | 0.5% | May 3, 2023 | NGINX Management Suite may allow an authenticated attacker to gain access to configuration objects outside of their assi... |
| CVE-2023-1385 | HIGH | 8.8 | 0.3% | May 3, 2023 | Improper JPAKE implementation allows offline PIN brute-forcing due to the initialization of random values to a known val... |
| CVE-2023-23790 | HIGH | 8.8 | 0.3% | May 3, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Pods Framework Team Pods – Custom Content Types and Fields plugin <= ... |
| CVE-2023-28070 | HIGH | 7.8 | 0.1% | May 3, 2023 | Alienware Command Center Application, versions 5.5.43.0 and prior, contain an improper access control vulnerability. A ... |
| CVE-2023-22691 | HIGH | 8.8 | 0.3% | May 3, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Tips and Tricks HQ, Ruhul Amin Category Specific RSS feed Subscriptio... |
| CVE-2023-2461 | HIGH | 8.8 | 0.8% | May 3, 2023 | Use after free in OS Inputs in Google Chrome on ChromeOS prior to 113.0.5672.63 allowed a remote attacker who convinced ... |
| CVE-2023-2460 | HIGH | 7.1 | 0.7% | May 3, 2023 | Insufficient validation of untrusted input in Extensions in Google Chrome prior to 113.0.5672.63 allowed an attacker who... |
| CVE-2023-31435 | HIGH | 8.1 | 0.7% | May 2, 2023 | Multiple components (such as Onlinetemplate-Verwaltung, Liste aller Teilbereiche, Umfragen anzeigen, and questionnaire p... |
| CVE-2023-31433 | HIGH | 8.8 | 0.9% | May 2, 2023 | A SQL injection issue in Logbuch in evasys before 8.2 Build 2286 and 9.x before 9.0 Build 2401 allows authenticated atta... |
| CVE-2023-30944 | HIGH | 7.3 | 1.1% | May 2, 2023 | The vulnerability was found Moodle which exists due to insufficient sanitization of user-supplied data in external Wiki ... |
| CVE-2023-30403 | HIGH | 7.5 | 14.9% | May 2, 2023 | An issue in the time-based authentication mechanism of Aigital Aigital Wireless-N Repeater Mini_Router v0.131229 allows ... |
| CVE-2023-26546 | HIGH | 8.8 | 1.4% | May 2, 2023 | European Chemicals Agency IUCLID before 6.27.6 allows remote authenticated users to execute arbitrary code via Server Si... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now