2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-28766 | HIGH | 7.5 | 0.9% | Apr 11, 2023 | A vulnerability has been identified in SIPROTEC 5 6MD85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 6MD86 (CP300... |
| CVE-2023-26293 | HIGH | 7.3 | 0.2% | Apr 11, 2023 | A vulnerability has been identified in Totally Integrated Automation Portal (TIA Portal) V15 (All versions), Totally Int... |
| CVE-2023-27917 | HIGH | 8.8 | 1.9% | Apr 11, 2023 | OS command injection vulnerability in CONPROSYS IoT Gateway products allows a remote authenticated attacker who can acce... |
| CVE-2023-27389 | HIGH | 7.2 | 0.5% | Apr 11, 2023 | Inadequate encryption strength vulnerability in CONPROSYS IoT Gateway products allows a remote authenticated attacker wi... |
| CVE-2023-26593 | HIGH | 7.8 | 0.1% | Apr 11, 2023 | CENTUM series provided by Yokogawa Electric Corporation are vulnerable to cleartext storage of sensitive information. If... |
| CVE-2023-26588 | HIGH | 7.5 | 0.6% | Apr 11, 2023 | Use of hard-coded credentials vulnerability in Buffalo network devices allows an attacker to access the debug function o... |
| CVE-2023-25950 | HIGH | 7.3 | 2.9% | Apr 11, 2023 | HTTP request/response smuggling vulnerability in HAProxy version 2.7.0, and 2.6.1 to 2.6.7 allows a remote attacker to a... |
| CVE-2023-25755 | HIGH | 7.8 | 0.2% | Apr 11, 2023 | Screen Creator Advance 2 Ver.0.1.1.4 Build01A and earlier is vulnerable to improper restriction of operations within the... |
| CVE-2023-24544 | HIGH | 8.1 | 0.3% | Apr 11, 2023 | Improper access control vulnerability in Buffalo network devices allows a network-adjacent attacker to obtain specific f... |
| CVE-2023-22429 | HIGH | 7.8 | 0.2% | Apr 11, 2023 | Android App 'Wolt Delivery: Food and more' version 4.27.2 and earlier uses hard-coded credentials (API key for an extern... |
| CVE-2023-22282 | HIGH | 7.3 | 0.2% | Apr 11, 2023 | WAB-MAT Ver.5.0.0.8 and earlier starts another program with an unquoted file path. Since a registered Windows service pa... |
| CVE-2023-27267 | HIGH | 8.1 | 14.2% | Apr 11, 2023 | Due to missing authentication and insufficient input validation, the OSCommand Bridge of SAP Diagnostics Agent - version... |
| CVE-2023-26458 | HIGH | 8.7 | 0.6% | Apr 11, 2023 | An information disclosure vulnerability exists in SAP Landscape Management - version 3.0, enterprise edition. It allows ... |
| CVE-2023-27191 | HIGH | 7.5 | 1.1% | Apr 11, 2023 | An issue found in DUALSPACE Super Secuirty v.2.3.7 allows an attacker to cause a denial of service via the SharedPrefere... |
| CVE-2023-1668 | HIGH | 8.2 | 1.2% | Apr 10, 2023 | A flaw was found in openvswitch (OVS). When processing an IP packet with protocol 0, OVS will install the datapath flow ... |
| CVE-2023-29005 | HIGH | 7.5 | 0.6% | Apr 10, 2023 | Flask-AppBuilder versions before 4.3.0 lack rate limiting which can allow an attacker to brute-force user credentials. V... |
| CVE-2023-26466 | HIGH | 7.8 | 0.2% | Apr 10, 2023 | A user with non-Admin access can change a configuration file on the client to modify the Server URL. |
| CVE-2023-26495 | HIGH | 7.8 | 0.4% | Apr 10, 2023 | An issue was discovered in Open Design Alliance Drawings SDK before 2024.1. A crafted DWG file can force the SDK to reus... |
| CVE-2023-26067 | HIGH | 8.1 | 37.8% | Apr 10, 2023 | Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 1 of 4). |
| CVE-2023-28206 | HIGH | 8.6 | 24.5% | Apr 10, 2023 | An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.6.5,... |
| CVE-2023-28205 | HIGH | 8.8 | 27.1% | Apr 10, 2023 | A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.4.1, iOS 15.7.5 a... |
| CVE-2023-26986 | HIGH | 7.8 | 0.5% | Apr 10, 2023 | An issue in China Mobile OA Mailbox PC v2.9.23 allows remote attackers to execute arbitrary commands on a victim host vi... |
| CVE-2023-26919 | HIGH | 7.2 | 0.6% | Apr 10, 2023 | delight-nashorn-sandbox 0.2.4 and 0.2.5 is vulnerable to sandbox escape. When allowExitFunctions is set to false, the lo... |
| CVE-2023-1970 | HIGH | 7.2 | 1.0% | Apr 10, 2023 | ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as problematic, has been found in yuan1994 tpAdmin... |
| CVE-2023-1381 | HIGH | 8.8 | 1.7% | Apr 10, 2023 | The WP Meta SEO WordPress plugin before 4.5.5 does not validate image file paths before attempting to manipulate the ima... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now