2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-24534 | HIGH | 7.5 | 1.9% | Apr 6, 2023 | HTTP and MIME header parsing can allocate large amounts of memory, even when parsing small inputs, potentially leading t... |
| CVE-2023-23801 | HIGH | 8.8 | 0.3% | Apr 6, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in HasThemes Really Simple Google Tag Manager plugin <= 1.0.6 versions. |
| CVE-2023-0652 | HIGH | 7.8 | 0.3% | Apr 6, 2023 | Due to a hardlink created in the ProgramData folder during the repair process of the software, the installer (MSI) of WA... |
| CVE-2023-1802 | HIGH | 7.5 | 0.5% | Apr 6, 2023 | In Docker Desktop 4.17.x the Artifactory Integration falls back to sending registry credentials over plain HTTP if the H... |
| CVE-2023-28046 | HIGH | 7.1 | 0.1% | Apr 6, 2023 | Dell Display Manager, versions 2.1.0 and prior, contains an arbitrary file or folder deletion vulnerability during unin... |
| CVE-2023-25542 | HIGH | 7.8 | 0.1% | Apr 6, 2023 | Dell Trusted Device Agent, versions prior to 5.3.0, contain(s) an improper installation permissions vulnerability. An u... |
| CVE-2023-29421 | HIGH | 8.8 | 0.9% | Apr 6, 2023 | An issue was discovered in libbzip3.a in bzip3 before 1.2.3. There is an out-of-bounds write in bz3_decode_block. |
| CVE-2023-1733 | HIGH | 7.5 | 1.2% | Apr 5, 2023 | A denial of service condition exists in the Prometheus server bundled with GitLab affecting all versions from 11.10 to 1... |
| CVE-2023-28342 | HIGH | 7.5 | 78.6% | Apr 5, 2023 | Zoho ManageEngine ADSelfService Plus before 6218 allows anyone to conduct a Denial-of-Service attack via the Mobile App ... |
| CVE-2023-20122 | HIGH | 7.8 | 0.2% | Apr 5, 2023 | Multiple vulnerabilities in the restricted shell of Cisco Evolved Programmable Network Manager (EPNM), Cisco Identity Se... |
| CVE-2023-20117 | HIGH | 7.2 | 28.3% | Apr 5, 2023 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN ... |
| CVE-2023-20103 | HIGH | 7.2 | 0.9% | Apr 5, 2023 | A vulnerability in Cisco Secure Network Analytics could allow an authenticated, remote attacker to execute arbitrary cod... |
| CVE-2023-20102 | HIGH | 8.8 | 1.0% | Apr 5, 2023 | A vulnerability in the web-based management interface of Cisco Secure Network Analytics could allow an authenticated, re... |
| CVE-2023-1838 | HIGH | 7.1 | 0.3% | Apr 5, 2023 | A use-after-free flaw was found in vhost_net_set_backend in drivers/vhost/net.c in virtio network subcomponent in the Li... |
| CVE-2023-1522 | HIGH | 8.8 | 0.6% | Apr 5, 2023 | SQL Injection in the Hardware Inventory report of Security Center 5.11.2. |
| CVE-2023-0670 | HIGH | 7.2 | 1.0% | Apr 5, 2023 | Ulearn version a5a7ca20de859051ea0470542844980a66dfc05d allows an attacker with administrator permissions to obtain remo... |
| CVE-2023-29006 | HIGH | 8.8 | 0.9% | Apr 5, 2023 | The Order GLPI plugin allows users to manage order management within GLPI. Starting with version 1.8.0 and prior to vers... |
| CVE-2023-28838 | HIGH | 8.1 | 0.8% | Apr 5, 2023 | GLPI is a free asset and IT management software package. Starting in version 0.50 and prior to versions 9.5.13 and 10.0.... |
| CVE-2023-20128 | HIGH | 7.2 | 30.4% | Apr 5, 2023 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN ... |
| CVE-2023-20124 | HIGH | 7.2 | 1.0% | Apr 5, 2023 | A vulnerability in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV... |
| CVE-2023-28634 | HIGH | 8.8 | 0.8% | Apr 5, 2023 | GLPI is a free asset and IT management software package. Starting in version 0.83 and prior to versions 9.5.13 and 10.0.... |
| CVE-2023-20051 | HIGH | 7.5 | 0.9% | Apr 5, 2023 | A vulnerability in the Vector Packet Processor (VPP) of Cisco Packet Data Network Gateway (PGW) could allow an unauthent... |
| CVE-2023-22660 | HIGH | 7.8 | 0.5% | Apr 5, 2023 | A heap-based buffer overflow vulnerability exists in the way Ichitaro version 2022 1.0.1.57600 processes certain LayoutB... |
| CVE-2023-22291 | HIGH | 7.8 | 0.5% | Apr 5, 2023 | An invalid free vulnerability exists in the Frame stream parser functionality of Ichitaro 2022 1.0.1.57600. A specially ... |
| CVE-2023-1412 | HIGH | 7.8 | 0.2% | Apr 5, 2023 | An unprivileged (non-admin) user can exploit an Improper Access Control vulnerability in the Cloudflare WARP Client for ... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now