2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-28632 | HIGH | 8.1 | 0.7% | Apr 5, 2023 | GLPI is a free asset and IT management software package. Starting in version 0.83 and prior to versions 9.5.13 and 10.0.... |
| CVE-2023-26857 | HIGH | 7.2 | 0.9% | Apr 5, 2023 | An arbitrary file upload vulnerability in /admin/ajax.php?action=save_uploads of Dynamic Transaction Queuing System v1.0... |
| CVE-2023-26856 | HIGH | 7.2 | 0.7% | Apr 5, 2023 | Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter a... |
| CVE-2023-1858 | HIGH | 7.5 | 0.6% | Apr 5, 2023 | A vulnerability was found in SourceCodester Earnings and Expense Tracker App 1.0. It has been classified as problematic.... |
| CVE-2023-29323 | HIGH | 7.8 | 0.3% | Apr 4, 2023 | ascii_load_sockaddr in smtpd in OpenBSD before 7.1 errata 024 and 7.2 before errata 020, and OpenSMTPD Portable before 7... |
| CVE-2023-0835 | HIGH | 8.2 | 0.6% | Apr 4, 2023 | markdown-pdf version 11.0.0 allows an external attacker to remotely obtain arbitrary local files. This is possible becau... |
| CVE-2023-0480 | HIGH | 8.8 | 0.3% | Apr 4, 2023 | VitalPBX version 3.2.3-8 allows an unauthenticated external attacker to obtain the instance administrator's account. Thi... |
| CVE-2023-29003 | HIGH | 8.8 | 0.6% | Apr 4, 2023 | SvelteKit is a web development framework. The SvelteKit framework offers developers an option to create simple REST APIs... |
| CVE-2023-28840 | HIGH | 8.7 | 2.7% | Apr 4, 2023 | Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Ru... |
| CVE-2023-1820 | HIGH | 8.8 | 1.0% | Apr 4, 2023 | Heap buffer overflow in Browser History in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who convinced ... |
| CVE-2023-1818 | HIGH | 8.8 | 0.9% | Apr 4, 2023 | Use after free in Vulkan in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to potentially exploit heap c... |
| CVE-2023-1815 | HIGH | 8.8 | 0.9% | Apr 4, 2023 | Use after free in Networking APIs in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who convinced a user... |
| CVE-2023-1812 | HIGH | 8.8 | 0.9% | Apr 4, 2023 | Out of bounds memory access in DOM Bindings in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to perform... |
| CVE-2023-1811 | HIGH | 8.8 | 1.0% | Apr 4, 2023 | Use after free in Frames in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who convinced a user to engag... |
| CVE-2023-1810 | HIGH | 8.8 | 1.1% | Apr 4, 2023 | Heap buffer overflow in Visuals in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who had compromised th... |
| CVE-2023-0265 | HIGH | 8.8 | 1.6% | Apr 4, 2023 | Uvdesk version 1.1.1 allows an authenticated remote attacker to execute commands on the server. This is possible because... |
| CVE-2023-27496 | HIGH | 7.5 | 0.8% | Apr 4, 2023 | Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to versions 1.26.0, 1.25.3,... |
| CVE-2023-27091 | HIGH | 7.2 | 0.7% | Apr 4, 2023 | An unauthorized access issue found in XiaoBingby TeaCMS 2.3.3 allows attackers to escalate privileges via the id and key... |
| CVE-2023-27089 | HIGH | 8.2 | 0.4% | Apr 4, 2023 | Cross Site Scripting vulnerability found in Ehuacui BBS allows attackers to cause a denial of service via a crafted payl... |
| CVE-2023-1750 | HIGH | 7.1 | 0.5% | Apr 4, 2023 | The listed versions of Nexx Smart Home devices lack proper access control when executing actions. An attacker with a val... |
| CVE-2023-27771 | HIGH | 7.8 | 0.4% | Apr 4, 2023 | An issue found in Wondershare Technology Co.,Ltd Creative Centerr v.1.0.8 allows a remote attacker to execute arbitrary ... |
| CVE-2023-27770 | HIGH | 7.8 | 0.5% | Apr 4, 2023 | An issue found in Wondershare Technology Co.,Ltd Edraw-max v.12.0.4 allows a remote attacker to execute arbitrary comman... |
| CVE-2023-27769 | HIGH | 7.8 | 0.4% | Apr 4, 2023 | An issue found in Wondershare Technology Co.,Ltd PDF Reader v.1.0.1 allows a remote attacker to execute arbitrary comman... |
| CVE-2023-27768 | HIGH | 7.8 | 0.4% | Apr 4, 2023 | An issue found in Wondershare Technology Co.,Ltd PDFelement v9.1.1 allows a remote attacker to execute arbitrary command... |
| CVE-2023-27767 | HIGH | 7.8 | 0.4% | Apr 4, 2023 | An issue found in Wondershare Technology Co.,Ltd Dr.Fone v.12.4.9 allows a remote attacker to execute arbitrary commands... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now