2023 CVE Vulnerabilities

31,509 CVEs published in 2023.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2023-24824HIGH7.5cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. A polynomial time comp...
CVE-2023-27160HIGH7.2forem up to v2022.11.11 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /articles/{id}....
CVE-2023-27159HIGH7.5Appwrite up to v1.2.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /v1/avatars/favic...
CVE-2023-26925HIGH7.5An information disclosure vulnerability exists in the Syslog functionality of D-LINK DIR-882 1.30. A specially crafted n...
CVE-2023-28877HIGH7.5The VTEX apps-graphql@2.x GraphQL API module does not properly restrict unauthorized access to private configuration dat...
CVE-2023-28464HIGH7.8hci_conn_cleanup in net/bluetooth/hci_conn.c in the Linux kernel through 6.2.9 has a use-after-free (observed in hci_con...
CVE-2023-26830HIGH7.2An unrestricted file upload vulnerability in the administrative portal branding component of Gladinet CentreStack before...
CVE-2023-0344HIGH7.5Akuvox E11 appears to be using a custom version of dropbear SSH server. This server allows an insecure option that by de...
CVE-2023-0343HIGH7.5Akuvox E11 contains a function that encrypts messages which are then forwarded. The IV vector and the key are static, an...
CVE-2023-1769HIGH7.5A vulnerability, which was classified as problematic, was found in SourceCodester Grade Point Average GPA Calculator 1.0...
CVE-2023-28727HIGH8.8Panasonic AiSEG2 versions 2.00J through 2.93A allows adjacent attackers bypass authentication due to mishandling of X-Fo...
CVE-2023-28726HIGH8.8Panasonic AiSEG2 versions 2.80F through 2.93A allows remote attackers to execute arbitrary OS commands.
CVE-2023-1762HIGH8.8Improper Privilege Management in GitHub repository thorsten/phpmyfaq prior to 3.1.12.
CVE-2023-1747HIGH8.8A vulnerability has been found in IBOS up to 4.5.4 and classified as critical. Affected by this vulnerability is an unkn...
CVE-2023-1745HIGH7.8A vulnerability, which was classified as problematic, has been found in KMPlayer 4.2.2.73. This issue affects some unkno...
CVE-2023-1744HIGH8.8A vulnerability classified as critical was found in IBOS 4.5.5. This vulnerability affects unknown code of the component...
CVE-2023-1670HIGH7.8A flaw use after free in the Linux kernel Xircom 16-bit PCMCIA (PC-card) Ethernet driver was found.A local user could us...
CVE-2023-1742HIGH8.8A vulnerability was found in IBOS 4.5.5. It has been rated as critical. Affected by this issue is some unknown functiona...
CVE-2023-1393HIGH7.8A flaw was found in X.Org Server Overlay Window. A Use-After-Free may lead to local privilege escalation. If a client ex...
CVE-2023-28846HIGH7.5Unpoly is a JavaScript framework for server-side web applications. There is a possible Denial of Service (DoS) vulnerabi...
CVE-2023-27534HIGH8.8A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be wrongly re...
CVE-2023-27533HIGH8.8A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an atta...
CVE-2023-1736HIGH8.8A vulnerability, which was classified as critical, has been found in SourceCodester Young Entrepreneur E-Negosyo System ...
CVE-2023-28835HIGH7.5Nextcloud server is an open source home cloud implementation. In affected versions the generated fallback password when ...
CVE-2023-28833HIGH8.8Nextcloud server is an open source home cloud implementation. In affected versions admins of a server were able to uploa...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now