2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-28644 | HIGH | 7.5 | 0.6% | Mar 30, 2023 | Nextcloud server is an open source home cloud implementation. In releases of the 25.0.x branch before 25.0.3 an ineffici... |
| CVE-2023-28643 | HIGH | 8.8 | 0.8% | Mar 30, 2023 | Nextcloud server is an open source home cloud implementation. In affected versions when a recipient receives 2 shares wi... |
| CVE-2023-26482 | HIGH | 8.8 | 4.2% | Mar 30, 2023 | Nextcloud server is an open source home cloud implementation. In affected versions a missing scope validation allowed us... |
| CVE-2023-29059 | HIGH | 7.8 | 4.4% | Mar 30, 2023 | 3CX DesktopApp through 18.12.416 has embedded malicious code, as exploited in the wild in March 2023. This affects versi... |
| CVE-2023-24473 | HIGH | 7.5 | 0.9% | Mar 30, 2023 | An information disclosure vulnerability exists in the TGAInput::read_tga2_header functionality of OpenImageIO Project Op... |
| CVE-2023-24472 | HIGH | 7.5 | 1.3% | Mar 30, 2023 | A denial of service vulnerability exists in the FitsOutput::close() functionality of OpenImageIO Project OpenImageIO v2.... |
| CVE-2023-22845 | HIGH | 7.5 | 0.9% | Mar 30, 2023 | An out-of-bounds read vulnerability exists in the TGAInput::decode_pixel() functionality of OpenImageIO Project OpenImag... |
| CVE-2023-28732 | HIGH | 7.5 | 0.6% | Mar 30, 2023 | Missing access control in AnyMailing Joomla Plugin allows to list and access files containing sensitive information from... |
| CVE-2023-28935 | HIGH | 8.8 | 3.0% | Mar 30, 2023 | ** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Special Elements used in a Command ('Command Injection') vuln... |
| CVE-2023-1014 | HIGH | 7.5 | 0.5% | Mar 30, 2023 | Improper Protection for Outbound Error Messages and Alert Signals vulnerability in Virames Vira-Investing allows Account... |
| CVE-2023-28509 | HIGH | 7.5 | 0.3% | Mar 29, 2023 | Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 bu... |
| CVE-2023-28508 | HIGH | 8.8 | 0.9% | Mar 29, 2023 | Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 bu... |
| CVE-2023-28506 | HIGH | 8.8 | 0.9% | Mar 29, 2023 | Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 bu... |
| CVE-2023-28505 | HIGH | 8.8 | 0.8% | Mar 29, 2023 | Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 bu... |
| CVE-2023-1652 | HIGH | 7.1 | 0.2% | Mar 29, 2023 | A use-after-free flaw was found in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c in the NFS filesystem in the Linux Kernel. ... |
| CVE-2023-0836 | HIGH | 7.5 | 1.2% | Mar 29, 2023 | An information leak vulnerability was discovered in HAProxy 2.1, 2.2 before 2.2.27, 2.3, 2.4 before 2.4.21, 2.5 before 2... |
| CVE-2023-1656 | HIGH | 7.5 | 0.3% | Mar 29, 2023 | Cleartext Transmission of Sensitive Information vulnerability in ForgeRock Inc. OpenIDM and Java Remote Connector Server... |
| CVE-2023-0664 | HIGH | 7.8 | 0.3% | Mar 29, 2023 | A flaw was found in the QEMU Guest Agent service for Windows. A local unprivileged user may be able to manipulate the QE... |
| CVE-2023-28642 | HIGH | 7.8 | 0.3% | Mar 29, 2023 | runc is a CLI tool for spawning and running containers according to the OCI specification. It was found that AppArmor ca... |
| CVE-2023-26984 | HIGH | 8.1 | 0.9% | Mar 29, 2023 | An issue in the password reset function of Peppermint v0.2.4 allows attackers to access the emails and passwords of the ... |
| CVE-2023-28892 | HIGH | 7.8 | 0.5% | Mar 29, 2023 | Malwarebytes AdwCleaner 8.4.0 runs as Administrator and performs an insecure file delete operation on C:\AdwCleaner\Logs... |
| CVE-2023-1680 | HIGH | 7.5 | 0.8% | Mar 29, 2023 | A vulnerability, which was classified as problematic, has been found in Xunrui CMS 4.61. This issue affects some unknown... |
| CVE-2023-23861 | HIGH | 8.8 | 0.2% | Mar 29, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in German Mesky GMAce plugin <= 1.5.2 versions. |
| CVE-2023-1509 | HIGH | 8.8 | 0.6% | Mar 29, 2023 | The GMAce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.5.2. This... |
| CVE-2023-0213 | HIGH | 7.8 | 0.2% | Mar 29, 2023 | Elevation of privilege issue in M-Files Installer versions before 22.6 on Windows allows user to gain SYSTEM privileges ... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now