2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-24295 | HIGH | 7.8 | 0.2% | Mar 23, 2023 | A stack overfow in SoftMaker Software GmbH FlexiPDF v3.0.3.0 allows attackers to execute arbitrary code after opening a ... |
| CVE-2023-28335 | HIGH | 8.8 | 0.4% | Mar 23, 2023 | The link to reset all templates of a database activity did not include the necessary token to prevent a CSRF risk. |
| CVE-2023-28329 | HIGH | 8.8 | 1.2% | Mar 23, 2023 | Insufficient validation of profile field availability condition resulted in an SQL injection risk (by default only avail... |
| CVE-2023-24788 | HIGH | 8.8 | 3.1% | Mar 23, 2023 | NotrinosERP v0.7 was discovered to contain a SQL injection vulnerability via the OrderNumber parameter at /NotrinosERP/s... |
| CVE-2023-1252 | HIGH | 7.8 | 0.2% | Mar 23, 2023 | A use-after-free flaw was found in the Linux kernel’s Ext4 File System in how a user triggers several file operations si... |
| CVE-2023-28436 | HIGH | 8 | 0.5% | Mar 23, 2023 | Tailscale is software for using Wireguard and multi-factor authentication (MFA). A vulnerability identified in the imple... |
| CVE-2023-26360 | HIGH | 8.6 | 97.1% | Mar 23, 2023 | Adobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and earlier) are affected by an Improper Acces... |
| CVE-2023-1607 | HIGH | 8.8 | 0.7% | Mar 23, 2023 | A vulnerability was found in novel-plus 3.6.2. It has been classified as critical. This affects an unknown part of the f... |
| CVE-2023-1605 | HIGH | 7.5 | 1.0% | Mar 23, 2023 | Denial of Service in GitHub repository radareorg/radare2 prior to 5.8.6. |
| CVE-2023-27094 | HIGH | 8.8 | 0.6% | Mar 23, 2023 | An issue found in OpenGoofy Hippo4j v.1.4.3 allows attackers to escalate privileges via the ThreadPoolController of the ... |
| CVE-2023-20113 | HIGH | 8.1 | 0.3% | Mar 23, 2023 | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, r... |
| CVE-2023-20107 | HIGH | 7.5 | 0.7% | Mar 23, 2023 | A vulnerability in the deterministic random bit generator (DRBG), also known as pseudorandom number generator (PRNG), in... |
| CVE-2023-20080 | HIGH | 7.5 | 1.0% | Mar 23, 2023 | A vulnerability in the IPv6 DHCP version 6 (DHCPv6) relay and server features of Cisco IOS and IOS XE Software could all... |
| CVE-2023-20072 | HIGH | 8.6 | 1.0% | Mar 23, 2023 | A vulnerability in the fragmentation handling code of tunnel protocol packets in Cisco IOS XE Software could allow an un... |
| CVE-2023-20065 | HIGH | 7.8 | 0.2% | Mar 23, 2023 | A vulnerability in the Cisco IOx application hosting subsystem of Cisco IOS XE Software could allow an authenticated, lo... |
| CVE-2023-20055 | HIGH | 8.8 | 0.7% | Mar 23, 2023 | A vulnerability in the management API of Cisco DNA Center could allow an authenticated, remote attacker to elevate privi... |
| CVE-2023-20035 | HIGH | 7.8 | 0.2% | Mar 23, 2023 | A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to execute arbit... |
| CVE-2023-20029 | HIGH | 7.8 | 0.2% | Mar 23, 2023 | A vulnerability in the Meraki onboarding feature of Cisco IOS XE Software could allow an authenticated, local attacker t... |
| CVE-2023-20027 | HIGH | 8.6 | 1.0% | Mar 23, 2023 | A vulnerability in the implementation of the IPv4 Virtual Fragmentation Reassembly (VFR) feature of Cisco IOS XE Softwar... |
| CVE-2023-27077 | HIGH | 7.5 | 1.6% | Mar 23, 2023 | Stack Overflow vulnerability found in 360 D901 allows a remote attacker to cause a Distributed Denial of Service (DDOS) ... |
| CVE-2023-27079 | HIGH | 7.5 | 1.9% | Mar 23, 2023 | Command Injection vulnerability found in Tenda G103 v.1.0.05 allows an attacker to obtain sensitive information via a cr... |
| CVE-2023-1595 | HIGH | 7.2 | 0.9% | Mar 23, 2023 | A vulnerability has been found in novel-plus 3.6.2 and classified as critical. Affected by this vulnerability is an unkn... |
| CVE-2023-28759 | HIGH | 7.8 | 0.2% | Mar 23, 2023 | An issue was discovered in Veritas NetBackup before 10.0 on Windows. A vulnerability in the way the client validates the... |
| CVE-2023-28758 | HIGH | 7.1 | 0.2% | Mar 23, 2023 | An issue was discovered in Veritas NetBackup before 8.3.0.2. BPCD allows an unprivileged user to specify a log file path... |
| CVE-2023-23192 | HIGH | 7.2 | 1.5% | Mar 23, 2023 | IS Decisions UserLock MFA 11.01 is vulnerable to authentication bypass using scheduled task. |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now