2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-26088 | HIGH | 7.8 | 0.5% | Mar 23, 2023 | In Malwarebytes before 4.5.23, a symbolic link may be used delete any arbitrary file on the system by exploiting the loc... |
| CVE-2023-28663 | HIGH | 8.8 | 0.9% | Mar 22, 2023 | The Formidable PRO2PDF WordPress Plugin, version < 3.11, is affected by an authenticated SQL injection vulnerability in ... |
| CVE-2023-28661 | HIGH | 8.8 | 0.9% | Mar 22, 2023 | The WP Popup Banners WordPress Plugin, version <= 1.2.5, is affected by an authenticated SQL injection vulnerability in ... |
| CVE-2023-28660 | HIGH | 8.8 | 0.9% | Mar 22, 2023 | The Events Made Easy WordPress Plugin, version <= 2.3.14 is affected by an authenticated SQL injection vulnerability in ... |
| CVE-2023-28659 | HIGH | 8.8 | 0.9% | Mar 22, 2023 | The Waiting: One-click Countdowns WordPress Plugin, version <= 0.6.2, is affected by an authenticated SQL injection vuln... |
| CVE-2023-28438 | HIGH | 8 | 0.9% | Mar 22, 2023 | Pimcore is an open source data and experience management platform. Prior to version 10.5.19, since a user with 'report' ... |
| CVE-2023-28434 | HIGH | 8.8 | 6.7% | Mar 22, 2023 | Minio is a Multi-Cloud Object Storage framework. Prior to RELEASE.2023-03-20T20-16-18Z, an attacker can use crafted requ... |
| CVE-2023-28433 | HIGH | 8.8 | 1.0% | Mar 22, 2023 | Minio is a Multi-Cloud Object Storage framework. All users on Windows prior to version RELEASE.2023-03-20T20-16-18Z are ... |
| CVE-2023-28432 | HIGH | 7.5 | 84.0% | Mar 22, 2023 | Minio is a Multi-Cloud Object Storage framework. In a cluster deployment starting with RELEASE.2019-12-17T23-16-33Z and ... |
| CVE-2023-28431 | HIGH | 7.5 | 0.9% | Mar 22, 2023 | Frontier is an Ethereum compatibility layer for Substrate. Frontier's `modexp` precompile uses `num-bigint` crate under ... |
| CVE-2023-0386 | HIGH | 7.8 | 7.9% | Mar 22, 2023 | A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities wa... |
| CVE-2023-28119 | HIGH | 7.5 | 1.0% | Mar 22, 2023 | The crewjam/saml go library contains a partial implementation of the SAML standard in golang. Prior to version 0.4.13, t... |
| CVE-2023-25820 | HIGH | 7.8 | 0.2% | Mar 22, 2023 | Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform, and Nextcloud Enterpris... |
| CVE-2023-26426 | HIGH | 7.8 | 0.4% | Mar 22, 2023 | Illustrator version 26.5.2 (and earlier) and 27.2.0 (and earlier) are affected by a Use After Free vulnerability that co... |
| CVE-2023-26358 | HIGH | 7.8 | 0.4% | Mar 22, 2023 | Creative Cloud version 5.9.1 (and earlier) is affected by an Untrusted Search Path vulnerability that might allow attack... |
| CVE-2023-25861 | HIGH | 7.8 | 0.3% | Mar 22, 2023 | Illustrator version 26.5.2 (and earlier) and 27.2.0 (and earlier) are affected by an out-of-bounds write vulnerability t... |
| CVE-2023-25860 | HIGH | 7.8 | 0.3% | Mar 22, 2023 | Illustrator version 26.5.2 (and earlier) and 27.2.0 (and earlier) are affected by an out-of-bounds write vulnerability t... |
| CVE-2023-25859 | HIGH | 7.8 | 0.3% | Mar 22, 2023 | Illustrator version 26.5.2 (and earlier) and 27.2.0 (and earlier) are affected by an Improper Input Validation vulnerabi... |
| CVE-2023-0464 | HIGH | 7.5 | 3.7% | Mar 22, 2023 | A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 ... |
| CVE-2023-1578 | HIGH | 8.8 | 65.1% | Mar 22, 2023 | SQL Injection in GitHub repository pimcore/pimcore prior to 10.5.19. |
| CVE-2023-1281 | HIGH | 7.8 | 0.3% | Mar 22, 2023 | Use After Free vulnerability in Linux kernel traffic control index filter (tcindex) allows Privilege Escalation. The imp... |
| CVE-2023-1559 | HIGH | 7.2 | 0.9% | Mar 22, 2023 | A vulnerability classified as problematic was found in SourceCodester Storage Unit Rental Management System 1.0. This vu... |
| CVE-2023-28685 | HIGH | 7.1 | 0.6% | Mar 22, 2023 | Jenkins AbsInt a³ Plugin 1.1.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attack... |
| CVE-2023-25924 | HIGH | 8.8 | 0.4% | Mar 22, 2023 | IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow an authenticated user to perform... |
| CVE-2023-25594 | HIGH | 8.8 | 0.5% | Mar 22, 2023 | A vulnerability in the web-based management interface of ClearPass Policy Manager allows an attacker with read-only pri... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now