2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-21457 | HIGH | 8.1 | 0.2% | Mar 16, 2023 | Improper access control vulnerability in Bluetooth prior to SMR Mar-2023 Release 1 allows attackers to send file via Blu... |
| CVE-2023-1390 | HIGH | 7.5 | 5.1% | Mar 16, 2023 | A remote denial of service vulnerability was found in the Linux kernel’s TIPC kernel module. The while loop in tipc_link... |
| CVE-2023-28108 | HIGH | 7.8 | 0.9% | Mar 16, 2023 | Pimcore is an open source data and experience management platform. Prior to version 10.5.19, quoting is not done properl... |
| CVE-2023-28105 | HIGH | 8.8 | 0.6% | Mar 16, 2023 | go-used-util has commonly used utility functions for Go. Versions prior to 0.0.34 have a ZipSlip issue when using fsutil... |
| CVE-2023-28104 | HIGH | 7.5 | 1.1% | Mar 16, 2023 | `silverstripe/graphql` serves Silverstripe data as GraphQL representations. In versions 4.2.2 and 4.1.1, an attacker cou... |
| CVE-2023-27789 | HIGH | 7.5 | 1.5% | Mar 16, 2023 | An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the cidr2cidr function at th... |
| CVE-2023-27788 | HIGH | 7.5 | 1.4% | Mar 16, 2023 | An issue found in TCPrewrite v.4.4.3 allows a remote attacker to cause a denial of service via the ports2PORT function a... |
| CVE-2023-27787 | HIGH | 7.5 | 1.5% | Mar 16, 2023 | An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse_list function at t... |
| CVE-2023-27786 | HIGH | 7.5 | 1.5% | Mar 16, 2023 | An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the macinstring function. |
| CVE-2023-27785 | HIGH | 7.5 | 1.5% | Mar 16, 2023 | An issue found in TCPreplay TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse endpoint... |
| CVE-2023-27784 | HIGH | 7.5 | 1.5% | Mar 16, 2023 | An issue found in TCPReplay v.4.4.3 allows a remote attacker to cause a denial of service via the read_hexstring functio... |
| CVE-2023-27783 | HIGH | 7.5 | 1.5% | Mar 16, 2023 | An issue found in TCPreplay tcprewrite v.4.4.3 allows a remote attacker to cause a denial of service via the tcpedit_dlt... |
| CVE-2023-27709 | HIGH | 7.2 | 1.3% | Mar 16, 2023 | SQL injection vulnerability found in DedeCMS v.5.7.106 allows a remote attacker to execute arbitrary code via the rank_*... |
| CVE-2023-27707 | HIGH | 7.2 | 1.3% | Mar 16, 2023 | SQL injection vulnerability found in DedeCMS v.5.7.106 allows a remote attacker to execute arbitrary code via the rank_*... |
| CVE-2023-27037 | HIGH | 8.8 | 1.5% | Mar 16, 2023 | Qibosoft QiboCMS v7 was discovered to contain a remote code execution (RCE) vulnerability via the Get_Title function at ... |
| CVE-2023-26769 | HIGH | 7.5 | 1.5% | Mar 16, 2023 | Buffer Overflow vulnerability found in Liblouis Lou_Trace v.3.24.0 allows a remote attacker to cause a denial of service... |
| CVE-2023-26768 | HIGH | 7.5 | 1.3% | Mar 16, 2023 | Buffer Overflow vulnerability found in Liblouis v.3.24.0 allows a remote attacker to cause a denial of service via the c... |
| CVE-2023-26767 | HIGH | 7.5 | 1.3% | Mar 16, 2023 | Buffer Overflow vulnerability found in Liblouis v.3.24.0 allows a remote attacker to cause a denial of service via the l... |
| CVE-2023-27875 | HIGH | 7.5 | 0.6% | Mar 16, 2023 | IBM Aspera Faspex 5.0.4 could allow a user to change other user's credentials due to improper access controls. IBM X-Fo... |
| CVE-2023-1433 | HIGH | 7.2 | 0.9% | Mar 16, 2023 | A vulnerability was found in SourceCodester Gadget Works Online Ordering System 1.0. It has been classified as problemat... |
| CVE-2023-24671 | HIGH | 7.8 | 0.4% | Mar 16, 2023 | VX Search v13.8 and v14.7 was discovered to contain an unquoted service path vulnerability which allows attackers to exe... |
| CVE-2023-24760 | HIGH | 8.8 | 0.8% | Mar 16, 2023 | An issue found in Ofcms v.1.1.4 allows a remote attacker to to escalate privileges via the respwd method in SysUserContr... |
| CVE-2023-25281 | HIGH | 7.5 | 1.1% | Mar 16, 2023 | A stack overflow vulnerability exists in pingV4Msg component in D-Link DIR820LA1_FW105B03, allows attackers to cause a d... |
| CVE-2023-28466 | HIGH | 7 | 0.3% | Mar 16, 2023 | do_tls_getsockopt in net/tls/tls_main.c in the Linux kernel through 6.2.6 lacks a lock_sock call, leading to a race cond... |
| CVE-2023-28460 | HIGH | 7.2 | 1.6% | Mar 15, 2023 | A command injection vulnerability was discovered in Array Networks APV products. A remote attacker can send a crafted pa... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now