2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-0628 | HIGH | 7.8 | 0.3% | Mar 13, 2023 | Docker Desktop before 4.17.0 allows an attacker to execute an arbitrary command inside a Dev Environments container duri... |
| CVE-2023-1366 | HIGH | 7.2 | 0.7% | Mar 13, 2023 | A vulnerability was found in SourceCodester Yoga Class Registration System 1.0. It has been classified as critical. This... |
| CVE-2023-0888 | HIGH | 7.2 | 0.6% | Mar 13, 2023 | An improper neutralization of directives in dynamically evaluated code vulnerability in the WiFi Battery embedded web se... |
| CVE-2023-1365 | HIGH | 7.5 | 0.8% | Mar 13, 2023 | A vulnerability was found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. Affected by thi... |
| CVE-2023-1364 | HIGH | 7.5 | 0.6% | Mar 13, 2023 | A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. Affected b... |
| CVE-2023-1352 | HIGH | 8.1 | 0.9% | Mar 11, 2023 | A vulnerability, which was classified as critical, has been found in SourceCodester Design and Implementation of Covid-1... |
| CVE-2023-24999 | HIGH | 8.1 | 0.6% | Mar 11, 2023 | HashiCorp Vault and Vault Enterprise’s approle auth method allowed any authenticated user with access to an approle dest... |
| CVE-2023-27532 | HIGH | 7.5 | 77.6% | Mar 10, 2023 | Vulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the configuration database ... |
| CVE-2023-27530 | HIGH | 7.5 | 1.8% | Mar 10, 2023 | A DoS vulnerability exists in Rack <v3.0.4.2, <v2.2.6.3, <v2.1.4.3 and <v2.0.9.3 within in the Multipart MIME parsing co... |
| CVE-2023-23911 | HIGH | 7.5 | 0.3% | Mar 10, 2023 | An improper access control vulnerability exists prior to v6 that could allow an attacker to break the E2E encryption of ... |
| CVE-2023-23328 | HIGH | 8.8 | 1.1% | Mar 10, 2023 | A File Upload vulnerability exists in AvantFAX 3.3.7. An authenticated user can bypass PHP file type validation in FileU... |
| CVE-2023-27901 | HIGH | 7.5 | 1.0% | Mar 10, 2023 | Jenkins 2.393 and earlier, LTS 2.375.3 and earlier uses the Apache Commons FileUpload library without specifying limits ... |
| CVE-2023-27900 | HIGH | 7.5 | 1.0% | Mar 10, 2023 | Jenkins 2.393 and earlier, LTS 2.375.3 and earlier uses the Apache Commons FileUpload library without specifying limits ... |
| CVE-2023-27899 | HIGH | 7 | 0.2% | Mar 10, 2023 | Jenkins 2.393 and earlier, LTS 2.375.3 and earlier creates a temporary file in the default temporary directory with the ... |
| CVE-2023-25148 | HIGH | 7.8 | 0.4% | Mar 10, 2023 | A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to exploit the vulner... |
| CVE-2023-25146 | HIGH | 7.8 | 0.4% | Mar 10, 2023 | A security agent link following vulnerability in the Trend Micro Apex One agent could allow a local attacker to quaranti... |
| CVE-2023-25145 | HIGH | 7.8 | 0.4% | Mar 10, 2023 | A link following vulnerability in the scanning function of Trend Micro Apex One agent could allow a local attacker to es... |
| CVE-2023-25144 | HIGH | 7.8 | 0.3% | Mar 10, 2023 | An improper access control vulnerability in the Trend Micro Apex One agent could allow a local attacker to gain elevated... |
| CVE-2023-1246 | HIGH | 7.5 | 0.6% | Mar 10, 2023 | Files or Directories Accessible to External Parties vulnerability in Saysis Starcities allows Collect Data from Common R... |
| CVE-2023-27851 | HIGH | 8.8 | 0.8% | Mar 10, 2023 | NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a file sharing mechanism that unintentionally allows users w... |
| CVE-2023-1205 | HIGH | 8.8 | 0.3% | Mar 10, 2023 | NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 is vulnerable to cross-site request forgery attacks on all endpoints ... |
| CVE-2023-1328 | HIGH | 7.2 | 0.9% | Mar 10, 2023 | A vulnerability was found in Guizhou 115cms 4.2. It has been classified as problematic. Affected is an unknown function ... |
| CVE-2023-27161 | HIGH | 7.5 | 1.0% | Mar 10, 2023 | Jellyfin up to v10.7.7 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /Repositories. T... |
| CVE-2023-26464 | HIGH | 7.5 | 1.9% | Mar 10, 2023 | ** UNSUPPORTED WHEN ASSIGNED ** When using the Chainsaw or SocketAppender components with Log4j 1.x on JRE less than 1.... |
| CVE-2023-1313 | HIGH | 8.8 | 1.0% | Mar 10, 2023 | Unrestricted Upload of File with Dangerous Type in GitHub repository cockpit-hq/cockpit prior to 2.4.1. |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now