2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-1161 | HIGH | 7.1 | 0.6% | Mar 6, 2023 | ISO 15765 and ISO 10681 dissector crash in Wireshark 4.0.0 to 4.0.3 and 3.6.0 to 3.6.11 allows denial of service via pac... |
| CVE-2023-0093 | HIGH | 8.8 | 1.1% | Mar 6, 2023 | Okta Advanced Server Access Client versions 1.13.1 through 1.65.0 are vulnerable to command injection due to the third p... |
| CVE-2023-24763 | HIGH | 8.8 | 0.9% | Mar 6, 2023 | In the module "Xen Forum" (xenforum) for PrestaShop, an authenticated user can perform SQL injection in versions up to 2... |
| CVE-2023-23939 | HIGH | 7 | 0.4% | Mar 6, 2023 | Azure/setup-kubectl is a GitHub Action for installing Kubectl. This vulnerability only impacts versions before version 3... |
| CVE-2023-25304 | HIGH | 7.8 | 0.4% | Mar 6, 2023 | An issue in Prism Launcher up to v6.1 allows attackers to perform a directory traversal via importing a crafted .mrpack ... |
| CVE-2023-24789 | HIGH | 8.8 | 0.8% | Mar 6, 2023 | jeecg-boot v3.4.4 was discovered to contain an authenticated SQL injection vulnerability via the building block report c... |
| CVE-2023-1191 | HIGH | 7.2 | 0.9% | Mar 6, 2023 | A vulnerability classified as problematic has been found in fastcms. This affects an unknown part of the file admin/Temp... |
| CVE-2023-1190 | HIGH | 7.8 | 0.4% | Mar 6, 2023 | A vulnerability was found in xiaozhuai imageinfo up to 3.0.3. It has been rated as problematic. Affected by this issue i... |
| CVE-2023-1185 | HIGH | 8.8 | 0.7% | Mar 6, 2023 | A vulnerability, which was classified as problematic, was found in ECshop up to 4.1.8. This affects an unknown part of t... |
| CVE-2023-1184 | HIGH | 8.8 | 0.7% | Mar 6, 2023 | A vulnerability, which was classified as problematic, has been found in ECshop up to 4.1.8. Affected by this issue is so... |
| CVE-2023-26111 | HIGH | 7.5 | 1.5% | Mar 6, 2023 | All versions of the package @nubosoftware/node-static; all versions of the package node-static are vulnerable to Directo... |
| CVE-2023-26107 | HIGH | 7.8 | 0.4% | Mar 6, 2023 | All versions of the package sketchsvg are vulnerable to Arbitrary Code Injection when invoking shell.exec without saniti... |
| CVE-2023-26106 | HIGH | 7.5 | 0.9% | Mar 6, 2023 | All versions of the package dot-lens are vulnerable to Prototype Pollution via the set() function in index.js file. |
| CVE-2023-22424 | HIGH | 7.8 | 0.3% | Mar 6, 2023 | Use-after-free vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Vers... |
| CVE-2023-22421 | HIGH | 7.8 | 0.3% | Mar 6, 2023 | Out-of-bounds read vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) ... |
| CVE-2023-22419 | HIGH | 7.8 | 0.2% | Mar 6, 2023 | Out-of-bounds read vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) ... |
| CVE-2023-22335 | HIGH | 7.5 | 0.7% | Mar 6, 2023 | Improper access control vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier... |
| CVE-2023-27635 | HIGH | 7.8 | 0.4% | Mar 5, 2023 | debmany in debian-goodies 0.88.1 allows attackers to execute arbitrary shell commands (because of an eval call) via a cr... |
| CVE-2023-26490 | HIGH | 8.8 | 2.2% | Mar 4, 2023 | mailcow is a dockerized email package, with multiple containers linked in one bridged network. The Sync Job feature - wh... |
| CVE-2023-23929 | HIGH | 8.8 | 0.6% | Mar 4, 2023 | vantage6 is a privacy preserving federated learning infrastructure for secure insight exchange. Currently, the refresh t... |
| CVE-2023-25403 | HIGH | 7.5 | 0.7% | Mar 3, 2023 | CleverStupidDog yf-exam v 1.8.0 is vulnerable to Authentication Bypass. The program uses a fixed JWT key, and the stored... |
| CVE-2023-25402 | HIGH | 7.5 | 0.6% | Mar 3, 2023 | CleverStupidDog yf-exam 1.8.0 is vulnerable to File Upload. There is no restriction on the suffix of the uploaded file, ... |
| CVE-2023-27567 | HIGH | 7.5 | 0.8% | Mar 3, 2023 | In OpenBSD 7.2, a TCP packet with destination port 0 that matches a pf divert-to rule can crash the kernel. |
| CVE-2023-26492 | HIGH | 7.5 | 1.0% | Mar 3, 2023 | Directus is a real-time API and App dashboard for managing SQL database content. Directus is vulnerable to Server-Side R... |
| CVE-2023-26213 | HIGH | 7.2 | 7.9% | Mar 3, 2023 | On Barracuda CloudGen WAN Private Edge Gateway devices before 8 webui-sdwan-1089-8.3.1-174141891, an OS command injectio... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now