2023 CVE Vulnerabilities

31,509 CVEs published in 2023.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2023-0887HIGH7.8A vulnerability was found in phjounin TFTPD64-SE 4.64 and classified as critical. This issue affects some unknown proces...
CVE-2023-24078HIGH8.8Real Time Logic FuguHub v8.1 and earlier was discovered to contain a remote code execution (RCE) vulnerability via the c...
CVE-2023-0877HIGH8.8Code Injection in GitHub repository froxlor/froxlor prior to 2.0.11.
CVE-2023-0866HIGH7.8Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3.0-DEV.
CVE-2023-25653HIGH7.5node-jose is a JavaScript implementation of the JSON Object Signing and Encryption (JOSE) for web browsers and node.js-b...
CVE-2023-25602HIGH7.8A stack-based buffer overflow in Fortinet FortiWeb 6.4 all versions, FortiWeb versions 6.3.17 and earlier, FortiWeb vers...
CVE-2023-23783HIGH7.8A use of externally-controlled format string in Fortinet FortiWeb version 7.0.0 through 7.0.1, FortiWeb 6.4 all versions...
CVE-2023-23782HIGH7.8A heap-based buffer overflow in Fortinet FortiWeb version 7.0.0 through 7.0.1, FortiWeb version 6.3.0 through 6.3.19, Fo...
CVE-2023-23781HIGH8.8A stack-based buffer overflow vulnerability [CWE-121] in FortiWeb version 7.0.1 and below, 6.4 all versions, version 6.3...
CVE-2023-23780HIGH8.8A stack-based buffer overflow in Fortinet FortiWeb version 7.0.0 through 7.0.1, Fortinet FortiWeb version 6.3.6 through ...
CVE-2023-23779HIGH8.8Multiple improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE...
CVE-2023-24807HIGH7.5Undici is an HTTP/1.1 client for Node.js. Prior to version 5.19.1, the `Headers.set()` and `Headers.append()` methods ar...
CVE-2023-24485HIGH7.8Vulnerabilities have been identified that, collectively, allow a standard Windows user to perform operations as SYSTEM o...
CVE-2023-24483HIGH7.8A vulnerability has been identified that, if exploited, could result in a local user elevating their privilege level to ...
CVE-2023-23947HIGH8.5Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. All Argo CD versions starting with 2.3.0-rc1 a...
CVE-2023-23926HIGH8.1APOC (Awesome Procedures on Cypher) is an add-on library for Neo4j. An XML External Entity (XXE) vulnerability found in ...
CVE-2023-25173HIGH7.8containerd is an open source container runtime. A bug was found in containerd prior to versions 1.6.18 and 1.5.18 where ...
CVE-2023-22580HIGH7.5Due to improper input filtering in the sequalize js library, can malicious queries lead to sensitive information disclos...
CVE-2023-22579HIGH8.8Due to improper parameter filtering in the sequalize js library, can a attacker peform injection.
CVE-2023-0862HIGH8.8The NetModule NSRW web administration interface is vulnerable to path traversals, which could lead to arbitrary file upl...
CVE-2023-0860HIGH7.5Improper Restriction of Excessive Authentication Attempts in GitHub repository modoboa/modoboa-installer prior to 2.0.4.
CVE-2023-0861HIGH8.8NetModule NSRW web administration interface executes an OS command constructed with unsanitized user input. A successful...
CVE-2023-0662HIGH7.5In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, excessive number of parts in HTTP form upload ca...
CVE-2023-0568HIGH8.1In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, core path resolution function allocate buffer on...
CVE-2023-0850HIGH7.5A vulnerability was found in Netgear WNDR3700v2 1.0.1.14 and classified as problematic. This issue affects some unknown ...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now