2023 CVE Vulnerabilities

31,509 CVEs published in 2023.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2023-21685HIGH8.8Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2023-21684HIGH8.8Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
CVE-2023-21568HIGH7.3Microsoft SQL Server Integration Service (VS extension) Remote Code Execution Vulnerability
CVE-2023-21564HIGH7.1Azure DevOps Server Cross-Site Scripting Vulnerability
CVE-2023-21529HIGH8.8Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2023-21528HIGH7.8Microsoft SQL Server Remote Code Execution Vulnerability
CVE-2023-25567HIGH7.5GSS-NTLMSSP, a mechglue plugin for the GSSAPI library that implements NTLM authentication, has an out-of-bounds read whe...
CVE-2023-25566HIGH7.5GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, a m...
CVE-2023-25565HIGH7.5GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, an ...
CVE-2023-25564HIGH8.2GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, mem...
CVE-2023-25563HIGH7.5GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, mul...
CVE-2023-22941HIGH7.5In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, an improperly-formatted ‘INGEST_EVAL’ parameter in a Fiel...
CVE-2023-22939HIGH8.8In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘map’ search processing language (SPL) command lets a...
CVE-2023-22935HIGH8.8In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘display.page.search.patterns.sensitivity’ search par...
CVE-2023-22934HIGH8In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘pivot’ search processing language (SPL) command lets...
CVE-2023-0830HIGH8.8A vulnerability classified as critical has been found in EasyNAS 1.1.0. Affected is the function system of the file /bac...
CVE-2023-25576HIGH7.5@fastify/multipart is a Fastify plugin to parse the multipart content-type. Prior to versions 7.4.1 and 6.0.1, @fastify/...
CVE-2023-25149HIGH8.8TimescaleDB, an open-source time-series SQL database, has a privilege escalation vulnerability in versions 2.8.0 through...
CVE-2023-25141HIGH7.5Apache Sling JCR Base < 3.1.12 has a critical injection vulnerability when running on old JDK versions (JDK 1.8.191 or e...
CVE-2023-25065HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in ShapedPlugin WP Tabs – Responsive Tabs Plugin for WordPress plugin <=...
CVE-2023-24382HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in Photon WP Material Design Icons for Page Builders plugin <= 1.4.2 ver...
CVE-2023-24377HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in Ecwid Ecommerce Ecwid Ecommerce Shopping Cart plugin <= 6.11.3 versio...
CVE-2023-25140HIGH7.8A vulnerability has been identified in Parasolid V34.0 (All versions < V34.0.254), Parasolid V34.1 (All versions < V34.1...
CVE-2023-24996HIGH7.8A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application...
CVE-2023-24995HIGH7.8A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now