2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-22374 | HIGH | 8.5 | 72.6% | Feb 1, 2023 | A format string vulnerability exists in iControl SOAP that allows an authenticated attacker to crash the iControl SOAP ... |
| CVE-2023-22358 | HIGH | 7.8 | 0.2% | Feb 1, 2023 | In versions beginning with 7.2.2 to before 7.2.3.1, a DLL hijacking vulnerability exists in the BIG-IP Edge Client Windo... |
| CVE-2023-22341 | HIGH | 7.5 | 0.6% | Feb 1, 2023 | On version 14.1.x before 14.1.5.3, and all versions of 13.1.x, when the BIG-IP APM system is configured with all the fol... |
| CVE-2023-22340 | HIGH | 7.5 | 0.6% | Feb 1, 2023 | On BIG-IP versions 16.1.x before 16.1.3.3, 15.1.x before 15.1.8, 14.1.x before 14.1.5.3, and all versions of 13.1.x, whe... |
| CVE-2023-22323 | HIGH | 7.5 | 0.7% | Feb 1, 2023 | In BIP-IP versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and a... |
| CVE-2023-22281 | HIGH | 7.5 | 0.6% | Feb 1, 2023 | On versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8, 14.1.x before 14.1.5.3, and all versio... |
| CVE-2023-0618 | HIGH | 7.5 | 0.9% | Feb 1, 2023 | A vulnerability was found in TRENDnet TEW-652BRP 3.04B01. It has been declared as critical. This vulnerability affects u... |
| CVE-2023-0617 | HIGH | 7.5 | 1.0% | Feb 1, 2023 | A vulnerability was found in TRENDNet TEW-811DRU 1.0.10.0. It has been classified as critical. This affects an unknown p... |
| CVE-2023-23135 | HIGH | 7.2 | 1.0% | Feb 1, 2023 | An arbitrary file upload vulnerability in Ftdms v3.1.6 allows attackers to execute arbitrary code via uploading a crafte... |
| CVE-2023-24610 | HIGH | 8.8 | 2.1% | Feb 1, 2023 | NOSH 4a5cfdb allows remote authenticated users to execute PHP arbitrary code via the "practice logo" upload feature. The... |
| CVE-2023-23132 | HIGH | 7.5 | 0.6% | Feb 1, 2023 | Selfwealth iOS mobile App 3.3.1 is vulnerable to Sensitive key disclosure. The application reveals hardcoded API keys. |
| CVE-2023-23131 | HIGH | 7.5 | 0.6% | Feb 1, 2023 | Selfwealth iOS mobile App 3.3.1 is vulnerable to Insecure App Transport Security (ATS) Settings. |
| CVE-2023-22575 | HIGH | 8.8 | 0.6% | Feb 1, 2023 | Dell PowerScale OneFS 9.0.0.x - 9.4.0.x contain an insertion of sensitive information into log file vulnerability in cel... |
| CVE-2023-22574 | HIGH | 8.1 | 0.7% | Feb 1, 2023 | Dell PowerScale OneFS 9.0.0.x - 9.4.0.x contain an insertion of sensitive information into log file vulnerability in pl... |
| CVE-2023-0613 | HIGH | 7.5 | 0.9% | Feb 1, 2023 | A vulnerability has been found in TRENDnet TEW-811DRU 1.0.10.0 and classified as critical. Affected by this vulnerabilit... |
| CVE-2023-0612 | HIGH | 7.5 | 0.9% | Feb 1, 2023 | A vulnerability, which was classified as critical, was found in TRENDnet TEW-811DRU 1.0.10.0. Affected is an unknown fun... |
| CVE-2023-0611 | HIGH | 8.8 | 3.9% | Feb 1, 2023 | A vulnerability, which was classified as critical, has been found in TRENDnet TEW-652BRP 3.04B01. This issue affects som... |
| CVE-2023-23692 | HIGH | 8.8 | 1.6% | Feb 1, 2023 | Dell EMC prior to version DDOS 7.9 contain(s) an OS command injection Vulnerability. An authenticated non admin attacke... |
| CVE-2023-22572 | HIGH | 7.8 | 0.2% | Feb 1, 2023 | Dell PowerScale OneFS 9.1.0.x-9.4.0.x contain an insertion of sensitive information into log file vulnerability in chan... |
| CVE-2023-24977 | HIGH | 7.5 | 1.2% | Feb 1, 2023 | Out-of-bounds Read vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.1.... |
| CVE-2023-23846 | HIGH | 7.5 | 0.8% | Feb 1, 2023 | Due to insufficient length validation in the Open5GS GTP library versions prior to versions 2.4.13 and 2.5.7, when parsi... |
| CVE-2023-20856 | HIGH | 8.8 | 0.4% | Feb 1, 2023 | VMware vRealize Operations (vROps) contains a CSRF bypass vulnerability. A malicious user could execute actions on the v... |
| CVE-2023-0524 | HIGH | 8.8 | 0.6% | Feb 1, 2023 | As part of our Security Development Lifecycle, a potential privilege escalation issue was identified internally. This co... |
| CVE-2023-0454 | HIGH | 8.1 | 1.0% | Feb 1, 2023 | OrangeScrum version 2.0.11 allows an authenticated external attacker to delete arbitrary local files from the server. Th... |
| CVE-2023-24956 | HIGH | 8.8 | 0.7% | Feb 1, 2023 | Forget Heart Message Box v1.1 was discovered to contain a SQL injection vulnerability via the name parameter at /cha.php... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now