2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-24096 | HIGH | 8.8 | 1.0% | Jan 23, 2023 | TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware version 1.01.B01 was discovered to contain a stack overflow... |
| CVE-2023-24095 | HIGH | 8.8 | 1.0% | Jan 23, 2023 | TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware version 1.01.B01 was discovered to contain a stack overflow... |
| CVE-2023-24068 | HIGH | 7.8 | 0.4% | Jan 23, 2023 | Signal Desktop before 6.2.0 on Windows, Linux, and macOS allows an attacker to modify conversation attachments within th... |
| CVE-2023-23314 | HIGH | 8.8 | 1.3% | Jan 23, 2023 | An arbitrary file upload vulnerability in the /api/upload component of zdir v3.2.0 allows attackers to execute arbitrary... |
| CVE-2023-24059 | HIGH | 7.3 | 1.5% | Jan 22, 2023 | Grand Theft Auto V for PC allows attackers to achieve partial remote code execution or modify files on a PC, as exploite... |
| CVE-2023-0434 | HIGH | 7.5 | 0.8% | Jan 22, 2023 | Improper Input Validation in GitHub repository pyload/pyload prior to 0.5.0b3.dev40. |
| CVE-2023-22617 | HIGH | 7.5 | 7.3% | Jan 21, 2023 | A remote attacker might be able to cause infinite recursion in PowerDNS Recursor 4.8.0 via a DNS query that retrieves DS... |
| CVE-2023-0433 | HIGH | 7.8 | 0.6% | Jan 21, 2023 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1225. |
| CVE-2023-24042 | HIGH | 7.5 | 0.5% | Jan 21, 2023 | A race condition in LightFTP through 2.2 allows an attacker to achieve path traversal via a malformed FTP request. A han... |
| CVE-2023-24040 | HIGH | 7.1 | 0.5% | Jan 21, 2023 | dtprintinfo in Common Desktop Environment 1.6 has a bug in the parser of lpstat (an invoked external command) during lis... |
| CVE-2023-24039 | HIGH | 7.8 | 0.5% | Jan 21, 2023 | A stack-based buffer overflow in ParseColors in libXm in Common Desktop Environment 1.6 can be exploited by local low-pr... |
| CVE-2023-24038 | HIGH | 7.5 | 1.1% | Jan 21, 2023 | The HTML-StripScripts module through 1.06 for Perl allows _hss_attval_style ReDoS because of catastrophic backtracking f... |
| CVE-2023-22726 | HIGH | 8.8 | 1.3% | Jan 20, 2023 | act is a project which allows for local running of github actions. The artifact server that stores artifacts from Github... |
| CVE-2023-0052 | HIGH | 8.8 | 0.7% | Jan 20, 2023 | SAUTER Controls Nova 200–220 Series with firmware version 3.3-006 and prior and BACnetstac version 4.2.1 and prior allow... |
| CVE-2023-24025 | HIGH | 7.5 | 0.5% | Jan 20, 2023 | CRYSTALS-DILITHIUM (in Post-Quantum Cryptography Selected Algorithms 2022) in PQClean d03da30 may allow universal forger... |
| CVE-2023-24021 | HIGH | 7.5 | 0.9% | Jan 20, 2023 | Incorrect handling of '\0' bytes in file uploads in ModSecurity before 2.9.7 may allow for Web Application Firewall bypa... |
| CVE-2023-23492 | HIGH | 8.8 | 57.4% | Jan 20, 2023 | The Login with Phone Number WordPress Plugin, version < 1.4.2, is affected by an authenticated SQL injection vulnerabili... |
| CVE-2023-23490 | HIGH | 8.8 | 2.3% | Jan 20, 2023 | The Survey Maker WordPress Plugin, version < 3.1.2, is affected by an authenticated SQL injection vulnerability in the '... |
| CVE-2023-23145 | HIGH | 7.8 | 0.4% | Jan 20, 2023 | GPAC version 2.2-rev0-gab012bbfb-master was discovered to contain a memory leak in lsr_read_rare_full function. |
| CVE-2023-23143 | HIGH | 7.8 | 0.4% | Jan 20, 2023 | Buffer overflow vulnerability in function avc_parse_slice in file media_tools/av_parsers.c. GPAC version 2.3-DEV-rev1-g4... |
| CVE-2023-0101 | HIGH | 8.8 | 0.8% | Jan 20, 2023 | A privilege escalation vulnerability was identified in Nessus versions 8.10.1 through 8.15.8 and 10.0.0 through 10.4.1. ... |
| CVE-2023-23691 | HIGH | 8.8 | 0.4% | Jan 20, 2023 | Dell EMC PV ME5, versions ME5.1.0.0.0 and ME5.1.0.1.0, contains a Client-side desync Vulnerability. An unauthenticated ... |
| CVE-2023-23596 | HIGH | 8.8 | 15.2% | Jan 20, 2023 | jc21 NGINX Proxy Manager through 2.9.19 allows OS command injection. When creating an access list, the backend builds an... |
| CVE-2023-20045 | HIGH | 7.2 | 1.0% | Jan 20, 2023 | A vulnerability in the web-based management interface of Cisco Small Business RV160 and RV260 Series VPN Routers could a... |
| CVE-2023-20044 | HIGH | 7.3 | 0.1% | Jan 20, 2023 | A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to elevate their privileges. ... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now