2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-22734 | HIGH | 7.5 | 0.6% | Jan 17, 2023 | Shopware is an open source commerce platform based on Symfony Framework and Vue js. The newsletter double opt-in validat... |
| CVE-2023-22731 | HIGH | 8.8 | 1.3% | Jan 17, 2023 | Shopware is an open source commerce platform based on Symfony Framework and Vue js. In a Twig environment **without the ... |
| CVE-2023-22730 | HIGH | 7.5 | 0.7% | Jan 17, 2023 | Shopware is an open source commerce platform based on Symfony Framework and Vue js. In affected versions It was possible... |
| CVE-2023-23637 | HIGH | 7.6 | 0.6% | Jan 17, 2023 | IMPatienT before 1.5.2 allows stored XSS via onmouseover in certain text fields within a PATCH /modify_onto request to t... |
| CVE-2023-22499 | HIGH | 7.5 | 0.6% | Jan 17, 2023 | Deno is a runtime for JavaScript and TypeScript that uses V8 and is built in Rust. Multi-threaded programs were able to ... |
| CVE-2023-0122 | HIGH | 7.5 | 1.3% | Jan 17, 2023 | A NULL pointer dereference vulnerability in the Linux kernel NVMe functionality, in nvmet_setup_auth(), allows an attack... |
| CVE-2023-23749 | HIGH | 7.5 | 0.6% | Jan 17, 2023 | The 'LDAP Integration with Active Directory and OpenLDAP - NTLM & Kerberos Login' extension is vulnerable to LDAP Inject... |
| CVE-2023-22624 | HIGH | 7.5 | 3.2% | Jan 17, 2023 | Zoho ManageEngine Exchange Reporter Plus before 5708 allows attackers to conduct XXE attacks. |
| CVE-2023-22875 | HIGH | 7.5 | 0.3% | Jan 17, 2023 | IBM QRadar SIEM 7.4 and 7.5copies certificate key files used for SSL/TLS in the QRadar web user interface to managed ho... |
| CVE-2023-0158 | HIGH | 7.5 | 0.7% | Jan 17, 2023 | NLnet Labs Krill supports direct access to the RRDP repository content through its built-in web server at the "/rrdp" en... |
| CVE-2023-22366 | HIGH | 7.8 | 0.2% | Jan 17, 2023 | CX-Motion-MCH v2.32 and earlier contains an access of uninitialized pointer vulnerability. Having a user to open a speci... |
| CVE-2023-22304 | HIGH | 8 | 0.9% | Jan 17, 2023 | OS command injection vulnerability in PIX-RT100 versions RT100_TEQ_2.1.1_EQ101 and RT100_TEQ_2.1.2_EQ101 allows a networ... |
| CVE-2023-22286 | HIGH | 8.1 | 0.4% | Jan 17, 2023 | Cross-site request forgery (CSRF) vulnerability in MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud prior to Ver.1.11.00, MAHO-PB... |
| CVE-2023-22280 | HIGH | 7.2 | 1.0% | Jan 17, 2023 | MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud prior to Ver.1.11.00, MAHO-PBX NetDevancer VSG Lite/Uni prior to Ver.1.11.00, an... |
| CVE-2023-0315 | HIGH | 8.8 | 97.7% | Jan 16, 2023 | Command Injection in GitHub repository froxlor/froxlor prior to 2.0.8. |
| CVE-2023-0305 | HIGH | 7.5 | 0.6% | Jan 15, 2023 | A vulnerability classified as critical was found in SourceCodester Online Food Ordering System. This vulnerability affec... |
| CVE-2023-0304 | HIGH | 7.5 | 0.6% | Jan 15, 2023 | A vulnerability classified as critical has been found in SourceCodester Online Food Ordering System. This affects an unk... |
| CVE-2023-0303 | HIGH | 7.5 | 0.6% | Jan 15, 2023 | A vulnerability was found in SourceCodester Online Food Ordering System. It has been rated as critical. Affected by this... |
| CVE-2023-23595 | HIGH | 7.5 | 1.0% | Jan 15, 2023 | BlueCat Device Registration Portal 2.2 allows XXE attacks that exfiltrate single-line files. A single-line file might co... |
| CVE-2023-23590 | HIGH | 7.5 | 26.4% | Jan 15, 2023 | Mercedes-Benz XENTRY Retail Data Storage 7.8.1 allows remote attackers to cause a denial of service (device restart) via... |
| CVE-2023-0302 | HIGH | 7.8 | 0.4% | Jan 15, 2023 | Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository radareorg/r... |
| CVE-2023-22602 | HIGH | 7.5 | 1.6% | Jan 14, 2023 | When using Apache Shiro before 1.11.0 together with Spring Boot 2.6+, a specially crafted HTTP request may cause an auth... |
| CVE-2023-22851 | HIGH | 7.2 | 1.0% | Jan 14, 2023 | Tiki before 24.2 allows lib/importer/tikiimporter_blog_wordpress.php PHP Object Injection by an admin because of an unse... |
| CVE-2023-22850 | HIGH | 8.8 | 1.2% | Jan 14, 2023 | Tiki before 24.1, when the Spreadsheets feature is enabled, allows lib/sheet/grid.php PHP Object Injection because of an... |
| CVE-2023-22853 | HIGH | 8.8 | 0.9% | Jan 14, 2023 | Tiki before 24.1, when feature_create_webhelp is enabled, allows lib/structures/structlib.php PHP Object Injection becau... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now