2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-0654 | LOW | 3.7 | 0.2% | Aug 29, 2023 | Due to a misconfiguration, the WARP Mobile Client (< 6.29) for Android was susceptible to a tapjacking attack. In the ev... |
| CVE-2023-0238 | MEDIUM | 5.5 | 0.2% | Aug 29, 2023 | Due to lack of a security policy, the WARP Mobile Client (<=6.29) for Android was susceptible to this vulnerability whic... |
| CVE-2023-40787 | CRITICAL | 9.8 | 19.4% | Aug 29, 2023 | In SpringBlade V3.6.0 when executing SQL query, the parameters submitted by the user are not wrapped in quotation marks,... |
| CVE-2023-23774 | HIGH | 8.4 | 0.2% | Aug 29, 2023 | Motorola EBTS/MBTS Site Controller drops to debug prompt on unhandled exception. The Motorola MBTS Site Controller expos... |
| CVE-2023-23773 | HIGH | 8.8 | 0.4% | Aug 29, 2023 | Motorola EBTS/MBTS Base Radio fails to check firmware authenticity. The Motorola MBTS Base Radio lacks cryptographic sig... |
| CVE-2023-23772 | HIGH | 8.8 | 0.4% | Aug 29, 2023 | Motorola MBTS Site Controller fails to check firmware update authenticity. The Motorola MBTS Site Controller lacks crypt... |
| CVE-2023-23771 | HIGH | 8.4 | 0.2% | Aug 29, 2023 | Motorola MBTS Base Radio accepts hard-coded backdoor password. The Motorola MBTS Base Radio Man Machine Interface (MMI),... |
| CVE-2023-23770 | CRITICAL | 9.8 | 0.5% | Aug 29, 2023 | Motorola MBTS Site Controller accepts hard-coded backdoor password. The Motorola MBTS Site Controller Man Machine Interf... |
| CVE-2023-32457 | HIGH | 8.8 | 0.5% | Aug 29, 2023 | Dell PowerScale OneFS, versions 8.2.2.x-9.5.0.x, contains an improper privilege management vulnerability. A remote atta... |
| CVE-2023-41363 | MEDIUM | 4.3 | 0.3% | Aug 29, 2023 | In Cerebrate 1.14, a vulnerability in UserSettingsController allows authenticated users to change user settings of other... |
| CVE-2023-41361 | CRITICAL | 9.8 | 0.8% | Aug 29, 2023 | An issue was discovered in FRRouting FRR 9.0. bgpd/bgp_open.c does not check for an overly large length of the rcv softw... |
| CVE-2023-41360 | CRITICAL | 9.1 | 1.0% | Aug 29, 2023 | An issue was discovered in FRRouting FRR through 9.0. bgpd/bgp_packet.c can read the initial byte of the ORF header in a... |
| CVE-2023-41359 | CRITICAL | 9.1 | 1.0% | Aug 29, 2023 | An issue was discovered in FRRouting FRR through 9.0. There is an out-of-bounds read in bgp_attr_aigp_valid in bgpd/bgp_... |
| CVE-2023-41358 | HIGH | 7.5 | 1.1% | Aug 29, 2023 | An issue was discovered in FRRouting FRR through 9.0. bgpd/bgp_packet.c processes NLRIs if the attribute length is zero. |
| CVE-2023-1995 | HIGH | 7.5 | 0.4% | Aug 29, 2023 | Insufficient Logging vulnerability in Hitachi HiRDB Server, HiRDB Server With Addtional Function, HiRDB Structured Data ... |
| CVE-2023-39650 | CRITICAL | 9.8 | 3.6% | Aug 28, 2023 | Theme Volty CMS Blog up to version v4.0.1 was discovered to contain a SQL injection vulnerability via the id parameter a... |
| CVE-2023-4569 | MEDIUM | 5.5 | 0.3% | Aug 28, 2023 | A memory leak flaw was found in nft_set_catchall_flush in net/netfilter/nf_tables_api.c in the Linux Kernel. This issue ... |
| CVE-2023-41005 | HIGH | 7.8 | 0.5% | Aug 28, 2023 | An issue in Pagekit pagekit v.1.0.18 alows a remote attacker to execute arbitrary code via thedownloadAction and updateA... |
| CVE-2023-40998 | HIGH | 7.5 | 1.7% | Aug 28, 2023 | Buffer Overflow vulnerability in O-RAN Software Community ric-plt-lib-rmr v.4.9.0 allows a remote attacker to cause a de... |
| CVE-2023-40997 | HIGH | 7.5 | 1.8% | Aug 28, 2023 | Buffer Overflow vulnerability in O-RAN Software Community ric-plt-lib-rmr v.4.9.0 allows a remote attacker to cause a de... |
| CVE-2023-40857 | HIGH | 8.8 | 0.9% | Aug 28, 2023 | Buffer Overflow vulnerability in VirusTotal yara v.4.3.2 allows a remote attacker to execute arbtirary code via the yr_e... |
| CVE-2023-40828 | HIGH | 7.5 | 1.3% | Aug 28, 2023 | An issue in pf4j pf4j v.3.9.0 and before allows a remote attacker to obtain sensitive information and execute arbitrary ... |
| CVE-2023-40827 | HIGH | 7.5 | 1.5% | Aug 28, 2023 | An issue in pf4j pf4j v.3.9.0 and before allows a remote attacker to obtain sensitive information and execute arbitrary ... |
| CVE-2023-40826 | HIGH | 7.5 | 1.1% | Aug 28, 2023 | An issue in pf4j pf4j v.3.9.0 and before allows a remote attacker to obtain sensitive information and execute arbitrary ... |
| CVE-2023-40825 | HIGH | 7.2 | 1.0% | Aug 28, 2023 | An issue in Perfree PerfreeBlog v.3.1.2 allows a remote attacker to execute arbitrary code via crafted plugin listed in ... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now