2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-40781 | MEDIUM | 6.5 | 0.5% | Aug 28, 2023 | Buffer Overflow vulnerability in Libming Libming v.0.4.8 allows a remote attacker to cause a denial of service via a cra... |
| CVE-2023-39059 | HIGH | 8.8 | 1.4% | Aug 28, 2023 | An issue in ansible semaphore v.2.8.90 allows a remote attacker to execute arbitrary code via a crafted payload to the e... |
| CVE-2023-34725 | MEDIUM | 6.8 | 0.5% | Aug 28, 2023 | An issue was discovered in TechView LA-5570 Wireless Gateway 1.0.19_T53, allows physical attackers to gain escalated pri... |
| CVE-2023-34724 | MEDIUM | 6.8 | 0.4% | Aug 28, 2023 | An issue was discovered in TECHView LA5570 Wireless Gateway 1.0.19_T53, allows physical attackers to gain escalated priv... |
| CVE-2023-40170 | MEDIUM | 6.1 | 0.5% | Aug 28, 2023 | jupyter-server is the backend for Jupyter web applications. Improper cross-site credential checks on `/files/` URLs coul... |
| CVE-2023-39968 | MEDIUM | 6.1 | 0.6% | Aug 28, 2023 | jupyter-server is the backend for Jupyter web applications. Open Redirect Vulnerability. Maliciously crafted login links... |
| CVE-2023-39652 | CRITICAL | 9.8 | 0.5% | Aug 28, 2023 | theme volty tvcmsvideotab up to v4.0.0 was discovered to contain a SQL injection vulnerability via the component TvcmsVi... |
| CVE-2023-38969 | MEDIUM | 5.4 | 0.6% | Aug 28, 2023 | Cross Site Scripting vulnerabiltiy in Badaso v.2.9.7 allows a remote attacker to execute arbitrary code via a crafted pa... |
| CVE-2023-41109 | CRITICAL | 9.8 | 64.1% | Aug 28, 2023 | SmartNode SN200 (aka SN200) 3.21.2-23021 allows unauthenticated OS Command Injection. |
| CVE-2023-39578 | MEDIUM | 4.8 | 0.4% | Aug 28, 2023 | A stored cross-site scripting (XSS) vulnerability in the Create function of Zenario CMS v9.4 allows attackers to execute... |
| CVE-2023-39348 | MEDIUM | 5.3 | 0.3% | Aug 28, 2023 | Spinnaker is an open source, multi-cloud continuous delivery platform. Log output when updating GitHub status is imprope... |
| CVE-2023-35785 | HIGH | 8.1 | 2.4% | Aug 28, 2023 | Zoho ManageEngine Active Directory 360 versions 4315 and below, ADAudit Plus 7202 and below, ADManager Plus 7200 and bel... |
| CVE-2023-39810 | HIGH | 7.8 | 0.7% | Aug 28, 2023 | An issue in the CPIO command of Busybox v1.33.2 allows attackers to execute a directory traversal. |
| CVE-2023-39709 | MEDIUM | 6.1 | 0.5% | Aug 28, 2023 | Multiple cross-site scripting (XSS) vulnerabilities in Free and Open Source Inventory Management System v1.0 allows atta... |
| CVE-2023-39562 | MEDIUM | 5.5 | 0.3% | Aug 28, 2023 | GPAC v2.3-DEV-rev449-g5948e4f70-master was discovered to contain a heap-use-after-free via the gf_bs_align function at b... |
| CVE-2023-40590 | HIGH | 7.8 | 0.5% | Aug 28, 2023 | GitPython is a python library used to interact with Git repositories. When resolving a program, Python/Windows look for... |
| CVE-2023-39062 | MEDIUM | 6.1 | 1.5% | Aug 28, 2023 | Cross Site Scripting vulnerability in Spipu HTML2PDF before v.5.2.8 allows a remote attacker to execute arbitrary code v... |
| CVE-2023-39560 | CRITICAL | 9.8 | 4.1% | Aug 28, 2023 | ECTouch v2 was discovered to contain a SQL injection vulnerability via the $arr['id'] parameter at \default\helpers\inse... |
| CVE-2023-1997 | HIGH | 8.8 | 1.7% | Aug 28, 2023 | An OS Command Injection vulnerability exists in SIMULIA 3DOrchestrate from Release 3DEXPERIENCE R2021x through Release 3... |
| CVE-2023-40846 | CRITICAL | 9.8 | 0.7% | Aug 28, 2023 | Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function sub_90998. |
| CVE-2023-39708 | MEDIUM | 6.1 | 0.5% | Aug 28, 2023 | A stored cross-site scripting (XSS) vulnerability in Free and Open Source Inventory Management System v1.0 allows attack... |
| CVE-2023-40767 | CRITICAL | 9.8 | 0.7% | Aug 28, 2023 | User enumeration is found in in PHPJabbers Make an Offer Widget v1.0. This issue occurs during password recovery, where ... |
| CVE-2023-40766 | CRITICAL | 9.8 | 0.7% | Aug 28, 2023 | User enumeration is found in in PHPJabbers Ticket Support Script v3.2. This issue occurs during password recovery, where... |
| CVE-2023-40765 | CRITICAL | 9.8 | 0.7% | Aug 28, 2023 | User enumeration is found in PHPJabbers Event Booking Calendar v4.0. This issue occurs during password recovery, where a... |
| CVE-2023-40764 | CRITICAL | 9.8 | 0.7% | Aug 28, 2023 | User enumeration is found in PHP Jabbers Car Rental Script v3.0. This issue occurs during password recovery, where a dif... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now