2023 CVE Vulnerabilities

31,475 CVEs published in 2023.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2023-25925HIGH8.8IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow a remote authenticated attacker ...
CVE-2023-25922HIGH8.8IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 allows the attacker to upload or transfer fi...
CVE-2023-52047HIGH8.8Dedecms v5.7.112 was discovered to contain a Cross-Site Request Forgery (CSRF) in the file manager.
CVE-2023-52226HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in Advanced Flamingo.This issue affects Advanced Flamingo: from n/a thro...
CVE-2023-52223HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in MailerLite MailerLite – WooCommerce integration.This issue affects Ma...
CVE-2023-51683HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in Scott Paterson Easy PayPal & Stripe Buy Now Button.This issue affects...
CVE-2023-51747HIGH7.1Apache James prior to versions 3.8.1 and 3.7.5 is vulnerable to SMTP smuggling. A lenient behaviour in line delimiter h...
CVE-2023-7016HIGH7.8A flaw in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to execute code at a SYST...
CVE-2023-5993HIGH7.8A flaw in the Windows Installer in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker ...
CVE-2023-7165HIGH7.5The JetBackup WordPress plugin before 2.0.9.9 doesn't use index files to prevent public directory listing of sensitive d...
CVE-2023-6585HIGH7.5The WP JobSearch WordPress plugin before 2.3.4 does not validate files to be uploaded, which could allow unauthenticated...
CVE-2023-6584HIGH7.5The WP JobSearch WordPress plugin before 2.3.4 does not prevent attackers from logging-in as any users with the only kno...
CVE-2023-50379HIGH8.8Malicious code injection in Apache Ambari in prior to 2.7.8. Users are recommended to upgrade to version 2.7.8, which fi...
CVE-2023-36237HIGH8.8Cross Site Request Forgery vulnerability in Bagisto before v.1.5.1 allows an attacker to execute arbitrary code via a cr...
CVE-2023-52474HIGH7.8In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix bugs with non-PAGE_SIZE-end multi-iove...
CVE-2023-52469HIGH7.8In the Linux kernel, the following vulnerability has been resolved: drivers/amd/pm: fix a use-after-free in kv_parse_po...
CVE-2023-52468HIGH7.8In the Linux kernel, the following vulnerability has been resolved: class: fix use-after-free in class_register() The ...
CVE-2023-49960HIGH7.5In Indo-Sol PROFINET-INspektor NT through 2.4.0, a path traversal vulnerability in the httpuploadd service of the firmwa...
CVE-2023-51394HIGH7.5High traffic environments may result in NULL Pointer Dereference vulnerability in Silicon Labs's Ember ZNet SDK before v...
CVE-2023-51393HIGH7.5Due to an allocation of resources without limits, an uncontrolled resource consumption vulnerability exists in Silicon L...
CVE-2023-52464HIGH7.8In the Linux kernel, the following vulnerability has been resolved: EDAC/thunderx: Fix possible out-of-bounds string ac...
CVE-2023-52461HIGH7.8In the Linux kernel, the following vulnerability has been resolved: drm/sched: Fix bounds limiting when given a malform...
CVE-2023-52457HIGH7.8In the Linux kernel, the following vulnerability has been resolved: serial: 8250: omap: Don't skip resource freeing if ...
CVE-2023-52455HIGH7.8In the Linux kernel, the following vulnerability has been resolved: iommu: Don't reserve 0-length IOVA region When the...
CVE-2023-52452HIGH7.8In the Linux kernel, the following vulnerability has been resolved: bpf: Fix accesses to uninit stack slots Privileged...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now