2023 CVE Vulnerabilities
31,510 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-36670 | CRITICAL | 9.8 | 1.3% | Jul 18, 2023 | A remotely exploitable command injection vulnerability was found on the Kratos NGC-IDU 9.1.0.4. An attacker can execute ... |
| CVE-2023-30383 | HIGH | 7.5 | 1.1% | Jul 18, 2023 | TP-LINK Archer C50v2 Archer C50(US)_V2_160801, TP-LINK Archer C20v1 Archer_C20_V1_150707, and TP-LINK Archer C2v1 Archer... |
| CVE-2023-30153 | CRITICAL | 9.8 | 0.8% | Jul 18, 2023 | An SQL injection vulnerability in the Payplug (payplug) module for PrestaShop, in versions 3.6.0, 3.6.1, 3.6.2, 3.6.3, 3... |
| CVE-2023-28021 | HIGH | 7.5 | 0.3% | Jul 18, 2023 | The BigFix WebUI uses weak cipher suites. |
| CVE-2023-28020 | MEDIUM | 6.1 | 0.3% | Jul 18, 2023 | URL redirection in Login page in HCL BigFix WebUI allows malicious user to redirect the client browser to an external s... |
| CVE-2023-38257 | HIGH | 7.5 | 0.6% | Jul 18, 2023 | Iagona ScrutisWeb versions 2.1.37 and prior are vulnerable to an insecure direct object reference vulnerability that cou... |
| CVE-2023-36669 | CRITICAL | 9.8 | 0.7% | Jul 18, 2023 | Missing Authentication for a Critical Function within the Kratos NGC Indoor Unit (IDU) before 11.4 allows remote attacke... |
| CVE-2023-35763 | MEDIUM | 5.5 | 0.2% | Jul 18, 2023 | Iagona ScrutisWeb versions 2.1.37 and prior are vulnerable to a cryptographic vulnerability that could allow an unauthen... |
| CVE-2023-35189 | CRITICAL | 9.8 | 0.9% | Jul 18, 2023 | Iagona ScrutisWeb versions 2.1.37 and prior are vulnerable to a remote code execution vulnerability that could allow an... |
| CVE-2023-34330 | HIGH | 8.8 | 0.5% | Jul 18, 2023 | AMI SPx contains a vulnerability in the BMC where a user may inject code which could be executed via a Dynamic Redfish E... |
| CVE-2023-34329 | HIGH | 8 | 1.0% | Jul 18, 2023 | AMI MegaRAC SPx12 contains a vulnerability in BMC where a User may cause an authentication bypass by spoofing the HTTP h... |
| CVE-2023-33871 | HIGH | 7.5 | 1.2% | Jul 18, 2023 | Iagona ScrutisWeb versions 2.1.37 and prior are vulnerable to a directory traversal vulnerability that could allow an un... |
| CVE-2023-33329 | MEDIUM | 4.8 | 0.4% | Jul 18, 2023 | Auth. (admin+) Reflected Cross-Site Scripting (XSS) vulnerability in Hijiri Custom Post Type Generator plugin <= 2.4.2 v... |
| CVE-2023-33312 | MEDIUM | 6.1 | 0.4% | Jul 18, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in wppal Easy Captcha plugin <= 1.0 versions. |
| CVE-2023-28019 | HIGH | 8.8 | 0.4% | Jul 18, 2023 | Insufficient validation in Bigfix WebUI API App site version < 14 allows an authenticated WebUI user to issue SQL querie... |
| CVE-2023-37259 | MEDIUM | 5.4 | 0.4% | Jul 18, 2023 | matrix-react-sdk is a react-based SDK for inserting a Matrix chat/voip client into a web page. The Export Chat feature i... |
| CVE-2023-33231 | MEDIUM | 6.1 | 0.5% | Jul 18, 2023 | XSS attack was possible in DPA 2023.2 due to insufficient input validation |
| CVE-2023-0160 | MEDIUM | 5.5 | 0.3% | Jul 18, 2023 | A deadlock flaw was found in the Linux kernel’s BPF subsystem. This flaw allows a local user to potentially crash the sy... |
| CVE-2023-34035 | MEDIUM | 5.3 | 0.6% | Jul 18, 2023 | Spring Security versions 5.8 prior to 5.8.5, 6.0 prior to 6.0.5, and 6.1 prior to 6.1.2 could be susceptible to authoriz... |
| CVE-2023-33265 | HIGH | 8.8 | 0.6% | Jul 18, 2023 | In Hazelcast through 5.0.4, 5.1 through 5.1.6, and 5.2 through 5.2.3, executor services don't check client permissions p... |
| CVE-2023-2263 | HIGH | 7.5 | 0.7% | Jul 18, 2023 | The Rockwell Automation Kinetix 5700 DC Bus Power Supply Series A is vulnerable to CIP fuzzing. The new ENIP connectio... |
| CVE-2023-36384 | MEDIUM | 6.1 | 0.4% | Jul 18, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in CodePeople Booking Calendar Contact Form plugin <= 1.2.40 ... |
| CVE-2023-36383 | MEDIUM | 5.4 | 0.3% | Jul 18, 2023 | Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in MagePeople Team Event Manager and Tickets Selling Plu... |
| CVE-2023-36120 | — | — | — | Jul 18, 2023 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further inv... |
| CVE-2023-31441 | MEDIUM | 5.5 | 0.3% | Jul 18, 2023 | In NATO Communications and Information Agency anet (aka Advisor Network) through 3.3.0, an attacker can provide a crafte... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now