2023 CVE Vulnerabilities
31,510 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-37801 | — | — | — | Jul 15, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2023-37800 | — | — | — | Jul 15, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2023-36169 | — | — | — | Jul 15, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2023-36168 | — | — | — | Jul 15, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2023-36166 | — | — | — | Jul 15, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2023-36165 | — | — | — | Jul 15, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2023-30791 | MEDIUM | 4.6 | 0.5% | Jul 15, 2023 | Plane version 0.7.1-dev allows an attacker to change the avatar of his profile, which allows uploading files with HTML e... |
| CVE-2023-2507 | MEDIUM | 6.1 | 0.7% | Jul 15, 2023 | CleverTap Cordova Plugin version 2.6.2 allows a remote attacker to execute JavaScript code in any application that is op... |
| CVE-2023-2268 | HIGH | 7.5 | 0.6% | Jul 15, 2023 | Plane version 0.7.1 allows an unauthenticated attacker to view all stored server files of all users. |
| CVE-2023-3682 | CRITICAL | 9.8 | 0.4% | Jul 15, 2023 | A vulnerability, which was classified as critical, was found in Nesote Inout Blockchain EasyPayments 1.0. Affected is an... |
| CVE-2023-3681 | MEDIUM | 6.1 | 0.5% | Jul 15, 2023 | A vulnerability classified as problematic was found in Campcodes Retro Cellphone Online Store 1.0. This vulnerability af... |
| CVE-2023-3680 | CRITICAL | 9.8 | 0.4% | Jul 15, 2023 | A vulnerability classified as critical has been found in SourceCodester Lost and Found Information System 1.0. This affe... |
| CVE-2023-3679 | CRITICAL | 9.8 | 0.4% | Jul 15, 2023 | A vulnerability was found in SourceCodester Lost and Found Information System 1.0. It has been rated as critical. Affect... |
| CVE-2023-3678 | CRITICAL | 9.8 | 0.4% | Jul 15, 2023 | A vulnerability was found in SourceCodester AC Repair and Services System 1.0. It has been declared as critical. Affecte... |
| CVE-2023-38350 | MEDIUM | 5.4 | 0.4% | Jul 15, 2023 | PNP4Nagios through 81ebfc5 has stored XSS in the AJAX controller via the basket API and filters. This affects 0.6.26. |
| CVE-2023-38349 | HIGH | 8.8 | 0.3% | Jul 15, 2023 | PNP4Nagios through 81ebfc5 lacks CSRF protection in the AJAX controller. This affects 0.6.26. |
| CVE-2023-35802 | CRITICAL | 9.8 | 0.9% | Jul 15, 2023 | IQ Engine before 10.6r1 on Extreme Network AP devices has a Buffer Overflow in the implementation of the CAPWAP protocol... |
| CVE-2023-37794 | CRITICAL | 9.8 | 2.1% | Jul 14, 2023 | WAYOS FBM-291W 19.09.11V was discovered to contain a command injection vulnerability via the component /upgrade_filter.a... |
| CVE-2023-37793 | CRITICAL | 9.8 | 0.8% | Jul 14, 2023 | WAYOS FBM-291W 19.09.11V was discovered to contain a buffer overflow via the component /upgrade_filter.asp. |
| CVE-2023-38337 | HIGH | 7.5 | 1.0% | Jul 14, 2023 | rswag before 2.10.1 allows remote attackers to read arbitrary JSON and YAML files via directory traversal, because rswag... |
| CVE-2023-38336 | CRITICAL | 9.8 | 1.8% | Jul 14, 2023 | netkit-rcp in rsh-client 0.17-24 allows command injection via filenames because /bin/sh is used by susystem, a related i... |
| CVE-2023-37268 | HIGH | 8.8 | 0.5% | Jul 14, 2023 | Warpgate is an SSH, HTTPS and MySQL bastion host for Linux that doesn't need special client apps. When logging in as a u... |
| CVE-2023-36818 | HIGH | 7.5 | 0.6% | Jul 14, 2023 | Discourse is an open source discussion platform. In affected versions a request to create or update custom sidebar secti... |
| CVE-2023-36466 | MEDIUM | 4.3 | 0.3% | Jul 14, 2023 | Discourse is an open source discussion platform. When editing a topic, there is a vulnerability that enables a user to b... |
| CVE-2023-34236 | MEDIUM | 6.5 | 0.7% | Jul 14, 2023 | Weave GitOps Terraform Controller (aka Weave TF-controller) is a controller for Flux to reconcile Terraform resources in... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now