2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-41364 | CRITICAL | 9.8 | 0.8% | Sep 1, 2023 | In tine through 2023.01.14.325, the sort parameter of the /index.php endpoint allows SQL Injection. |
| CVE-2023-4696 | CRITICAL | 9.8 | 0.9% | Sep 1, 2023 | Improper Access Control in GitHub repository usememos/memos prior to 0.13.2. |
| CVE-2023-40575 | CRITICAL | 9.1 | 1.1% | Aug 31, 2023 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versi... |
| CVE-2023-40574 | CRITICAL | 9.8 | 1.0% | Aug 31, 2023 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versi... |
| CVE-2023-40569 | CRITICAL | 9.8 | 1.1% | Aug 31, 2023 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versi... |
| CVE-2023-40567 | CRITICAL | 9.8 | 1.3% | Aug 31, 2023 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versi... |
| CVE-2023-40188 | CRITICAL | 9.1 | 1.2% | Aug 31, 2023 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versi... |
| CVE-2023-40187 | CRITICAL | 9.8 | 1.0% | Aug 31, 2023 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versi... |
| CVE-2023-40186 | CRITICAL | 9.8 | 1.1% | Aug 31, 2023 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versi... |
| CVE-2023-40181 | CRITICAL | 9.1 | 1.4% | Aug 31, 2023 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versi... |
| CVE-2023-39356 | CRITICAL | 9.1 | 1.5% | Aug 31, 2023 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. In affected ve... |
| CVE-2023-39353 | CRITICAL | 9.1 | 1.2% | Aug 31, 2023 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versi... |
| CVE-2023-39352 | CRITICAL | 9.8 | 1.3% | Aug 31, 2023 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versi... |
| CVE-2023-39355 | CRITICAL | 9.8 | 1.1% | Aug 31, 2023 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Versions of Fr... |
| CVE-2023-41748 | CRITICAL | 9.8 | 1.1% | Aug 31, 2023 | Remote command execution due to improper input validation. The following products are affected: Acronis Cloud Manager (W... |
| CVE-2023-41746 | CRITICAL | 9.8 | 1.1% | Aug 31, 2023 | Remote command execution due to improper input validation. The following products are affected: Acronis Cloud Manager (W... |
| CVE-2023-41034 | CRITICAL | 9.8 | 0.6% | Aug 31, 2023 | Eclipse Leshan is a device management server and client Java implementation. In affected versions DDFFileParser` and `De... |
| CVE-2023-31175 | CRITICAL | 9.8 | 0.4% | Aug 31, 2023 | An Execution with Unnecessary Privileges vulnerability in the Schweitzer Engineering Laboratories SEL-5037 SEL Grid Con... |
| CVE-2023-41637 | CRITICAL | 9.8 | 1.1% | Aug 31, 2023 | An arbitrary file upload vulnerability in the Carica immagine function of GruppoSCAI RealGimm 1.1.37p38 allows attackers... |
| CVE-2023-41636 | CRITICAL | 9.8 | 0.9% | Aug 31, 2023 | A SQL injection vulnerability in the Data Richiesta dal parameter of GruppoSCAI RealGimm v1.1.37p38 allows attackers to ... |
| CVE-2023-28801 | CRITICAL | 9.8 | 0.3% | Aug 31, 2023 | An Improper Verification of Cryptographic Signature in the SAML authentication of the Zscaler Admin UI allows a Privileg... |
| CVE-2023-3162 | CRITICAL | 9.8 | 1.0% | Aug 31, 2023 | The Stripe Payment Plugin for WooCommerce plugin for WordPress is vulnerable to authentication bypass in versions up to,... |
| CVE-2023-31424 | CRITICAL | 9.8 | 0.7% | Aug 31, 2023 | Brocade SANnav Web interface before Brocade SANnav v2.3.0 and v2.2.2a allows remote unauthenticated users to bypass web... |
| CVE-2023-31714 | CRITICAL | 9.8 | 3.3% | Aug 30, 2023 | Chitor-CMS before v1.1.2 was discovered to contain multiple SQL injection vulnerabilities. |
| CVE-2023-40582 | CRITICAL | 9.8 | 1.5% | Aug 30, 2023 | find-exec is a utility to discover available shell commands. Versions prior to 1.0.3 did not properly escape user input ... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now