2023 CVE Vulnerabilities

31,475 CVEs published in 2023.

Filter:CRITICALClear
CVE IDSeverityCVSSDescription
CVE-2023-39268CRITICAL9.8A memory corruption vulnerability in ArubaOS-Switch could lead to unauthenticated remote code execution by receiving spe...
CVE-2023-34039CRITICAL9.8Aria Operations for Networks contains an Authentication Bypass vulnerability due to a lack of unique cryptographic key g...
CVE-2023-40890CRITICAL9.8A stack-based buffer overflow vulnerability exists in the lookup_sequence function of ZBar 0.23.90. Specially crafted QR...
CVE-2023-40889CRITICAL9.8A heap-based buffer overflow exists in the qr_reader_match_centers function of ZBar 0.23.90. Specially crafted QR codes ...
CVE-2023-40787CRITICAL9.8In SpringBlade V3.6.0 when executing SQL query, the parameters submitted by the user are not wrapped in quotation marks,...
CVE-2023-23770CRITICAL9.8Motorola MBTS Site Controller accepts hard-coded backdoor password. The Motorola MBTS Site Controller Man Machine Interf...
CVE-2023-41361CRITICAL9.8An issue was discovered in FRRouting FRR 9.0. bgpd/bgp_open.c does not check for an overly large length of the rcv softw...
CVE-2023-41360CRITICAL9.1An issue was discovered in FRRouting FRR through 9.0. bgpd/bgp_packet.c can read the initial byte of the ORF header in a...
CVE-2023-41359CRITICAL9.1An issue was discovered in FRRouting FRR through 9.0. There is an out-of-bounds read in bgp_attr_aigp_valid in bgpd/bgp_...
CVE-2023-39650CRITICAL9.8Theme Volty CMS Blog up to version v4.0.1 was discovered to contain a SQL injection vulnerability via the id parameter a...
CVE-2023-39652CRITICAL9.8theme volty tvcmsvideotab up to v4.0.0 was discovered to contain a SQL injection vulnerability via the component TvcmsVi...
CVE-2023-41109CRITICAL9.8SmartNode SN200 (aka SN200) 3.21.2-23021 allows unauthenticated OS Command Injection.
CVE-2023-39560CRITICAL9.8ECTouch v2 was discovered to contain a SQL injection vulnerability via the $arr['id'] parameter at \default\helpers\inse...
CVE-2023-40846CRITICAL9.8Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function sub_90998.
CVE-2023-40767CRITICAL9.8User enumeration is found in in PHPJabbers Make an Offer Widget v1.0. This issue occurs during password recovery, where ...
CVE-2023-40766CRITICAL9.8User enumeration is found in in PHPJabbers Ticket Support Script v3.2. This issue occurs during password recovery, where...
CVE-2023-40765CRITICAL9.8User enumeration is found in PHPJabbers Event Booking Calendar v4.0. This issue occurs during password recovery, where a...
CVE-2023-40764CRITICAL9.8User enumeration is found in PHP Jabbers Car Rental Script v3.0. This issue occurs during password recovery, where a dif...
CVE-2023-40763CRITICAL9.8User enumeration is found in PHPJabbers Taxi Booking Script v2.0. This issue occurs during password recovery, where a di...
CVE-2023-40762CRITICAL9.8User enumeration is found in PHPJabbers Fundraising Script v1.0. This issue occurs during password recovery, where a dif...
CVE-2023-40761CRITICAL9.8User enumeration is found in PHPJabbers Yacht Listing Script v2.0. This issue occurs during password recovery, where a d...
CVE-2023-40760CRITICAL9.8User enumeration is found in PHP Jabbers Hotel Booking System v4.0. This issue occurs during password recovery, where a ...
CVE-2023-40759CRITICAL9.8User enumeration is found in PHP Jabbers Restaurant Booking Script v3.0. This issue occurs during password recovery, whe...
CVE-2023-40758CRITICAL9.8User enumeration is found in PHPJabbers Document Creator v1.0. This issue occurs during password recovery, where a diffe...
CVE-2023-40757CRITICAL9.8User enumeration is found in PHPJabbers Food Delivery Script v3.1. This issue occurs during password recovery, where a d...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now