2023 CVE Vulnerabilities
31,510 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-31746 | CRITICAL | 9.8 | 3.2% | Jun 14, 2023 | There is a command injection vulnerability in the adslr VW2100 router with firmware version M1DV1.0. An unauthenticated ... |
| CVE-2023-30150 | CRITICAL | 9.8 | 3.8% | Jun 14, 2023 | PrestaShop leocustomajax 1.0 and 1.0.0 are vulnerable to SQL Injection via modules/leocustomajax/leoajax.php. |
| CVE-2023-26965 | MEDIUM | 5.5 | 0.4% | Jun 14, 2023 | loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image. |
| CVE-2023-1329 | CRITICAL | 9.8 | 1.9% | Jun 14, 2023 | A potential security vulnerability has been identified for certain HP multifunction printers (MFPs). The vulnerability m... |
| CVE-2023-34367 | MEDIUM | 6.5 | 1.2% | Jun 14, 2023 | Windows 7 is vulnerable to a full blind TCP/IP hijacking attack. The vulnerability exists in Windows 7 (any Windows unti... |
| CVE-2023-30082 | HIGH | 7.5 | 1.0% | Jun 14, 2023 | A denial of service attack might be launched against the server if an unusually lengthy password (more than 10000000 cha... |
| CVE-2023-26062 | HIGH | 7.8 | 0.2% | Jun 14, 2023 | A mobile network solution internal fault is found in Nokia Web Element Manager before 22 R1, in which an authenticated, ... |
| CVE-2023-25434 | HIGH | 8.8 | 0.8% | Jun 14, 2023 | libtiff 4.5.0 is vulnerable to Buffer Overflow via extractContigSamplesBytes() at /libtiff/tools/tiffcrop.c:3215. |
| CVE-2023-25369 | HIGH | 7.5 | 0.8% | Jun 14, 2023 | Siglent SDS 1104X-E SDS1xx4X-E_V6.1.37R9.ADS is vulnerable to Denial of Service on the user interface triggered by malfo... |
| CVE-2023-25368 | HIGH | 7.5 | 0.8% | Jun 14, 2023 | Siglent SDS 1104X-E SDS1xx4X-E_V6.1.37R9.ADS is vulnerable to Incorrect Access Control. An unauthenticated attacker can ... |
| CVE-2023-31671 | CRITICAL | 9.8 | 0.6% | Jun 14, 2023 | PrestaShop postfinance <= 17.1.13 is vulnerable to SQL Injection via PostfinanceValidationModuleFrontController::postPro... |
| CVE-2023-2976 | HIGH | 7.1 | 0.2% | Jun 14, 2023 | Use of Java's default temporary directory for file creation in `FileBackedOutputStream` in Google Guava versions 1.0 to ... |
| CVE-2023-34095 | CRITICAL | 9.8 | 1.5% | Jun 14, 2023 | cpdb-libs provides frontend and backend libraries for the Common Printing Dialog Backends (CPDB) project. In versions 1.... |
| CVE-2023-25367 | CRITICAL | 9.8 | 1.7% | Jun 14, 2023 | Siglent SDS 1104X-E SDS1xx4X-E_V6.1.37R9.ADS allows unfiltered user input resulting in Remote Code Execution (RCE) with ... |
| CVE-2023-0010 | MEDIUM | 5.4 | 0.4% | Jun 14, 2023 | A reflected cross-site scripting (XSS) vulnerability in the Captive Portal feature of Palo Alto Networks PAN-OS software... |
| CVE-2023-0009 | HIGH | 7.8 | 0.2% | Jun 14, 2023 | A local privilege escalation (PE) vulnerability in the Palo Alto Networks GlobalProtect app on Windows enables a local u... |
| CVE-2023-34868 | HIGH | 7.5 | 0.7% | Jun 14, 2023 | Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the parser_parse_for_statement_start... |
| CVE-2023-34867 | HIGH | 7.5 | 0.7% | Jun 14, 2023 | Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the ecma_property_hashmap_create at ... |
| CVE-2023-34540 | CRITICAL | 9.8 | 1.7% | Jun 14, 2023 | Langchain before v0.0.225 was discovered to contain a remote code execution (RCE) vulnerability in the component JiraAPI... |
| CVE-2023-34101 | CRITICAL | 9.1 | 0.5% | Jun 14, 2023 | Contiki-NG is an operating system for internet of things devices. In version 4.8 and prior, when processing ICMP DAO pac... |
| CVE-2023-32031 | HIGH | 8.8 | 81.8% | Jun 14, 2023 | Microsoft Exchange Server Remote Code Execution Vulnerability |
| CVE-2023-32030 | HIGH | 7.5 | 2.2% | Jun 14, 2023 | .NET and Visual Studio Denial of Service Vulnerability |
| CVE-2023-32024 | LOW | 3 | 1.5% | Jun 14, 2023 | Microsoft Power Apps Spoofing Vulnerability |
| CVE-2023-29337 | HIGH | 7.1 | 1.1% | Jun 14, 2023 | NuGet Client Remote Code Execution Vulnerability |
| CVE-2023-29331 | HIGH | 7.5 | 2.6% | Jun 14, 2023 | .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now