2023 CVE Vulnerabilities
31,510 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-33747 | HIGH | 7.8 | 0.5% | Jun 6, 2023 | CloudPanel v2.2.2 allows attackers to execute a path traversal. |
| CVE-2023-33613 | MEDIUM | 5.5 | 0.3% | Jun 6, 2023 | axTLS v2.1.5 was discovered to contain a heap buffer overflow in the bi_import function in axtls-code/crypto/bigint.c. T... |
| CVE-2023-27126 | MEDIUM | 4.6 | 0.4% | Jun 6, 2023 | The AES Key-IV pair used by the TP-Link TAPO C200 camera V3 (EU) on firmware version 1.1.22 Build 220725 is reused acros... |
| CVE-2023-34111 | CRITICAL | 9.8 | 4.0% | Jun 6, 2023 | The `Release PR Merged` workflow in the github repo taosdata/grafanaplugin is subject to a command injection vulnerabili... |
| CVE-2023-32203 | HIGH | 7.8 | 0.2% | Jun 6, 2023 | Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI). This coul... |
| CVE-2023-31606 | HIGH | 7.5 | 1.5% | Jun 6, 2023 | A Regular Expression Denial of Service (ReDoS) issue was discovered in the sanitize_html function of redcloth gem v4.0.0... |
| CVE-2023-31278 | HIGH | 7.8 | 0.2% | Jun 6, 2023 | Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI). This coul... |
| CVE-2023-31244 | HIGH | 7.8 | 0.2% | Jun 6, 2023 | The affected product does not properly validate user-supplied data. If a user opens a maliciously for... |
| CVE-2023-2132 | HIGH | 7.5 | 1.3% | Jun 6, 2023 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 before 15.10.8, all versions star... |
| CVE-2023-29503 | HIGH | 7.8 | 0.2% | Jun 6, 2023 | The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). Th... |
| CVE-2023-28653 | HIGH | 7.8 | 0.2% | Jun 6, 2023 | The affected application lacks proper validation of user-supplied data when parsing project files (e.g.... |
| CVE-2023-27916 | HIGH | 7.8 | 0.2% | Jun 6, 2023 | The affected application lacks proper validation of user-supplied data when parsing font files (e.g., FNT... |
| CVE-2023-0921 | MEDIUM | 4.3 | 84.4% | Jun 6, 2023 | A lack of length validation in GitLab CE/EE affecting all versions from 8.3 before 15.10.8, 15.11 before 15.11.7, and 16... |
| CVE-2023-32551 | MEDIUM | 6.1 | 0.3% | Jun 6, 2023 | Landscape allowed URLs which caused open redirection. |
| CVE-2023-32550 | HIGH | 8.2 | 0.4% | Jun 6, 2023 | Landscape's server-status page exposed sensitive system information. This data leak included GET requests which contain ... |
| CVE-2023-32549 | HIGH | 7.5 | 0.5% | Jun 6, 2023 | Landscape cryptographic keys were insecurely generated with a weak pseudo-random generator. |
| CVE-2023-32539 | HIGH | 7.8 | 0.2% | Jun 6, 2023 | Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI). This coul... |
| CVE-2023-32289 | HIGH | 7.8 | 0.2% | Jun 6, 2023 | The affected application lacks proper validation of user-supplied data when parsing project files (e.g.., CSP... |
| CVE-2023-32281 | HIGH | 7.8 | 0.2% | Jun 6, 2023 | The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). ... |
| CVE-2023-32545 | HIGH | 7.8 | 0.2% | Jun 6, 2023 | The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CS... |
| CVE-2023-30948 | MEDIUM | 6.5 | 0.5% | Jun 6, 2023 | A security defect in Foundry's Comments functionality resulted in the retrieval of attachments to comments not being gat... |
| CVE-2023-3123 | — | — | — | Jun 6, 2023 | Rejected reason: Duplicate Assignment. |
| CVE-2023-33533 | HIGH | 8.8 | 3.1% | Jun 6, 2023 | Netgear D6220 with Firmware Version 1.0.0.80, D8500 with Firmware Version 1.0.3.60, R6700 with Firmware Version 1.0.2.26... |
| CVE-2023-33532 | CRITICAL | 9.8 | 18.0% | Jun 6, 2023 | There is a command injection vulnerability in the Netgear R6250 router with Firmware Version 1.0.4.48. If an attacker ga... |
| CVE-2023-33457 | HIGH | 8.8 | 0.8% | Jun 6, 2023 | In Sogou Workflow v0.10.6, memcpy a negtive size in URIParser::parse , may cause buffer-overflow and crash. |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now