2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-7357 | HIGH | 8.6 | 0.4% | Oct 29, 2026 | A remote code execution (RCE) vulnerability was identified in the FlexNet Publisher lmadmin web user interface. This vul... |
| CVE-2023-7356 | HIGH | 8.8 | 0.3% | Oct 21, 2026 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Copy BASE if service data matches E... |
| CVE-2023-32198 | HIGH | 8 | 0.3% | Oct 15, 2026 | A vulnerability has been identified in Steve where by default it was using an insecure option that did not validate the ... |
| CVE-2023-54403 | HIGH | 7.5 | 0.5% | Sep 30, 2026 | Yonyou U8 CRM before V16.5 and V18 contains an arbitrary file read vulnerability in /ajax/getemaildata.php that allows u... |
| CVE-2023-54402 | HIGH | 7.5 | 0.4% | Sep 30, 2026 | iDocView contains a server-side request forgery vulnerability in its /doc/upload endpoint that allows remote unauthentic... |
| CVE-2023-5778 | HIGH | 7.5 | — | Sep 18, 2026 | Improper handling of length parameter inconsistency vulnerability in ABB Freelance Controller DCP, ABB Freelance Control... |
| CVE-2023-54397 | HIGH | 7.5 | 0.4% | Sep 15, 2026 | Tornado before 6.3.3 contains an HTTP request smuggling vulnerability due to improper parsing of Content-Length headers ... |
| CVE-2023-50461 | HIGH | 8.8 | 0.3% | Sep 14, 2026 | An issue was discovered in the direct_mail (aka Direct Mail) extension through 9.5.1 for TYPO3. The Configuration backen... |
| CVE-2023-46273 | HIGH | 8.8 | 0.3% | Sep 14, 2026 | Bonjour Gateway in Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, has an ah_bgd buffer ove... |
| CVE-2023-45858 | HIGH | 8.6 | 0.7% | Sep 14, 2026 | A directory traversal was identified in Paessler PRTG before 23.4.88.1429 that made it possible to read local files. |
| CVE-2023-32803 | HIGH | 7.5 | 0.2% | Sep 14, 2026 | The ca-certificates package before ca-certificates-2021.2.50-72 for Amazon Linux 2 (AL2) does not properly remove certai... |
| CVE-2023-28148 | HIGH | 7.2 | 0.2% | Sep 14, 2026 | A bodyclass XSS issue was discovered in Paessler PRTG before 23.3.86.1520. |
| CVE-2023-54393 | HIGH | 7.5 | 0.4% | Sep 9, 2026 | PocketMine-MP versions before 4.20.5 contain a denial of service vulnerability in LoginPacket JSON parsing due to improp... |
| CVE-2023-54390 | HIGH | 7.5 | 0.3% | Sep 9, 2026 | PocketMine-MP versions before 5.3.1 and 4.23.1 contain a denial of service vulnerability in LoginPacket JSON parsing due... |
| CVE-2023-54355 | HIGH | 7.5 | 0.2% | Sep 9, 2026 | PocketMine-MP versions before 5.3.1 and 4.23.1 fail to validate that the identityPublicKey in LoginPacket uses the requi... |
| CVE-2023-20577 | HIGH | 7.4 | 0.2% | Sep 2, 2026 | A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI fl... |
| CVE-2023-20576 | HIGH | 7.7 | 0.1% | Sep 2, 2026 | Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM data potentially result... |
| CVE-2023-37507 | HIGH | 7.5 | 0.4% | Jul 21, 2026 | HCL DevOps Plan is susceptible to an information disclosure that can allow an attacker to focus their attacks based upon... |
| CVE-2023-54366 | HIGH | 8.8 | 0.5% | Jul 18, 2026 | SurrealDB before 1.0.1 sets default table permissions to FULL instead of NONE, allowing SELECT, CREATE, UPDATE, and DELE... |
| CVE-2023-37524 | HIGH | 7.8 | 0.3% | Jun 27, 2026 | HCL Traveler for Microsoft Outlook (HTMO) is susceptible to vulnerabilities due to .NET Framework 4.5 being out of servi... |
| CVE-2023-54365 | HIGH | 7.5 | 0.8% | Jun 23, 2026 | Traefik before 2.10.5 and 3.0.0-beta4 is affected by a denial-of-service vulnerability in HTTP/2 request handling inheri... |
| CVE-2023-45796 | HIGH | 8.1 | 0.6% | Jun 22, 2026 | A stored cross-site scripting vulnerability in the Runtime component of Pilz PASvisu before 1.14.1 and PMI v8xx up to an... |
| CVE-2023-45795 | HIGH | 7.8 | 0.2% | Jun 22, 2026 | A cross-site scripting vulnerability in the Builder Component of Pilz PASvisu before 1.14.1 allows a local unauthenticat... |
| CVE-2023-54357 | HIGH | 7.5 | 0.7% | Jun 19, 2026 | Joomla com_booking component 2.4.9 contains an information disclosure vulnerability that allows unauthenticated attacker... |
| CVE-2023-54353 | HIGH | 7.8 | 0.2% | Jun 19, 2026 | Chromacam 4.0.3.0 contains an unquoted service path vulnerability in the PsyFrameGrabberService that allows local attack... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now