2023 CVEs¶
116 entries from 2023. 45 ship detection & prevention rules.
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2023-20198 — Cisco IOS XE Web UI Privilege Escalation | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2023-22515 — Atlassian Confluence Broken Access Control | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2023-22527 — Atlassian Confluence Template Injection RCE | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2023-35078 — Ivanti EPMM Authentication Bypass | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2023-40044 — WS_FTP Server .NET Deserialization RCE | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2023-4617 — Incorrect authorization vulnerability in HTTP POST method in Govee Home application on… | Critical (10.0) | — | ✅ |
| CVE-2023-46604 — Apache ActiveMQ RCE | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2023-49103 — ownCloud graphapi Information Disclosure | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2023-51409 — Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine:… | Critical (10.0) | — | ✅ |
| CVE-2023-7028 — GitLab Password Reset Account Takeover | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2023-1671 — A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web… | Critical (9.8) | — | ✅ |
| CVE-2023-20887 — Aria Operations for Networks contains a command injection vulnerability. | Critical (9.8) | — | ✅ |
| CVE-2023-22518 — Atlassian Confluence Improper Authorization | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2023-23397 — Microsoft Outlook Privilege Escalation | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2023-24489 — A vulnerability has been discovered in the customer-managed ShareFile storage zones… | Critical (9.8) | — | ✅ |
| CVE-2023-25280 — OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to… | Critical (9.8) | — | ✅ |
| CVE-2023-25690 — Apache HTTP Server mod_proxy HTTP Request Smuggling | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2023-25717 — Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated… | Critical (9.8) | — | ✅ |
| CVE-2023-26359 — Adobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and earlier)… | Critical (9.8) | — | ✅ |
| CVE-2023-27350 — PaperCut MF/NG Authentication Bypass RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2023-27992 — The pre-authentication command injection vulnerability in the Zyxel NAS326 firmware… | Critical (9.8) | — | ✅ |
| CVE-2023-27997 — A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below,… | Critical (9.8) | — | ✅ |
| CVE-2023-28461 — Array Networks Array AG Series and vxAG (9.4.0.481 and earlier) allow remote code… | Critical (9.8) | — | ✅ |
| CVE-2023-28771 — Zyxel Firewall Command Injection | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2023-29300 — Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468… | Critical (9.8) | — | ✅ |
| CVE-2023-29357 — Microsoft SharePoint Server Privilege Escalation | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2023-29492 — Novi Survey before 8.9.43676 allows remote attackers to execute arbitrary code on the… | Critical (9.8) | — | ✅ |
| CVE-2023-33009 — A buffer overflow vulnerability in the notification function in Zyxel ATP series firmware… | Critical (9.8) | — | ✅ |
| CVE-2023-33010 — A buffer overflow vulnerability in the ID processing function in Zyxel ATP series… | Critical (9.8) | — | ✅ |
| CVE-2023-33246 — For RocketMQ versions 5.1.0 and below, under certain conditions, there is a risk of… | Critical (9.8) | — | ✅ |
| CVE-2023-34048 — vCenter Server contains an out-of-bounds write vulnerability in the implementation of the… | Critical (9.8) | — | ✅ |
| CVE-2023-34362 — MOVEit Transfer SQL Injection | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2023-3519 — Citrix NetScaler ADC/Gateway RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2023-36845 — Juniper Junos OS PHP External Variable Modification | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2023-37920 — Certifi Trust Root Removal | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2023-38203 — Adobe ColdFusion versions 2018u17 (and earlier), 2021u7 (and earlier) and 2023u1 (and… | Critical (9.8) | — | ✅ |
| CVE-2023-38545 — curl SOCKS5 Heap Buffer Overflow | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2023-42115 — Exim AUTH Out-of-Bounds Write | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2023-42793 — JetBrains TeamCity Authentication Bypass RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2023-43208 — NextGen Healthcare Mirth Connect before version 4.4.1 is vulnerable to unauthenticated… | Critical (9.8) | — | ✅ |
| CVE-2023-44453 — Mirth Connect RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2023-46747 — Undisclosed requests may bypass configuration utility authentication, allowing an… | Critical (9.8) | — | ✅ |
| CVE-2023-47246 — In SysAid On-Premise before 23.3.36, a path traversal vulnerability leads to code… | Critical (9.8) | — | ✅ |
| CVE-2023-48788 — Fortinet FortiClientEMS SQL Injection | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2023-49899 — An unauthenticated remote attacker can execute any command on the affected device due to… | Critical (9.8) | — | ✅ |
| CVE-2023-49900 — An unauthenticated remote attacker is able to perform remote code execution due to… | Critical (9.8) | — | ✅ |
| CVE-2023-50164 — Apache Struts File Upload RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2023-6448 — Unitronics VisiLogic before version 9.9.00, used in Vision and Samba PLCs and HMIs, uses… | Critical (9.8) | — | ✅ |
| CVE-2023-6875 — WordPress POST SMTP Authentication Bypass | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2023-2136 — Integer overflow in Skia in Google Chrome prior to 112.0.5615.137 allowed a remote… | Critical (9.6) | — | ✅ |
| CVE-2023-41265 — An HTTP Request Tunneling vulnerability found in Qlik Sense Enterprise for Windows for… | Critical (9.6) | — | ✅ |
| CVE-2023-48365 — Qlik Sense Enterprise for Windows before August 2023 Patch 2 allows unauthenticated… | Critical (9.6) | — | ✅ |
| CVE-2023-6345 — Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote… | Critical (9.6) | — | ✅ |
| CVE-2023-2868 — Barracuda ESG Command Injection | Critical (9.4) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2023-20269 — Cisco ASA VPN Brute Force / Unauthorized Access | Critical (9.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2023-34192 — Cross Site Scripting vulnerability in Zimbra ZCS v.8.8.15 allows a remote authenticated… | Critical (9.0) | — | ✅ |
| CVE-2023-27524 — Session Validation attacks in Apache Superset versions up to and including 2.0.1. | High (8.9) | — | ✅ |
| CVE-2023-1389 — TP-Link Archer AX21 (AX1800) firmware versions before 1.1.4 Build 20230219 contained a… | High (8.8) | — | ✅ |
| CVE-2023-2033 — Type confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker… | High (8.8) | — | ✅ |
| CVE-2023-21674 — Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability | High (8.8) | — | ✅ |
| CVE-2023-22952 — In SugarCRM before 12.0. | High (8.8) | — | ✅ |
| CVE-2023-23529 — A type confusion issue was addressed with improved checks. | High (8.8) | — | ✅ |
| CVE-2023-25194 — Apache Kafka Connect RCE | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2023-28205 — A use after free issue was addressed with improved memory management. | High (8.8) | — | ✅ |
| CVE-2023-28434 — Minio is a Multi-Cloud Object Storage framework. | High (8.8) | — | ✅ |
| CVE-2023-3079 — Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker… | High (8.8) | — | ✅ |
| CVE-2023-32049 — Windows SmartScreen Security Feature Bypass Vulnerability | High (8.8) | — | ✅ |
| CVE-2023-32373 — A use-after-free issue was addressed with improved memory management. | High (8.8) | — | ✅ |
| CVE-2023-32435 — A memory corruption issue was addressed with improved state management. | High (8.8) | — | ✅ |
| CVE-2023-32439 — A type confusion issue was addressed with improved checks. | High (8.8) | — | ✅ |
| CVE-2023-33538 — TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain… | High (8.8) | — | ✅ |
| CVE-2023-35311 — CVE ID: CVE-2023-35311, CWE: CWE-367, Attack Vector: NETWORK, CVSS: 8.8 | High (8.8) | — | ✅ |
| CVE-2023-36025 — Windows SmartScreen Security Feature Bypass Vulnerability | High (8.8) | — | ✅ |
| CVE-2023-37450 — The issue was addressed with improved checks. | High (8.8) | — | ✅ |
| CVE-2023-39780 — On ASUS RT-AX55 3.0.0.4.386.51598 devices, authenticated attackers can perform OS command… | High (8.8) | — | ✅ |
| CVE-2023-41993 — The issue was addressed with improved checks. | High (8.8) | — | ✅ |
| CVE-2023-42917 — A memory corruption vulnerability was addressed with improved locking. | High (8.8) | — | ✅ |
| CVE-2023-45133 — Babel Code Execution | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2023-46748 — An authenticated SQL injection vulnerability exists in the BIG-IP Configuration utility… | High (8.8) | — | ✅ |
| CVE-2023-4762 — Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker… | High (8.8) | — | ✅ |
| CVE-2023-4863 — Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp… | High (8.8) | — | ✅ |
| CVE-2023-49897 — An OS command injection vulnerability exists in AE1021PE firmware version 2.0.9 and… | High (8.8) | — | ✅ |
| CVE-2023-52163 — Digiever DS-2105 Pro 3.1.0.71-11 devices allow time_tzsetup.cgi Command Injection. | High (8.8) | — | ✅ |
| CVE-2023-5217 — Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132… | High (8.8) | — | ✅ |
| CVE-2023-52251 — Kafka UI Groovy RCE | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2023-7024 — Heap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a remote… | High (8.8) | — | ✅ |
| CVE-2023-26360 — Adobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and earlier)… | High (8.6) | — | ✅ |
| CVE-2023-28206 — An out-of-bounds write issue was addressed with improved input validation. | High (8.6) | — | ✅ |
| CVE-2023-32315 — Openfire Path Traversal Admin Bypass | High (8.6) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2023-32409 — The issue was addressed with improved bounds checks. | High (8.6) | — | ✅ |
| CVE-2023-2533 — A Cross-Site Request Forgery (CSRF) vulnerability has been identified in | High (8.4) | — | ✅ |
| CVE-2023-29360 — CVE ID: CVE-2023-29360, CWE: CWE-822, Attack Vector: LOCAL, CVSS: 8.4 | High (8.4) | — | ✅ |
| CVE-2023-33106 — Memory corruption while submitting a large list of sync points in an AUX command to the… | High (8.4) | — | ✅ |
| CVE-2023-33107 — Memory corruption in Graphics Linux while assigning shared virtual memory region during… | High (8.4) | — | ✅ |
| CVE-2023-36884 — Windows Search RCE (Office/Windows) | High (8.3) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2023-41266 — A path traversal vulnerability found in Qlik Sense Enterprise for Windows for versions… | High (8.2) | — | ✅ |
| CVE-2023-46805 — Ivanti Connect Secure Authentication Bypass | High (8.2) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2023-6549 — Improper Restriction of Operations within the Bounds of a Memory Buffer in NetScaler ADC… | High (8.2) | — | ✅ |
| CVE-2023-34040 — Spring Kafka Deserialization RCE | High (8.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2023-47565 — An OS command injection vulnerability has been found to affect legacy QNAP VioStor NVR… | High (8.0) | — | ✅ |
| CVE-2023-21912 — MySQL Server Privilege DoS | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2023-21971 — MySQL Connector/J RCE | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2023-30861 — Flask Session Cookie Vulnerability | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2023-44487 — HTTP/2 Rapid Reset Attack | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2023-4966 — Citrix Bleed - Session Token Leakage | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2023-26159 — follow-redirects Hostname Spoofing | High (7.4) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2023-20273 — Cisco IOS XE Web UI Privilege Escalation | High (7.2) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2023-34567 — Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow… | Medium (6.7) | — | ✅ |
| CVE-2023-46118 — RabbitMQ HTTP API DoS | Medium (6.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2023-47627 — AIOHTTP Open Redirect | Medium (6.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2023-0437 — MongoDB C Driver UTF-8 Validation DoS | Medium (5.3) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2023-23456 — A heap-based buffer overflow issue was discovered in UPX in PackTmt::pack() in p_tmt.cpp… | Medium (5.3) | — | ✅ |
| CVE-2023-5678 — OpenSSL DH Key Generation Slowdown | Medium (5.3) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2023-35082 — CVE ID: CVE-2023-35082, CWE: CWE-287, Type: RCE, Attack Vector: NETWORK, CVSS: 9.8 | Unrated | — | ✅ |
| CVE-2023-38035 — CVE ID: CVE-2023-38035, CWE: CWE-863, Attack Vector: NETWORK, CVSS: 9.8 | Unrated | — | ✅ |
| CVE-2023-45249 — CVE ID: CVE-2023-45249, CWE: CWE-1393, Attack Vector: NETWORK, CVSS: 9.8 | Unrated | — | ✅ |