2023 CVE Vulnerabilities
31,510 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-2007 | HIGH | 7.8 | 0.3% | Apr 24, 2023 | The specific flaw exists within the DPT I2O Controller driver. The issue results from the lack of proper locking when pe... |
| CVE-2023-30629 | HIGH | 7.5 | 0.9% | Apr 24, 2023 | Vyper is a Pythonic Smart Contract Language for the ethereum virtual machine. In versions 0.3.1 through 0.3.7, the Vyper... |
| CVE-2023-30628 | HIGH | 8.8 | 3.6% | Apr 24, 2023 | Kiwi TCMS is an open source test management system. In kiwitcms/Kiwi v12.2 and prior and kiwitcms/enterprise v12.2 and p... |
| CVE-2023-30623 | HIGH | 8.8 | 3.7% | Apr 24, 2023 | `embano1/wip` is a GitHub Action written in Bash. Prior to version 2, the `embano1/wip` action uses the `github.event.p... |
| CVE-2023-30414 | MEDIUM | 5.5 | 0.3% | Apr 24, 2023 | Jerryscript commit 1a2c047 was discovered to contain a stack overflow via the component vm_loop at /jerry-core/vm/vm.c. |
| CVE-2023-30410 | MEDIUM | 5.5 | 0.3% | Apr 24, 2023 | Jerryscript commit 1a2c047 was discovered to contain a stack overflow via the component ecma_op_function_construct at /o... |
| CVE-2023-30408 | MEDIUM | 5.5 | 0.3% | Apr 24, 2023 | Jerryscript commit 1a2c047 was discovered to contain a segmentation violation via the component build/bin/jerry. |
| CVE-2023-30406 | MEDIUM | 5.5 | 0.3% | Apr 24, 2023 | Jerryscript commit 1a2c047 was discovered to contain a segmentation violation via the component ecma_find_named_property... |
| CVE-2023-30627 | MEDIUM | 5.4 | 1.3% | Apr 24, 2023 | jellyfin-web is the web client for Jellyfin, a free-software media system. Starting in version 10.1.0 and prior to versi... |
| CVE-2023-30626 | HIGH | 8.1 | 2.0% | Apr 24, 2023 | Jellyfin is a free-software media system. Versions starting with 10.8.0 and prior to 10.8.10 and prior have a directory ... |
| CVE-2023-2260 | HIGH | 8.8 | 0.9% | Apr 24, 2023 | Authorization Bypass Through User-Controlled Key in GitHub repository alfio-event/alf.io prior to 2.0-M4-2304. |
| CVE-2023-2259 | HIGH | 7.2 | 1.1% | Apr 24, 2023 | Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository alfio-event/alf.io prior to 2... |
| CVE-2023-2258 | HIGH | 8.8 | 0.9% | Apr 24, 2023 | Improper Neutralization of Formula Elements in a CSV File in GitHub repository alfio-event/alf.io prior to 2.0-M4-2304. |
| CVE-2023-2250 | MEDIUM | 6.7 | 0.2% | Apr 24, 2023 | A flaw was found in the Open Cluster Management (OCM) when a user have access to the worker nodes which has the cluster-... |
| CVE-2023-2019 | MEDIUM | 4.4 | 0.3% | Apr 24, 2023 | A flaw was found in the Linux kernel's netdevsim device driver, within the scheduling of events. This issue results from... |
| CVE-2023-2006 | HIGH | 7 | 0.4% | Apr 24, 2023 | A race condition was found in the Linux kernel's RxRPC network protocol, within the processing of RxRPC bundles. This is... |
| CVE-2023-29469 | MEDIUM | 6.5 | 1.0% | Apr 24, 2023 | An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document, xmlDictComp... |
| CVE-2023-28484 | MEDIUM | 6.5 | 0.9% | Apr 24, 2023 | In libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference and subsequently... |
| CVE-2023-29530 | MEDIUM | 6.5 | 1.0% | Apr 24, 2023 | Laminas Diactoros provides PSR HTTP Message implementations. In versions 2.18.0 and prior, 2.19.0, 2.20.0, 2.21.0, 2.22.... |
| CVE-2023-2257 | HIGH | 7.8 | 0.2% | Apr 24, 2023 | Authentication Bypass in Hub Business integration in Devolutions Workspace Desktop 2023.1.1.3 and earlier on Windows and... |
| CVE-2023-29780 | HIGH | 7.5 | 1.1% | Apr 24, 2023 | Third Reality Smart Blind 1.00.54 contains a denial-of-service vulnerability, which allows a remote attacker to send mal... |
| CVE-2023-1624 | MEDIUM | 6.5 | 0.3% | Apr 24, 2023 | The WPCode WordPress plugin before 2.0.9 has a flawed CSRF when deleting log, and does not ensure that the file to be de... |
| CVE-2023-1623 | MEDIUM | 6.5 | 0.4% | Apr 24, 2023 | The Custom Post Type UI WordPress plugin before 1.13.5 does not properly check for CSRF when sending the debug informati... |
| CVE-2023-1435 | MEDIUM | 6.1 | 0.5% | Apr 24, 2023 | The Ajax Search Pro WordPress plugin before 4.26.2 does not sanitise and escape various parameters before outputting the... |
| CVE-2023-1420 | MEDIUM | 6.1 | 0.5% | Apr 24, 2023 | The Ajax Search Lite WordPress plugin before 4.11.1, Ajax Search Pro WordPress plugin before 4.26.2 does not sanitise an... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now