2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-1604 | MEDIUM | 4.7 | 0.2% | Aug 17, 2024 | The Short URL plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.6.8. ... |
| CVE-2023-4717 | — | — | — | Aug 16, 2024 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All r... |
| CVE-2023-47728 | MEDIUM | 6.5 | 0.5% | Aug 16, 2024 | IBM QRadar Suite Software 1.10.12.0 through 1.10.22.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could al... |
| CVE-2023-3207 | — | — | — | Aug 16, 2024 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-31237. Reason: This candidate is a ... |
| CVE-2023-5888 | — | — | — | Aug 16, 2024 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-7246. Reason: This candidate is a r... |
| CVE-2023-2920 | — | — | — | Aug 16, 2024 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-1503. Reason: This candidate is a r... |
| CVE-2023-7049 | MEDIUM | 4.3 | 0.4% | Aug 16, 2024 | The Custom Field For WP Job Manager plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versio... |
| CVE-2023-37228 | — | — | — | Aug 15, 2024 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and... |
| CVE-2023-50314 | HIGH | 7.5 | 0.3% | Aug 14, 2024 | IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.8 could allow an attacker with access to the network to... |
| CVE-2023-50315 | MEDIUM | 5.9 | 0.3% | Aug 14, 2024 | IBM WebSphere Application Server 8.5 and 9.0 could allow an attacker with access to the network to conduct spoofing atta... |
| CVE-2023-49144 | HIGH | 8.1 | 0.2% | Aug 14, 2024 | Out of bounds read in OpenBMC Firmware for some Intel(R) Server Platforms before versions egs-1.15-0, bhs-0.27 may allow... |
| CVE-2023-49141 | HIGH | 7.8 | 0.3% | Aug 14, 2024 | Improper isolation in some Intel(R) Processors stream cache mechanism may allow an authenticated user to potentially ena... |
| CVE-2023-48361 | MEDIUM | 4.6 | 0.2% | Aug 14, 2024 | Improper initialization in firmware for some Intel(R) CSME may allow a privileged user to potentially enable information... |
| CVE-2023-43747 | MEDIUM | 6.7 | 0.1% | Aug 14, 2024 | Incorrect default permissions for some Intel(R) Connectivity Performance Suite software installers before version 2.0 ma... |
| CVE-2023-43489 | MEDIUM | 5.5 | 0.1% | Aug 14, 2024 | Improper access control for some Intel(R) CIP software before version 2.4.10717 may allow an authenticated user to poten... |
| CVE-2023-42667 | HIGH | 7.8 | 0.2% | Aug 14, 2024 | Improper isolation in the Intel(R) Core(TM) Ultra Processor stream cache mechanism may allow an authenticated user to po... |
| CVE-2023-40067 | MEDIUM | 5.7 | 0.2% | Aug 14, 2024 | Unchecked return value in firmware for some Intel(R) CSME may allow an unauthenticated user to potentially enable escala... |
| CVE-2023-38655 | MEDIUM | 6.9 | 0.5% | Aug 14, 2024 | Improper buffer restrictions in firmware for some Intel(R) AMT and Intel(R) Standard Manageability may allow a privilege... |
| CVE-2023-35123 | MEDIUM | 5.9 | 0.4% | Aug 14, 2024 | Uncaught exception in OpenBMC Firmware for some Intel(R) Server Platforms before versions egs-1.14-0, bhs-0.27 may allow... |
| CVE-2023-34424 | MEDIUM | 6.7 | 0.2% | Aug 14, 2024 | Improper input validation in firmware for some Intel(R) CSME may allow a privileged user to potentially enable denial of... |
| CVE-2023-31366 | MEDIUM | 5.5 | 0.1% | Aug 13, 2024 | Improper input validation in AMD μProf could allow an attacker to perform a write to an invalid address, potentially res... |
| CVE-2023-31356 | MEDIUM | 4.4 | 0.2% | Aug 13, 2024 | Incomplete system memory cleanup in SEV firmware could allow a privileged attacker to corrupt guest private memory, pote... |
| CVE-2023-31349 | HIGH | 7.8 | 0.2% | Aug 13, 2024 | Incorrect default permissions in the AMD μProf installation directory could allow an attacker to achieve privilege escal... |
| CVE-2023-31348 | HIGH | 7.8 | 0.2% | Aug 13, 2024 | A DLL hijacking vulnerability in AMD μProf could allow an attacker to achieve privilege escalation, potentially resultin... |
| CVE-2023-31341 | MEDIUM | 5.5 | 0.1% | Aug 13, 2024 | Insufficient validation of the Input Output Control (IOCTL) input buffer in AMD μProf may allow an authenticated attacke... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now