2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-51107 | HIGH | 7.5 | 0.7% | Dec 26, 2023 | A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in functon compute_colo... |
| CVE-2023-51106 | HIGH | 7.5 | 0.7% | Dec 26, 2023 | A floating point exception (divide-by-zero) vulnerability was discovered in mupdf 1.23.4 in function pnm_binary_read_ima... |
| CVE-2023-51105 | HIGH | 7.5 | 0.9% | Dec 26, 2023 | A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in function bmp_decompr... |
| CVE-2023-51104 | HIGH | 7.5 | 0.9% | Dec 26, 2023 | A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in function pnm_binary_... |
| CVE-2023-51103 | HIGH | 7.5 | 0.9% | Dec 26, 2023 | A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in the function fz_new_... |
| CVE-2023-49949 | HIGH | 8.1 | 0.6% | Dec 26, 2023 | Passwork before 6.2.0 allows remote authenticated users to bypass 2FA by sending all one million of the possible 6-digit... |
| CVE-2023-50968 | HIGH | 7.5 | 63.4% | Dec 26, 2023 | Arbitrary file properties reading vulnerability in Apache Software Foundation Apache OFBiz when user operates an uri cal... |
| CVE-2023-5180 | HIGH | 7.8 | 0.2% | Dec 26, 2023 | An issue was discovered in Open Design Alliance Drawings SDK before 2024.12. A corrupted value of number of sectors used... |
| CVE-2023-46681 | HIGH | 7.8 | 0.3% | Dec 26, 2023 | Improper neutralization of argument delimiters in a command ('Argument Injection') vulnerability in VR-S1000 firmware Ve... |
| CVE-2023-28616 | HIGH | 7.5 | 0.3% | Dec 26, 2023 | An issue was discovered in Stormshield Network Security (SNS) before 4.3.17, 4.4.x through 4.6.x before 4.6.4, and 4.7.x... |
| CVE-2023-38321 | HIGH | 7.5 | 1.1% | Dec 25, 2023 | OpenNDS, as used in Sierra Wireless ALEOS before 4.17.0.12 and other products, allows remote attackers to cause a denial... |
| CVE-2023-49226 | HIGH | 7.2 | 3.4% | Dec 25, 2023 | An issue was discovered in Peplink Balance Two before 8.4.0. Command injection in the traceroute feature of the administ... |
| CVE-2023-36486 | HIGH | 7.2 | 0.9% | Dec 25, 2023 | The workflow-engine of ILIAS before 7.23 and 8 before 8.3 allows remote authenticated users to run arbitrary system comm... |
| CVE-2023-36485 | HIGH | 7.2 | 0.8% | Dec 25, 2023 | The workflow-engine of ILIAS before 7.23 and 8 before 8.3 allows remote authenticated users to run arbitrary system comm... |
| CVE-2023-47091 | HIGH | 7.5 | 0.5% | Dec 25, 2023 | An issue was discovered in Stormshield Network Security (SNS) SNS 4.3.13 through 4.3.22 before 4.3.23, SNS 4.6.0 through... |
| CVE-2023-37188 | HIGH | 7.5 | 0.8% | Dec 25, 2023 | C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the function zfp_rate_decompress at zfp/b... |
| CVE-2023-37187 | HIGH | 7.5 | 0.8% | Dec 25, 2023 | C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the zfp/blosc2-zfp.c zfp_acc_decompress. ... |
| CVE-2023-37186 | HIGH | 7.5 | 0.8% | Dec 25, 2023 | C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference in ndlz/ndlz8x8.c via a NULL pointer to memse... |
| CVE-2023-37185 | HIGH | 7.5 | 0.8% | Dec 25, 2023 | C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the function zfp_prec_decompress at zfp/b... |
| CVE-2023-28872 | HIGH | 8.8 | 0.8% | Dec 25, 2023 | Support Assistant in NCP Secure Enterprise Client before 13.10 allows attackers to execute DLL files with SYSTEM privile... |
| CVE-2023-51772 | HIGH | 8.8 | 0.5% | Dec 25, 2023 | One Identity Password Manager before 5.13.1 allows Kiosk Escape. This product enables users to reset their Active Direct... |
| CVE-2023-49328 | HIGH | 7.2 | 1.0% | Dec 25, 2023 | On a Wolters Kluwer B.POINT 23.70.00 server running Linux on premises, during the authentication phase, a validated syst... |
| CVE-2023-31455 | HIGH | 7.5 | 0.6% | Dec 25, 2023 | Pexip Infinity before 31.2 has Improper Input Validation for RTCP, allowing remote attackers to trigger an abort. |
| CVE-2023-31289 | HIGH | 7.5 | 0.6% | Dec 25, 2023 | Pexip Infinity before 31.2 has Improper Input Validation for signalling, allowing remote attackers to trigger an abort. |
| CVE-2023-49880 | HIGH | 7.5 | 0.5% | Dec 25, 2023 | In the Message Entry and Repair (MER) facility of IBM Financial Transaction Manager for SWIFT Services 3.2.4 the sending... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now