2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-7013 | MEDIUM | 4.7 | 0.2% | Jul 16, 2024 | Inappropriate implementation in Compositing in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potent... |
| CVE-2023-7012 | CRITICAL | 9.6 | 0.3% | Jul 16, 2024 | Insufficient data validation in Permission Prompts in Google Chrome prior to 117.0.5938.62 allowed an attacker who convi... |
| CVE-2023-7011 | MEDIUM | 6.5 | 0.4% | Jul 16, 2024 | Inappropriate implementation in Picture in Picture in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to... |
| CVE-2023-7010 | HIGH | 8.8 | 0.4% | Jul 16, 2024 | Use after free in WebRTC in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to potentially exploit heap c... |
| CVE-2023-4860 | CRITICAL | 9.6 | 0.4% | Jul 16, 2024 | Inappropriate implementation in Skia in Google Chrome prior to 115.0.5790.98 allowed a remote attacker who had compromis... |
| CVE-2023-31456 | MEDIUM | 5.4 | 0.2% | Jul 16, 2024 | There is an SSRF vulnerability in the Fluid Topics platform that affects versions prior to 4.3, where the server can be ... |
| CVE-2023-52886 | MEDIUM | 6.4 | 0.3% | Jul 16, 2024 | In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix race by not overwriting udev->descri... |
| CVE-2023-52290 | HIGH | 8.1 | 0.6% | Jul 16, 2024 | In streampark-console the list pages(e.g: application pages), users can sort page by field. This sort field is sent from... |
| CVE-2023-49566 | HIGH | 8.8 | 0.8% | Jul 15, 2024 | In Apache Linkis <=1.5.0, due to the lack of effective filtering of parameters, an attacker configuring malicious db2... |
| CVE-2023-46801 | HIGH | 8.8 | 1.2% | Jul 15, 2024 | In Apache Linkis <= 1.5.0, data source management module, when adding Mysql data source, exists remote code execution v... |
| CVE-2023-41916 | MEDIUM | 6.5 | 0.7% | Jul 15, 2024 | In Apache Linkis =1.4.0, due to the lack of effective filtering of parameters, an attacker configuring malicious Mysql ... |
| CVE-2023-52885 | HIGH | 7.8 | 0.2% | Jul 14, 2024 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix UAF in svc_tcp_listen_data_ready() Aft... |
| CVE-2023-39329 | MEDIUM | 6.5 | 0.6% | Jul 13, 2024 | A flaw was found in OpenJPEG. A resource exhaustion can occur in the opj_t1_decode_cblks function in tcd.c through a cra... |
| CVE-2023-39327 | MEDIUM | 4.3 | 0.6% | Jul 13, 2024 | A flaw was found in OpenJPEG. Maliciously constructed pictures can cause the program to enter a large loop and continuou... |
| CVE-2023-41093 | LOW | 3.1 | 0.2% | Jul 12, 2024 | Use After Free vulnerability in Silicon Labs Bluetooth SDK on 32 bit, ARM may allow an attacker with precise timing capa... |
| CVE-2023-35006 | MEDIUM | 5.4 | 0.3% | Jul 10, 2024 | IBM Security QRadar EDR 3.12 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which ... |
| CVE-2023-33860 | MEDIUM | 5.3 | 0.2% | Jul 10, 2024 | IBM Security QRadar EDR 3.12 does not set the secure attribute on authorization tokens or session cookies. Attackers may... |
| CVE-2023-33859 | MEDIUM | 5.3 | 0.4% | Jul 10, 2024 | IBM Security QRadar EDR 3.12 could disclose sensitive information due to an observable login response discrepancy. IBM ... |
| CVE-2023-6813 | MEDIUM | 6.1 | 0.4% | Jul 10, 2024 | The Login by Auth0 plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘wle’ parameter in all v... |
| CVE-2023-32472 | HIGH | 8.2 | 0.2% | Jul 10, 2024 | Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds write vulnerability. A local authenticated mal... |
| CVE-2023-32467 | HIGH | 8.2 | 0.2% | Jul 10, 2024 | Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds write vulnerability. A local authenticated mal... |
| CVE-2023-7062 | HIGH | 8.8 | 0.7% | Jul 10, 2024 | The Advanced File Manager Shortcodes plugin for WordPress is vulnerable to Directory Traversal in all versions up to, an... |
| CVE-2023-7061 | HIGH | 8.8 | 0.8% | Jul 10, 2024 | The Advanced File Manager Shortcodes plugin for WordPress is vulnerable to arbitrary file uploads in all versions up to,... |
| CVE-2023-21114 | HIGH | 7.8 | 0.1% | Jul 9, 2024 | In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalati... |
| CVE-2023-21113 | HIGH | 7.8 | 0.1% | Jul 9, 2024 | In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalati... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now