2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-52340 | HIGH | 7.5 | 0.9% | Jul 5, 2024 | The IPv6 implementation in the Linux kernel before 6.3 has a net/ipv6/route.c max_size threshold that can be consumed ea... |
| CVE-2023-52169 | HIGH | 8.2 | 1.0% | Jul 3, 2024 | The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains an out-of-bounds read that allows an attacker ... |
| CVE-2023-52168 | HIGH | 8.4 | 0.3% | Jul 3, 2024 | The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains a heap-based buffer overflow that allows an at... |
| CVE-2023-24531 | CRITICAL | 9.8 | 0.8% | Jul 2, 2024 | Command go env is documented as outputting a shell script containing the Go environment. However, go env doesn't sanitiz... |
| CVE-2023-39324 | — | — | — | Jul 2, 2024 | Rejected reason: reserved but not needed |
| CVE-2023-51778 | MEDIUM | 5.5 | 0.2% | Jul 2, 2024 | Out-of-Bounds Write vulnerability in Jungo WinDriver before 12.1.0 allows local attackers to cause a Windows blue screen... |
| CVE-2023-51777 | MEDIUM | 5.5 | 0.2% | Jul 2, 2024 | Denial of Service (DoS) vulnerability in Jungo WinDriver before 12.1.0 allows local attackers to cause a Windows blue sc... |
| CVE-2023-51776 | HIGH | 7.8 | 0.2% | Jul 2, 2024 | Improper privilege management in Jungo WinDriver before 12.1.0 allows local attackers to escalate privileges and execute... |
| CVE-2023-41928 | MEDIUM | 5.3 | 0.1% | Jul 2, 2024 | The device is observed to accept deprecated TLS protocols, increasing the risk of cryptographic weaknesses. |
| CVE-2023-41927 | MEDIUM | 5.3 | 0.1% | Jul 2, 2024 | The server supports at least one cipher suite which is on the NCSC-NL list of cipher suites to be phased out, increasing... |
| CVE-2023-41926 | HIGH | 8.8 | 0.3% | Jul 2, 2024 | The webserver utilizes basic authentication for its user login to the configuration interface. As encryption is disabled... |
| CVE-2023-41923 | HIGH | 7.2 | 0.3% | Jul 2, 2024 | The user management section of the web application permits the creation of user accounts with excessively weak passwords... |
| CVE-2023-41922 | MEDIUM | 5.4 | 0.2% | Jul 2, 2024 | A 'Cross-site Scripting' (XSS) vulnerability, characterized by improper input neutralization during web page generation,... |
| CVE-2023-41921 | CRITICAL | 9.8 | 0.3% | Jul 2, 2024 | A vulnerability allows attackers to download source code or an executable from a remote location and execute the code wi... |
| CVE-2023-41920 | CRITICAL | 9.8 | 0.4% | Jul 2, 2024 | The vulnerability allows attackers access to the root account without having to authenticate. Specifically, if the devic... |
| CVE-2023-41919 | CRITICAL | 9.8 | 0.4% | Jul 2, 2024 | Hardcoded credentials are discovered within the application's source code, creating a potential security risk for unauth... |
| CVE-2023-41918 | CRITICAL | 10 | 0.6% | Jul 2, 2024 | A vulnerability allows unauthorized access to functionality inadequately constrained by ACLs. Attackers may exploit this... |
| CVE-2023-41917 | CRITICAL | 10 | 0.7% | Jul 2, 2024 | Inadequate input validation exposes the system to potential remote code execution (RCE) risks. Attackers can exploit thi... |
| CVE-2023-43554 | HIGH | 7.8 | 0.1% | Jul 1, 2024 | Memory corruption while processing IOCTL handler in FastRPC. |
| CVE-2023-50964 | MEDIUM | 5.4 | 0.3% | Jun 30, 2024 | IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed a... |
| CVE-2023-50953 | MEDIUM | 4.3 | 0.3% | Jun 30, 2024 | IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed tec... |
| CVE-2023-50952 | MEDIUM | 5.4 | 0.2% | Jun 30, 2024 | IBM InfoSphere Information Server 11.7 is vulnerable to server-side request forgery (SSRF). This may allow an authentica... |
| CVE-2023-50954 | MEDIUM | 5.3 | 0.4% | Jun 30, 2024 | IBM InfoSphere Information Server 11.7 returns sensitive information in URL information that could be used in further at... |
| CVE-2023-35022 | LOW | 3.3 | 0.2% | Jun 30, 2024 | IBM InfoSphere Information Server 11.7 could allow a local user to update projects that they do not have the authorizati... |
| CVE-2023-4017 | MEDIUM | 6.1 | 0.4% | Jun 29, 2024 | The Goya theme for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘attra-color’, 'attra-size', and '... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now