2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-40353 | LOW | 3.3 | 0.2% | Sep 8, 2023 | An issue was discovered in Exynos Mobile Processor 980 and 2100. An integer overflow at a buffer index can prevent the e... |
| CVE-2023-41053 | LOW | 3.3 | 0.3% | Sep 6, 2023 | Redis is an in-memory database that persists on disk. Redis does not correctly identify keys accessed by `SORT_RO` and a... |
| CVE-2023-40392 | LOW | 3.3 | 0.2% | Sep 6, 2023 | A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura... |
| CVE-2023-38605 | LOW | 3.3 | 0.2% | Sep 6, 2023 | This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Ventura 13.5. An... |
| CVE-2023-41946 | LOW | 3.5 | 0.3% | Sep 6, 2023 | A cross-site request forgery (CSRF) vulnerability in Jenkins Frugal Testing Plugin 1.1 and earlier allows attackers to c... |
| CVE-2023-30724 | LOW | 3.3 | 0.2% | Sep 6, 2023 | Improper authentication in GallerySearchProvider of Gallery prior to version 14.5.01.2 allows attacker to access search ... |
| CVE-2023-30719 | LOW | 3.3 | 0.2% | Sep 6, 2023 | Exposure of Sensitive Information vulnerability in InboundSmsHandler prior to SMR Sep-2023 Release 1 allows local attack... |
| CVE-2023-30718 | LOW | 3.3 | 0.1% | Sep 6, 2023 | Improper export of android application components vulnerability in WifiApAutoHotspotEnablingActivity prior to SMR Sep-20... |
| CVE-2023-30717 | LOW | 3.3 | 0.1% | Sep 6, 2023 | Sensitive information exposure vulnerability in SVCAgent prior to SMR Sep-2023 Release 1 allows attackers to get unreset... |
| CVE-2023-30715 | LOW | 3.3 | 0.1% | Sep 6, 2023 | Improper access control vulnerability in Weather prior to SMR Sep-2023 Release 1 allows attackers to access location inf... |
| CVE-2023-30711 | LOW | 3.3 | 0.2% | Sep 6, 2023 | Improper authentication in Phone and Messaging Storage SMR SEP-2023 Release 1 allows attacker to insert arbitrary data t... |
| CVE-2023-28195 | LOW | 3.3 | 0.2% | Sep 6, 2023 | A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura... |
| CVE-2023-4216 | LOW | 2.7 | 0.5% | Sep 4, 2023 | The Orders Tracking for WooCommerce WordPress plugin before 1.2.6 doesn't validate the file_url parameter when importing... |
| CVE-2023-4709 | LOW | 3.1 | 0.3% | Sep 1, 2023 | A vulnerability classified as problematic has been found in TOTVS RM 12.1. Affected is an unknown function of the file L... |
| CVE-2023-3950 | LOW | 3.8 | 0.2% | Sep 1, 2023 | An information disclosure issue in GitLab EE affecting all versions from 16.2 prior to 16.2.5, and 16.3 prior to 16.3.1 ... |
| CVE-2023-41044 | LOW | 3.8 | 0.6% | Aug 31, 2023 | Graylog is a free and open log management platform. A partial path traversal vulnerability exists in Graylog's `Support ... |
| CVE-2023-33833 | LOW | 3.3 | 0.1% | Aug 31, 2023 | IBM Security Verify Information Queue 10.0.4 and 10.0.5 stores sensitive information in plain clear text which can be re... |
| CVE-2023-4654 | LOW | 3.5 | 0.3% | Aug 31, 2023 | Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository instantsoft/icms2 prior to 2.16.1. |
| CVE-2023-41041 | LOW | 3.1 | 0.4% | Aug 30, 2023 | Graylog is a free and open log management platform. In a multi-node Graylog cluster, after a user has explicitly logged ... |
| CVE-2023-4624 | LOW | 2.4 | 0.5% | Aug 30, 2023 | Server-Side Request Forgery (SSRF) in GitHub repository bookstackapp/bookstack prior to v23.08. |
| CVE-2023-0654 | LOW | 3.7 | 0.2% | Aug 29, 2023 | Due to a misconfiguration, the WARP Mobile Client (< 6.29) for Android was susceptible to a tapjacking attack. In the ev... |
| CVE-2023-38158 | LOW | 3.1 | 1.2% | Aug 21, 2023 | Microsoft Edge (Chromium-based) Information Disclosure Vulnerability |
| CVE-2023-39061 | LOW | 3.5 | 0.3% | Aug 21, 2023 | Cross Site Request Forgery (CSRF) vulnerability in Chamilo v.1.11 thru v.1.11.20 allows a remote authenticated privilege... |
| CVE-2023-25647 | LOW | 3.3 | 0.2% | Aug 17, 2023 | There is a permission and access control vulnerability in some ZTE mobile phones. Due to improper access control, app... |
| CVE-2023-32453 | LOW | 3.9 | 0.2% | Aug 16, 2023 | Dell BIOS contains an improper authentication vulnerability. A malicious user with physical access to the system may po... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now