2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-42909 | HIGH | 7.8 | 0.3% | Dec 12, 2023 | Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.... |
| CVE-2023-42908 | HIGH | 7.8 | 0.3% | Dec 12, 2023 | Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.... |
| CVE-2023-42907 | HIGH | 7.8 | 0.3% | Dec 12, 2023 | Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.... |
| CVE-2023-42906 | HIGH | 7.8 | 0.8% | Dec 12, 2023 | Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.... |
| CVE-2023-42905 | HIGH | 7.8 | 0.3% | Dec 12, 2023 | Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.... |
| CVE-2023-42904 | HIGH | 7.8 | 0.3% | Dec 12, 2023 | Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.... |
| CVE-2023-42903 | HIGH | 7.8 | 0.3% | Dec 12, 2023 | Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.... |
| CVE-2023-42902 | HIGH | 7.8 | 0.4% | Dec 12, 2023 | Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.... |
| CVE-2023-42901 | HIGH | 7.8 | 0.3% | Dec 12, 2023 | Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.... |
| CVE-2023-42899 | HIGH | 7.8 | 0.4% | Dec 12, 2023 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.2, iOS 17.2 and iPadOS 17.... |
| CVE-2023-42890 | HIGH | 8.8 | 3.2% | Dec 12, 2023 | The issue was addressed with improved memory handling. This issue is fixed in Safari 17.2, macOS Sonoma 14.2, watchOS 10... |
| CVE-2023-42886 | HIGH | 7.8 | 0.3% | Dec 12, 2023 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sonoma 14.2, macOS Ventu... |
| CVE-2023-42882 | HIGH | 7.8 | 0.3% | Dec 12, 2023 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.2. Processing an image may... |
| CVE-2023-42481 | HIGH | 8.1 | 0.5% | Dec 12, 2023 | In SAP Commerce Cloud - versions HY_COM 1905, HY_COM 2005, HY_COM2105, HY_COM 2011, HY_COM 2205, COM_CLOUD 2211, a locke... |
| CVE-2023-42478 | HIGH | 7.6 | 0.6% | Dec 12, 2023 | SAP Business Objects Business Intelligence Platform is vulnerable to stored XSS allowing an attacker to upload agnostic ... |
| CVE-2023-40446 | HIGH | 7.8 | 0.3% | Dec 12, 2023 | The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.7.1, iOS 16.7.2 and iPad... |
| CVE-2023-36651 | HIGH | 7.2 | 1.0% | Dec 12, 2023 | Hidden and hard-coded credentials in ProLion CryptoSpike 3.0.15P2 allow remote attackers to login to web management as s... |
| CVE-2023-36650 | HIGH | 7.2 | 0.4% | Dec 12, 2023 | A missing integrity check in the update system in ProLion CryptoSpike 3.0.15P2 allows attackers to execute OS commands a... |
| CVE-2023-36648 | HIGH | 8.2 | 1.0% | Dec 12, 2023 | Missing authentication in the internal data streaming system in ProLion CryptoSpike 3.0.15P2 allows remote unauthenticat... |
| CVE-2023-36647 | HIGH | 7.5 | 0.8% | Dec 12, 2023 | A hard-coded cryptographic private key used to sign JWT authentication tokens in ProLion CryptoSpike 3.0.15P2 allows rem... |
| CVE-2023-36646 | HIGH | 8.8 | 0.8% | Dec 12, 2023 | Incorrect user role checking in multiple REST API endpoints in ProLion CryptoSpike 3.0.15P2 allows a remote attacker wit... |
| CVE-2023-49805 | HIGH | 8.8 | 0.4% | Dec 11, 2023 | Uptime Kuma is an easy-to-use self-hosted monitoring tool. Prior to version 1.23.9, the application uses WebSocket (with... |
| CVE-2023-49804 | HIGH | 7.8 | 0.3% | Dec 11, 2023 | Uptime Kuma is an easy-to-use self-hosted monitoring tool. Prior to version 1.23.9, when a user changes their login pass... |
| CVE-2023-49803 | HIGH | 7.5 | 0.3% | Dec 11, 2023 | @koa/cors npm provides Cross-Origin Resource Sharing (CORS) for koa, a web framework for Node.js. Prior to version 5.0.0... |
| CVE-2023-6035 | HIGH | 8.8 | 0.9% | Dec 11, 2023 | The EazyDocs WordPress plugin before 2.3.4 does not properly sanitize and escape "data" parameter before using it in an ... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now