2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-48946 | HIGH | 7.5 | 0.9% | Nov 29, 2023 | An issue in the box_mpy function of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (... |
| CVE-2023-48945 | HIGH | 7.5 | 0.9% | Nov 29, 2023 | A stack overflow in openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service (DoS) via crafted... |
| CVE-2023-49083 | HIGH | 7.5 | 1.0% | Nov 29, 2023 | cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Calling `load_pe... |
| CVE-2023-49079 | HIGH | 7.5 | 0.4% | Nov 29, 2023 | Misskey is an open source, decentralized social media platform. Misskey's missing signature validation allows arbitrary ... |
| CVE-2023-6218 | HIGH | 7.2 | 0.7% | Nov 29, 2023 | In Progress MOVEit Transfer versions released before 2022.0.9 (14.0.9), 2022.1.10 (14.1.10), 2023.0.7 (15.0.7), a privi... |
| CVE-2023-49673 | HIGH | 8.8 | 0.4% | Nov 29, 2023 | A cross-site request forgery (CSRF) vulnerability in Jenkins NeuVector Vulnerability Scanner Plugin 1.22 and earlier all... |
| CVE-2023-49655 | HIGH | 8.8 | 0.4% | Nov 29, 2023 | A cross-site request forgery (CSRF) vulnerability in Jenkins MATLAB Plugin 2.11.0 and earlier allows attackers to have J... |
| CVE-2023-40626 | HIGH | 7.5 | 0.8% | Nov 29, 2023 | The language file parsing process could be manipulated to expose environment variables. Environment variables might cont... |
| CVE-2023-6378 | HIGH | 7.5 | 0.9% | Nov 29, 2023 | A serialization vulnerability in logback receiver component part of logback version 1.4.11 allows an attacker to mount ... |
| CVE-2023-6351 | HIGH | 8.8 | 0.9% | Nov 29, 2023 | Use after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap... |
| CVE-2023-6350 | HIGH | 8.8 | 1.1% | Nov 29, 2023 | Use after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap... |
| CVE-2023-6348 | HIGH | 8.8 | 1.0% | Nov 29, 2023 | Type Confusion in Spellcheck in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the ... |
| CVE-2023-6347 | HIGH | 8.8 | 1.1% | Nov 29, 2023 | Use after free in Mojo in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap co... |
| CVE-2023-6346 | HIGH | 8.8 | 1.0% | Nov 29, 2023 | Use after free in WebAudio in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit hea... |
| CVE-2023-46887 | HIGH | 7.5 | 0.3% | Nov 29, 2023 | In Dreamer CMS before 4.0.1, the backend attachment management office has an Arbitrary File Download vulnerability. |
| CVE-2023-24294 | HIGH | 7.5 | 0.9% | Nov 29, 2023 | Zumtobel Netlink CCD Onboard v3.74 - Firmware v3.80 was discovered to contain a buffer overflow via the component Netlin... |
| CVE-2023-46944 | HIGH | 7.8 | 1.2% | Nov 28, 2023 | An issue in GitKraken GitLens before v.14.0.0 allows an attacker to execute arbitrary code via a crafted file to the Vis... |
| CVE-2023-45539 | HIGH | 8.2 | 1.5% | Nov 28, 2023 | HAProxy before 2.8.2 accepts # as part of the URI component, which might allow remote attackers to obtain sensitive info... |
| CVE-2023-30590 | HIGH | 7.5 | 1.5% | Nov 28, 2023 | The generateKeys() API function returned from crypto.createDiffieHellman() only generates missing (or outdated) keys, th... |
| CVE-2023-40056 | HIGH | 8.8 | 4.8% | Nov 28, 2023 | SQL Injection Remote Code Vulnerability was found in the SolarWinds Platform. This vulnerability can be expl... |
| CVE-2023-48848 | HIGH | 7.5 | 0.9% | Nov 28, 2023 | An arbitrary file read vulnerability in ureport v2.2.9 allows a remote attacker to arbitrarily read files on the server ... |
| CVE-2023-49062 | HIGH | 7.5 | 0.6% | Nov 28, 2023 | Katran could disclose non-initialized kernel memory as part of an IP header. The issue was present for IPv4 encapsulatio... |
| CVE-2023-46589 | HIGH | 7.5 | 2.7% | Nov 28, 2023 | Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 throug... |
| CVE-2023-49314 | HIGH | 7.8 | 4.3% | Nov 28, 2023 | Asana Desktop 2.1.0 on macOS allows code injection because of specific Electron Fuses. There is inadequate protection ag... |
| CVE-2023-6239 | HIGH | 8.8 | 0.6% | Nov 28, 2023 | Under rare conditions, the effective permissions of an object might be incorrectly calculated if the object has a specif... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now