2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-32677 | LOW | 3.1 | 0.6% | May 19, 2023 | Zulip is an open-source team collaboration tool with unique topic-based threading. Zulip administrators can configure Zu... |
| CVE-2023-28369 | LOW | 3.3 | 0.2% | May 18, 2023 | Brother iPrint&Scan V6.11.2 and earlier contains an improper access control vulnerability. This vulnerability may be exp... |
| CVE-2023-20106 | LOW | 3.8 | 0.4% | May 18, 2023 | Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated attacker to delete or read... |
| CVE-2023-2195 | LOW | 3.5 | 0.4% | May 16, 2023 | A cross-site request forgery (CSRF) vulnerability in Jenkins Code Dx Plugin 3.1.0 and earlier allows attackers to connec... |
| CVE-2023-32994 | LOW | 3.7 | 0.2% | May 16, 2023 | Jenkins SAML Single Sign On(SSO) Plugin 2.1.0 and earlier unconditionally disables SSL/TLS certificate validation for co... |
| CVE-2023-20726 | LOW | 3.3 | 0.1% | May 15, 2023 | In mnld, there is a possible leak of GPS location due to a missing permission check. This could lead to local informatio... |
| CVE-2023-29333 | LOW | 3.3 | 0.6% | May 9, 2023 | Microsoft Access Denial of Service Vulnerability |
| CVE-2023-31975 | LOW | 3.3 | 0.5% | May 9, 2023 | yasm v1.3.0 was discovered to contain a memory leak via the function yasm_intnum_copy at /libyasm/intnum.c. Note: Multip... |
| CVE-2023-29128 | LOW | 2.7 | 0.7% | May 9, 2023 | A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud Connec... |
| CVE-2023-27410 | LOW | 2.7 | 0.6% | May 9, 2023 | A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). A heap-based buffer overflow vulnerabilit... |
| CVE-2023-27409 | LOW | 3.3 | 0.2% | May 9, 2023 | A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). A path traversal vulnerability was found ... |
| CVE-2023-27408 | LOW | 3.3 | 0.2% | May 9, 2023 | A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). The `i2c` mutex file is created with the ... |
| CVE-2023-2590 | LOW | 3.5 | 0.5% | May 9, 2023 | Missing Authorization in GitHub repository answerdev/answer prior to 1.0.9. |
| CVE-2023-28194 | LOW | 3.3 | 0.2% | May 8, 2023 | The issue was addressed with improved checks. This issue is fixed in iOS 16.4 and iPadOS 16.4. An app may be able to une... |
| CVE-2023-27928 | LOW | 3.3 | 0.2% | May 8, 2023 | A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura... |
| CVE-2023-23543 | LOW | 3.6 | 0.2% | May 8, 2023 | The issue was addressed with additional restrictions on the observability of app states. This issue is fixed in macOS Ve... |
| CVE-2023-23541 | LOW | 3.3 | 0.2% | May 8, 2023 | A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 15.7.4 an... |
| CVE-2023-23523 | LOW | 3.3 | 0.2% | May 8, 2023 | A logic issue was addressed with improved restrictions. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 1... |
| CVE-2023-31413 | LOW | 3.3 | 0.2% | May 4, 2023 | Filebeat versions through 7.17.9 and 8.6.2 have a flaw in httpjson input that allows the http request Authorization or P... |
| CVE-2023-21487 | LOW | 3.3 | 0.1% | May 4, 2023 | Improper access control vulnerability in Telephony framework prior to SMR May-2023 Release 1 allows local attackers to c... |
| CVE-2023-2521 | LOW | 3.5 | 0.3% | May 4, 2023 | A vulnerability was found in NEXTU NEXT-7004N 3.0.1. It has been classified as problematic. Affected is an unknown funct... |
| CVE-2023-2197 | LOW | 2.5 | 0.1% | May 1, 2023 | HashiCorp Vault Enterprise 1.13.0 up to 1.13.1 is vulnerable to a padding oracle attack when using an HSM in conjunction... |
| CVE-2023-30857 | LOW | 3.7 | 0.5% | Apr 28, 2023 | @aedart/support is the support package for Ion, a monorepo for JavaScript/TypeScript packages. Prior to version `0.6.1`,... |
| CVE-2023-28473 | LOW | 3.3 | 0.8% | Apr 28, 2023 | Concrete CMS (previously concrete5) versions 8.5.12 and below, and 9.0 through 9.1.3 is vulnerable to possible Auth bypa... |
| CVE-2023-25815 | LOW | 2.2 | 1.1% | Apr 25, 2023 | In Git for Windows, the Windows port of Git, no localized messages are shipped with the installer. As a consequence, Git... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now