2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-26793 | CRITICAL | 9.8 | 0.7% | May 1, 2024 | libmodbus v3.1.10 has a heap-based buffer overflow vulnerability in read_io_status function in src/modbus.c. |
| CVE-2023-23022 | MEDIUM | 6.1 | 0.5% | May 1, 2024 | Cross site scripting (XSS) vulnerability in sourcecodester oretnom23 employee's payroll management system 1.0, allows at... |
| CVE-2023-23021 | MEDIUM | 6.1 | 0.5% | May 1, 2024 | Cross Site Scripting (XSS) vulnerability in sourcecodester oretnom23 pos point sale system 1.0, allows attackers to exec... |
| CVE-2023-23019 | MEDIUM | 5.4 | 0.3% | May 1, 2024 | Cross site scripting (XSS) vulnerability in file main.php in sourcecodester oretnom23 Blog Site 1.0 via the name and ema... |
| CVE-2023-7241 | HIGH | 7.9 | 0.2% | May 1, 2024 | Privilege Escalation in WRSA.EXE in Webroot Antivirus 8.0.1X- 9.0.35.12 on Windows64 bit and 32 bit allows malicious s... |
| CVE-2023-49606 | CRITICAL | 9.8 | 63.1% | May 1, 2024 | A use-after-free vulnerability exists in the HTTP Connection Headers parsing in Tinyproxy 1.11.1 and Tinyproxy 1.10.0. A... |
| CVE-2023-47212 | CRITICAL | 9.8 | 1.4% | May 1, 2024 | A heap-based buffer overflow vulnerability exists in the comment functionality of stb _vorbis.c v1.22. A specially craft... |
| CVE-2023-47166 | HIGH | 8.8 | 0.6% | May 1, 2024 | A firmware update vulnerability exists in the luci2-io file-import functionality of Milesight UR32L v32.3.0.7-r2. A spec... |
| CVE-2023-40533 | — | — | — | May 1, 2024 | Rejected reason: This CVE ID is a duplicate of CVE-2022-40468 |
| CVE-2023-52653 | MEDIUM | 5.5 | 0.3% | May 1, 2024 | In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix a memleak in gss_import_v2_context The... |
| CVE-2023-52652 | MEDIUM | 5.5 | 0.3% | May 1, 2024 | In the Linux kernel, the following vulnerability has been resolved: NTB: fix possible name leak in ntb_register_device(... |
| CVE-2023-52651 | — | — | — | May 1, 2024 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2023-52650 | MEDIUM | 5.5 | 0.3% | May 1, 2024 | In the Linux kernel, the following vulnerability has been resolved: drm/tegra: dsi: Add missing check for of_find_devic... |
| CVE-2023-52649 | HIGH | 7.8 | 0.3% | May 1, 2024 | In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Avoid reading beyond LUT array When the ... |
| CVE-2023-52648 | MEDIUM | 5.5 | 0.2% | May 1, 2024 | In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Unmap the surface before resetting it o... |
| CVE-2023-52647 | MEDIUM | 5.5 | 0.2% | May 1, 2024 | In the Linux kernel, the following vulnerability has been resolved: media: nxp: imx8-isi: Check whether crossbar pad is... |
| CVE-2023-50059 | MEDIUM | 5.3 | 0.5% | Apr 30, 2024 | An issue ingalxe.com Galxe platform 1.0 allows a remote attacker to obtain sensitive information via the Web3 authentica... |
| CVE-2023-50053 | HIGH | 7.6 | 0.5% | Apr 30, 2024 | An issue in Foundation.app Foundation platform 1.0 allows a remote attacker to obtain sensitive information via the Web3... |
| CVE-2023-49473 | CRITICAL | 9.8 | 0.5% | Apr 30, 2024 | Shenzhen JF6000 Cloud Media Collaboration Processing Platform firmware version V1.2.0 and software version V2.0.0 build ... |
| CVE-2023-36268 | — | — | — | Apr 30, 2024 | Rejected reason: DoS issues, or unexploitable crashes, are out of scope for vulnerabilities. |
| CVE-2023-45385 | HIGH | 7.5 | 0.8% | Apr 30, 2024 | ProQuality pqprintshippinglabels before v.4.15.0 is vulnerable to Directory Traversal via the pqprintshippinglabels modu... |
| CVE-2023-38002 | HIGH | 8.8 | 0.4% | Apr 30, 2024 | IBM Storage Scale 5.1.0.0 through 5.1.9.2 could allow an authenticated user to steal or manipulate an active session to ... |
| CVE-2023-50915 | MEDIUM | 6.5 | 0.7% | Apr 30, 2024 | An issue exists in GalaxyClientService.exe in GOG Galaxy (Beta) 2.0.67.2 through 2.0.71.2 that could allow authenticated... |
| CVE-2023-50914 | MEDIUM | 6.7 | 0.7% | Apr 30, 2024 | A Privilege Escalation issue in the inter-process communication procedure from GOG Galaxy (Beta) 2.0.67.2 through v2.0.7... |
| CVE-2023-46304 | HIGH | 8.1 | 1.7% | Apr 30, 2024 | modules/Users/models/Module.php in Vtiger CRM 7.5.0 allows a remote authenticated attacker to run arbitrary PHP code bec... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now