2023 CVE Vulnerabilities

31,509 CVEs published in 2023.

CVE IDSeverityCVSSDescription
CVE-2023-52728MEDIUM5.5Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.25 allows an index out-of-range condition in putBitString.
CVE-2023-52727HIGH8.1Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.25 allows an index out-of-range condition in parseAlignBits.
CVE-2023-52726MEDIUM6.5Open Networking Foundation SD-RAN ONOS onos-ric-sdk-go 0.8.12 allows infinite repetition of the processing of an error (...
CVE-2023-52725MEDIUM6.5Open Networking Foundation SD-RAN ONOS onos-kpimon 0.4.7 allows blocking of the errCh channel within the Start function ...
CVE-2023-52724HIGH8.1Open Networking Foundation SD-RAN onos-kpimon 0.4.7 allows out-of-bounds array access in the processIndicationFormat1 fu...
CVE-2023-50434CRITICAL9.8emdns_resolve_raw in emdns.c in emdns through fbd1eef calls strlen with an input that may not be '\0' terminated, leadin...
CVE-2023-50433MEDIUM6.5marshall in dhcp_packet.c in simple-dhcp-server through ec976d2 allows remote attackers to cause a denial of service by ...
CVE-2023-50432MEDIUM5.3simple-dhcp-server through ec976d2 allows remote attackers to cause a denial of service (daemon crash) by sending a DHCP...
CVE-2023-46960HIGH8.6Buffer Overflow vulnerability in PyPXE v.1.8.4 allows a remote attacker to cause a denial of service via the handle func...
CVE-2023-46566HIGH7.5Buffer Overflow vulnerability in msoulier tftpy commit 467017b844bf6e31745138a30e2509145b0c529c allows a remote attacker...
CVE-2023-31889MEDIUM5.5An issue discovered in httpd in ASUS RT-AC51U with firmware version up to and including 3.0.0.4.380.8591 allows local at...
CVE-2023-46565HIGH7.5Buffer Overflow vulnerability in osrg gobgp commit 419c50dfac578daa4d11256904d0dc182f1a9b22 allows a remote attacker to ...
CVE-2023-51710MEDIUM4.2EMS SQL Manager 3.6.2 (build 55333) for Oracle allows DLL hijacking: a user can trigger the execution of arbitrary code ...
CVE-2023-52080HIGH7.7IEIT NF5280M6 UEFI firmware through 8.4 has a pool overflow vulnerability, caused by improper use of the gRT->GetVariabl...
CVE-2023-51254MEDIUM6.1Cross Site Scripting vulnerability in Jfinalcms v.5.0.0 allows a remote attacker to execute arbitrary code via a crafted...
CVE-2023-48684HIGH7.1Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acr...
CVE-2023-48683HIGH7.1Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acr...
CVE-2023-46270LOW3.3MacPaw The Unarchiver before 4.3.6 contains vulnerability related to missing quarantine attributes for extracted items.
CVE-2023-52723HIGH7.1In KDE libksieve before 23.03.80, kmanagesieve/session.cpp places a cleartext password in server logs because a username...
CVE-2023-52722MEDIUM5.5An issue was discovered in Artifex Ghostscript before 10.03.1. psi/zmisc1.c, when SAFER mode is used, allows eexec seeds...
CVE-2023-1000MEDIUM6.3A vulnerability was found in cyanomiko dcnnt-py up to 0.9.0. It has been classified as critical. Affected is the functio...
CVE-2023-26603MEDIUM5.9JumpCloud Agent before 1.178.0 Creates a Temporary File in a Directory with Insecure Permissions. This allows privilege ...
CVE-2023-51794HIGH7.8Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the ...
CVE-2023-51365HIGH7.5A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vul...
CVE-2023-51364HIGH7.5A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vul...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now