2023 CVE Vulnerabilities

31,475 CVEs published in 2023.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2023-31016HIGH7.8NVIDIA GPU Display Driver for Windows contains a vulnerability where an uncontrolled search path element may allow an at...
CVE-2023-46725HIGH7.5FoodCoopShop is open source software for food coops and local shops. Versions starting with 3.2.0 prior to 3.6.1 are vul...
CVE-2023-5919HIGH7.2A vulnerability was found in SourceCodester Company Website CMS 1.0 and classified as problematic. Affected by this issu...
CVE-2023-29047HIGH7.3Imageconverter API endpoints provided methods that were not sufficiently validating and sanitizing client input, allowin...
CVE-2023-26455HIGH7.8RMI was not requiring authentication when calling ChronosRMIService:setEventOrganizer. Attackers with local or adjacent ...
CVE-2023-26454HIGH8.8Requests to fetch image metadata could be abused to include SQL queries that would be executed unchecked. Exploiting thi...
CVE-2023-26453HIGH8.8Requests to cache an image could be abused to include SQL queries that would be executed unchecked. Exploiting this vuln...
CVE-2023-26452HIGH8.8Requests to cache an image and return its metadata could be abused to include SQL queries that would be executed uncheck...
CVE-2023-5860HIGH7.2The Icons Font Loader plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation i...
CVE-2023-43336HIGH8.8Sangoma Technologies FreePBX before cdr 15.0.18, 16.0.40, 15.0.16, and 16.0.17 was discovered to contain an access contr...
CVE-2023-46695HIGH7.5An issue was discovered in Django 3.2 before 3.2.23, 4.1 before 4.1.13, and 4.2 before 4.2.7. The NFKC normalization is ...
CVE-2023-5408HIGH7.2A privilege escalation flaw was found in the node restriction admission plugin of the kubernetes api server of OpenShift...
CVE-2023-46428HIGH8.8An arbitrary file upload vulnerability in HadSky v7.12.10 allows attackers to execute arbitrary code via a crafted file.
CVE-2023-46724HIGH7.5Squid is a caching proxy for the Web. Due to an Improper Validation of Specified Index bug, Squid versions 3.3.0.1 throu...
CVE-2023-5857HIGH8.8Inappropriate implementation in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentia...
CVE-2023-5856HIGH8.8Use after free in Side Panel in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to ...
CVE-2023-5855HIGH8.8Use after free in Reading Mode in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user t...
CVE-2023-5854HIGH8.8Use after free in Profiles in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to en...
CVE-2023-5852HIGH8.8Use after free in Printing in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to en...
CVE-2023-5849HIGH8.8Integer overflow in USB in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentially exploit heap c...
CVE-2023-5482HIGH8.8Insufficient data validation in USB in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform out of...
CVE-2023-20220HIGH8.8Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could...
CVE-2023-20219HIGH8.8Multiple vulnerabilities in the web management interface of Cisco Firepower Management Center (FMC) Software could allow...
CVE-2023-20196HIGH7.2Two vulnerabilities in Cisco ISE could allow an authenticated, remote attacker to upload arbitrary files to an affected ...
CVE-2023-20175HIGH8.8A vulnerability in a specific Cisco ISE CLI command could allow an authenticated, local attacker to perform command inje...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now