2023 CVE Vulnerabilities
31,245 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-46449 | HIGH | 8.8 | 0.8% | Oct 26, 2023 | Sourcecodester Free and Open Source inventory management system v1.0 is vulnerable to Incorrect Access Control. An arbit... |
| CVE-2023-46234 | HIGH | 7.5 | 0.5% | Oct 26, 2023 | browserify-sign is a package to duplicate the functionality of node's crypto public key functions, much of this is based... |
| CVE-2023-45868 | HIGH | 8.1 | 1.1% | Oct 26, 2023 | The Learning Module in ILIAS 7.25 (2023-09-12 release) allows an attacker (with basic user privileges) to achieve a high... |
| CVE-2023-5783 | HIGH | 7.5 | 0.5% | Oct 26, 2023 | A vulnerability has been found in Tongda OA 2017 up to 11.9 and classified as critical. Affected by this vulnerability i... |
| CVE-2023-5802 | HIGH | 8.8 | 0.2% | Oct 26, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Mihai Iova WordPress Knowledge base & Documentation Plugin – WP Knowl... |
| CVE-2023-5798 | HIGH | 8.8 | 0.7% | Oct 26, 2023 | The Assistant WordPress plugin before 1.4.4 does not validate a parameter before making a request to it via wp_remote_ge... |
| CVE-2023-5139 | HIGH | 7.8 | 0.4% | Oct 26, 2023 | Potential buffer overflow vulnerability at the following location in the Zephyr STM32 Crypto driver |
| CVE-2023-31421 | HIGH | 7.5 | 0.3% | Oct 26, 2023 | It was discovered that when acting as TLS clients, Beats, Elastic Agent, APM Server, and Fleet Server did not verify whe... |
| CVE-2023-31422 | HIGH | 7.5 | 0.7% | Oct 26, 2023 | An issue was discovered by Elastic whereby sensitive information is recorded in Kibana logs in the event of an error. Th... |
| CVE-2023-46667 | HIGH | 8.1 | 0.5% | Oct 26, 2023 | An issue was discovered in Fleet Server >= v8.10.0 and < v8.10.3 where Agent enrolment tokens are being inserted into th... |
| CVE-2023-46345 | HIGH | 7.5 | 0.6% | Oct 26, 2023 | Catdoc v0.95 was discovered to contain a NULL pointer dereference via the component xls2csv at src/xlsparse.c. |
| CVE-2023-43905 | HIGH | 7.5 | 0.4% | Oct 26, 2023 | Incorrect access control in writercms v1.1.0 allows attackers to directly obtain backend account passwords via unspecifi... |
| CVE-2023-30967 | HIGH | 7.5 | 0.6% | Oct 26, 2023 | Gotham Orbital-Simulator service prior to 0.692.0 was found to be vulnerable to a Path traversal issue allowing an unaut... |
| CVE-2023-38849 | HIGH | 7.5 | 0.7% | Oct 25, 2023 | An issue in tire-sales Line v.13.6.1 allows a remote attacker to obtain sensitive information via crafted GET request. |
| CVE-2023-38848 | HIGH | 7.5 | 0.7% | Oct 25, 2023 | An issue in rmc R Beauty CLINIC Line v.13.6.1 allows a remote attacker to obtain sensitive information via crafted GET r... |
| CVE-2023-38847 | HIGH | 7.5 | 0.7% | Oct 25, 2023 | An issue in CHRISTINA JAPAN Line v.13.6.1 allows a remote attacker to obtain sensitive information via crafted GET reque... |
| CVE-2023-38846 | HIGH | 7.5 | 0.7% | Oct 25, 2023 | An issue in Marbre Lapin Line v.13.6.1 allows a remote attacker to obtain sensitive information via crafted GET request. |
| CVE-2023-38845 | HIGH | 7.5 | 0.7% | Oct 25, 2023 | An issue in Anglaise Company Anglaise.Company v.13.6.1 allows a remote attacker to obtain sensitive information via craf... |
| CVE-2023-5574 | HIGH | 7 | 0.5% | Oct 25, 2023 | A use-after-free flaw was found in xorg-x11-server-Xvfb. This issue occurs in Xvfb with a very specific and legacy confi... |
| CVE-2023-5367 | HIGH | 7.8 | 0.6% | Oct 25, 2023 | A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buff... |
| CVE-2023-5044 | HIGH | 8.8 | 56.6% | Oct 25, 2023 | Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation. |
| CVE-2023-5043 | HIGH | 8.8 | 2.2% | Oct 25, 2023 | Ingress nginx annotation injection causes arbitrary command execution. |
| CVE-2023-45135 | HIGH | 8 | 1.7% | Oct 25, 2023 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In `org.xwiki.p... |
| CVE-2023-42856 | HIGH | 7.8 | 0.4% | Oct 25, 2023 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, ... |
| CVE-2023-42852 | HIGH | 8.8 | 1.7% | Oct 25, 2023 | A logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, watchOS 10.1, iOS 16.... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now