2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-5139 | HIGH | 7.8 | 0.4% | Oct 26, 2023 | Potential buffer overflow vulnerability at the following location in the Zephyr STM32 Crypto driver |
| CVE-2023-31421 | HIGH | 7.5 | 0.3% | Oct 26, 2023 | It was discovered that when acting as TLS clients, Beats, Elastic Agent, APM Server, and Fleet Server did not verify whe... |
| CVE-2023-31422 | HIGH | 7.5 | 0.7% | Oct 26, 2023 | An issue was discovered by Elastic whereby sensitive information is recorded in Kibana logs in the event of an error. Th... |
| CVE-2023-46667 | HIGH | 8.1 | 0.5% | Oct 26, 2023 | An issue was discovered in Fleet Server >= v8.10.0 and < v8.10.3 where Agent enrolment tokens are being inserted into th... |
| CVE-2023-46345 | HIGH | 7.5 | 0.6% | Oct 26, 2023 | Catdoc v0.95 was discovered to contain a NULL pointer dereference via the component xls2csv at src/xlsparse.c. |
| CVE-2023-43905 | HIGH | 7.5 | 0.4% | Oct 26, 2023 | Incorrect access control in writercms v1.1.0 allows attackers to directly obtain backend account passwords via unspecifi... |
| CVE-2023-30967 | HIGH | 7.5 | 0.6% | Oct 26, 2023 | Gotham Orbital-Simulator service prior to 0.692.0 was found to be vulnerable to a Path traversal issue allowing an unaut... |
| CVE-2023-38849 | HIGH | 7.5 | 0.7% | Oct 25, 2023 | An issue in tire-sales Line v.13.6.1 allows a remote attacker to obtain sensitive information via crafted GET request. |
| CVE-2023-38848 | HIGH | 7.5 | 0.7% | Oct 25, 2023 | An issue in rmc R Beauty CLINIC Line v.13.6.1 allows a remote attacker to obtain sensitive information via crafted GET r... |
| CVE-2023-38847 | HIGH | 7.5 | 0.7% | Oct 25, 2023 | An issue in CHRISTINA JAPAN Line v.13.6.1 allows a remote attacker to obtain sensitive information via crafted GET reque... |
| CVE-2023-38846 | HIGH | 7.5 | 0.7% | Oct 25, 2023 | An issue in Marbre Lapin Line v.13.6.1 allows a remote attacker to obtain sensitive information via crafted GET request. |
| CVE-2023-38845 | HIGH | 7.5 | 0.7% | Oct 25, 2023 | An issue in Anglaise Company Anglaise.Company v.13.6.1 allows a remote attacker to obtain sensitive information via craf... |
| CVE-2023-5574 | HIGH | 7 | 0.6% | Oct 25, 2023 | A use-after-free flaw was found in xorg-x11-server-Xvfb. This issue occurs in Xvfb with a very specific and legacy confi... |
| CVE-2023-5367 | HIGH | 7.8 | 0.6% | Oct 25, 2023 | A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buff... |
| CVE-2023-5044 | HIGH | 8.8 | 56.6% | Oct 25, 2023 | Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation. |
| CVE-2023-5043 | HIGH | 8.8 | 2.2% | Oct 25, 2023 | Ingress nginx annotation injection causes arbitrary command execution. |
| CVE-2023-45135 | HIGH | 8 | 1.7% | Oct 25, 2023 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In `org.xwiki.p... |
| CVE-2023-42856 | HIGH | 7.8 | 0.4% | Oct 25, 2023 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, ... |
| CVE-2023-42852 | HIGH | 8.8 | 1.7% | Oct 25, 2023 | A logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, watchOS 10.1, iOS 16.... |
| CVE-2023-42847 | HIGH | 7.5 | 0.9% | Oct 25, 2023 | A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1. An... |
| CVE-2023-42844 | HIGH | 7.5 | 1.5% | Oct 25, 2023 | This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12... |
| CVE-2023-42841 | HIGH | 7.8 | 0.4% | Oct 25, 2023 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.... |
| CVE-2023-41976 | HIGH | 8.8 | 1.5% | Oct 25, 2023 | A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17.1 and iPadOS 17.1, w... |
| CVE-2023-40447 | HIGH | 8.8 | 1.5% | Oct 25, 2023 | The issue was addressed with improved memory handling. This issue is fixed in iOS 17.1 and iPadOS 17.1, watchOS 10.1, iO... |
| CVE-2023-40445 | HIGH | 7.5 | 0.7% | Oct 25, 2023 | The issue was addressed with improved UI handling. This issue is fixed in iOS 17.1 and iPadOS 17.1. A device may persist... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now