2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-3666 | LOW | 3.3 | 0.2% | Sep 3, 2025 | The Sticky Side Buttons WordPress plugin before 2.0.0 does not sanitise and escape some of its settings, which could all... |
| CVE-2023-21471 | LOW | 3.3 | 0.1% | Sep 3, 2025 | Improper access control vulnerability in SemClipboard prior to SMR Apr-2023 Release 1 allows attackers to read arbitrary... |
| CVE-2023-21470 | LOW | 3.3 | 0.1% | Sep 3, 2025 | Improper access control vulnerability in SLocation prior to SMR Apr-2022 Release 1 allows local attackers to get device ... |
| CVE-2023-21469 | LOW | 3.3 | 0.1% | Sep 3, 2025 | Improper access control vulnerability in SLocation prior to SMR Apr-2022 Release 1 allows local attackers to get device ... |
| CVE-2023-21466 | LOW | 3.3 | 0.1% | Sep 3, 2025 | PendingIntent hijacking vulnerability in CertificatePolicy in framework prior to SMR Apr-2023 Release 1 allows local att... |
| CVE-2023-44976 | LOW | 3.2 | 0.2% | Aug 1, 2025 | Hangzhou Shunwang Rentdrv2 before 2024-12-24 allows local users to terminate EDR processes and possibly have unspecified... |
| CVE-2023-32251 | LOW | 3.7 | 0.4% | Jul 31, 2025 | A vulnerability has been identified in the Linux kernel's ksmbd component (kernel SMB/CIFS server). A security control d... |
| CVE-2023-53159 | LOW | 3.3 | 0.3% | Jul 28, 2025 | The openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to X509VerifyParamRef::set_ho... |
| CVE-2023-28903 | LOW | 3.3 | 0.2% | Jun 28, 2025 | An integer overflow in the image processing binary of the MIB3 infotainment unit allows an attacker with local access to... |
| CVE-2023-28902 | LOW | 3.3 | 0.2% | Jun 28, 2025 | An integer underflow in the image processing binary of the MIB3 infotainment unit allows an attacker with local access t... |
| CVE-2023-5600 | LOW | 3.1 | 0.2% | Jun 20, 2025 | An issue has been discovered in GitLab EE affecting all versions starting from 16.0 before 16.3.6, all versions starting... |
| CVE-2023-29184 | LOW | 2.3 | 0.2% | Jun 10, 2025 | An incomplete cleanup vulnerability [CWE-459] in FortiOS 7.2 all versions and before & FortiProxy version 7.2.0 through... |
| CVE-2023-7297 | LOW | 3.5 | 0.2% | May 15, 2025 | The TwitterPosts WordPress plugin through 1.0.2 does not have CSRF check in place when updating its settings, which coul... |
| CVE-2023-7303 | LOW | 3.5 | 0.3% | May 7, 2025 | A vulnerability, which was classified as problematic, was found in q2apro q2apro-on-site-notifications up to 1.4.6. This... |
| CVE-2023-37516 | LOW | 3.2 | 0.1% | Apr 24, 2025 | Missing "no cache" headers in HCL Leap permits user directory information to be cached. |
| CVE-2023-30421 | LOW | 2.9 | 0.1% | Apr 19, 2025 | mystrtod in mjson 1.2.7 requires more than a billion iterations during processing of certain digit strings such as 88911... |
| CVE-2023-26819 | LOW | 2.9 | 0.2% | Apr 19, 2025 | cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as {"a": true, "b": [ null,999999999999999... |
| CVE-2023-42969 | LOW | 3.3 | 0.1% | Apr 11, 2025 | An app may be able to break out of its sandbox. This issue is fixed in iOS 17 and iPadOS 17, iOS 16.7 and iPadOS 16.7, m... |
| CVE-2023-43035 | LOW | 3.3 | 0.1% | Apr 10, 2025 | IBM Sterling Control Center 6.2.1, 6.3.1, and 6.4.0 allows web pages to be stored locally which can be read by another u... |
| CVE-2023-34406 | LOW | 3.3 | 0.2% | Feb 13, 2025 | An issue was discovered on Mercedes Benz NTG 6. A possible integer overflow exists in the user data import/export functi... |
| CVE-2023-34401 | LOW | 3.7 | 0.3% | Feb 13, 2025 | Mercedes-Benz head-unit NTG6 contains functions to import or export profile settings over USB. Inside profile folder the... |
| CVE-2023-31331 | LOW | 3 | 0.1% | Feb 11, 2025 | Improper access control in the DRTM firmware could allow a privileged attacker to perform multiple driver initialization... |
| CVE-2023-20581 | LOW | 2.5 | 0.2% | Feb 11, 2025 | Improper access control in the IOMMU may allow a privileged attacker to bypass RMP checks, potentially leading to a loss... |
| CVE-2023-20507 | LOW | 2.3 | 0.1% | Feb 11, 2025 | An integer overflow in the ASP could allow a privileged attacker to perform an out-of-bounds write, potentially resultin... |
| CVE-2023-42242 | LOW | 3.8 | 0.3% | Jan 13, 2025 | An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQ... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now