2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-45661 | HIGH | 7.1 | 0.6% | Oct 21, 2023 | stb_image is a single file MIT licensed library for processing images. A crafted image file may trigger out of bounds me... |
| CVE-2023-32786 | HIGH | 7.5 | 0.6% | Oct 20, 2023 | In Langchain through 0.0.155, prompt injection allows an attacker to force the service to retrieve data from an arbitrar... |
| CVE-2023-5681 | HIGH | 7.2 | 0.6% | Oct 20, 2023 | A vulnerability, which was classified as critical, was found in Netentsec NS-ASG Application Security Gateway 6.3. This ... |
| CVE-2023-46117 | HIGH | 8.8 | 0.8% | Oct 20, 2023 | reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform sc... |
| CVE-2023-45805 | HIGH | 7.8 | 0.5% | Oct 20, 2023 | pdm is a Python package and dependency manager supporting the latest PEP standards. It's possible to craft a malicious `... |
| CVE-2023-5690 | HIGH | 8.8 | 0.4% | Oct 20, 2023 | Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.2.2. |
| CVE-2023-5687 | HIGH | 8.8 | 0.3% | Oct 20, 2023 | Cross-Site Request Forgery (CSRF) in GitHub repository mosparo/mosparo prior to 1.0.3. |
| CVE-2023-5686 | HIGH | 8.8 | 0.8% | Oct 20, 2023 | Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0. |
| CVE-2023-23373 | HIGH | 8.8 | 1.1% | Oct 20, 2023 | An OS command injection vulnerability has been reported to affect QUSBCam2. If exploited, the vulnerability could allow ... |
| CVE-2023-3487 | HIGH | 7.8 | 0.2% | Oct 20, 2023 | An integer overflow in Silicon Labs Gecko Bootloader version 4.3.1 and earlier allows unbounded memory access when readi... |
| CVE-2023-34045 | HIGH | 7.8 | 0.2% | Oct 20, 2023 | VMware Fusion(13.x prior to 13.5) contains a local privilege escalation vulnerability that occurs during installation f... |
| CVE-2023-34046 | HIGH | 7 | 0.1% | Oct 20, 2023 | VMware Fusion(13.x prior to 13.5) contains a TOCTOU (Time-of-check Time-of-use) vulnerability that occurs during instal... |
| CVE-2023-5602 | HIGH | 8.8 | 0.2% | Oct 20, 2023 | The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Cross-Site Request Forgery i... |
| CVE-2023-4999 | HIGH | 8.8 | 0.7% | Oct 20, 2023 | The Horizontal scrolling announcement plugin for WordPress is vulnerable to SQL Injection via the plugin's [horizontal-s... |
| CVE-2023-4668 | HIGH | 7.5 | 0.5% | Oct 20, 2023 | The Ad Inserter for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.7.30 v... |
| CVE-2023-4386 | HIGH | 8.1 | 0.8% | Oct 20, 2023 | The Essential Blocks plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 4.2.0 ... |
| CVE-2023-5524 | HIGH | 7.3 | 0.3% | Oct 20, 2023 | Insufficient blacklisting in M-Files Web Companion before release version 23.10 and LTS Service Release Versions before ... |
| CVE-2023-5523 | HIGH | 7.8 | 0.3% | Oct 20, 2023 | Execution of downloaded content flaw in M-Files Web Companion before release version 23.10 and LTS Service Release Versi... |
| CVE-2023-5414 | HIGH | 7.2 | 1.0% | Oct 20, 2023 | The Icegram Express plugin for WordPress is vulnerable to Directory Traversal in versions up to, and including, 5.6.23 v... |
| CVE-2023-4920 | HIGH | 8.8 | 0.3% | Oct 20, 2023 | The BEAR for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.3.3. This is du... |
| CVE-2023-40361 | HIGH | 7.8 | 0.3% | Oct 20, 2023 | SECUDOS Qiata (DOMOS OS) 4.13 has Insecure Permissions for the previewRm.sh daily cronjob. To exploit this, an attacker ... |
| CVE-2023-46277 | HIGH | 7.8 | 0.3% | Oct 20, 2023 | please (aka pleaser) through 0.5.4 allows privilege escalation through the TIOCSTI and/or TIOCLINUX ioctl. (If both TIOC... |
| CVE-2023-34052 | HIGH | 7.8 | 0.2% | Oct 20, 2023 | VMware Aria Operations for Logs contains a deserialization vulnerability. A malicious actor with non-administrative acce... |
| CVE-2023-44385 | HIGH | 8.8 | 0.3% | Oct 19, 2023 | The Home Assistant Companion for iOS and macOS app up to version 2023.4 are vulnerable to Client-Side Request Forgery. A... |
| CVE-2023-43345 | HIGH | 8.6 | 0.4% | Oct 19, 2023 | Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary co... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now