2023 CVE Vulnerabilities

31,509 CVEs published in 2023.

CVE IDSeverityCVSSDescription
CVE-2023-42956MEDIUM6.5The issue was addressed with improved memory handling. This issue is fixed in Safari 17.2, iOS 17.2 and iPadOS 17.2, mac...
CVE-2023-42950HIGH8.8A use after free issue was addressed with improved memory management. This issue is fixed in Safari 17.2, iOS 17.2 and i...
CVE-2023-42947HIGH8.6A path handling issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.7.2, macOS Ventur...
CVE-2023-42936MEDIUM5.5This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Monterey 12.7.2,...
CVE-2023-42931HIGH7.8The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.6.3, macOS Sonoma 14.2, macOS Mont...
CVE-2023-42930MEDIUM5.5This issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.6.3, macOS Sonoma 14.2, macOS Mon...
CVE-2023-42913HIGH8.8This issue was addressed through improved state management. This issue is fixed in macOS Sonoma 14.2. Remote Login sessi...
CVE-2023-42896MEDIUM5.5An issue was addressed with improved handling of temporary files. This issue is fixed in macOS Monterey 12.7.2, macOS Ve...
CVE-2023-42893MEDIUM5.5A permissions issue was addressed by removing vulnerable code and adding additional checks. This issue is fixed in macOS...
CVE-2023-42892HIGH7.8A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.6.3, macOS...
CVE-2023-40390MEDIUM5.5A privacy issue was addressed by moving sensitive data to a protected location. This issue is fixed in macOS Sonoma 14.2...
CVE-2023-45715MEDIUM4.3The console may experience a service interruption when processing file names with invalid characters.
CVE-2023-45706MEDIUM4An administrative user of WebReports may perform a Cross Site Scripting (XSS) and/or Man in the Middle (MITM) exploit th...
CVE-2023-45705HIGH7.2An administrative user of WebReports may perform a Server Side Request Forgery (SSRF) exploit through SMTP configuration...
CVE-2023-6437CRITICAL9.8Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TP-Link TP-L...
CVE-2023-6371MEDIUM5.4An issue has been discovered in GitLab CE/EE affecting all versions before 16.8.5, all versions starting from 16.9 befor...
CVE-2023-52628HIGH7.1In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: exthdr: fix 4-byte stack OOB w...
CVE-2023-52234MEDIUM6.5Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Booster Booster Elite for WooCommerce.This i...
CVE-2023-52231MEDIUM6.5Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Booster Booster Plus for WooCommerce.This is...
CVE-2023-50374MEDIUM5.5Server-Side Request Forgery (SSRF) vulnerability in NiteoThemes CMP – Coming Soon & Maintenance.This issue affects CMP –...
CVE-2023-39309HIGH8.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ThemeFusion Fusion...
CVE-2023-23649HIGH8.1Deserialization of Untrusted Data vulnerability in MainWP MainWP Links Manager Extension.This issue affects MainWP Links...
CVE-2023-39313HIGH7.7Server-Side Request Forgery (SSRF) vulnerability in ThemeFusion Avada.This issue affects Avada: from n/a through 7.11.1.
CVE-2023-36679MEDIUM6.5Server-Side Request Forgery (SSRF) vulnerability in Brainstorm Force Spectra.This issue affects Spectra: from n/a throug...
CVE-2023-34370HIGH7.1Server-Side Request Forgery (SSRF) vulnerability in Brainstorm Force Starter Templates — Elementor, WordPress & Beaver B...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now