2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-41899 | HIGH | 7.2 | 0.5% | Oct 19, 2023 | Home assistant is an open source home automation. In affected versions the `hassio.addon_stdin` is vulnerable to a parti... |
| CVE-2023-41898 | HIGH | 7.8 | 0.2% | Oct 19, 2023 | Home assistant is an open source home automation. The Home Assistant Companion for Android app up to version 2023.8.2 is... |
| CVE-2023-44690 | HIGH | 7.5 | 0.2% | Oct 19, 2023 | Inadequate encryption strength in mycli 1.27.0 allows attackers to view sensitive information via /mycli/config.py |
| CVE-2023-45823 | HIGH | 7.5 | 0.6% | Oct 19, 2023 | Artifact Hub is a web-based application that enables finding, installing, and publishing packages and configurations for... |
| CVE-2023-30132 | HIGH | 7.8 | 0.2% | Oct 19, 2023 | An issue discovered in IXP Data EasyInstall 6.6.14907.0 allows attackers to gain escalated privileges via static Cryptog... |
| CVE-2023-27795 | HIGH | 7.8 | 0.2% | Oct 19, 2023 | An issue found in IXP Data Easy Install v.6.6.14884.0 allows a local attacker to gain privileges via a static XOR key. |
| CVE-2023-27793 | HIGH | 7.8 | 0.2% | Oct 19, 2023 | An issue discovered in IXP Data Easy Install v.6.6.14884.0 allows local attackers to gain escalated privileges via weak ... |
| CVE-2023-27792 | HIGH | 7.8 | 0.2% | Oct 19, 2023 | An issue found in IXP Data Easy Install v.6.6.14884.0 allows an attacker to escalate privileges via lack of permissions ... |
| CVE-2023-40145 | HIGH | 8.8 | 1.2% | Oct 19, 2023 | In Weintek's cMT3000 HMI Web CGI device, an anonymous attacker can execute arbitrary commands after login to th... |
| CVE-2023-27791 | HIGH | 8.1 | 0.7% | Oct 19, 2023 | An issue found in IXP Data Easy Install 6.6.148840 allows a remote attacker to escalate privileges via insecure PRNG. |
| CVE-2023-42435 | HIGH | 8.8 | 0.2% | Oct 19, 2023 | The affected product is vulnerable to a cross-site request forgery vulnerability, which may allow an attacker to pe... |
| CVE-2023-41089 | HIGH | 8.8 | 0.5% | Oct 19, 2023 | The affected product is vulnerable to an improper authentication vulnerability, which may allow an attacker to ... |
| CVE-2023-5059 | HIGH | 7.8 | 0.2% | Oct 19, 2023 | Santesoft Sante FFT Imaging lacks proper validation of user-supplied data when parsing DICOM files. This could lead... |
| CVE-2023-39431 | HIGH | 7.8 | 0.2% | Oct 19, 2023 | Sante DICOM Viewer Pro lacks proper validation of user-supplied data when parsing DICOM files. This could lead to an ... |
| CVE-2023-38128 | HIGH | 7.8 | 0.7% | Oct 19, 2023 | An out-of-bounds write vulnerability exists in the "HyperLinkFrame" stream parser of Ichitaro 2023 1.0.1.59372. A specia... |
| CVE-2023-38127 | HIGH | 7.8 | 0.6% | Oct 19, 2023 | An integer overflow exists in the "HyperLinkFrame" stream parser of Ichitaro 2023 1.0.1.59372. A specially crafted docum... |
| CVE-2023-35986 | HIGH | 7.8 | 0.2% | Oct 19, 2023 | Sante DICOM Viewer Pro lacks proper validation of user-supplied data when parsing DICOM files. This could lead to a sta... |
| CVE-2023-34366 | HIGH | 7.8 | 0.6% | Oct 19, 2023 | A use-after-free vulnerability exists in the Figure stream parsing functionality of Ichitaro 2023 1.0.1.59372. A special... |
| CVE-2023-45277 | HIGH | 7.5 | 1.0% | Oct 19, 2023 | Yamcs 5.8.6 is vulnerable to directory traversal (issue 1 of 2). The vulnerability is in the storage functionality of th... |
| CVE-2023-35126 | HIGH | 7.8 | 0.5% | Oct 19, 2023 | An out-of-bounds write vulnerability exists within the parsers for both the "DocumentViewStyles" and "DocumentEditStyles... |
| CVE-2023-43251 | HIGH | 7.8 | 0.5% | Oct 19, 2023 | XNSoft Nconvert 7.136 has an Exception Handler Chain Corrupted via a crafted image file. Attackers could exploit this is... |
| CVE-2023-35186 | HIGH | 8.8 | 2.2% | Oct 19, 2023 | The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows a... |
| CVE-2023-35183 | HIGH | 7.8 | 0.2% | Oct 19, 2023 | The SolarWinds Access Rights Manager was susceptible to Privilege Escalation Vulnerability. This vulnerability allows au... |
| CVE-2023-35181 | HIGH | 7.8 | 0.2% | Oct 19, 2023 | The SolarWinds Access Rights Manager was susceptible to Privilege Escalation Vulnerability. This vulnerability allows us... |
| CVE-2023-35180 | HIGH | 8.8 | 27.4% | Oct 19, 2023 | The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows a... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now