2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-25489 | HIGH | 8.8 | 0.2% | Oct 4, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Jeff Sherk Update Theme and Plugins from Zip File plugin <= 2.0.0 ver... |
| CVE-2023-1584 | HIGH | 7.5 | 1.0% | Oct 4, 2023 | A flaw was found in Quarkus. Quarkus OIDC can leak both ID and access tokens in the authorization code flow when an inse... |
| CVE-2023-5377 | HIGH | 7.1 | 0.3% | Oct 4, 2023 | Out-of-bounds Read in GitHub repository gpac/gpac prior to v2.2.2-DEV. |
| CVE-2023-5369 | HIGH | 7.1 | 0.2% | Oct 4, 2023 | Before correction, the copy_file_range system call checked only for the CAP_READ and CAP_WRITE capabilities on the input... |
| CVE-2023-30738 | HIGH | 7.8 | 0.2% | Oct 4, 2023 | An improper input validation in UEFI Firmware prior to Firmware update Oct-2023 Release in Galaxy Book, Galaxy Book Pro,... |
| CVE-2023-30733 | HIGH | 7.8 | 0.2% | Oct 4, 2023 | Stack-based Buffer Overflow in vulnerability HDCP trustlet prior to SMR Oct-2023 Release 1 allows local privileged attac... |
| CVE-2023-30727 | HIGH | 7.5 | 0.4% | Oct 4, 2023 | Improper access control vulnerability in SecSettings prior to SMR Oct-2023 Release 1 allows attackers to enable Wi-Fi an... |
| CVE-2023-30692 | HIGH | 7.8 | 0.2% | Oct 4, 2023 | Improper input validation vulnerability in Evaluator prior to SMR Oct-2023 Release 1 allows local attackers to launch pr... |
| CVE-2023-30690 | HIGH | 7.8 | 0.2% | Oct 4, 2023 | Improper input validation vulnerability in Duo prior to SMR Oct-2023 Release 1 allows local attackers to launch privileg... |
| CVE-2023-43176 | HIGH | 8.8 | 1.7% | Oct 3, 2023 | A deserialization vulnerability in Afterlogic Aurora Files v9.7.3 allows attackers to execute arbitrary code via supplyi... |
| CVE-2023-43976 | HIGH | 8.1 | 0.5% | Oct 3, 2023 | An issue in CatoNetworks CatoClient before v.5.4.0 allows attackers to escalate privileges and winning the race conditio... |
| CVE-2023-5255 | HIGH | 7.5 | 0.4% | Oct 3, 2023 | For certificates that utilize the auto-renew feature in Puppet Server, a flaw exists which prevents the certificates fro... |
| CVE-2023-4911 | HIGH | 7.8 | 63.8% | Oct 3, 2023 | A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environ... |
| CVE-2023-4817 | HIGH | 8.8 | 0.6% | Oct 3, 2023 | This vulnerability allows an authenticated attacker to upload malicious files by bypassing the restrictions of the uploa... |
| CVE-2023-4884 | HIGH | 7.5 | 0.4% | Oct 3, 2023 | An attacker could send an HTTP request to an Open5GS endpoint and retrieve the information stored on the device due to t... |
| CVE-2023-4883 | HIGH | 7.5 | 0.5% | Oct 3, 2023 | Invalid pointer release vulnerability. Exploitation of this vulnerability could allow an attacker to interrupt the corr... |
| CVE-2023-4882 | HIGH | 7.5 | 0.5% | Oct 3, 2023 | DOS vulnerability that could allow an attacker to register a new VNF (Virtual Network Function) value. This action could... |
| CVE-2023-4929 | HIGH | 8.8 | 0.3% | Oct 3, 2023 | All firmware versions of the NPort 5000 Series are affected by an improper validation of integrity check vulnerability. ... |
| CVE-2023-41693 | HIGH | 8.8 | 0.2% | Oct 3, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in edward_plainview MyCryptoCheckout plugin <= 2.125 versions. |
| CVE-2023-41244 | HIGH | 8.8 | 0.2% | Oct 3, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Buildfail Localize Remote Images plugin <= 1.0.9 versions. |
| CVE-2023-40558 | HIGH | 8.8 | 0.2% | Oct 3, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in eMarket Design YouTube Video Gallery by YouTube Showcase plugin <= 3.... |
| CVE-2023-3350 | HIGH | 7.5 | 0.2% | Oct 3, 2023 | A Cryptographic Issue vulnerability has been found on IBERMATICA RPS, affecting version 2019. By firstly downloading the... |
| CVE-2023-3349 | HIGH | 7.5 | 0.4% | Oct 3, 2023 | Information exposure vulnerability in IBERMATICA RPS 2019, which exploitation could allow an unauthenticated user to ret... |
| CVE-2023-32091 | HIGH | 8.8 | 0.2% | Oct 3, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in POEditor plugin <= 0.9.4 versions. |
| CVE-2023-27435 | HIGH | 8.8 | 0.2% | Oct 3, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Sami Ahmed Siddiqui HTTP Auth plugin <= 0.3.2 versions. |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now