2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-26152 | HIGH | 7.5 | 1.1% | Oct 3, 2023 | All versions of the package static-server are vulnerable to Directory Traversal due to improper input sanitization passe... |
| CVE-2023-26151 | HIGH | 7.5 | 1.0% | Oct 3, 2023 | Versions of the package asyncua before 0.9.96 are vulnerable to Denial of Service (DoS) such that an attacker can send a... |
| CVE-2023-26150 | HIGH | 7.5 | 0.5% | Oct 3, 2023 | Versions of the package asyncua before 0.9.96 are vulnerable to Improper Authentication such that it is possible to acce... |
| CVE-2023-5345 | HIGH | 7.8 | 0.5% | Oct 3, 2023 | A use-after-free vulnerability in the Linux kernel's fs/smb/client component can be exploited to achieve local privilege... |
| CVE-2023-3967 | HIGH | 7.5 | 0.5% | Oct 3, 2023 | Allocation of Resources Without Limits or Throttling vulnerability in Hitachi Ops Center Common Services on Linux allows... |
| CVE-2023-3440 | HIGH | 7.8 | 0.2% | Oct 3, 2023 | Incorrect Default Permissions vulnerability in Hitachi JP1/Performance Management on Windows allows File Manipulation.Th... |
| CVE-2023-42771 | HIGH | 8.8 | 0.3% | Oct 3, 2023 | Authentication bypass vulnerability in ACERA 1320 firmware ver.01.26 and earlier, and ACERA 1310 firmware ver.01.26 and ... |
| CVE-2023-41086 | HIGH | 8.8 | 0.2% | Oct 3, 2023 | Cross-site request forgery (CSRF) vulnerability exists in FURUNO SYSTEMS wireless LAN access point devices. If a user vi... |
| CVE-2023-39222 | HIGH | 8.8 | 1.3% | Oct 3, 2023 | OS command injection vulnerability in FURUNO SYSTEMS wireless LAN access point devices allows an authenticated user to e... |
| CVE-2023-36628 | HIGH | 8.8 | 0.5% | Oct 3, 2023 | A flaw exists in VASA which allows users with access to a vSphere/ESXi VMware admin on a FlashArray to gain root access ... |
| CVE-2023-43361 | HIGH | 7.8 | 0.4% | Oct 2, 2023 | Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute arbitrary code and cause a deni... |
| CVE-2023-43268 | HIGH | 8.8 | 0.9% | Oct 2, 2023 | Deyue Remote Vehicle Management System v1.1 was discovered to contain a deserialization vulnerability. |
| CVE-2023-5344 | HIGH | 7.5 | 1.2% | Oct 2, 2023 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1969. |
| CVE-2023-43890 | HIGH | 8.8 | 2.5% | Oct 2, 2023 | Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability in the diagnostic tools page. This vu... |
| CVE-2023-43835 | HIGH | 8.8 | 1.4% | Oct 2, 2023 | Super Store Finder 3.7 and below is vulnerable to authenticated Arbitrary PHP Code Injection that could lead to Remote C... |
| CVE-2023-3592 | HIGH | 7.5 | 0.7% | Oct 2, 2023 | In Mosquitto before 2.0.16, a memory leak occurs when clients send v5 CONNECT packets with a will message that contains ... |
| CVE-2023-3769 | HIGH | 7.5 | 0.6% | Oct 2, 2023 | Incorrect data input validation vulnerability, which could allow an attacker with access to the network to implement fuz... |
| CVE-2023-3744 | HIGH | 8.8 | 0.5% | Oct 2, 2023 | Server-Side Request Forgery vulnerability in SLims version 9.6.0. This vulnerability could allow an authenticated attack... |
| CVE-2023-41580 | HIGH | 7.5 | 0.7% | Oct 2, 2023 | Phpipam before v1.5.2 was discovered to contain a LDAP injection vulnerability via the dname parameter at /users/ad-sear... |
| CVE-2023-5106 | HIGH | 7.5 | 0.5% | Oct 2, 2023 | An issue has been discovered in Ultimate-licensed GitLab EE affecting all versions starting 13.12 prior to 16.2.8, 16.3.... |
| CVE-2023-3768 | HIGH | 7.5 | 0.6% | Oct 2, 2023 | Incorrect data input validation vulnerability, which could allow an attacker with access to the network to implement fuz... |
| CVE-2023-32820 | HIGH | 7.5 | 0.4% | Oct 2, 2023 | In wlan firmware, there is a possible firmware assertion due to improper input handling. This could lead to remote denia... |
| CVE-2023-5329 | HIGH | 7.5 | 0.8% | Oct 2, 2023 | A vulnerability classified as problematic was found in Field Logic DataCube4 up to 20231001. This vulnerability affects ... |
| CVE-2023-5328 | HIGH | 8.8 | 0.5% | Oct 2, 2023 | A vulnerability classified as critical has been found in SATO CL4NX-J Plus 1.13.2-u455_r2. This affects an unknown part ... |
| CVE-2023-5326 | HIGH | 8.8 | 0.5% | Oct 1, 2023 | A vulnerability was found in SATO CL4NX-J Plus 1.13.2-u455_r2. It has been declared as critical. Affected by this vulner... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now