2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-5262 | HIGH | 8.8 | 0.6% | Sep 29, 2023 | A vulnerability has been found in OpenRapid RapidCMS 1.3.1 and classified as critical. Affected by this vulnerability is... |
| CVE-2023-3413 | HIGH | 7.5 | 0.6% | Sep 29, 2023 | An issue has been discovered in GitLab affecting all versions starting from 16.2 before 16.2.8, all versions starting fr... |
| CVE-2023-3922 | HIGH | 7.1 | 0.4% | Sep 29, 2023 | An issue has been discovered in GitLab affecting all versions starting from 8.15 before 16.2.8, all versions starting fr... |
| CVE-2023-32477 | HIGH | 7.8 | 0.2% | Sep 29, 2023 | Dell Common Event Enabler 8.9.8.2 for Windows and prior, contain an improper access control vulnerability. A local low-... |
| CVE-2023-3917 | HIGH | 7.5 | 0.8% | Sep 29, 2023 | Denial of Service in pipelines affecting all versions of Gitlab EE and CE prior to 16.2.8, 16.3 prior to 16.3.5, and 16.... |
| CVE-2023-44466 | HIGH | 8.8 | 54.6% | Sep 29, 2023 | An issue was discovered in net/ceph/messenger_v2.c in the Linux kernel before 6.4.5. There is an integer signedness erro... |
| CVE-2023-30591 | HIGH | 7.5 | 53.8% | Sep 29, 2023 | Denial-of-service in NodeBB <= v2.8.10 allows unauthenticated attackers to trigger a crash, when invoking `eventName.sta... |
| CVE-2023-44464 | HIGH | 7.8 | 0.3% | Sep 29, 2023 | pretix before 2023.7.2 allows Pillow to parse EPS files. |
| CVE-2023-5077 | HIGH | 7.5 | 0.4% | Sep 29, 2023 | The Vault and Vault Enterprise ("Vault") Google Cloud secrets engine did not preserve existing Google Cloud IAM Conditio... |
| CVE-2023-43662 | HIGH | 8.6 | 8.1% | Sep 28, 2023 | ShokoServer is a media server which specializes in organizing anime. In affected versions the `/api/Image/WithPath` endp... |
| CVE-2023-43014 | HIGH | 8.8 | 0.6% | Sep 28, 2023 | Asset Management System v1.0 is vulnerable to an Authenticated SQL Injection vulnerability on the 'first_name' and 'la... |
| CVE-2023-5185 | HIGH | 8.8 | 1.2% | Sep 28, 2023 | Gym Management System Project v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'file' parameter of p... |
| CVE-2023-4316 | HIGH | 7.5 | 0.8% | Sep 28, 2023 | Zod in versions 3.21.0 up to and including 3.22.3 allows an attacker to perform a denial of service while validating ema... |
| CVE-2023-43740 | HIGH | 8.8 | 1.2% | Sep 28, 2023 | Online Book Store Project v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'image' parameter of admin_... |
| CVE-2023-43226 | HIGH | 8.8 | 0.9% | Sep 28, 2023 | An arbitrary file upload vulnerability in dede/baidunews.php in DedeCMS 5.7.111 and earlier allows attackers to execute ... |
| CVE-2023-5256 | HIGH | 7.5 | 0.7% | Sep 28, 2023 | In certain scenarios, Drupal's JSON:API module will output error backtraces. With some configurations, this may cause se... |
| CVE-2023-43044 | HIGH | 7.5 | 0.8% | Sep 28, 2023 | IBM License Metric Tool 9.2 could allow a remote attacker to traverse directories on the system. An attacker could send ... |
| CVE-2023-40375 | HIGH | 7.8 | 0.1% | Sep 28, 2023 | Integrated application server for IBM i 7.2, 7.3, 7.4, and 7.5 contains a local privilege escalation vulnerability. A m... |
| CVE-2023-5217 | HIGH | 8.8 | 34.4% | Sep 28, 2023 | Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remo... |
| CVE-2023-5187 | HIGH | 8.8 | 0.8% | Sep 28, 2023 | Use after free in Extensions in Google Chrome prior to 117.0.5938.132 allowed an attacker who convinced a user to instal... |
| CVE-2023-5186 | HIGH | 8.8 | 1.0% | Sep 28, 2023 | Use after free in Passwords in Google Chrome prior to 117.0.5938.132 allowed a remote attacker who convinced a user to e... |
| CVE-2023-43868 | HIGH | 7.5 | 0.8% | Sep 28, 2023 | D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via websGetVar function. |
| CVE-2023-43867 | HIGH | 7.5 | 0.8% | Sep 28, 2023 | D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWanL2TP function. |
| CVE-2023-43866 | HIGH | 7.5 | 0.8% | Sep 28, 2023 | D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWAN_Wizard7 function. |
| CVE-2023-43865 | HIGH | 7.5 | 0.8% | Sep 28, 2023 | D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWanPPTP function. |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now