2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-42836 | MEDIUM | 5.3 | 0.5% | Feb 21, 2024 | A logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Ventura 13.6.3,... |
| CVE-2023-42835 | HIGH | 7.5 | 0.4% | Feb 21, 2024 | A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1. An attacker may be able to a... |
| CVE-2023-42834 | MEDIUM | 5.5 | 0.2% | Feb 21, 2024 | A privacy issue was addressed with improved handling of files. This issue is fixed in watchOS 10.1, macOS Sonoma 14.1, m... |
| CVE-2023-42823 | MEDIUM | 5.5 | 0.4% | Feb 21, 2024 | The issue was resolved by sanitizing logging This issue is fixed in watchOS 10.1, macOS Sonoma 14.1, tvOS 17.1, macOS Mo... |
| CVE-2023-42498 | MEDIUM | 6.1 | 0.6% | Feb 21, 2024 | Reflected cross-site scripting (XSS) vulnerability in the Language Override edit screen in Liferay Portal 7.4.3.8 throug... |
| CVE-2023-42496 | MEDIUM | 6.1 | 0.6% | Feb 21, 2024 | Reflected cross-site scripting (XSS) vulnerability on the add assignees to a role page in Liferay Portal 7.3.3 through 7... |
| CVE-2023-40191 | MEDIUM | 6.1 | 0.6% | Feb 21, 2024 | Reflected cross-site scripting (XSS) vulnerability in the instance settings for Accounts in Liferay Portal 7.4.3.44 thro... |
| CVE-2023-50923 | MEDIUM | 4.3 | 0.3% | Feb 21, 2024 | In QUIC in RFC 9000, the Latency Spin Bit specification (section 17.4) does not strictly constrain the bit value when th... |
| CVE-2023-6936 | CRITICAL | 9.1 | 0.6% | Feb 20, 2024 | In wolfSSL prior to 5.6.6, if callback functions are enabled (via the WOLFSSL_CALLBACKS flag), then a malicious TLS clie... |
| CVE-2023-47422 | HIGH | 8.8 | 0.5% | Feb 20, 2024 | An access control issue in /usr/sbin/httpd in Tenda TX9 V1 V22.03.02.54, Tenda AX3 V3 V16.03.12.11, Tenda AX9 V1 V22.03.... |
| CVE-2023-52439 | HIGH | 7.8 | 0.3% | Feb 20, 2024 | In the Linux kernel, the following vulnerability has been resolved: uio: Fix use-after-free in uio_open core-1 core... |
| CVE-2023-52438 | HIGH | 7.8 | 0.3% | Feb 20, 2024 | In the Linux kernel, the following vulnerability has been resolved: binder: fix use-after-free in shinker's callback T... |
| CVE-2023-52437 | — | — | — | Feb 20, 2024 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2023-52436 | HIGH | 7.8 | 0.3% | Feb 20, 2024 | In the Linux kernel, the following vulnerability has been resolved: f2fs: explicitly null-terminate the xattr list Whe... |
| CVE-2023-49034 | MEDIUM | 6.1 | 0.5% | Feb 20, 2024 | Cross Site Scripting (XSS) vulnerability in ProjeQtOr 11.0.2 allows a remote attacker to execute arbitrary code via a cr... |
| CVE-2023-46967 | MEDIUM | 6.1 | 0.4% | Feb 20, 2024 | Cross Site Scripting vulnerability in the sanitize function in Enhancesoft osTicket 1.18.0 allows a remote attacker to e... |
| CVE-2023-52435 | MEDIUM | 5.5 | 0.2% | Feb 20, 2024 | In the Linux kernel, the following vulnerability has been resolved: net: prevent mss overflow in skb_segment() Once ag... |
| CVE-2023-52434 | HIGH | 8 | 0.6% | Feb 20, 2024 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential OOBs in smb2_parse_conte... |
| CVE-2023-51447 | MEDIUM | 5.4 | 0.5% | Feb 20, 2024 | Decidim is a participatory democracy framework. Starting in version 0.27.0 and prior to versions 0.27.5 and 0.28.0, the ... |
| CVE-2023-48220 | HIGH | 7.4 | 0.8% | Feb 20, 2024 | Decidim is a participatory democracy framework. Starting in version 0.4.rc3 and prior to version 2.0.9 of the `devise_in... |
| CVE-2023-47635 | MEDIUM | 5.7 | 0.3% | Feb 20, 2024 | Decidim is a participatory democracy framework. Starting in version 0.23.0 and prior to versions 0.27.5 and 0.28.0, the ... |
| CVE-2023-45318 | CRITICAL | 9.8 | 1.7% | Feb 20, 2024 | A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP git commit... |
| CVE-2023-39541 | MEDIUM | 5.9 | 0.8% | Feb 20, 2024 | A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP v3.06... |
| CVE-2023-39540 | MEDIUM | 5.9 | 0.8% | Feb 20, 2024 | A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP v3.06... |
| CVE-2023-38562 | CRITICAL | 9.1 | 1.1% | Feb 20, 2024 | A double-free vulnerability exists in the IP header loopback parsing functionality of Weston Embedded uC-TCP-IP v3.06.01... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now