2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-43783 | HIGH | 7.5 | 0.6% | Sep 22, 2023 | Cadence through 0.9.2 2023-08-21 uses an Insecure /tmp/cadence-wineasio.reg Temporary File. The filename is used even if... |
| CVE-2023-43767 | HIGH | 7.5 | 0.5% | Sep 22, 2023 | Certain WithSecure products allow Denial of Service via the aepack archive unpack handler. This affects WithSecure Clien... |
| CVE-2023-43766 | HIGH | 7.8 | 0.2% | Sep 22, 2023 | Certain WithSecure products allow Local privilege escalation via the lhz archive unpack handler. This affects WithSecure... |
| CVE-2023-43765 | HIGH | 7.5 | 0.5% | Sep 22, 2023 | Certain WithSecure products allow Denial of Service in the aeelf component. This affects WithSecure Client Security 15, ... |
| CVE-2023-43761 | HIGH | 7.5 | 0.5% | Sep 22, 2023 | Certain WithSecure products allow Denial of Service (infinite loop). This affects WithSecure Client Security 15, WithSec... |
| CVE-2023-43760 | HIGH | 7.5 | 0.5% | Sep 22, 2023 | Certain WithSecure products allow Denial of Service via a fuzzed PE32 file. This affects WithSecure Client Security 15, ... |
| CVE-2023-23362 | HIGH | 8.8 | 1.2% | Sep 22, 2023 | An OS command injection vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerabilit... |
| CVE-2023-31718 | HIGH | 7.5 | 1.5% | Sep 22, 2023 | FUXA <= 1.1.12 is vulnerable to Local via Inclusion via /api/download. |
| CVE-2023-31717 | HIGH | 7.5 | 1.6% | Sep 22, 2023 | A SQL Injection attack in FUXA <= 1.1.12 allows exfiltration of confidential information from the database. |
| CVE-2023-31716 | HIGH | 7.5 | 1.2% | Sep 22, 2023 | FUXA <= 1.1.12 has a Local File Inclusion vulnerability via file=fuxa.log |
| CVE-2023-5068 | HIGH | 7.8 | 0.2% | Sep 21, 2023 | Delta Electronics DIAScreen may write past the end of an allocated buffer while parsing a specially crafted input file.... |
| CVE-2023-4504 | HIGH | 7 | 0.7% | Sep 21, 2023 | Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are sus... |
| CVE-2023-42261 | HIGH | 7.5 | 0.7% | Sep 21, 2023 | Mobile Security Framework (MobSF) <=v3.7.8 Beta is vulnerable to Insecure Permissions. NOTE: the vendor's position is th... |
| CVE-2023-38343 | HIGH | 7.5 | 1.4% | Sep 21, 2023 | An XXE (XML external entity injection) vulnerability exists in the CSEP component of Ivanti Endpoint Manager before 2022... |
| CVE-2023-42482 | HIGH | 7.5 | 0.3% | Sep 21, 2023 | Samsung Mobile Processor Exynos 2200 allows a GPU Use After Free. |
| CVE-2023-42280 | HIGH | 7.5 | 0.9% | Sep 21, 2023 | mee-admin 1.5 is vulnerable to Directory Traversal. The download method in the CommonFileController.java file does not v... |
| CVE-2023-41993 | HIGH | 8.8 | 29.2% | Sep 21, 2023 | The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to... |
| CVE-2023-41992 | HIGH | 7.8 | 2.9% | Sep 21, 2023 | The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, iOS 16.7 and iPadOS 16.7, macO... |
| CVE-2023-42805 | HIGH | 7.5 | 0.8% | Sep 21, 2023 | quinn-proto is a state machine for the QUIC transport protocol. Prior to versions 0.9.5 and 0.10.5, receiving unknown QU... |
| CVE-2023-42456 | HIGH | 8.1 | 0.6% | Sep 21, 2023 | Sudo-rs, a memory safe implementation of sudo and su, allows users to not have to enter authentication at every sudo att... |
| CVE-2023-42457 | HIGH | 7.5 | 0.8% | Sep 21, 2023 | plone.rest allows users to use HTTP verbs such as GET, POST, PUT, DELETE, etc. in Plone. Starting in the 2.x branch and ... |
| CVE-2023-43637 | HIGH | 7.8 | 0.1% | Sep 21, 2023 | Due to the implementation of "deriveVaultKey", prior to version 7.10, the generated vault key would always have the las... |
| CVE-2023-43634 | HIGH | 8.8 | 0.2% | Sep 21, 2023 | When sealing/unsealing the “vault” key, a list of PCRs is used, which defines which PCRs are used. In a previous proje... |
| CVE-2023-43633 | HIGH | 8.8 | 0.2% | Sep 21, 2023 | On boot, the Pillar eve container checks for the existence and content of “/config/GlobalConfig/global.json”. If the f... |
| CVE-2023-43631 | HIGH | 8.8 | 0.2% | Sep 21, 2023 | On boot, the Pillar eve container checks for the existence and content of “/config/authorized_keys”. If the file is pr... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now