2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-42451 | HIGH | 7.5 | 0.6% | Sep 19, 2023 | Mastodon is a free, open-source social network server based on ActivityPub. Prior to versions 3.5.14, 4.0.10, 4.1.8, and... |
| CVE-2023-42450 | HIGH | 7.5 | 0.4% | Sep 19, 2023 | Mastodon is a free, open-source social network server based on ActivityPub. Starting in version 4.2.0-beta1 and prior to... |
| CVE-2023-38356 | HIGH | 8.1 | 0.6% | Sep 19, 2023 | MiniTool Power Data Recovery 11.6 contains an insecure installation process that allows attackers to achieve remote code... |
| CVE-2023-38355 | HIGH | 8.1 | 0.6% | Sep 19, 2023 | MiniTool Movie Maker 7.0 contains an insecure installation process that allows attackers to achieve remote code executio... |
| CVE-2023-38354 | HIGH | 8.1 | 0.6% | Sep 19, 2023 | MiniTool Shadow Maker version 4.1 contains an insecure installation process that allows attackers to achieve remote code... |
| CVE-2023-38352 | HIGH | 8.1 | 0.6% | Sep 19, 2023 | MiniTool Partition Wizard 12.8 contains an insecure update mechanism that allows attackers to achieve remote code execut... |
| CVE-2023-38351 | HIGH | 8.1 | 0.6% | Sep 19, 2023 | MiniTool Partition Wizard 12.8 contains an insecure installation mechanism that allows attackers to achieve remote code ... |
| CVE-2023-32182 | HIGH | 7.8 | 0.3% | Sep 19, 2023 | A Improper Link Resolution Before File Access ('Link Following') vulnerability in SUSE SUSE Linux Enterprise Desktop 15 ... |
| CVE-2023-42447 | HIGH | 7.5 | 0.5% | Sep 19, 2023 | blurhash-rs is a pure Rust implementation of Blurhash, software for encoding images into ASCII strings that can be turne... |
| CVE-2023-42444 | HIGH | 7.5 | 0.7% | Sep 19, 2023 | phonenumber is a library for parsing, formatting and validating international phone numbers. Prior to versions `0.3.3+8.... |
| CVE-2023-41890 | HIGH | 7.5 | 0.6% | Sep 19, 2023 | Sustainsys.Saml2 library adds SAML2P support to ASP.NET web sites, allowing the web site to act as a SAML2 Service Provi... |
| CVE-2023-3892 | HIGH | 7.4 | 0.2% | Sep 19, 2023 | Improper Restriction of XML External Entity Reference vulnerability in MIM Assistant and Client DICOM RTst Loading modul... |
| CVE-2023-4096 | HIGH | 8.2 | 0.3% | Sep 19, 2023 | Weak password recovery mechanism vulnerability in Fujitsu Arconte Áurea version 1.5.0.0, which exploitation could allow ... |
| CVE-2023-4094 | HIGH | 8.2 | 0.4% | Sep 19, 2023 | ARCONTE Aurea's authentication system, in its 1.5.0.0 version, could allow an attacker to make incorrect access requests... |
| CVE-2023-41179 | HIGH | 7.2 | 4.7% | Sep 19, 2023 | A vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One (on-prem and SaaS), Worry-Free ... |
| CVE-2023-31808 | HIGH | 7.2 | 0.5% | Sep 19, 2023 | Technicolor TG670 10.5.N.9 devices contain multiple accounts with hard-coded passwords. One account has administrative p... |
| CVE-2023-32649 | HIGH | 7.5 | 0.5% | Sep 19, 2023 | A Denial of Service (Dos) vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in certain... |
| CVE-2023-2567 | HIGH | 8.8 | 0.5% | Sep 19, 2023 | A SQL Injection vulnerability has been found in Nozomi Networks Guardian and CMC, due to improper input validation in ce... |
| CVE-2023-29245 | HIGH | 7.4 | 0.5% | Sep 19, 2023 | A SQL Injection vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in certain fields us... |
| CVE-2023-32186 | HIGH | 7.5 | 0.6% | Sep 19, 2023 | A Allocation of Resources Without Limits or Throttling vulnerability in SUSE RKE2 allows attackers with access to K3s s... |
| CVE-2023-32184 | HIGH | 7.8 | 0.3% | Sep 19, 2023 | A Insecure Storage of Sensitive Information vulnerability in openSUSE opensuse-welcome allows local attackers to execute... |
| CVE-2023-41443 | HIGH | 7.2 | 1.1% | Sep 18, 2023 | SQL injection vulnerability in Novel-Plus v.4.1.0 allows a remote attacker to execute arbitrary code via a crafted scrip... |
| CVE-2023-42443 | HIGH | 8.1 | 0.7% | Sep 18, 2023 | Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine (EVM). In version 0.3.9 and prior, under ce... |
| CVE-2023-39452 | HIGH | 7.5 | 0.5% | Sep 18, 2023 | The web application that owns the device clearly stores the credentials within the user management sectio... |
| CVE-2023-39446 | HIGH | 8.8 | 0.2% | Sep 18, 2023 | Thanks to the weaknesses that the web application has at the user management level, an attacker could obtain the ... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now