2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-38960 | HIGH | 7.3 | 0.3% | Feb 13, 2024 | Insecure Permissions issue in Raiden Professional Server RaidenFTPD v.2.4 build 4005 allows a local attacker to gain pri... |
| CVE-2023-6152 | MEDIUM | 5.4 | 1.4% | Feb 13, 2024 | A user changing their email after signing up and verifying it can change it without verification in profile settings. T... |
| CVE-2023-31347 | MEDIUM | 4.9 | 0.5% | Feb 13, 2024 | Due to a code bug in Secure_TSC, SEV firmware may allow an attacker with high privileges to cause a guest to observe an ... |
| CVE-2023-31346 | MEDIUM | 6 | 0.3% | Feb 13, 2024 | Failure to initialize memory in SEV Firmware may allow a privileged attacker to access stale data from other guests. ... |
| CVE-2023-20587 | HIGH | 7.1 | 0.2% | Feb 13, 2024 | Improper Access Control in System Management Mode (SMM) may allow an attacker access to the SPI flash potentially leadin... |
| CVE-2023-20579 | MEDIUM | 6 | 0.2% | Feb 13, 2024 | Improper Access Control in the AMD SPI protection feature may allow a user with Ring0 (kernel mode) privileged access to... |
| CVE-2023-50808 | MEDIUM | 6.1 | 0.4% | Feb 13, 2024 | Zimbra Collaboration before Kepler 9.0.0 Patch 38 GA allows DOM-based JavaScript injection in the Modern UI. |
| CVE-2023-20570 | LOW | 3.3 | 0.1% | Feb 13, 2024 | Insufficient verification of data authenticity in the configuration state machine may allow a local attacker to potentia... |
| CVE-2023-48432 | MEDIUM | 6.1 | 0.5% | Feb 13, 2024 | An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15, 9.0, and 10.0. XSS, with resultant session stealing, can o... |
| CVE-2023-45207 | MEDIUM | 6.1 | 0.5% | Feb 13, 2024 | An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15, 9.0, and 10.0. An attacker can send a PDF document through... |
| CVE-2023-45206 | MEDIUM | 6.1 | 0.4% | Feb 13, 2024 | An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15, 9.0, and 10.0. Through the help document endpoint in webma... |
| CVE-2023-26562 | MEDIUM | 6.5 | 0.6% | Feb 13, 2024 | In Zimbra Collaboration (ZCS) 8.8.15 and 9.0, a closed account (with 2FA and generated passwords) can send e-mail messag... |
| CVE-2023-6516 | HIGH | 7.5 | 1.1% | Feb 13, 2024 | To keep its cache database efficient, `named` running as a recursive resolver occasionally attempts to clean up the data... |
| CVE-2023-5680 | MEDIUM | 5.3 | 0.6% | Feb 13, 2024 | If a resolver cache has a very large number of ECS records stored for the same name, the process of cleaning the cache d... |
| CVE-2023-5679 | HIGH | 7.5 | 1.2% | Feb 13, 2024 | A bad interaction between DNS64 and serve-stale may cause `named` to crash with an assertion failure during recursive re... |
| CVE-2023-5517 | HIGH | 7.5 | 1.2% | Feb 13, 2024 | A flaw in query-handling code can cause `named` to exit prematurely with an assertion failure when: - `nxdomain-redir... |
| CVE-2023-4408 | HIGH | 7.5 | 1.3% | Feb 13, 2024 | The DNS message parsing code in `named` includes a section whose computational complexity is overly high. It does not ca... |
| CVE-2023-6072 | MEDIUM | 5.4 | 0.3% | Feb 13, 2024 | A cross-site scripting vulnerability in Trellix Central Management (CM) prior to 9.1.3.97129 allows a remote authentica... |
| CVE-2023-51440 | HIGH | 7.5 | 0.6% | Feb 13, 2024 | A vulnerability has been identified in SIMATIC CP 343-1 (6GK7343-1EX30-0XE0) (All versions), SIMATIC CP 343-1 Lean (6GK7... |
| CVE-2023-50236 | HIGH | 7.8 | 0.1% | Feb 13, 2024 | A vulnerability has been identified in Polarion ALM (All versions < V2404.0). The affected product is vulnerable due to ... |
| CVE-2023-49125 | HIGH | 7.8 | 0.2% | Feb 13, 2024 | A vulnerability has been identified in Parasolid V35.0 (All versions < V35.0.263), Parasolid V35.1 (All versions < V35.1... |
| CVE-2023-48364 | MEDIUM | 6.5 | 0.3% | Feb 13, 2024 | A vulnerability has been identified in OpenPCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC BATCH V9.1 (All versions <... |
| CVE-2023-48363 | MEDIUM | 6.5 | 0.3% | Feb 13, 2024 | A vulnerability has been identified in OpenPCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC BATCH V9.1 (All versions <... |
| CVE-2023-6815 | MEDIUM | 6.5 | 0.7% | Feb 13, 2024 | Incorrect Privilege Assignment vulnerability in Mitsubishi Electric Corporation MELSEC iQ-R Series Safety CPU R08/16/32/... |
| CVE-2023-52431 | HIGH | 8.8 | 0.2% | Feb 13, 2024 | The Plack::Middleware::XSRFBlock package before 0.0.19 for Perl allows attackers to bypass a CSRF protection mechanism v... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now