2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-32643 | HIGH | 7.8 | 0.4% | Sep 14, 2023 | A flaw was found in GLib. The GVariant deserialization code is vulnerable to a heap buffer overflow introduced by the fi... |
| CVE-2023-32636 | HIGH | 7.5 | 0.8% | Sep 14, 2023 | A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service introduced by add... |
| CVE-2023-29499 | HIGH | 7.5 | 0.8% | Sep 14, 2023 | A flaw was found in GLib. GVariant deserialization fails to validate that the input conforms to the expected format, lea... |
| CVE-2023-36250 | HIGH | 7.8 | 0.6% | Sep 14, 2023 | CSV Injection vulnerability in GNOME time tracker version 3.0.2, allows local attackers to execute arbitrary code via cr... |
| CVE-2023-42180 | HIGH | 8.8 | 0.6% | Sep 14, 2023 | An arbitrary file upload vulnerability in the /user/upload component of lenosp 1.0-1.2.0 allows attackers to execute htm... |
| CVE-2023-1108 | HIGH | 7.5 | 1.8% | Sep 14, 2023 | A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake sta... |
| CVE-2023-2848 | HIGH | 8.8 | 0.3% | Sep 14, 2023 | Movim prior to version 0.22 is affected by a Cross-Site WebSocket Hijacking vulnerability. This was the result of a miss... |
| CVE-2023-38557 | HIGH | 7.8 | 0.1% | Sep 14, 2023 | A vulnerability has been identified in Spectrum Power 7 (All versions < V23Q3). The affected product assigns improper ac... |
| CVE-2023-4516 | HIGH | 7.8 | 0.2% | Sep 14, 2023 | A CWE-306: Missing Authentication for Critical Function vulnerability exists in the IGSS Update Service that could allo... |
| CVE-2023-41267 | HIGH | 7.8 | 0.5% | Sep 14, 2023 | In the Apache Airflow HDFS Provider, versions prior to 4.1.1, a documentation info pointed users to an install incorrect... |
| CVE-2023-38205 | HIGH | 7.5 | 99.7% | Sep 14, 2023 | Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by an Improp... |
| CVE-2023-4814 | HIGH | 7.1 | 0.1% | Sep 14, 2023 | A Privilege escalation vulnerability exists in Trellix Windows DLP endpoint for windows which can be abused to delete a... |
| CVE-2023-23845 | HIGH | 7.2 | 5.4% | Sep 13, 2023 | The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with ... |
| CVE-2023-23840 | HIGH | 7.2 | 5.4% | Sep 13, 2023 | The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with ... |
| CVE-2023-40850 | HIGH | 7.5 | 0.7% | Sep 13, 2023 | netentsec NS-ASG 6.3 is vulnerable to Incorrect Access Control. There is a file leak in the website source code of the a... |
| CVE-2023-4785 | HIGH | 7.5 | 0.7% | Sep 13, 2023 | Lack of error handling in the TCP server in Google's gRPC starting version 1.23 on posix-compatible platforms (ex. Linux... |
| CVE-2023-2680 | HIGH | 8.2 | 0.2% | Sep 13, 2023 | This CVE exists because of an incomplete fix for CVE-2021-3750. More specifically, the qemu-kvm package as released for ... |
| CVE-2023-20236 | HIGH | 7.8 | 0.1% | Sep 13, 2023 | A vulnerability in the iPXE boot function of Cisco IOS XR software could allow an authenticated, local attacker to insta... |
| CVE-2023-20191 | HIGH | 7.5 | 0.5% | Sep 13, 2023 | A vulnerability in the access control list (ACL) processing on MPLS interfaces in the ingress direction of Cisco IOS XR ... |
| CVE-2023-20135 | HIGH | 7 | 0.1% | Sep 13, 2023 | A vulnerability in Cisco IOS XR Software image verification checks could allow an authenticated, local attacker to execu... |
| CVE-2023-4801 | HIGH | 7.5 | 0.2% | Sep 13, 2023 | An improper certification validation vulnerability in the Insider Threat Management (ITM) Agent for MacOS could be used ... |
| CVE-2023-39915 | HIGH | 7.5 | 0.5% | Sep 13, 2023 | NLnet Labs' Routinator up to and including version 0.12.1 may crash when trying to parse certain malformed RPKI objects.... |
| CVE-2023-39914 | HIGH | 7.5 | 0.6% | Sep 13, 2023 | NLnet Labs' bcder library up to and including version 0.7.2 panics while decoding certain invalid input data rather than... |
| CVE-2023-40717 | HIGH | 7.8 | 0.2% | Sep 13, 2023 | A use of hard-coded credentials vulnerability [CWE-798] in FortiTester 2.3.0 through 7.2.3 may allow an attacker who man... |
| CVE-2023-36642 | HIGH | 7.8 | 0.2% | Sep 13, 2023 | An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management interface ... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now