2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-28831 | HIGH | 7.5 | 0.8% | Sep 12, 2023 | The OPC UA implementations (ANSI C and C++) in affected products contain an integer overflow vulnerability that could ca... |
| CVE-2023-37881 | HIGH | 8.8 | 0.5% | Sep 12, 2023 | Weak access control in Wing FTP Server (Admin Web Client) allows for privilege escalation.This issue affects Wing FTP Se... |
| CVE-2023-37879 | HIGH | 7.5 | 0.4% | Sep 12, 2023 | Insecure storage of sensitive information in Wing FTP Server (User Web Client) allows information elicitation.This issue... |
| CVE-2023-37878 | HIGH | 8.8 | 0.4% | Sep 12, 2023 | Insecure default permissions in Wing FTP Server (Admin Web Client) allows for privilege escalation.This issue affects Wi... |
| CVE-2023-3039 | HIGH | 7.8 | 0.2% | Sep 12, 2023 | SD ROM Utility, versions prior to 1.0.2.0 contain an Improper Access Control vulnerability. A low-privileged malicious ... |
| CVE-2023-40623 | HIGH | 7.1 | 0.4% | Sep 12, 2023 | SAP BusinessObjects Suite Installer - version 420, 430, allows an attacker within the network to create a directory unde... |
| CVE-2023-42472 | HIGH | 7.3 | 0.5% | Sep 12, 2023 | Due to insufficient file type validation, SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML inte... |
| CVE-2023-40308 | HIGH | 7.5 | 0.6% | Sep 12, 2023 | SAP CommonCryptoLib allows an unauthenticated attacker to craft a request, which when submitted to an open port causes a... |
| CVE-2023-32558 | HIGH | 7.5 | 1.7% | Sep 12, 2023 | The use of the deprecated API `process.binding()` can bypass the permission model through path traversal. This vulnera... |
| CVE-2023-25519 | HIGH | 7.8 | 0.2% | Sep 12, 2023 | NVIDIA ConnectX Host Firmware for the BlueField Data Processing Unit contains a vulnerability where a restricted host m... |
| CVE-2023-4899 | HIGH | 8.8 | 0.6% | Sep 12, 2023 | SQL Injection in GitHub repository mintplex-labs/anything-llm prior to 0.0.1. |
| CVE-2023-4898 | HIGH | 7.5 | 0.6% | Sep 12, 2023 | Authentication Bypass by Primary Weakness in GitHub repository mintplex-labs/anything-llm prior to 0.0.1. |
| CVE-2023-41990 | HIGH | 7.8 | 1.1% | Sep 12, 2023 | The issue was addressed with improved handling of caches. This issue is fixed in tvOS 16.3, iOS 16.3 and iPadOS 16.3, ma... |
| CVE-2023-40440 | HIGH | 7.5 | 0.4% | Sep 12, 2023 | This issue was addressed with improved state management of S/MIME encrypted emails. This issue is fixed in macOS Montere... |
| CVE-2023-41879 | HIGH | 7.5 | 0.8% | Sep 11, 2023 | Magento LTS is the official OpenMage LTS codebase. Guest orders may be viewed without authentication using a "guest-view... |
| CVE-2023-35687 | HIGH | 7.8 | 0.2% | Sep 11, 2023 | In MtpPropertyValue of MtpProperty.h, there is a possible memory corruption due to a use after free. This could lead to ... |
| CVE-2023-35684 | HIGH | 8.8 | 0.1% | Sep 11, 2023 | In avdt_msg_asmbl of avdt_msg.cc, there is a possible out of bounds write due to an integer overflow. This could lead to... |
| CVE-2023-35682 | HIGH | 7.8 | 0.1% | Sep 11, 2023 | In hasPermissionForActivity of PackageManagerHelper.java, there is a possible way to start arbitrary components due to a... |
| CVE-2023-35676 | HIGH | 7.8 | 0.1% | Sep 11, 2023 | In createQuickShareAction of SaveImageInBackgroundTask.java, there is a possible way to trigger a background activity la... |
| CVE-2023-35674 | HIGH | 7.8 | 2.2% | Sep 11, 2023 | In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the cod... |
| CVE-2023-35673 | HIGH | 8.8 | 0.2% | Sep 11, 2023 | In build_read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to an integer overflow. This could le... |
| CVE-2023-35670 | HIGH | 7.8 | 0.1% | Sep 11, 2023 | In computeValuesFromData of FileUtils.java, there is a possible way to insert files to other apps' external private dire... |
| CVE-2023-35669 | HIGH | 7.8 | 0.1% | Sep 11, 2023 | In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to control other running activ... |
| CVE-2023-35667 | HIGH | 7.8 | 0.1% | Sep 11, 2023 | In updateList of NotificationAccessSettings.java, there is a possible way to hide approved notification listeners in the... |
| CVE-2023-35666 | HIGH | 7.8 | 0.1% | Sep 11, 2023 | In bta_av_rc_msg of bta_av_act.cc, there is a possible use after free due to a logic error in the code. This could lead ... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now