2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-50782 | HIGH | 7.5 | 1.1% | Feb 5, 2024 | A flaw was found in the python-cryptography package. This issue may allow a remote attacker to decrypt captured messages... |
| CVE-2023-50781 | HIGH | 7.5 | 1.1% | Feb 5, 2024 | A flaw was found in m2crypto. This issue may allow a remote attacker to decrypt captured messages in TLS servers that us... |
| CVE-2023-27318 | HIGH | 7.5 | 0.7% | Feb 5, 2024 | StorageGRID (formerly StorageGRID Webscale) versions 11.6.0 through 11.6.0.13 are susceptible to a Denial of Service (D... |
| CVE-2023-6874 | HIGH | 7.5 | 0.4% | Feb 5, 2024 | Prior to v7.4.0, Ember ZNet is vulnerable to a denial of service attack through manipulation of the NWK sequence number |
| CVE-2023-6028 | MEDIUM | 6.1 | 0.4% | Feb 5, 2024 | A reflected cross-site scripting (XSS) vulnerability exists in the SVG version of System Diagnostics Manager of B&R Auto... |
| CVE-2023-47355 | HIGH | 7.5 | 0.8% | Feb 5, 2024 | The com.eypcnnapps.quickreboot (aka Eyuep Can Yilmaz {ROOT] Quick Reboot) application 1.0.8 for Android has exposed broa... |
| CVE-2023-7216 | MEDIUM | 5.3 | 0.9% | Feb 5, 2024 | A path traversal vulnerability was found in the CPIO utility. This issue could allow a remote unauthenticated attacker t... |
| CVE-2023-52138 | CRITICAL | 9.6 | 1.7% | Feb 5, 2024 | Engrampa is an archive manager for the MATE environment. Engrampa is found to be vulnerable to a Path Traversal vulnerab... |
| CVE-2023-5643 | HIGH | 7.8 | 0.2% | Feb 5, 2024 | Out-of-bounds Write vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5... |
| CVE-2023-5249 | HIGH | 7 | 0.2% | Feb 5, 2024 | Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver allows a local non-... |
| CVE-2023-7077 | CRITICAL | 9.8 | 0.7% | Feb 5, 2024 | Sharp NEC Displays (P403, P463, P553, P703, P801, X554UN, X464UN, X554UNS, X464UNV, X474HB, X464UNS, X554UNV, X555UNS, X... |
| CVE-2023-5800 | HIGH | 8.8 | 0.7% | Feb 5, 2024 | Vintage, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API create_overlay.cgi did not have a suffic... |
| CVE-2023-5677 | HIGH | 8.8 | 0.6% | Feb 5, 2024 | Brandon Rothel from QED Secure Solutions and Sam Hanson of Dragos have found that the VAPIX API tcptest.cgi did not have... |
| CVE-2023-51504 | MEDIUM | 5.4 | 0.7% | Feb 5, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dan Dulaney Dan's ... |
| CVE-2023-47170 | — | — | — | Feb 5, 2024 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues during 2023. |
| CVE-2023-52426 | MEDIUM | 5.5 | 0.4% | Feb 4, 2024 | libexpat through 2.5.0 allows recursive XML Entity Expansion if XML_DTD is undefined at compile time. |
| CVE-2023-52425 | HIGH | 7.5 | 1.8% | Feb 4, 2024 | libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are required in th... |
| CVE-2023-6240 | MEDIUM | 6.5 | 1.0% | Feb 4, 2024 | A Marvin vulnerability side-channel leakage was found in the RSA decryption operation in the Linux Kernel. This issue ma... |
| CVE-2023-50947 | MEDIUM | 5.4 | 0.4% | Feb 4, 2024 | IBM Business Automation Workflow 22.0.2, 23.0.1, and 23.0.2 is vulnerable to cross-site scripting. This vulnerability al... |
| CVE-2023-33851 | MEDIUM | 4.9 | 0.4% | Feb 4, 2024 | IBM PowerVM Hypervisor FW950.00 through FW950.90, FW1020.00 through FW1020.40, and FW1030.00 through FW1030.30 could rev... |
| CVE-2023-49950 | MEDIUM | 5.4 | 0.5% | Feb 3, 2024 | The Jinja templating in Logpoint SIEM 6.10.0 through 7.x before 7.3.0 does not correctly sanitize log data being display... |
| CVE-2023-44031 | HIGH | 7.5 | 0.7% | Feb 3, 2024 | Incorrect access control in Reprise License Management Software Reprise License Manager v15.1 allows attackers to arbitr... |
| CVE-2023-43183 | HIGH | 8.8 | 1.2% | Feb 3, 2024 | Incorrect access control in Reprise License Management Software Reprise License Manager v15.1 allows read-only users to ... |
| CVE-2023-37528 | MEDIUM | 6.1 | 0.3% | Feb 3, 2024 | A cross-site scripting (XSS) vulnerability in the Web Reports component of HCL BigFix Platform can possibly allow an att... |
| CVE-2023-43016 | HIGH | 7.3 | 0.7% | Feb 3, 2024 | IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security V... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now