2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-28210 | HIGH | 7.8 | 0.2% | Sep 6, 2023 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app m... |
| CVE-2023-28209 | HIGH | 7.8 | 0.2% | Sep 6, 2023 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app m... |
| CVE-2023-4487 | HIGH | 7.8 | 0.2% | Sep 5, 2023 | GE CIMPLICITY 2023 is by a process control vulnerability, which could allow a local attacker to insert malicious config... |
| CVE-2023-4763 | HIGH | 8.8 | 1.2% | Sep 5, 2023 | Use after free in Networks in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to potentially exploit hea... |
| CVE-2023-4762 | HIGH | 8.8 | 38.0% | Sep 5, 2023 | Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a ... |
| CVE-2023-4761 | HIGH | 8.1 | 1.3% | Sep 5, 2023 | Out of bounds memory access in FedCM in Google Chrome prior to 116.0.5845.179 allowed a remote attacker who had compromi... |
| CVE-2023-39362 | HIGH | 7.2 | 82.2% | Sep 5, 2023 | Cacti is an open source operational monitoring and fault management framework. In Cacti 1.2.24, under certain conditions... |
| CVE-2023-39358 | HIGH | 8.8 | 1.7% | Sep 5, 2023 | Cacti is an open source operational monitoring and fault management framework. An authenticated SQL injection vulnerabil... |
| CVE-2023-39357 | HIGH | 8.8 | 1.5% | Sep 5, 2023 | Cacti is an open source operational monitoring and fault management framework. A defect in the sql_save function was dis... |
| CVE-2023-31132 | HIGH | 7.8 | 0.4% | Sep 5, 2023 | Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a privil... |
| CVE-2023-39359 | HIGH | 8.8 | 1.7% | Sep 5, 2023 | Cacti is an open source operational monitoring and fault management framework. An authenticated SQL injection vulnerabil... |
| CVE-2023-4781 | HIGH | 7.8 | 0.6% | Sep 5, 2023 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873. |
| CVE-2023-40918 | HIGH | 8.8 | 0.6% | Sep 5, 2023 | KnowStreaming 3.3.0 is vulnerable to Escalation of Privileges. Unauthorized users can create a new user with an admin ro... |
| CVE-2023-3375 | HIGH | 7.2 | 1.2% | Sep 5, 2023 | Unrestricted Upload of File with Dangerous Type vulnerability in Unisign Bookreen allows OS Command Injection. This iss... |
| CVE-2023-34998 | HIGH | 8.1 | 1.2% | Sep 5, 2023 | An authentication bypass vulnerability exists in the OAS Engine functionality of Open Automation Software OAS Platform v... |
| CVE-2023-34353 | HIGH | 7.5 | 1.0% | Sep 5, 2023 | An authentication bypass vulnerability exists in the OAS Engine authentication functionality of Open Automation Software... |
| CVE-2023-32615 | HIGH | 8.1 | 0.7% | Sep 5, 2023 | A file write vulnerability exists in the OAS Engine configuration functionality of Open Automation Software OAS Platform... |
| CVE-2023-41108 | HIGH | 8.8 | 1.3% | Sep 5, 2023 | TEF portal 2023-07-17 is vulnerable to authenticated remote code execution. |
| CVE-2023-2453 | HIGH | 8.8 | 0.7% | Sep 5, 2023 | There is insufficient sanitization of tainted file names that are directly concatenated with a path that is subsequently... |
| CVE-2023-20898 | HIGH | 7.8 | 0.3% | Sep 5, 2023 | Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters pr... |
| CVE-2023-39448 | HIGH | 8.8 | 1.1% | Sep 5, 2023 | Path traversal vulnerability in SHIRASAGI prior to v1.18.0 allows a remote authenticated attacker to alter or create ar... |
| CVE-2023-4540 | HIGH | 7.5 | 0.9% | Sep 5, 2023 | Improper Handling of Exceptional Conditions vulnerability in Daurnimator lua-http library allows Excessive Allocation an... |
| CVE-2023-41909 | HIGH | 7.5 | 0.9% | Sep 5, 2023 | An issue was discovered in FRRouting FRR through 9.0. bgp_nlri_parse_flowspec in bgpd/bgp_flowspec.c processes malformed... |
| CVE-2023-33021 | HIGH | 7.8 | 0.1% | Sep 5, 2023 | Memory corruption in Graphics while processing user packets for command submission. |
| CVE-2023-33020 | HIGH | 7.5 | 0.3% | Sep 5, 2023 | Transient DOS in WLAN Host when an invalid channel (like channel out of range) is received in STA during CSA IE. |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now