2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-45240 | MEDIUM | 5.5 | 0.2% | Oct 5, 2023 | Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Agent (Linux... |
| CVE-2023-44214 | MEDIUM | 5.5 | 0.2% | Oct 5, 2023 | Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Agent (Linux... |
| CVE-2023-44213 | MEDIUM | 5.5 | 0.2% | Oct 5, 2023 | Sensitive information disclosure due to excessive collection of system information. The following products are affected:... |
| CVE-2023-43343 | MEDIUM | 5.4 | 0.7% | Oct 5, 2023 | Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary co... |
| CVE-2023-5441 | MEDIUM | 5.5 | 0.4% | Oct 5, 2023 | NULL Pointer Dereference in GitHub repository vim/vim prior to 20d161ace307e28690229b68584f2d84556f8960. |
| CVE-2023-43260 | MEDIUM | 6.1 | 0.4% | Oct 5, 2023 | Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 was discovered to contain a cross-site scripting (XSS) vulnerab... |
| CVE-2023-42755 | MEDIUM | 5.5 | 0.4% | Oct 5, 2023 | A flaw was found in the IPv4 Resource Reservation Protocol (RSVP) classifier in the Linux kernel. The xprt pointer may g... |
| CVE-2023-42754 | MEDIUM | 5.5 | 0.4% | Oct 5, 2023 | A NULL pointer dereference flaw was found in the Linux kernel ipv4 stack. The socket buffer (skb) was assumed to be asso... |
| CVE-2023-41175 | MEDIUM | 6.5 | 1.0% | Oct 5, 2023 | A vulnerability was found in libtiff due to multiple potential integer overflows in raw2tiff.c. This flaw allows remote ... |
| CVE-2023-40745 | MEDIUM | 6.5 | 1.1% | Oct 5, 2023 | LibTIFF is vulnerable to an integer overflow. This flaw allows remote attackers to cause a denial of service (applicatio... |
| CVE-2023-44387 | MEDIUM | 6.5 | 0.2% | Oct 5, 2023 | Gradle is a build tool with a focus on build automation and support for multi-language development. When copying or arch... |
| CVE-2023-44386 | MEDIUM | 5.3 | 0.6% | Oct 5, 2023 | Vapor is an HTTP web framework for Swift. There is a denial of service vulnerability impacting all users of affected ver... |
| CVE-2023-43073 | MEDIUM | 6.5 | 0.4% | Oct 5, 2023 | Dell SmartFabric Storage Software v1.4 (and earlier) contains an Improper Input Validation vulnerability in RADIUS conf... |
| CVE-2023-43071 | MEDIUM | 5.4 | 0.3% | Oct 5, 2023 | Dell SmartFabric Storage Software v1.4 (and earlier) contains possible vulnerabilities for HTML injection or CVS formul... |
| CVE-2023-43070 | MEDIUM | 6.5 | 0.5% | Oct 5, 2023 | Dell SmartFabric Storage Software v1.4 (and earlier) contains a Path Traversal Vulnerability in the HTTP interface. A r... |
| CVE-2023-44390 | MEDIUM | 6.1 | 0.4% | Oct 5, 2023 | HtmlSanitizer is a .NET library for cleaning HTML fragments and documents from constructs that can lead to XSS attacks. ... |
| CVE-2023-26239 | MEDIUM | 5.5 | 0.2% | Oct 5, 2023 | An issue was discovered in WatchGuard EPDR 8.0.21.0002. Due to a weak implementation of a password check, it is possible... |
| CVE-2023-26238 | MEDIUM | 5.5 | 0.2% | Oct 5, 2023 | An issue was discovered in WatchGuard EPDR 8.0.21.0002. It is possible to enable or disable defensive capabilities by se... |
| CVE-2023-26237 | MEDIUM | 6.7 | 0.2% | Oct 5, 2023 | An issue was discovered in WatchGuard EPDR 8.0.21.0002. It is possible to bypass the defensive capabilities by adding a ... |
| CVE-2023-43877 | MEDIUM | 4.8 | 0.5% | Oct 4, 2023 | Rite CMS 3.0 has Multiple Cross-Site scripting (XSS) vulnerabilities that allow attackers to execute arbitrary code via ... |
| CVE-2023-44389 | MEDIUM | 4.8 | 0.4% | Oct 4, 2023 | Zope is an open-source web application server. The title property, available on most Zope objects, can be used to store ... |
| CVE-2023-44210 | MEDIUM | 5.5 | 0.3% | Oct 4, 2023 | Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acr... |
| CVE-2023-44075 | MEDIUM | 5.4 | 0.5% | Oct 4, 2023 | Cross Site Scripting vulnerability in Small CRM in PHP v.3.0 allows a remote attacker to execute arbitrary code via a cr... |
| CVE-2023-42808 | MEDIUM | 6.1 | 0.5% | Oct 4, 2023 | Common Voice is the web app for Mozilla Common Voice, a platform for collecting speech donations in order to create publ... |
| CVE-2023-38538 | MEDIUM | 5 | 0.2% | Oct 4, 2023 | A race condition in an event subsystem led to a heap use-after-free issue in established audio/video calls that could ha... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now