2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-36088 | HIGH | 7.5 | 0.7% | Sep 1, 2023 | Server Side Request Forgery (SSRF) vulnerability in NebulaGraph Studio version 3.7.0, allows remote attackers to gain se... |
| CVE-2023-28366 | HIGH | 7.5 | 1.1% | Sep 1, 2023 | The broker in Eclipse Mosquitto 1.3.2 through 2.x before 2.0.16 has a memory leak that can be abused remotely when a cli... |
| CVE-2023-4647 | HIGH | 7.5 | 0.6% | Sep 1, 2023 | An issue has been discovered in GitLab affecting all versions starting from 15.2 before 16.1.5, all versions starting fr... |
| CVE-2023-40970 | HIGH | 8.8 | 0.6% | Sep 1, 2023 | Senayan Library Management Systems SLIMS 9 Bulian v 9.6.1 is vulnerable to SQL Injection via admin/modules/circulation/l... |
| CVE-2023-40239 | HIGH | 7.5 | 0.5% | Sep 1, 2023 | Certain Lexmark devices (such as CS310) before 2023-08-25 allow XXE attacks, leading to information disclosure. The fixe... |
| CVE-2023-3915 | HIGH | 7.2 | 0.6% | Sep 1, 2023 | An issue has been discovered in GitLab EE affecting all versions starting from 16.1 before 16.1.5, all versions starting... |
| CVE-2023-39685 | HIGH | 7.5 | 0.7% | Sep 1, 2023 | An issue in hjson-java up to v3.0.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted JSON str... |
| CVE-2023-24674 | HIGH | 7.8 | 0.2% | Sep 1, 2023 | Permissions vulnerability found in Bludit CMS v.4.0.0 allows local attackers to escalate privileges via the role:admin p... |
| CVE-2023-4698 | HIGH | 7.5 | 0.8% | Sep 1, 2023 | Improper Input Validation in GitHub repository usememos/memos prior to 0.13.2. |
| CVE-2023-4697 | HIGH | 8.8 | 0.7% | Sep 1, 2023 | Improper Privilege Management in GitHub repository usememos/memos prior to 0.13.2. |
| CVE-2023-4695 | HIGH | 8.1 | 0.6% | Sep 1, 2023 | Use of Predictable Algorithm in Random Number Generator in GitHub repository pkp/pkp-lib prior to 3.3.0-16. |
| CVE-2023-4481 | HIGH | 7.5 | 15.1% | Sep 1, 2023 | An Improper Input Validation vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos O... |
| CVE-2023-40576 | HIGH | 7.5 | 1.0% | Aug 31, 2023 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versi... |
| CVE-2023-4299 | HIGH | 8.1 | 0.5% | Aug 31, 2023 | Digi RealPort Protocol is vulnerable to a replay attack that may allow an attacker to bypass authentication to access c... |
| CVE-2023-41749 | HIGH | 7.5 | 0.4% | Aug 31, 2023 | Sensitive information disclosure due to excessive collection of system information. The following products are affected:... |
| CVE-2023-39354 | HIGH | 7.5 | 1.3% | Aug 31, 2023 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versi... |
| CVE-2023-39351 | HIGH | 7.5 | 1.3% | Aug 31, 2023 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. Affected versi... |
| CVE-2023-39350 | HIGH | 7.5 | 1.4% | Aug 31, 2023 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. This issue aff... |
| CVE-2023-40589 | HIGH | 7.5 | 1.2% | Aug 31, 2023 | FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. In affected ve... |
| CVE-2023-41744 | HIGH | 7.8 | 0.1% | Aug 31, 2023 | Local privilege escalation due to unrestricted loading of unsigned libraries. The following products are affected: Acron... |
| CVE-2023-41743 | HIGH | 7.8 | 0.3% | Aug 31, 2023 | Local privilege escalation due to insecure driver communication port permissions. The following products are affected: A... |
| CVE-2023-34392 | HIGH | 8.8 | 0.5% | Aug 31, 2023 | A Missing Authentication for Critical Function vulnerability in the Schweitzer Engineering Laboratories SEL-5037 SEL Gr... |
| CVE-2023-31173 | HIGH | 8.4 | 0.2% | Aug 31, 2023 | Use of Hard-coded Credentials vulnerability in Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator on Win... |
| CVE-2023-31172 | HIGH | 7.4 | 0.3% | Aug 31, 2023 | An Incomplete Filtering of Special Elements vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerat... |
| CVE-2023-31167 | HIGH | 8.1 | 0.4% | Aug 31, 2023 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Schweitzer Engineering L... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now