2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-25714 | HIGH | 7.5 | 0.8% | Dec 9, 2024 | Missing Authorization vulnerability in Fullworks Quick Paypal Payments allows Exploiting Incorrectly Configured Access C... |
| CVE-2023-24407 | HIGH | 8.8 | 0.5% | Dec 9, 2024 | Missing Authorization vulnerability in WpDevArt Booking calendar, Appointment Booking System allows Exploiting Incorrect... |
| CVE-2023-23895 | HIGH | 7.2 | 0.7% | Dec 9, 2024 | Missing Authorization vulnerability in CodePeople WP Time Slots Booking Form allows Exploiting Incorrectly Configured Ac... |
| CVE-2023-23825 | HIGH | 8.8 | 0.5% | Dec 9, 2024 | Missing Authorization vulnerability in Brainstorm Force Spectra allows Exploiting Incorrectly Configured Access Control ... |
| CVE-2023-23715 | HIGH | 8.8 | 0.5% | Dec 9, 2024 | Missing Authorization vulnerability in JobBoardWP JobBoardWP – Job Board Listings and Submissions allows Exploiting Inco... |
| CVE-2023-52922 | HIGH | 7.8 | 0.3% | Nov 28, 2024 | In the Linux kernel, the following vulnerability has been resolved: can: bcm: Fix UAF in bcm_proc_show() BUG: KASAN: s... |
| CVE-2023-29001 | HIGH | 7.5 | 0.5% | Nov 27, 2024 | Contiki-NG is an open-source, cross-platform operating system for IoT devices. The Contiki-NG operating system processes... |
| CVE-2023-1521 | HIGH | 7.8 | 0.4% | Nov 26, 2024 | On Linux the sccache client can execute arbitrary code with the privileges of a local sccache server, by preloading the ... |
| CVE-2023-0163 | HIGH | 8.4 | 0.3% | Nov 26, 2024 | Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability in Mozilla Convi... |
| CVE-2023-52335 | HIGH | 7.5 | 1.3% | Nov 22, 2024 | Advantech iView ConfigurationServlet SQL Injection Information Disclosure Vulnerability. This vulnerability allows remot... |
| CVE-2023-52333 | HIGH | 7.3 | 1.9% | Nov 22, 2024 | Allegra saveFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to ... |
| CVE-2023-52332 | HIGH | 7.5 | 2.0% | Nov 22, 2024 | Allegra serveMathJaxLibraries Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote... |
| CVE-2023-51644 | HIGH | 7.3 | 1.9% | Nov 22, 2024 | Allegra SiteConfigAction Improper Access Control Remote Code Execution Vulnerability. This vulnerability allows remote a... |
| CVE-2023-51635 | HIGH | 8.8 | 1.3% | Nov 22, 2024 | NETGEAR RAX30 fing_dil Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows networ... |
| CVE-2023-51634 | HIGH | 7.5 | 0.6% | Nov 22, 2024 | NETGEAR RAX30 Improper Certificate Validation Remote Code Execution Vulnerability. This vulnerability allows network-adj... |
| CVE-2023-39470 | HIGH | 7.2 | 1.7% | Nov 22, 2024 | PaperCut NG print.script.sandboxed Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability al... |
| CVE-2023-21270 | HIGH | 7.8 | 0.1% | Nov 19, 2024 | In restorePermissionState of PermissionManagerServiceImpl.java, there is a possible way for an app to keep permissions t... |
| CVE-2023-52921 | HIGH | 7.8 | 0.2% | Nov 19, 2024 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix possible UAF in amdgpu_cs_pass1() ... |
| CVE-2023-49952 | HIGH | 7.5 | 0.5% | Nov 18, 2024 | Mastodon 4.1.x before 4.1.17 and 4.2.x before 4.2.9 allows a bypass of rate limiting via a crafted HTTP request header. |
| CVE-2023-39180 | HIGH | 7.5 | 1.4% | Nov 18, 2024 | A flaw was found within the handling of SMB2_READ commands in the kernel ksmbd module. The issue results from not releas... |
| CVE-2023-39179 | HIGH | 7.5 | 1.1% | Nov 18, 2024 | A flaw was found within the handling of SMB2 read requests in the kernel ksmbd module. The issue results from the lack o... |
| CVE-2023-39176 | HIGH | 7.5 | 0.7% | Nov 18, 2024 | A flaw was found within the parsing of SMB2 requests that have a transform header in the kernel ksmbd module. The issue ... |
| CVE-2023-4639 | HIGH | 7.4 | 1.1% | Nov 17, 2024 | A flaw was found in Undertow, which incorrectly parses cookies with certain value-delimiting characters in incoming requ... |
| CVE-2023-20154 | HIGH | 8.1 | 0.9% | Nov 15, 2024 | A vulnerability in the external authentication mechanism of Cisco Modeling Labs could allow an unauthenticated, remote a... |
| CVE-2023-20125 | HIGH | 8.6 | 0.9% | Nov 15, 2024 | A vulnerability in the local interface of Cisco BroadWorks Network Server could allow an unauthenticated, remote attacke... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now