2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-20211 | HIGH | 8.8 | 0.6% | Aug 16, 2023 | A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Uni... |
| CVE-2023-20197 | HIGH | 7.5 | 0.9% | Aug 16, 2023 | A vulnerability in the filesystem image parser for Hierarchical File System Plus (HFS+) of ClamAV could allow an unauthe... |
| CVE-2023-40034 | HIGH | 8.1 | 0.7% | Aug 16, 2023 | Woodpecker is a community fork of the Drone CI system. In affected versions an attacker can post malformed webhook data ... |
| CVE-2023-40033 | HIGH | 7.1 | 0.4% | Aug 16, 2023 | Flarum is an open source forum software. Flarum is affected by a vulnerability that allows an attacker to conduct a Blin... |
| CVE-2023-20209 | HIGH | 7.2 | 37.9% | Aug 16, 2023 | A vulnerability in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communicat... |
| CVE-2023-4383 | HIGH | 7.8 | 0.3% | Aug 16, 2023 | A vulnerability, which was classified as critical, was found in MicroWorld eScan Anti-Virus 7.0.32 on Linux. This affect... |
| CVE-2023-4389 | HIGH | 7.1 | 0.3% | Aug 16, 2023 | A flaw was found in btrfs_get_root_ref in fs/btrfs/disk-io.c in the btrfs filesystem in the Linux Kernel due to a double... |
| CVE-2023-4387 | HIGH | 7.1 | 0.2% | Aug 16, 2023 | A use-after-free flaw was found in vmxnet3_rq_alloc_rx_buf in drivers/net/vmxnet3/vmxnet3_drv.c in VMware's vmxnet3 ethe... |
| CVE-2023-38737 | HIGH | 7.5 | 0.8% | Aug 16, 2023 | IBM WebSphere Application Server Liberty 22.0.0.13 through 23.0.0.7 is vulnerable to a denial of service, caused by send... |
| CVE-2023-40341 | HIGH | 8.8 | 0.5% | Aug 16, 2023 | A cross-site request forgery (CSRF) vulnerability in Jenkins Blue Ocean Plugin 1.27.5 and earlier allows attackers to co... |
| CVE-2023-40340 | HIGH | 7.5 | 0.5% | Aug 16, 2023 | Jenkins NodeJS Plugin 1.6.0 and earlier does not properly mask (i.e., replace with asterisks) credentials specified in t... |
| CVE-2023-40339 | HIGH | 7.5 | 0.7% | Aug 16, 2023 | Jenkins Config File Provider Plugin 952.va_544a_6234b_46 and earlier does not mask (i.e., replace with asterisks) creden... |
| CVE-2023-40336 | HIGH | 8.8 | 0.4% | Aug 16, 2023 | A cross-site request forgery (CSRF) vulnerability in Jenkins Folders Plugin 6.846.v23698686f0f6 and earlier allows attac... |
| CVE-2023-39975 | HIGH | 8.8 | 1.2% | Aug 16, 2023 | kdc/do_tgs_req.c in MIT Kerberos 5 (aka krb5) 1.21 before 1.21.2 has a double free that is reachable if an authenticated... |
| CVE-2023-32495 | HIGH | 7.8 | 0.2% | Aug 16, 2023 | Dell PowerScale OneFS, 8.2.x-9.5.x, contains a exposure of sensitive information to an unauthorized Actor vulnerability... |
| CVE-2023-32492 | HIGH | 7.1 | 0.1% | Aug 16, 2023 | Dell PowerScale OneFS 9.5.0.x contains an incorrect default permissions vulnerability. A low-privileged local attacker ... |
| CVE-2023-32487 | HIGH | 7.8 | 0.2% | Aug 16, 2023 | Dell PowerScale OneFS, 8.2.x - 9.5.0.x, contains an elevation of privilege vulnerability. A low privileged local attack... |
| CVE-2023-32486 | HIGH | 7.8 | 0.1% | Aug 16, 2023 | Dell PowerScale OneFS 9.5.x version contain a privilege escalation vulnerability. A low privilege local attacker could ... |
| CVE-2023-1977 | HIGH | 8.8 | 0.8% | Aug 16, 2023 | The Booking Manager WordPress plugin before 2.0.29 does not validate URLs input in it's admin panel or in shortcodes for... |
| CVE-2023-0579 | HIGH | 8.8 | 0.9% | Aug 16, 2023 | The YARPP WordPress plugin before 5.30.3 does not validate and escape some of its shortcode attributes before using them... |
| CVE-2023-4241 | HIGH | 7.5 | 0.6% | Aug 16, 2023 | lol-html can cause panics on certain HTML inputs. Anyone processing arbitrary 3rd party HTML with the library is affecte... |
| CVE-2023-4343 | HIGH | 7.5 | 0.5% | Aug 15, 2023 | Broadcom RAID Controller web interface is vulnerable due to exposure of sensitive password information in the URL as a U... |
| CVE-2023-4339 | HIGH | 7.5 | 0.7% | Aug 15, 2023 | Broadcom RAID Controller web interface is vulnerable to exposure of private keys used for CIM stored with insecure file ... |
| CVE-2023-4335 | HIGH | 7.5 | 0.5% | Aug 15, 2023 | Broadcom RAID Controller Web server (nginx) is serving private server-side files without any authentication on Linux |
| CVE-2023-4334 | HIGH | 7.5 | 0.5% | Aug 15, 2023 | Broadcom RAID Controller Web server (nginx) is serving private files without any authentication |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now