2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-4332 | HIGH | 7.5 | 0.5% | Aug 15, 2023 | Broadcom RAID Controller web interface is vulnerable due to Improper permissions on the log file |
| CVE-2023-4331 | HIGH | 7.5 | 0.3% | Aug 15, 2023 | Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that support obsolete and... |
| CVE-2023-4326 | HIGH | 7.5 | 0.3% | Aug 15, 2023 | Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that supports obsolete SH... |
| CVE-2023-38402 | HIGH | 7.1 | 0.2% | Aug 15, 2023 | A vulnerability in the HPE Aruba Networking Virtual Intranet Access (VIA) client could allow malicious users to overwrit... |
| CVE-2023-38401 | HIGH | 7.8 | 0.2% | Aug 15, 2023 | A vulnerability in the HPE Aruba Networking Virtual Intranet Access (VIA) client could allow local users to elevate priv... |
| CVE-2023-4369 | HIGH | 8.8 | 0.3% | Aug 15, 2023 | Insufficient data validation in Systems Extensions in Google Chrome on ChromeOS prior to 116.0.5845.120 allowed an attac... |
| CVE-2023-4368 | HIGH | 8.8 | 0.7% | Aug 15, 2023 | Insufficient policy enforcement in Extensions API in Google Chrome prior to 116.0.5845.96 allowed an attacker who convin... |
| CVE-2023-4366 | HIGH | 8.8 | 0.6% | Aug 15, 2023 | Use after free in Extensions in Google Chrome prior to 116.0.5845.96 allowed an attacker who convinced a user to install... |
| CVE-2023-4362 | HIGH | 8.8 | 18.5% | Aug 15, 2023 | Heap buffer overflow in Mojom IDL in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who had compromised ... |
| CVE-2023-4358 | HIGH | 8.8 | 0.8% | Aug 15, 2023 | Use after free in DNS in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corr... |
| CVE-2023-4357 | HIGH | 8.8 | 45.9% | Aug 15, 2023 | Insufficient validation of untrusted input in XML in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to b... |
| CVE-2023-4356 | HIGH | 8.8 | 0.8% | Aug 15, 2023 | Use after free in Audio in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who has convinced a user to en... |
| CVE-2023-4355 | HIGH | 8.8 | 26.8% | Aug 15, 2023 | Out of bounds memory access in V8 in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially explo... |
| CVE-2023-4354 | HIGH | 8.8 | 1.6% | Aug 15, 2023 | Heap buffer overflow in Skia in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who had compromised the r... |
| CVE-2023-4353 | HIGH | 8.8 | 0.9% | Aug 15, 2023 | Heap buffer overflow in ANGLE in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit h... |
| CVE-2023-4352 | HIGH | 8.8 | 1.8% | Aug 15, 2023 | Type confusion in V8 in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corru... |
| CVE-2023-4351 | HIGH | 8.8 | 0.8% | Aug 15, 2023 | Use after free in Network in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who has elicited a browser s... |
| CVE-2023-4349 | HIGH | 8.8 | 0.8% | Aug 15, 2023 | Use after free in Device Trust Connectors in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potential... |
| CVE-2023-2312 | HIGH | 8.8 | 0.8% | Aug 15, 2023 | Use after free in Offline in Google Chrome on Android prior to 116.0.5845.96 allowed a remote attacker who had compromis... |
| CVE-2023-39438 | HIGH | 8.1 | 0.4% | Aug 15, 2023 | A missing authorization check allows an arbitrary authenticated user to perform certain operations through the API of CL... |
| CVE-2023-38916 | HIGH | 8.8 | 0.9% | Aug 15, 2023 | SQL Injection vulnerability in eVotingSystem-PHP v.1.0 allows a remote attacker to execute arbitrary code and obtain sen... |
| CVE-2023-32006 | HIGH | 8.8 | 1.3% | Aug 15, 2023 | The use of `module.constructor.createRequire()` can bypass the policy mechanism and require modules outside of the polic... |
| CVE-2023-32004 | HIGH | 8.8 | 1.8% | Aug 15, 2023 | A vulnerability has been discovered in Node.js version 20, specifically within the experimental permission model. This f... |
| CVE-2023-28479 | HIGH | 8.8 | 0.7% | Aug 15, 2023 | An issue was discovered in Tigergraph Enterprise 3.7.0. The TigerGraph platform installs a full development toolchain wi... |
| CVE-2023-32358 | HIGH | 8.8 | 0.6% | Aug 14, 2023 | A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.4 and iPadOS 16.4, macOS Ventur... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now