2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-32393 | HIGH | 8.8 | 0.8% | Jul 27, 2023 | The issue was addressed with improved memory handling. This issue is fixed in watchOS 9.3, tvOS 16.3, macOS Ventura 13.2... |
| CVE-2023-32364 | HIGH | 8.6 | 0.8% | Jul 27, 2023 | A logic issue was addressed with improved restrictions. This issue is fixed in macOS Ventura 13.5. A sandboxed process m... |
| CVE-2023-38597 | HIGH | 8.8 | 1.1% | Jul 27, 2023 | The issue was addressed with improved checks. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 1... |
| CVE-2023-38594 | HIGH | 8.8 | 1.1% | Jul 27, 2023 | The issue was addressed with improved checks. This issue is fixed in iOS 15.7.8 and iPadOS 15.7.8, iOS 16.6 and iPadOS 1... |
| CVE-2023-38410 | HIGH | 7.8 | 0.2% | Jul 27, 2023 | The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. A use... |
| CVE-2023-37450 | HIGH | 8.8 | 18.2% | Jul 27, 2023 | The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, Safari 16.5.2, tvOS 16.6,... |
| CVE-2023-36854 | HIGH | 7.8 | 0.3% | Jul 27, 2023 | The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.6.8, macOS Ventura 13.5, macOS Bi... |
| CVE-2023-32437 | HIGH | 8.6 | 0.2% | Jul 27, 2023 | The issue was addressed with improvements to the file handling protocol. This issue is fixed in iOS 16.6 and iPadOS 16.6... |
| CVE-2023-32433 | HIGH | 7.8 | 0.3% | Jul 27, 2023 | A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.6.8, iOS ... |
| CVE-2023-32381 | HIGH | 7.8 | 0.2% | Jul 27, 2023 | A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.6.8, iOS ... |
| CVE-2023-28012 | HIGH | 8.8 | 0.8% | Jul 27, 2023 | HCL BigFix Mobile is vulnerable to a command injection attack. An authenticated attacker could run arbitrary shell comma... |
| CVE-2023-38285 | HIGH | 7.5 | 0.8% | Jul 26, 2023 | Trustwave ModSecurity 3.x before 3.0.10 has Inefficient Algorithmic Complexity. |
| CVE-2023-30367 | HIGH | 7.5 | 0.5% | Jul 26, 2023 | Multi-Remote Next Generation Connection Manager (mRemoteNG) is free software that enables users to store and manage mult... |
| CVE-2023-3442 | HIGH | 7.5 | 0.6% | Jul 26, 2023 | A missing authorization vulnerability exists in versions of the Jenkins Plug-in for ServiceNow DevOps prior to 1.38.1 th... |
| CVE-2023-30577 | HIGH | 7.8 | 0.5% | Jul 26, 2023 | AMANDA (Advanced Maryland Automatic Network Disk Archiver) before tag-community-3.5.4 mishandles argument checking for r... |
| CVE-2023-23842 | HIGH | 7.2 | 3.3% | Jul 26, 2023 | The SolarWinds Network Configuration Manager was susceptible to the Directory Traversal Vulnerability. This vulnerabilit... |
| CVE-2023-33225 | HIGH | 7.2 | 3.3% | Jul 26, 2023 | The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with ... |
| CVE-2023-33224 | HIGH | 7.2 | 2.8% | Jul 26, 2023 | The SolarWinds Platform was susceptible to the Incorrect Behavior Order Vulnerability. This vulnerability allows users w... |
| CVE-2023-26911 | HIGH | 7.8 | 0.2% | Jul 26, 2023 | ASUS SetupAsusServices v1.0.5.1 in Asus Armoury Crate v5.3.4.0 contains an unquoted service path vulnerability which all... |
| CVE-2023-23844 | HIGH | 7.2 | 3.0% | Jul 26, 2023 | The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with ... |
| CVE-2023-23843 | HIGH | 7.2 | 2.6% | Jul 26, 2023 | The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with ... |
| CVE-2023-39261 | HIGH | 7.8 | 0.3% | Jul 26, 2023 | In JetBrains IntelliJ IDEA before 2023.2 plugin for Space was requesting excessive permissions |
| CVE-2023-38672 | HIGH | 7.5 | 0.6% | Jul 26, 2023 | FPE in paddle.trace in PaddlePaddle before 2.5.0. This flaw can cause a runtime crash and a denial of service. |
| CVE-2023-38670 | HIGH | 7.5 | 0.6% | Jul 26, 2023 | Null pointer dereference in paddle.flip in PaddlePaddle before 2.5.0. This resulted in a runtime crash and denial of ser... |
| CVE-2023-28130 | HIGH | 7.2 | 21.4% | Jul 26, 2023 | Local user may lead to privilege escalation using Gaia Portal hostnames page. |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now