2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-25715 | MEDIUM | 6.5 | 0.5% | Dec 19, 2023 | Missing Authorization vulnerability in GamiPress GamiPress – The #1 gamification plugin to reward points, achievements, ... |
| CVE-2023-6913 | HIGH | 8.1 | 0.7% | Dec 19, 2023 | A session hijacking vulnerability has been detected in the Imou Life application affecting version 6.7.0. This vulnerabi... |
| CVE-2023-6711 | HIGH | 7.5 | 0.7% | Dec 19, 2023 | Vulnerability exists in SCI IEC 60870-5-104 and HCI IEC 60870-5-104 that affects the RTU500 series product versions list... |
| CVE-2023-6280 | HIGH | 7.5 | 0.6% | Dec 19, 2023 | An XXE (XML External Entity) vulnerability has been detected in 52North WPS affecting versions prior to 4.0.0-beta.11. T... |
| CVE-2023-43870 | CRITICAL | 9.8 | 0.4% | Dec 19, 2023 | When installing the Net2 software a root certificate is installed into the trusted store. A potential hacker could acces... |
| CVE-2023-1514 | HIGH | 7.5 | 0.3% | Dec 19, 2023 | A vulnerability exists in the component RTU500 Scripting interface. When a client connects to a server using TLS, the se... |
| CVE-2023-6932 | HIGH | 7 | 0.4% | Dec 19, 2023 | A use-after-free vulnerability in the Linux kernel's ipv4: igmp component can be exploited to achieve local privilege es... |
| CVE-2023-6931 | HIGH | 7 | 0.7% | Dec 19, 2023 | A heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component can be exploited to a... |
| CVE-2023-6873 | HIGH | 8.8 | 0.8% | Dec 19, 2023 | Memory safety bugs present in Firefox 120. Some of these bugs showed evidence of memory corruption and we presume that w... |
| CVE-2023-6872 | MEDIUM | 6.5 | 0.6% | Dec 19, 2023 | Browser tab titles were being leaked by GNOME to system logs. This could potentially expose the browsing habits of users... |
| CVE-2023-6871 | MEDIUM | 4.3 | 0.5% | Dec 19, 2023 | Under certain conditions, Firefox did not display a warning when a user attempted to navigate to a new protocol handler.... |
| CVE-2023-6870 | MEDIUM | 4.3 | 0.4% | Dec 19, 2023 | Applications which spawn a Toast notification in a background thread may have obscured fullscreen notifications displaye... |
| CVE-2023-6869 | MEDIUM | 6.5 | 0.6% | Dec 19, 2023 | A `<dialog>` element could have been manipulated to paint content outside of a sandboxed iframe. This could allow unt... |
| CVE-2023-6868 | MEDIUM | 4.3 | 0.5% | Dec 19, 2023 | In some instances, the user-agent would allow push requests which lacked a valid VAPID even though the push manager subs... |
| CVE-2023-6867 | MEDIUM | 6.1 | 0.7% | Dec 19, 2023 | The timing of a button click causing a popup to disappear was approximately the same length as the anti-clickjacking del... |
| CVE-2023-6866 | HIGH | 8.8 | 0.7% | Dec 19, 2023 | TypedArrays can be fallible and lacked proper exception handling. This could lead to abuse in other APIs which expect Ty... |
| CVE-2023-6865 | MEDIUM | 6.5 | 0.9% | Dec 19, 2023 | `EncryptingOutputStream` was susceptible to exposing uninitialized data. This issue could only be abused in order to wr... |
| CVE-2023-6864 | HIGH | 8.8 | 1.2% | Dec 19, 2023 | Memory safety bugs present in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5. Some of these bugs showed evidence ... |
| CVE-2023-6863 | HIGH | 8.8 | 1.0% | Dec 19, 2023 | The `ShutdownObserver()` was susceptible to potentially undefined behavior due to its reliance on a dynamic type that la... |
| CVE-2023-6862 | HIGH | 8.8 | 1.0% | Dec 19, 2023 | A use-after-free was identified in the `nsDNSService::Init`. This issue appears to manifest rarely during start-up. Thi... |
| CVE-2023-6861 | HIGH | 8.8 | 1.4% | Dec 19, 2023 | The `nsWindow::PickerOpen(void)` method was susceptible to a heap buffer overflow when running in headless mode. This vu... |
| CVE-2023-6860 | MEDIUM | 6.5 | 1.0% | Dec 19, 2023 | The `VideoBridge` allowed any content process to use textures produced by remote decoders. This could be abused to esca... |
| CVE-2023-6859 | HIGH | 8.8 | 1.1% | Dec 19, 2023 | A use-after-free condition affected TLS socket creation when under memory pressure. This vulnerability affects Firefox E... |
| CVE-2023-6858 | HIGH | 8.8 | 1.5% | Dec 19, 2023 | Firefox was susceptible to a heap buffer overflow in `nsTextFragment` due to insufficient OOM handling. This vulnerabili... |
| CVE-2023-6857 | MEDIUM | 5.3 | 0.7% | Dec 19, 2023 | When resolving a symlink, a race may occur where the buffer passed to `readlink` may actually be smaller than necessary.... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now