2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-2723 | HIGH | 8.8 | 15.4% | May 16, 2023 | Use after free in DevTools in Google Chrome prior to 113.0.5672.126 allowed a remote attacker who had compromised the re... |
| CVE-2023-2722 | HIGH | 8.8 | 0.9% | May 16, 2023 | Use after free in Autofill UI in Google Chrome on Android prior to 113.0.5672.126 allowed a remote attacker to potential... |
| CVE-2023-2721 | HIGH | 8.8 | 0.9% | May 16, 2023 | Use after free in Navigation in Google Chrome prior to 113.0.5672.126 allowed a remote attacker to potentially exploit h... |
| CVE-2023-33001 | HIGH | 7.5 | 0.6% | May 16, 2023 | Jenkins HashiCorp Vault Plugin 360.v0a_1c04cf807d and earlier does not properly mask (i.e., replace with asterisks) cred... |
| CVE-2023-33000 | HIGH | 7.5 | 0.6% | May 16, 2023 | Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.149 and earlier does not mask credentials displayed on the ... |
| CVE-2023-32998 | HIGH | 8.8 | 0.5% | May 16, 2023 | A cross-site request forgery (CSRF) vulnerability in Jenkins AppSpider Plugin 1.0.15 and earlier allows attackers to con... |
| CVE-2023-32997 | HIGH | 8.8 | 0.8% | May 16, 2023 | Jenkins CAS Plugin 1.6.2 and earlier does not invalidate the previous session on login. |
| CVE-2023-32995 | HIGH | 8.8 | 0.4% | May 16, 2023 | A cross-site request forgery (CSRF) vulnerability in Jenkins SAML Single Sign On(SSO) Plugin 2.0.0 and earlier allows at... |
| CVE-2023-32992 | HIGH | 8.8 | 0.8% | May 16, 2023 | Missing permission checks in Jenkins SAML Single Sign On(SSO) Plugin 2.0.2 and earlier allow attackers with Overall/Read... |
| CVE-2023-32991 | HIGH | 8.8 | 0.7% | May 16, 2023 | A cross-site request forgery (CSRF) vulnerability in Jenkins SAML Single Sign On(SSO) Plugin 2.0.2 and earlier allows at... |
| CVE-2023-32989 | HIGH | 8.8 | 0.4% | May 16, 2023 | A cross-site request forgery (CSRF) vulnerability in Jenkins Azure VM Agents Plugin 852.v8d35f0960a_43 and earlier allow... |
| CVE-2023-32987 | HIGH | 8.8 | 0.4% | May 16, 2023 | A cross-site request forgery (CSRF) vulnerability in Jenkins Reverse Proxy Auth Plugin 1.7.4 and earlier allows attacker... |
| CVE-2023-32986 | HIGH | 8.8 | 63.1% | May 16, 2023 | Jenkins File Parameter Plugin 285.v757c5b_67a_c25 and earlier does not restrict the name (and resulting uploaded file na... |
| CVE-2023-32981 | HIGH | 8.8 | 1.0% | May 16, 2023 | An arbitrary file write vulnerability in Jenkins Pipeline Utility Steps Plugin 2.15.2 and earlier allows attackers able ... |
| CVE-2023-28076 | HIGH | 7.5 | 0.4% | May 16, 2023 | CloudLink 7.1.2 and all prior versions contain a broken or risky cryptographic algorithm vulnerability. An unauthentica... |
| CVE-2023-31576 | HIGH | 8.8 | 1.1% | May 16, 2023 | An arbitrary file upload vulnerability in Serendipity 2.4-beta1 allows attackers to execute arbitrary code via a crafted... |
| CVE-2023-31572 | HIGH | 8.8 | 0.8% | May 16, 2023 | An issue in Bludit 4.0.0-rc-2 allows authenticated attackers to change the Administrator password and escalate privilege... |
| CVE-2023-2548 | HIGH | 7.2 | 0.7% | May 16, 2023 | The RegistrationMagic plugin for WordPress is vulnerable to Insecure Direct Object References in versions up to, and inc... |
| CVE-2023-32955 | HIGH | 8.1 | 1.3% | May 16, 2023 | Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in DHCP Client ... |
| CVE-2023-2124 | HIGH | 7.8 | 0.5% | May 15, 2023 | An out-of-bounds memory access flaw was found in the Linux kernel’s XFS file system in how a user restores an XFS image ... |
| CVE-2023-21117 | HIGH | 7.8 | 0.1% | May 15, 2023 | In registerReceiverWithFeature of ActivityManagerService.java, there is a possible way for isolated processes to registe... |
| CVE-2023-21110 | HIGH | 7.8 | 0.1% | May 15, 2023 | In several functions of SnoozeHelper.java, there is a possible way to grant notifications access due to resource exhaust... |
| CVE-2023-21109 | HIGH | 7.8 | 0.1% | May 15, 2023 | In multiple places of AccessibilityService, there is a possible way to hide the app from the user due to a logic error i... |
| CVE-2023-21107 | HIGH | 7.8 | 0.1% | May 15, 2023 | In retrieveAppEntry of NotificationAccessDetails.java, there is a missing permission check. This could lead to local esc... |
| CVE-2023-21106 | HIGH | 7.8 | 0.1% | May 15, 2023 | In adreno_set_param of adreno_gpu.c, there is a possible memory corruption due to a double free. This could lead to loca... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now