2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-2727 | MEDIUM | 6.5 | 1.1% | Jul 3, 2023 | Users may be able to launch containers using images that are restricted by ImagePolicyWebhook when using ephemeral conta... |
| CVE-2023-37378 | MEDIUM | 5.3 | 0.7% | Jul 3, 2023 | Nullsoft Scriptable Install System (NSIS) before 3.09 mishandles access control for an uninstaller directory. |
| CVE-2023-36608 | MEDIUM | 6.5 | 0.2% | Jul 3, 2023 | The affected TBox RTUs store hashed passwords using MD5 encryption, which is an insecure encryption algorithm. |
| CVE-2023-36819 | MEDIUM | 6.5 | 0.7% | Jul 3, 2023 | Knowage is the professional open source suite for modern business analytics over traditional sources and big data system... |
| CVE-2023-3497 | MEDIUM | 4.6 | 0.1% | Jul 3, 2023 | Out of bounds read in Google Security Processor firmware in Google Chrome on Chrome OS prior to 114.0.5735.90 allowed a ... |
| CVE-2023-36816 | MEDIUM | 6.1 | 0.5% | Jul 3, 2023 | 2FA is a Web app to manage Two-Factor Authentication (2FA) accounts and generate their security codes. Cross site script... |
| CVE-2023-34450 | MEDIUM | 5.3 | 0.7% | Jul 3, 2023 | CometBFT is a Byzantine Fault Tolerant (BFT) middleware that takes a state transition machine and replicates it on many ... |
| CVE-2023-28364 | MEDIUM | 6.1 | 0.4% | Jul 1, 2023 | An Open Redirect vulnerability exists prior to version 1.52.117, where the built-in QR scanner in Brave Browser Android ... |
| CVE-2023-3338 | MEDIUM | 6.5 | 8.3% | Jun 30, 2023 | A null pointer dereference flaw was found in the Linux kernel's DECnet networking protocol. This issue could allow a rem... |
| CVE-2023-2908 | MEDIUM | 5.5 | 0.5% | Jun 30, 2023 | A null pointer dereference issue was found in Libtiff's tif_dir.c file. This issue may allow an attacker to pass a craft... |
| CVE-2023-22815 | MEDIUM | 6.7 | 1.1% | Jun 30, 2023 | Post-authentication remote command injection vulnerability in Western Digital My Cloud OS 5 devices that could allow an ... |
| CVE-2023-1206 | MEDIUM | 5.7 | 0.5% | Jun 30, 2023 | A hash collision flaw was found in the IPv6 connection lookup table in the Linux kernel’s IPv6 functionality when a user... |
| CVE-2023-35946 | MEDIUM | 5.5 | 0.3% | Jun 30, 2023 | Gradle is a build tool with a focus on build automation and support for multi-language development. When Gradle writes a... |
| CVE-2023-29147 | MEDIUM | 5.5 | 0.3% | Jun 30, 2023 | In Malwarebytes EDR 1.0.11 for Linux, it is possible to bypass the detection layers that depend on inode identifiers, be... |
| CVE-2023-37365 | MEDIUM | 6.5 | 0.5% | Jun 30, 2023 | Hnswlib 0.7.0 has a double free in init_index when the M argument is a large integer. |
| CVE-2023-36810 | MEDIUM | 6.5 | 0.6% | Jun 30, 2023 | pypdf is a pure-python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF files. An ... |
| CVE-2023-36807 | MEDIUM | 6.5 | 0.6% | Jun 30, 2023 | pypdf is a pure-python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF files. In ... |
| CVE-2023-36477 | MEDIUM | 5.4 | 0.8% | Jun 30, 2023 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with e... |
| CVE-2023-37360 | MEDIUM | 6.1 | 0.3% | Jun 30, 2023 | pacparser_find_proxy in Pacparser before 1.4.2 allows JavaScript injection, and possibly privilege escalation, when the ... |
| CVE-2023-37307 | MEDIUM | 5.4 | 0.4% | Jun 30, 2023 | In MISP before 2.4.172, title_for_layout is not properly sanitized in Correlations, CorrelationExclusions, and Layouts. |
| CVE-2023-37305 | MEDIUM | 5.3 | 0.5% | Jun 30, 2023 | An issue was discovered in the ProofreadPage (aka Proofread Page) extension for MediaWiki through 1.39.3. In includes/Pa... |
| CVE-2023-37304 | MEDIUM | 5.4 | 0.4% | Jun 30, 2023 | An issue was discovered in the DoubleWiki extension for MediaWiki through 1.39.3. includes/DoubleWiki.php allows XSS via... |
| CVE-2023-37302 | MEDIUM | 6.1 | 0.6% | Jun 30, 2023 | An issue was discovered in SiteLinksView.php in Wikibase in MediaWiki through 1.39.3. There is XSS via a crafted badge t... |
| CVE-2023-37301 | MEDIUM | 5.3 | 0.3% | Jun 30, 2023 | An issue was discovered in SubmitEntityAction in Wikibase in MediaWiki through 1.39.3. Because it doesn't use EditEntity... |
| CVE-2023-37300 | MEDIUM | 5.3 | 0.6% | Jun 30, 2023 | An issue was discovered in the CheckUserLog API in the CheckUser extension for MediaWiki through 1.39.3. There is incorr... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now