2023 CVE Vulnerabilities

31,509 CVEs published in 2023.

CVE IDSeverityCVSSDescription
CVE-2023-6542HIGH7.1Due to lack of proper authorization checks in Emarsys SDK for Android, an attacker can call a particular activity and ca...
CVE-2023-5536MEDIUM6.4A feature in LXD (LP#1829071), affects the default configuration of Ubuntu Server which allows privileged users in the l...
CVE-2023-50423CRITICAL9.8SAP BTP Security Services Integration Library ([Python] sap-xssec) - versions < 4.1.0, allow under certain conditions an...
CVE-2023-50422CRITICAL9.8SAP BTP Security Services Integration Library ([Java] cloud-security-services-integration-library) - versions below 2.17...
CVE-2023-49587MEDIUM6.4SAP Solution Manager - version 720, allows an authorized attacker to execute certain deprecated function modules which c...
CVE-2023-49584MEDIUM4.3SAP Fiori launchpad - versions SAP_UI 750, SAP_UI 754, SAP_UI 755, SAP_UI 756, SAP_UI 757, SAP_UI 758, UI_700 200, SAP_B...
CVE-2023-49583CRITICAL9.8SAP BTP Security Services Integration Library ([Node.js] @sap/xssec - versions < 3.6.0, allow under certain conditions a...
CVE-2023-49581CRITICAL9.4SAP GUI for Windows and SAP GUI for Java allow an unauthenticated attacker to access information which would otherwise b...
CVE-2023-49580HIGH7.3SAP GUI for Windows and SAP GUI for Java - versions SAP_BASIS 755, SAP_BASIS 756, SAP_BASIS 757, SAP_BASIS 758, allow an...
CVE-2023-49578LOW3.5SAP Cloud Connector - version 2.0, allows an authenticated user with low privilege to perform Denial of service attack f...
CVE-2023-49577MEDIUM6.1The SAP HCM (SMART PAYE solution) - versions S4HCMCIE 100, SAP_HRCIE 600, SAP_HRCIE 604, SAP_HRCIE 608, does not suffici...
CVE-2023-46219MEDIUM5.3When saving HSTS data to an excessively long file name, curl could end up removing all contents, making subsequent reque...
CVE-2023-49058MEDIUM5.3SAP Master Data Governance File Upload application allows an attacker to exploit insufficient validation of path informa...
CVE-2023-42932MEDIUM5.5A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.2, macOS Ventura 13.6.3, macOS ...
CVE-2023-42927——Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2023-42926HIGH7.8Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14....
CVE-2023-42924MEDIUM5.5A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.2, macOS Ventura 13.6.3. An app...
CVE-2023-42923MEDIUM5.3This issue was addressed through improved state management. This issue is fixed in iOS 17.2 and iPadOS 17.2. Private Bro...
CVE-2023-42922MEDIUM5.5This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sonoma 14.2, iOS...
CVE-2023-42919MEDIUM5.5A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma ...
CVE-2023-42914MEDIUM6.3The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.2, iOS 17.2 and iPadOS 17....
CVE-2023-42912HIGH7.8Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14....
CVE-2023-42911HIGH7.8Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14....
CVE-2023-42910HIGH8.8Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14....
CVE-2023-42909HIGH7.8Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14....

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now