2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-46932 | CRITICAL | 9.8 | 1.1% | Dec 9, 2023 | Heap Buffer Overflow vulnerability in GPAC version 2.3-DEV-rev617-g671976fcc-master, allows attackers to execute arbitra... |
| CVE-2023-28874 | MEDIUM | 6.1 | 0.5% | Dec 9, 2023 | The next parameter in the /accounts/login endpoint of Seafile 9.0.6 allows attackers to redirect users to arbitrary site... |
| CVE-2023-28873 | MEDIUM | 5.4 | 0.4% | Dec 9, 2023 | An XSS issue in wiki and discussion pages in Seafile 9.0.6 allows attackers to inject JavaScript into the Markdown edito... |
| CVE-2023-28871 | MEDIUM | 4.3 | 0.6% | Dec 9, 2023 | Support Assistant in NCP Secure Enterprise Client before 12.22 allows attackers to read registry information of the oper... |
| CVE-2023-28870 | MEDIUM | 6.5 | 0.7% | Dec 9, 2023 | Insecure File Permissions in Support Assistant in NCP Secure Enterprise Client before 12.22 allow attackers to write to ... |
| CVE-2023-28869 | MEDIUM | 6.5 | 0.8% | Dec 9, 2023 | Support Assistant in NCP Secure Enterprise Client before 12.22 allows attackers read the contents of arbitrary files on ... |
| CVE-2023-28868 | HIGH | 8.1 | 0.9% | Dec 9, 2023 | Support Assistant in NCP Secure Enterprise Client before 12.22 allows attackers to delete arbitrary files on the operati... |
| CVE-2023-47465 | MEDIUM | 5.5 | 0.2% | Dec 9, 2023 | An issue in GPAC v.2.2.1 and before allows a local attacker to cause a denial of service (DoS) via the ctts_box_read fun... |
| CVE-2023-47722 | MEDIUM | 5.5 | 0.2% | Dec 9, 2023 | IBM API Connect V10.0.5.3 and V10.0.6.0 stores user credentials in browser cache which can be read by a local user. IBM... |
| CVE-2023-28527 | MEDIUM | 5.5 | 0.2% | Dec 9, 2023 | IBM Informix Dynamic Server 12.10 and 14.10 cdr is vulnerable to a heap buffer overflow, caused by improper bounds chec... |
| CVE-2023-28526 | MEDIUM | 5.5 | 0.2% | Dec 9, 2023 | IBM Informix Dynamic Server 12.10 and 14.10 archecker is vulnerable to a heap buffer overflow, caused by improper bound... |
| CVE-2023-28523 | HIGH | 7.8 | 0.3% | Dec 9, 2023 | IBM Informix Dynamic Server 12.10 and 14.10 onsmsync is vulnerable to a heap buffer overflow, caused by improper bounds... |
| CVE-2023-6394 | CRITICAL | 9.1 | 0.8% | Dec 9, 2023 | A flaw was found in Quarkus. This issue occurs when receiving a request over websocket with no role-based permission spe... |
| CVE-2023-49797 | HIGH | 7.8 | 0.3% | Dec 9, 2023 | PyInstaller bundles a Python application and all its dependencies into a single package. A PyInstaller built application... |
| CVE-2023-6560 | MEDIUM | 5.5 | 0.3% | Dec 9, 2023 | An out-of-bounds memory access flaw was found in the io_uring SQ/CQ rings functionality in the Linux kernel. This issue ... |
| CVE-2023-49800 | HIGH | 7.5 | 0.8% | Dec 9, 2023 | `nuxt-api-party` is an open source module to proxy API requests. The library allows the user to send many options direct... |
| CVE-2023-49799 | HIGH | 7.5 | 0.8% | Dec 9, 2023 | `nuxt-api-party` is an open source module to proxy API requests. nuxt-api-party attempts to check if the user has passed... |
| CVE-2023-49798 | HIGH | 7.5 | 0.5% | Dec 9, 2023 | OpenZeppelin Contracts is a library for smart contract development. A merge issue when porting the 5.0.1 patch to the 4.... |
| CVE-2023-6337 | HIGH | 7.5 | 0.8% | Dec 8, 2023 | HashiCorp Vault and Vault Enterprise 1.12.0 and newer are vulnerable to a denial of service through memory exhaustion of... |
| CVE-2023-34320 | MEDIUM | 5.5 | 0.2% | Dec 8, 2023 | Cortex-A77 cores (r0p0 and r1p0) are affected by erratum 1508412 where software, under certain circumstances, could dead... |
| CVE-2023-49788 | HIGH | 7.2 | 0.5% | Dec 8, 2023 | Collabora Online is a collaborative online office suite based on LibreOffice technology. Unlike a standalone dedicated C... |
| CVE-2023-49782 | MEDIUM | 6.1 | 0.4% | Dec 8, 2023 | Collabora Online is a collaborative online office suite based on LibreOffice technology. Users of Nextcloud with `Collab... |
| CVE-2023-48311 | MEDIUM | 4.3 | 0.6% | Dec 8, 2023 | dockerspawner is a tool to spawn JupyterHub single user servers in Docker containers. Users of JupyterHub deployments ru... |
| CVE-2023-46499 | MEDIUM | 6.1 | 0.5% | Dec 8, 2023 | Cross Site Scripting vulnerability in EverShop NPM versions before v.1.0.0-rc.5 allows a remote attacker to obtain sensi... |
| CVE-2023-46498 | CRITICAL | 9.8 | 1.3% | Dec 8, 2023 | An issue in EverShop NPM versions before v.1.0.0-rc.8 allows a remote attacker to obtain sensitive information and execu... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now