2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-2856 | MEDIUM | 6.5 | 1.8% | May 26, 2023 | VMS TCPIPtrace file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted ca... |
| CVE-2023-2855 | MEDIUM | 6.5 | 1.7% | May 26, 2023 | Candump log parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture fi... |
| CVE-2023-2854 | MEDIUM | 6.5 | 0.9% | May 26, 2023 | BLF file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file |
| CVE-2023-28321 | MEDIUM | 5.9 | 1.8% | May 26, 2023 | An improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports matching of wildcard patt... |
| CVE-2023-28320 | MEDIUM | 5.9 | 2.7% | May 26, 2023 | A denial of service vulnerability exists in curl <v8.1.0 in the way libcurl provides several different backends for reso... |
| CVE-2023-33255 | MEDIUM | 6.1 | 0.9% | May 26, 2023 | An issue was discovered in Papaya Viewer 1.0.1449. User-supplied input in form of DICOM or NIFTI images can be loaded in... |
| CVE-2023-33197 | MEDIUM | 5.4 | 0.7% | May 26, 2023 | Craft is a CMS for creating custom digital experiences on the web. Cross-site scripting (XSS) can be triggered via the U... |
| CVE-2023-32681 | MEDIUM | 6.1 | 2.8% | May 26, 2023 | Requests is a HTTP library. Since Requests 2.3.0, Requests has been leaking Proxy-Authorization headers to destination s... |
| CVE-2023-32318 | MEDIUM | 6.7 | 0.2% | May 26, 2023 | Nextcloud server provides a home for data. A regression in the session handling between Nextcloud Server and the Nextclo... |
| CVE-2023-2283 | MEDIUM | 6.5 | 1.1% | May 26, 2023 | A vulnerability was found in libssh, where the authentication check of the connecting client can be bypassed in the`pki_... |
| CVE-2023-20868 | MEDIUM | 6.1 | 0.5% | May 26, 2023 | NSX-T contains a reflected cross-site scripting vulnerability due to a lack of input validation. A remote attacker can i... |
| CVE-2023-1981 | MEDIUM | 5.5 | 0.4% | May 26, 2023 | A vulnerability was found in the avahi library. This flaw allows an unprivileged user to make a dbus call, causing the a... |
| CVE-2023-1667 | MEDIUM | 6.5 | 1.3% | May 26, 2023 | A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This issue may allow an authent... |
| CVE-2023-1664 | MEDIUM | 6.5 | 0.4% | May 26, 2023 | A flaw was found in Keycloak. This flaw depends on a non-default configuration "Revalidate Client Certificate" to be ena... |
| CVE-2023-33780 | MEDIUM | 5.4 | 0.5% | May 26, 2023 | A stored cross-site scripting (XSS) vulnerability in TFDi Design smartCARS 3 v0.7.0 and below allows attackers to execut... |
| CVE-2023-2817 | MEDIUM | 5.4 | 0.4% | May 26, 2023 | A post-authentication stored cross-site scripting vulnerability exists in Craft CMS versions <= 4.4.11. HTML, including ... |
| CVE-2023-2002 | MEDIUM | 6.8 | 1.5% | May 26, 2023 | A vulnerability was found in the HCI sockets implementation due to a missing capability check in net/bluetooth/hci_sock.... |
| CVE-2023-20882 | MEDIUM | 5.9 | 0.6% | May 26, 2023 | In Cloud foundry routing release versions from 0.262.0 and prior to 0.266.0,a bug in the gorouter process can lead to a ... |
| CVE-2023-0117 | MEDIUM | 5.3 | 0.4% | May 26, 2023 | The online authentication provided by the hwKitAssistant lacks strict identity verification of applications. Successful ... |
| CVE-2023-33720 | MEDIUM | 6.5 | 0.6% | May 26, 2023 | mp4v2 v2.1.2 was discovered to contain a memory leak via the class MP4BytesProperty. |
| CVE-2023-33394 | MEDIUM | 5.4 | 0.4% | May 26, 2023 | skycaiji v2.5.4 is vulnerable to Cross Site Scripting (XSS). Attackers can achieve backend XSS by deploying malicious JS... |
| CVE-2023-29098 | MEDIUM | 6.1 | 0.4% | May 26, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ArtistScope CopySafe Web Protection plugin <= 3.13 version... |
| CVE-2023-32323 | MEDIUM | 4.3 | 1.0% | May 26, 2023 | Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. A malicious user on a S... |
| CVE-2023-25781 | MEDIUM | 4.8 | 0.4% | May 26, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Sebastian Krysmanski Upload File Type Settings plugin ... |
| CVE-2023-2903 | MEDIUM | 6.5 | 0.7% | May 25, 2023 | A vulnerability classified as problematic has been found in NFine Rapid Development Platform 20230511. This affects an u... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now