2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-22436 | HIGH | 7.8 | 0.2% | Mar 10, 2023 | The kernel subsystem function check_permission_for_set_tokenid within OpenHarmony-v3.1.5 and prior versions has an UAF... |
| CVE-2023-22301 | HIGH | 7.5 | 0.6% | Mar 10, 2023 | The kernel subsystem hmdfs within OpenHarmony-v3.1.5 and prior versions has an arbitrary memory accessing vulnerabilit... |
| CVE-2023-27117 | HIGH | 7.8 | 0.3% | Mar 10, 2023 | WebAssembly v1.0.29 was discovered to contain a heap overflow via the component component wabt::Node::operator. |
| CVE-2023-20049 | HIGH | 7.5 | 1.0% | Mar 9, 2023 | A vulnerability in the bidirectional forwarding detection (BFD) hardware offload feature of Cisco IOS XR Software for Ci... |
| CVE-2023-0623 | HIGH | 7.8 | 0.2% | Mar 9, 2023 | Cscape Envision RV version 4.60 is vulnerable to an out-of-bounds write vulnerability when parsing project (i.e. HMI) fi... |
| CVE-2023-0622 | HIGH | 7.8 | 0.2% | Mar 9, 2023 | Cscape Envision RV version 4.60 is vulnerable to an out-of-bounds write vulnerability when parsing project (i.e. HMI) fi... |
| CVE-2023-0621 | HIGH | 7.8 | 0.2% | Mar 9, 2023 | Cscape Envision RV version 4.60 is vulnerable to an out-of-bounds read vulnerability when parsing project (i.e. HMI) fil... |
| CVE-2023-27490 | HIGH | 8.8 | 0.5% | Mar 9, 2023 | NextAuth.js is an open source authentication solution for Next.js applications. `next-auth` applications using OAuth pro... |
| CVE-2023-27483 | HIGH | 7.5 | 0.8% | Mar 9, 2023 | crossplane-runtime is a set of go libraries used to build Kubernetes controllers in Crossplane and its related stacks. A... |
| CVE-2023-25573 | HIGH | 7.5 | 49.9% | Mar 9, 2023 | metersphere is an open source continuous testing platform. In affected versions an improper access control vulnerability... |
| CVE-2023-1288 | HIGH | 7.5 | 0.5% | Mar 9, 2023 | An XML External Entity injection (XXE) vulnerability in ENOVIA Live Collaboration V6R2013xE allows an attacker t... |
| CVE-2023-1293 | HIGH | 8.1 | 0.6% | Mar 9, 2023 | A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0 and classified as critical. This issue aff... |
| CVE-2023-27986 | HIGH | 7.8 | 0.5% | Mar 9, 2023 | emacsclient-mail.desktop in Emacs 28.1 through 28.2 is vulnerable to Emacs Lisp code injections through a crafted mailto... |
| CVE-2023-27985 | HIGH | 7.8 | 1.1% | Mar 9, 2023 | emacsclient-mail.desktop in Emacs 28.1 through 28.2 is vulnerable to shell command injections through a crafted mailto: ... |
| CVE-2023-26948 | HIGH | 7.5 | 0.6% | Mar 9, 2023 | onekeyadmin v1.3.9 was discovered to contain an arbitrary file read vulnerability via the component /admin1/file/downloa... |
| CVE-2023-27974 | HIGH | 7.5 | 1.0% | Mar 9, 2023 | Bitwarden through 2023.2.1 offers password auto-fill when the second-level domain matches, e.g., a password stored for a... |
| CVE-2023-0030 | HIGH | 7.8 | 0.2% | Mar 8, 2023 | A use-after-free flaw was found in the Linux kernel’s nouveau driver in how a user triggers a memory overflow that cause... |
| CVE-2023-22892 | HIGH | 7.5 | 0.6% | Mar 8, 2023 | There exists an information disclosure vulnerability in SmartBear Zephyr Enterprise through 7.15.0 that could be exploit... |
| CVE-2023-22891 | HIGH | 8.1 | 0.5% | Mar 8, 2023 | There exists a privilege escalation vulnerability in SmartBear Zephyr Enterprise through 7.15.0 that could be exploited ... |
| CVE-2023-22890 | HIGH | 7.5 | 0.6% | Mar 8, 2023 | SmartBear Zephyr Enterprise through 7.15.0 allows unauthenticated users to upload large files, which could exhaust the l... |
| CVE-2023-24533 | HIGH | 7.5 | 0.7% | Mar 8, 2023 | Multiplication of certain unreduced P-256 scalars produce incorrect results. There are no protocols known at this time t... |
| CVE-2023-27486 | HIGH | 8.8 | 0.9% | Mar 8, 2023 | xCAT is a toolkit for deployment and administration of computer clusters. In versions prior to 2.16.5 if zones are confi... |
| CVE-2023-26956 | HIGH | 7.5 | 0.7% | Mar 8, 2023 | onekeyadmin v1.3.9 was discovered to contain an arbitrary file read vulnerability via the component /admin1/curd/code. |
| CVE-2023-23760 | HIGH | 8.8 | 1.0% | Mar 8, 2023 | A path traversal vulnerability was identified in GitHub Enterprise Server that allowed remote code execution when buildi... |
| CVE-2023-1277 | HIGH | 7.8 | 1.8% | Mar 8, 2023 | A vulnerability, which was classified as critical, was found in kylin-system-updater up to 1.4.20kord on Ubuntu Kylin. A... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now