2023 CVE Vulnerabilities

31,509 CVEs published in 2023.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2023-1276HIGH7.2A vulnerability, which was classified as critical, has been found in SUL1SS_shop. This issue affects some unknown proces...
CVE-2023-27088HIGH8.8feiqu-opensource Background Vertical authorization vulnerability exists in IndexController.java. demo users with low per...
CVE-2023-0089HIGH8.8 The webutils in Proofpoint Enterprise Protection (PPS/POD) contain a vulnerability that allows an authenticated user to...
CVE-2023-27476HIGH7.5OWSLib is a Python package for client programming with Open Geospatial Consortium (OGC) web service interface standards,...
CVE-2023-1227HIGH8.8Use after free in Core in Google Chrome on Lacros prior to 111.0.5563.64 allowed a remote attacker who convinced a user ...
CVE-2023-1222HIGH8.8Heap buffer overflow in Web Audio API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially e...
CVE-2023-1220HIGH8.8Heap buffer overflow in UMA in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the re...
CVE-2023-1219HIGH8.8Heap buffer overflow in Metrics in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised th...
CVE-2023-1218HIGH8.8Use after free in WebRTC in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap c...
CVE-2023-1216HIGH8.8Use after free in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had convienced the user...
CVE-2023-1215HIGH8.8Type confusion in CSS in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corr...
CVE-2023-1214HIGH8.8Type confusion in V8 in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corru...
CVE-2023-1213HIGH8.8Use after free in Swiftshader in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit h...
CVE-2023-1003HIGH7.8A vulnerability, which was classified as critical, was found in Typora up to 1.5.5 on Windows. Affected is an unknown fu...
CVE-2023-27480HIGH7.7XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected ver...
CVE-2023-27475HIGH8.8Goutil is a collection of miscellaneous functionality for the go language. In versions prior to 0.6.0 when users use fsu...
CVE-2023-25611HIGH7.3A improper neutralization of formula elements in a CSV file vulnerability in Fortinet FortiAnalyzer 6.4.0 - 6.4.9, 7.0.0...
CVE-2023-25605HIGH7.2A improper access control vulnerability in Fortinet FortiSOAR 7.3.0 - 7.3.1 allows an attacker authenticated on the admi...
CVE-2023-25223HIGH7.2CRMEB <=1.3.4 is vulnerable to SQL Injection via /api/admin/user/list.
CVE-2023-27522HIGH7.5HTTP Response Smuggling vulnerability in Apache HTTP Server via mod_proxy_uwsgi. This issue affects Apache HTTP Server: ...
CVE-2023-23554HIGH8.8Uncontrolled search path element vulnerability exists in pg_ivm versions prior to 1.5.1. When refreshing an IMMV, pg_ivm...
CVE-2023-1211HIGH7.2SQL Injection in GitHub repository phpipam/phpipam prior to v1.5.2.
CVE-2023-27891HIGH7.5rami.io pretix before 4.17.1 allows OAuth application authorization from a logged-out session. The fixed versions are 4....
CVE-2023-26601HIGH7.5Zoho ManageEngine ServiceDesk Plus through 14104, Asset Explorer through 6987, ServiceDesk Plus MSP before 14000, and Su...
CVE-2023-24217HIGH8.8AgileBio Electronic Lab Notebook v4.234 was discovered to contain a local file inclusion vulnerability.

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now