2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-24828 | HIGH | 8.8 | 0.7% | Feb 8, 2023 | Onedev is a self-hosted Git Server with CI/CD and Kanban. In versions prior to 7.9.12 the algorithm used to generate acc... |
| CVE-2023-0705 | HIGH | 7.5 | 0.7% | Feb 7, 2023 | Integer overflow in Core in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who had one a race condition ... |
| CVE-2023-0703 | HIGH | 8.8 | 0.7% | Feb 7, 2023 | Type confusion in DevTools in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to eng... |
| CVE-2023-0702 | HIGH | 8.8 | 0.7% | Feb 7, 2023 | Type confusion in Data Transfer in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user t... |
| CVE-2023-0701 | HIGH | 8.8 | 0.7% | Feb 7, 2023 | Heap buffer overflow in WebUI in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to ... |
| CVE-2023-0699 | HIGH | 8.8 | 0.8% | Feb 7, 2023 | Use after free in GPU in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to potentially exploit heap corr... |
| CVE-2023-0698 | HIGH | 8.8 | 0.6% | Feb 7, 2023 | Out of bounds read in WebRTC in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to perform an out of boun... |
| CVE-2023-0696 | HIGH | 8.8 | 0.6% | Feb 7, 2023 | Type confusion in V8 in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to potentially exploit heap corru... |
| CVE-2023-25194 | HIGH | 8.8 | 95.3% | Feb 7, 2023 | A possible security vulnerability has been identified in Apache Kafka Connect API. This requires access to a Kafka Conne... |
| CVE-2023-23696 | HIGH | 7.8 | 0.5% | Feb 7, 2023 | Dell Command Intel vPro Out of Band, versions prior to 4.3.1, contain an Improper Authorization vulnerability. A locall... |
| CVE-2023-22643 | HIGH | 7.8 | 2.4% | Feb 7, 2023 | An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in libzypp-p... |
| CVE-2023-0706 | HIGH | 8.8 | 0.3% | Feb 7, 2023 | A vulnerability, which was classified as critical, has been found in SourceCodester Medical Certificate Generator App 1.... |
| CVE-2023-24827 | HIGH | 7.5 | 0.8% | Feb 7, 2023 | syft is a a CLI tool and Go library for generating a Software Bill of Materials (SBOM) from container images and filesys... |
| CVE-2023-25016 | HIGH | 7.5 | 0.4% | Feb 6, 2023 | Couchbase Server before 6.6.6, 7.x before 7.0.5, and 7.1.x before 7.1.2 exposes Sensitive Information to an Unauthorized... |
| CVE-2023-0669 | HIGH | 7.2 | 100.0% | Feb 6, 2023 | Fortra (formerly, HelpSystems) GoAnywhere MFT suffers from a pre-authentication command injection vulnerability in the L... |
| CVE-2023-0234 | HIGH | 8.8 | 18.0% | Feb 6, 2023 | The SiteGround Security WordPress plugin before 1.3.1 does not properly sanitize user input before using it in an SQL qu... |
| CVE-2023-0679 | HIGH | 8.1 | 0.7% | Feb 6, 2023 | A vulnerability was found in SourceCodester Canteen Management System 1.0. It has been rated as critical. Affected by th... |
| CVE-2023-25193 | HIGH | 7.5 | 1.8% | Feb 4, 2023 | hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via consecutive marks durin... |
| CVE-2023-0675 | HIGH | 8.8 | 0.7% | Feb 4, 2023 | A vulnerability, which was classified as critical, was found in Calendar Event Management System 2.3.0. This affects an ... |
| CVE-2023-0673 | HIGH | 8.1 | 0.5% | Feb 4, 2023 | A vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. Affected by this vulnerabili... |
| CVE-2023-0671 | HIGH | 8.8 | 1.1% | Feb 4, 2023 | Code Injection in GitHub repository froxlor/froxlor prior to 2.0.10. |
| CVE-2023-22746 | HIGH | 7.5 | 0.7% | Feb 3, 2023 | CKAN is an open-source DMS (data management system) for powering data hubs and data portals. When creating a new contain... |
| CVE-2023-24029 | HIGH | 7.2 | 0.9% | Feb 3, 2023 | In Progress WS_FTP Server before 8.8, it is possible for a host administrator to elevate their privileges via the admini... |
| CVE-2023-23941 | HIGH | 7.5 | 0.3% | Feb 3, 2023 | SwagPayPal is a PayPal integration for shopware/platform. If JavaScript-based PayPal checkout methods are used (PayPal P... |
| CVE-2023-23932 | HIGH | 7.5 | 0.7% | Feb 3, 2023 | OpenDDS is an open source C++ implementation of the Object Management Group (OMG) Data Distribution Service (DDS). OpenD... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now