2023 CVE Vulnerabilities

31,509 CVEs published in 2023.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2023-0341HIGH7.8A stack buffer overflow exists in the ec_glob function of editorconfig-core-c before v0.12.6 which allowed an attacker t...
CVE-2023-22611HIGH7.5A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause information ...
CVE-2023-22610HIGH7.5 A CWE-863: Incorrect Authorization vulnerability exists that could cause Denial of Service against the Geo SCADA server...
CVE-2023-24829HIGH8.8Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This issue affects the iotdb-web-workbe...
CVE-2023-22315HIGH7.8 Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior use a proprietary local area network (LAN) protocol that does...
CVE-2023-24830HIGH7.5Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This issue affects iotdb-web-workbench ...
CVE-2023-0512HIGH7.8Divide By Zero in GitHub repository vim/vim prior to 9.0.1247.
CVE-2023-0266HIGH7A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel. SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 i...
CVE-2023-0240HIGH7.8There is a logic error in io_uring's implementation which can be used to trigger a use-after-free vulnerability leading ...
CVE-2023-0474HIGH8.8Use after free in GuestView in Google Chrome prior to 109.0.5414.119 allowed an attacker who convinced a user to install...
CVE-2023-0473HIGH8.8Type Confusion in ServiceWorker API in Google Chrome prior to 109.0.5414.119 allowed a remote attacker to potentially ex...
CVE-2023-0472HIGH8.8Use after free in WebRTC in Google Chrome prior to 109.0.5414.119 allowed a remote attacker to potentially exploit heap ...
CVE-2023-0471HIGH8.8Use after free in WebTransport in Google Chrome prior to 109.0.5414.119 allowed a remote attacker to potentially exploit...
CVE-2023-24623HIGH7.5Paranoidhttp before 0.3.0 allows SSRF because [::] is equivalent to the 127.0.0.1 address, but does not match the filter...
CVE-2023-0564HIGH7.5Weak Password Requirements in GitHub repository froxlor/froxlor prior to 2.0.10.
CVE-2023-0561HIGH8.8A vulnerability, which was classified as critical, was found in SourceCodester Online Tours & Travels Management System ...
CVE-2023-0560HIGH7.2A vulnerability, which was classified as critical, has been found in SourceCodester Online Tours & Travels Management Sy...
CVE-2023-23621HIGH7.5Discourse is an open-source discussion platform. Prior to version 3.0.1 on the `stable` branch and version 3.1.0.beta2 o...
CVE-2023-23617HIGH7.5OpenMage LTS is an e-commerce platform. Versions prior to 19.4.22 and 20.0.19 contain an infinite loop in malicious code...
CVE-2023-0555HIGH8.1The Quick Restaurant Menu plugin for WordPress is vulnerable to authorization bypass due to a missing capability check o...
CVE-2023-0554HIGH8.1The Quick Restaurant Menu plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and includ...
CVE-2023-0550HIGH8.1The Quick Restaurant Menu plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and ...
CVE-2023-22242HIGH7.8Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are ...
CVE-2023-22241HIGH7.8Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are ...
CVE-2023-22240HIGH7.8Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are ...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now