2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-6105 | MEDIUM | 5.5 | 0.7% | Nov 15, 2023 | An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys bein... |
| CVE-2023-48224 | CRITICAL | 9.1 | 1.0% | Nov 15, 2023 | Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in a runtime ... |
| CVE-2023-47638 | — | — | — | Nov 15, 2023 | Rejected reason: Confirm reference is not public. |
| CVE-2023-47637 | HIGH | 8.8 | 1.2% | Nov 15, 2023 | Pimcore is an Open Source Data & Experience Management Platform. In affected versions the `/admin/object/grid-proxy` end... |
| CVE-2023-47636 | MEDIUM | 5.3 | 0.7% | Nov 15, 2023 | The Pimcore Admin Classic Bundle provides a Backend UI for Pimcore. Full Path Disclosure (FPD) vulnerabilities enable th... |
| CVE-2023-41699 | MEDIUM | 6.1 | 0.4% | Nov 15, 2023 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Payara Platform Payara Server, Micro and Embedded (... |
| CVE-2023-30954 | LOW | 3.7 | 0.3% | Nov 15, 2023 | The Gotham video-application-server service contained a race condition which would cause it to not apply certain acls ne... |
| CVE-2023-22818 | HIGH | 7.8 | 0.2% | Nov 15, 2023 | Multiple DLL Search Order Hijack vulnerabilities were addressed in the SanDisk Security Installer for Windows that could... |
| CVE-2023-48219 | MEDIUM | 6.1 | 0.7% | Nov 15, 2023 | TinyMCE is an open source rich text editor. A mutation cross-site scripting (mXSS) vulnerability was discovered in TinyM... |
| CVE-2023-48014 | HIGH | 7.8 | 0.4% | Nov 15, 2023 | GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to contain a stack overflow via the hevc_parse_vps_extension funct... |
| CVE-2023-48013 | HIGH | 7.8 | 0.3% | Nov 15, 2023 | GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to contain a double free via the gf_filterpacket_del function at /... |
| CVE-2023-48011 | HIGH | 7.8 | 0.3% | Nov 15, 2023 | GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to contain a heap-use-after-free via the flush_ref_samples functio... |
| CVE-2023-6112 | HIGH | 8.8 | 30.3% | Nov 15, 2023 | Use after free in Navigation in Google Chrome prior to 119.0.6045.159 allowed a remote attacker to potentially exploit h... |
| CVE-2023-5997 | HIGH | 8.8 | 1.0% | Nov 15, 2023 | Use after free in Garbage Collection in Google Chrome prior to 119.0.6045.159 allowed a remote attacker to potentially e... |
| CVE-2023-6079 | — | — | — | Nov 15, 2023 | Rejected reason: appears to be a duplicate of CVE-2023-40206 |
| CVE-2023-34982 | HIGH | 7.1 | 0.2% | Nov 15, 2023 | This external control vulnerability, if exploited, could allow a local OS-authenticated user with standard privileges t... |
| CVE-2023-33873 | HIGH | 7.8 | 0.2% | Nov 15, 2023 | This privilege escalation vulnerability, if exploited, cloud allow a local OS-authenticated user with standard privileg... |
| CVE-2023-48089 | HIGH | 8.8 | 1.3% | Nov 15, 2023 | xxl-job-admin 2.4.0 is vulnerable to Remote Code Execution (RCE) via /xxl-job-admin/jobcode/save. |
| CVE-2023-48088 | MEDIUM | 5.4 | 0.4% | Nov 15, 2023 | xxl-job-admin 2.4.0 is vulnerable to Cross Site Scripting (XSS) via /xxl-job-admin/joblog/logDetailPage. |
| CVE-2023-48087 | MEDIUM | 5.4 | 0.4% | Nov 15, 2023 | xxl-job-admin 2.4.0 is vulnerable to Insecure Permissions via /xxl-job-admin/joblog/clearLog and /xxl-job-admin/joblog/l... |
| CVE-2023-5720 | HIGH | 7.5 | 0.8% | Nov 15, 2023 | A flaw was found in Quarkus, where it does not properly sanitize artifacts created using the Gradle plugin, allowing cer... |
| CVE-2023-5676 | MEDIUM | 5.9 | 0.4% | Nov 15, 2023 | In Eclipse OpenJ9 before version 0.41.0, the JVM can be forced into an infinite busy hang on a spinlock or a segmentatio... |
| CVE-2023-5245 | CRITICAL | 9.8 | 1.2% | Nov 15, 2023 | FileUtil.extract() enumerates all zip file entries and extracts each file without validating whether file paths in the a... |
| CVE-2023-4602 | MEDIUM | 6.1 | 0.7% | Nov 15, 2023 | The Namaste! LMS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'course_id' parameter in ... |
| CVE-2023-23549 | LOW | 2.7 | 0.6% | Nov 15, 2023 | Improper Input Validation in Checkmk <2.2.0p15, <2.1.0p37, <=2.0.0p39 allows priviledged attackers to cause partial deni... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now