2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-43591 | HIGH | 7.8 | 0.2% | Nov 15, 2023 | Improper privilege management in Zoom Rooms for macOS before version 5.16.0 may allow an authenticated user to conduct ... |
| CVE-2023-43590 | HIGH | 7.8 | 0.2% | Nov 15, 2023 | Link following in Zoom Rooms for macOS before version 5.16.0 may allow an authenticated user to conduct an escalation o... |
| CVE-2023-43588 | MEDIUM | 6.5 | 0.7% | Nov 15, 2023 | Insufficient control flow management in some Zoom clients may allow an authenticated user to conduct an information disc... |
| CVE-2023-43582 | HIGH | 8.8 | 0.7% | Nov 15, 2023 | Improper authorization in some Zoom clients may allow an authorized user to conduct an escalation of privilege via netwo... |
| CVE-2023-41718 | HIGH | 7.8 | 0.5% | Nov 15, 2023 | When a particular process flow is initiated, an attacker may be able to gain unauthorized elevated privileges on the aff... |
| CVE-2023-39337 | CRITICAL | 9.1 | 1.9% | Nov 15, 2023 | A security vulnerability in EPMM Versions 11.10, 11.9 and 11.8 older allows a threat actor with knowledge of an enrolled... |
| CVE-2023-39335 | CRITICAL | 9.8 | 2.3% | Nov 15, 2023 | A security vulnerability has been identified in EPMM Versions 11.10, 11.9 and 11.8 and older allowing an unauthenticated... |
| CVE-2023-38544 | MEDIUM | 5.5 | 0.4% | Nov 15, 2023 | A logged in user can modify specific files that may lead to unauthorized changes in system-wide configuration settings. ... |
| CVE-2023-38543 | HIGH | 7.8 | 0.4% | Nov 15, 2023 | A vulnerability exists on all versions of the Ivanti Secure Access Client below 22.6R1.1, which could allow a locally au... |
| CVE-2023-38043 | HIGH | 7.8 | 0.4% | Nov 15, 2023 | A vulnerability exists on all versions of the Ivanti Secure Access Client below 22.6R1.1, which could allow a locally au... |
| CVE-2023-35080 | HIGH | 7.8 | 0.7% | Nov 15, 2023 | A vulnerability has been identified in the Ivanti Secure Access Windows client, which could allow a locally authenticate... |
| CVE-2023-31100 | HIGH | 7.1 | 0.2% | Nov 15, 2023 | Improper Access Control in SMI handler vulnerability in Phoenix SecureCore™ Technology™ 4 allows SPI flash modification.... |
| CVE-2023-5189 | MEDIUM | 6.5 | 0.8% | Nov 14, 2023 | A path traversal vulnerability exists in Ansible when extracting tarballs. An attacker could craft a malicious tarball s... |
| CVE-2023-47518 | MEDIUM | 6.1 | 0.4% | Nov 14, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Matthew Muro Restrict Categories plugin <= 2.6.4 versions. |
| CVE-2023-47517 | MEDIUM | 6.1 | 0.4% | Nov 14, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in SendPress Newsletters plugin <= 1.23.11.6 versions. |
| CVE-2023-45627 | MEDIUM | 6.5 | 0.8% | Nov 14, 2023 | An authenticated Denial-of-Service (DoS) vulnerability exists in the CLI service. Successful exploitation of this vulner... |
| CVE-2023-45626 | HIGH | 7.2 | 0.9% | Nov 14, 2023 | An authenticated vulnerability has been identified allowing an attacker to effectively establish highly privileged persi... |
| CVE-2023-45625 | HIGH | 7.2 | 1.8% | Nov 14, 2023 | Multiple authenticated command injection vulnerabilities exist in the command line interface. Successful exploitation of... |
| CVE-2023-45624 | HIGH | 7.5 | 0.9% | Nov 14, 2023 | An unauthenticated Denial-of-Service (DoS) vulnerability exists in the soft ap daemon accessed via the PAPI protocol. Su... |
| CVE-2023-45623 | HIGH | 7.5 | 0.9% | Nov 14, 2023 | Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Wi-Fi Uplink service accessed via the PAPI protocol... |
| CVE-2023-45622 | HIGH | 7.5 | 0.9% | Nov 14, 2023 | Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the BLE daemon service accessed via the PAPI protocol. ... |
| CVE-2023-45621 | HIGH | 7.5 | 0.9% | Nov 14, 2023 | Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Success... |
| CVE-2023-45620 | HIGH | 7.5 | 0.9% | Nov 14, 2023 | Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Success... |
| CVE-2023-45619 | HIGH | 8.2 | 0.7% | Nov 14, 2023 | There is an arbitrary file deletion vulnerability in the RSSI service accessed by PAPI (Aruba's access point management ... |
| CVE-2023-45618 | HIGH | 8.2 | 0.7% | Nov 14, 2023 | There are arbitrary file deletion vulnerabilities in the AirWave client service accessed by PAPI (Aruba's access point m... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now