2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-0135 | HIGH | 8.8 | 0.5% | Jan 10, 2023 | Use after free in Cart in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a mal... |
| CVE-2023-0134 | HIGH | 8.8 | 0.5% | Jan 10, 2023 | Use after free in Cart in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a mal... |
| CVE-2023-0129 | HIGH | 8.8 | 0.5% | Jan 10, 2023 | Heap buffer overflow in Network Service in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user... |
| CVE-2023-0128 | HIGH | 8.8 | 0.6% | Jan 10, 2023 | Use after free in Overview Mode in Google Chrome on Chrome OS prior to 109.0.5414.74 allowed a remote attacker who convi... |
| CVE-2023-22320 | HIGH | 7.5 | 0.7% | Jan 10, 2023 | OpenAM Web Policy Agent (OpenAM Consortium Edition) provided by OpenAM Consortium parses URLs improperly, leading to a p... |
| CVE-2023-0022 | HIGH | 8.8 | 0.7% | Jan 10, 2023 | SAP BusinessObjects Business Intelligence Analysis edition for OLAP allows an authenticated attacker to inject malicious... |
| CVE-2023-0016 | HIGH | 8.8 | 0.6% | Jan 10, 2023 | SAP BPC MS 10.0 - version 810, allows an unauthorized attacker to execute crafted database queries. The exploitation of ... |
| CVE-2023-22895 | HIGH | 7.5 | 1.2% | Jan 10, 2023 | The bzip2 crate before 0.4.4 for Rust allow attackers to cause a denial of service via a large file that triggers an int... |
| CVE-2023-22477 | HIGH | 7.5 | 1.1% | Jan 9, 2023 | Mercurius is a GraphQL adapter for Fastify. Any users of Mercurius until version 10.5.0 are subjected to a denial of ser... |
| CVE-2023-22472 | HIGH | 8.8 | 0.2% | Jan 9, 2023 | Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with N... |
| CVE-2023-0036 | HIGH | 7.8 | 0.2% | Jan 9, 2023 | platform_callback_stub in misc subsystem within OpenHarmony-v3.0.5 and prior versions has an authentication bypass vulne... |
| CVE-2023-0035 | HIGH | 7.8 | 0.2% | Jan 9, 2023 | softbus_client_stub in communication subsystem within OpenHarmony-v3.0.5 and prior versions has an authentication bypass... |
| CVE-2023-0113 | HIGH | 7.5 | 0.8% | Jan 7, 2023 | A vulnerability was found in Netis Netcore Router up to 2.2.6. It has been declared as problematic. Affected by this vul... |
| CVE-2023-0088 | HIGH | 8.8 | 0.6% | Jan 5, 2023 | The Swifty Page Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and includin... |
| CVE-2023-22626 | HIGH | 7.5 | 0.8% | Jan 5, 2023 | PgHero before 3.1.0 allows Information Disclosure via EXPLAIN because query results may be present in an error message. ... |
| CVE-2023-22467 | HIGH | 7.5 | 1.7% | Jan 4, 2023 | Luxon is a library for working with dates and times in JavaScript. On the 1.x branch prior to 1.38.1, the 2.x branch pri... |
| CVE-2023-0054 | HIGH | 7.8 | 0.5% | Jan 4, 2023 | Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145. |
| CVE-2023-0051 | HIGH | 7.8 | 0.5% | Jan 4, 2023 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144. |
| CVE-2023-0049 | HIGH | 7.8 | 0.5% | Jan 4, 2023 | Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143. |
| CVE-2023-22460 | HIGH | 7.5 | 0.9% | Jan 4, 2023 | go-ipld-prime is an implementation of the InterPlanetary Linked Data (IPLD) spec interfaces, a batteries-included codec ... |
| CVE-2023-22457 | HIGH | 8.8 | 18.7% | Jan 4, 2023 | CKEditor Integration UI adds support for editing wiki pages using CKEditor. Prior to versions 1.64.3,t he `CKEditor.HTML... |
| CVE-2023-0048 | HIGH | 8.8 | 32.3% | Jan 4, 2023 | Code Injection in GitHub repository lirantal/daloradius prior to master-branch. |
| CVE-2023-0046 | HIGH | 7.2 | 1.0% | Jan 4, 2023 | Improper Restriction of Names for Files and Other Resources in GitHub repository lirantal/daloradius prior to master-bra... |
| CVE-2023-22451 | HIGH | 8.8 | 0.7% | Jan 2, 2023 | Kiwi TCMS is an open source test management system. In version 11.6 and prior, when users register new accounts and/or c... |
| CVE-2023-22551 | HIGH | 7.5 | 1.5% | Jan 1, 2023 | The FTP (aka "Implementation of a simple FTP client and server") project through 96c1a35 allows remote attackers to caus... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now