2023 CVE Vulnerabilities

31,249 CVEs published in 2023.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2023-29581MEDIUM5.5yasm 1.3.0.55.g101bc has a segmentation violation in the function delete_Token at modules/preprocs/nasm/nasm-pp.c. NOTE:...
CVE-2023-28488MEDIUM6.5client.c in gdhcp in ConnMan through 1.41 could be used by network-adjacent attackers (operating a crafted DHCP server) ...
CVE-2023-29571MEDIUM5.5Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via gc_sweep at src/mjs_gc.c. This vulnerability can ...
CVE-2023-27775MEDIUM5.4A stored HTML injection vulnerability in LiveAction LiveSP v21.1.2 allows attackers to execute arbitrary code via a craf...
CVE-2023-27704MEDIUM5.5Void Tools Everything lower than v1.4.1.1022 was discovered to contain a Regular Expression Denial of Service (ReDoS).
CVE-2023-23591MEDIUM4.9The Logback component in Terminalfour before 8.3.14.1 allows OS administrators to obtain sensitive information from appl...
CVE-2023-29580MEDIUM5.5yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the component yasm_expr_create at /libyasm/e...
CVE-2023-29574MEDIUM5.5Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp42avc component.
CVE-2023-30512MEDIUM6.5CubeFS through 3.2.1 allows Kubernetes cluster-level privilege escalation. This occurs because DaemonSet has cfs-csi-clu...
CVE-2023-29576MEDIUM5.5Bento4 v1.6.0-639 was discovered to contain a segmentation violation via the AP4_TrunAtom::SetDataOffset(int) function i...
CVE-2023-28314MEDIUM6.1Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2023-28313MEDIUM6.1Microsoft Dynamics 365 Customer Voice Cross-Site Scripting Vulnerability
CVE-2023-28312MEDIUM6.5Azure Machine Learning Information Disclosure Vulnerability
CVE-2023-28309MEDIUM5.4Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2023-28308MEDIUM6.6Windows DNS Server Remote Code Execution Vulnerability
CVE-2023-28307MEDIUM6.6Windows DNS Server Remote Code Execution Vulnerability
CVE-2023-28306MEDIUM6.6Windows DNS Server Remote Code Execution Vulnerability
CVE-2023-28305MEDIUM6.6Windows DNS Server Remote Code Execution Vulnerability
CVE-2023-28299MEDIUM5.5Visual Studio Spoofing Vulnerability
CVE-2023-28298MEDIUM5.5Windows Kernel Denial of Service Vulnerability
CVE-2023-28284MEDIUM4.3Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
CVE-2023-28278MEDIUM6.6Windows DNS Server Remote Code Execution Vulnerability
CVE-2023-28277MEDIUM4.9Windows DNS Server Information Disclosure Vulnerability
CVE-2023-28276MEDIUM4.4Windows Group Policy Security Feature Bypass Vulnerability
CVE-2023-28271MEDIUM5.5Windows Kernel Memory Information Disclosure Vulnerability

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now