2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-43571 | MEDIUM | 6.7 | 0.2% | Nov 8, 2023 | A buffer overflow was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may allow a local ... |
| CVE-2023-3959 | CRITICAL | 9.8 | 40.4% | Nov 8, 2023 | Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmwa... |
| CVE-2023-39435 | CRITICAL | 9.8 | 1.2% | Nov 8, 2023 | Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmwar... |
| CVE-2023-5079 | HIGH | 7.5 | 0.6% | Nov 8, 2023 | Lenovo LeCloud App improper input validation allows attackers to access arbitrary components and arbitrary file download... |
| CVE-2023-5078 | MEDIUM | 6.7 | 0.2% | Nov 8, 2023 | A vulnerability was reported in some ThinkPad BIOS that could allow a physical or local attacker with elevated privilege... |
| CVE-2023-5075 | MEDIUM | 6.7 | 0.2% | Nov 8, 2023 | A buffer overflow was reported in the FmpSipoCapsuleDriver driver in the IdeaPad Duet 3-10IGL5 that may allow a local at... |
| CVE-2023-4891 | MEDIUM | 5.5 | 0.2% | Nov 8, 2023 | A potential use-after-free vulnerability was reported in the Lenovo View driver that could result in denial of service.... |
| CVE-2023-4706 | HIGH | 7.8 | 0.2% | Nov 8, 2023 | A privilege escalation vulnerability was reported in Lenovo preloaded devices deployed using Microsoft AutoPilot under ... |
| CVE-2023-4632 | HIGH | 7.8 | 0.3% | Nov 8, 2023 | An uncontrolled search path vulnerability was reported in Lenovo System Update that could allow an attacker with local a... |
| CVE-2023-47114 | MEDIUM | 6.1 | 0.6% | Nov 8, 2023 | Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in your runti... |
| CVE-2023-47113 | HIGH | 7.3 | 0.2% | Nov 8, 2023 | BleachBit cleans files to free disk space and to maintain privacy. BleachBit for Windows up to version 4.4.2 is vulnerab... |
| CVE-2023-47111 | LOW | 3.7 | 0.5% | Nov 8, 2023 | ZITADEL provides identity infrastructure. ZITADEL provides administrators the possibility to define a `Lockout Policy` w... |
| CVE-2023-47109 | HIGH | 8.1 | 0.8% | Nov 8, 2023 | PrestaShop blockreassurance adds an information block aimed at offering helpful information to reassure customers that t... |
| CVE-2023-43570 | MEDIUM | 6.7 | 0.2% | Nov 8, 2023 | A potential vulnerability was reported in the SMI callback function of the OemSmi driver that may allow a local attacke... |
| CVE-2023-43569 | MEDIUM | 6.7 | 0.2% | Nov 8, 2023 | A buffer overflow was reported in the OemSmi module in some Lenovo Desktop products that may allow a local attacker with... |
| CVE-2023-43568 | MEDIUM | 4.4 | 0.2% | Nov 8, 2023 | A buffer over-read was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may allow a loc... |
| CVE-2023-43567 | MEDIUM | 6.7 | 0.2% | Nov 8, 2023 | A buffer overflow was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may allow a loca... |
| CVE-2023-36667 | HIGH | 7.5 | 1.0% | Nov 8, 2023 | Couchbase Server 7.1.4 before 7.1.5 and 7.2.0 before 7.2.1 allows Directory Traversal. |
| CVE-2023-46363 | MEDIUM | 5.5 | 0.3% | Nov 8, 2023 | jbig2enc v0.28 was discovered to contain a SEGV via jbig2_add_page in src/jbig2enc.cc:512. |
| CVE-2023-46362 | MEDIUM | 5.5 | 0.3% | Nov 8, 2023 | jbig2enc v0.28 was discovered to contain a heap-use-after-free via jbig2enc_auto_threshold_using_hash in src/jbig2enc.cc... |
| CVE-2023-45875 | HIGH | 7.5 | 0.7% | Nov 8, 2023 | An issue was discovered in Couchbase Server 7.2.0. There is a private key leak in debug.log while adding a pre-7.0 node ... |
| CVE-2023-45857 | MEDIUM | 6.5 | 0.6% | Nov 8, 2023 | An issue discovered in Axios 1.5.1 inadvertently reveals the confidential XSRF-TOKEN stored in cookies by including it i... |
| CVE-2023-29974 | CRITICAL | 9.8 | 1.8% | Nov 8, 2023 | An issue discovered in Pfsense CE version 2.6.0 allows attackers to compromise user accounts via weak password requireme... |
| CVE-2023-0392 | MEDIUM | 6.7 | 0.2% | Nov 8, 2023 | The LDAP Agent Update service with versions prior to 5.18 used an unquoted path, which could allow arbitrary code execut... |
| CVE-2023-5996 | HIGH | 8.8 | 2.0% | Nov 8, 2023 | Use after free in WebAudio in Google Chrome prior to 119.0.6045.123 allowed a remote attacker to potentially exploit hea... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now