2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-45827 | CRITICAL | 9.8 | 1.2% | Nov 6, 2023 | Dot diver is a lightweight, powerful, and dependency-free TypeScript utility library that provides types and functions t... |
| CVE-2023-44398 | HIGH | 8.8 | 1.0% | Nov 6, 2023 | Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metada... |
| CVE-2023-4535 | LOW | 3.8 | 0.5% | Nov 6, 2023 | An out-of-bounds read vulnerability was found in OpenSC packages within the MyEID driver when handling symmetric key enc... |
| CVE-2023-40661 | MEDIUM | 6.4 | 1.3% | Nov 6, 2023 | Several memory vulnerabilities were identified within the OpenSC packages, particularly in the card enrollment process u... |
| CVE-2023-40660 | MEDIUM | 6.6 | 1.0% | Nov 6, 2023 | A flaw was found in OpenSC packages that allow a potential PIN bypass. When a token/card is authenticated by one process... |
| CVE-2023-5969 | MEDIUM | 5.3 | 0.5% | Nov 6, 2023 | Mattermost fails to properly sanitize the request to /api/v4/redirect_location allowing an attacker, sending a specially... |
| CVE-2023-5968 | MEDIUM | 4.9 | 0.5% | Nov 6, 2023 | Mattermost fails to properly sanitize the user object when updating the username, resulting in the password hash being i... |
| CVE-2023-5967 | MEDIUM | 4.3 | 0.5% | Nov 6, 2023 | Mattermost fails to properly validate requests to the Calls plugin, allowing an attacker sending a request without a Use... |
| CVE-2023-5678 | MEDIUM | 5.3 | 4.5% | Nov 6, 2023 | Issue summary: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be... |
| CVE-2023-41378 | HIGH | 7.5 | 0.7% | Nov 6, 2023 | In certain conditions for Calico Typha (v3.26.2, v3.25.1 and below), and Calico Enterprise Typha (v3.17.1, v3.16.3, v3.1... |
| CVE-2023-5950 | MEDIUM | 6.1 | 0.5% | Nov 6, 2023 | Rapid7 Velociraptor versions prior to 0.7.0-4 suffer from a reflected cross site scripting vulnerability. This vulnerabi... |
| CVE-2023-5964 | HIGH | 7.2 | 0.8% | Nov 6, 2023 | The 1E-Exchange-DisplayMessageinstruction that is part of the End-User Interaction product pack available on the 1E Exch... |
| CVE-2023-5963 | MEDIUM | 4.3 | 0.5% | Nov 6, 2023 | An issue has been discovered in GitLab EE with Advanced Search affecting all versions from 13.9 to 16.3.6, 16.4 prior to... |
| CVE-2023-4910 | MEDIUM | 5.5 | 0.2% | Nov 6, 2023 | A flaw was found In 3Scale Admin Portal. If a user logs out from the personal tokens page and then presses the back butt... |
| CVE-2023-45163 | HIGH | 7.2 | 0.9% | Nov 6, 2023 | The 1E-Exchange-CommandLinePing instruction that is part of the Network product pack available on the 1E Exchange does n... |
| CVE-2023-45161 | HIGH | 7.2 | 0.8% | Nov 6, 2023 | The 1E-Exchange-URLResponseTime instruction that is part of the Network product pack available on the 1E Exchange does n... |
| CVE-2023-3909 | MEDIUM | 6.5 | 0.6% | Nov 6, 2023 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.3 before 16.3.6, all versions start... |
| CVE-2023-3399 | HIGH | 7.7 | 0.5% | Nov 6, 2023 | An issue has been discovered in GitLab EE affecting all versions starting from 11.6 before 16.3.6, all versions starting... |
| CVE-2023-3246 | MEDIUM | 4.3 | 0.5% | Nov 6, 2023 | An issue has been discovered in GitLab EE/CE affecting all versions starting before 16.3.6, all versions starting from 1... |
| CVE-2023-5823 | HIGH | 8.8 | 0.2% | Nov 6, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in ThemeKraft TK Google Fonts GDPR Compliant plugin <= 2.2.11 versions. |
| CVE-2023-47186 | HIGH | 8.8 | 0.2% | Nov 6, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Kadence WP Kadence WooCommerce Email Designer plugin <= 1.5.11 versio... |
| CVE-2023-46781 | HIGH | 8.8 | 0.2% | Nov 6, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Roland Murg Current Menu Item for Custom Post Types plugin <= 1.5 ver... |
| CVE-2023-46780 | HIGH | 8.8 | 0.2% | Nov 6, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Alter plugin <= 1.0 versions. |
| CVE-2023-46779 | HIGH | 8.8 | 0.2% | Nov 6, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in EasyRecipe plugin <= 3.5.3251 versions. |
| CVE-2023-46778 | HIGH | 8.8 | 0.2% | Nov 6, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in TheFreeWindows Auto Limit Posts Reloaded plugin <= 2.5 versions. |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now