2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-31102 | HIGH | 7.8 | 71.0% | Nov 3, 2023 | Ppmd7.c in 7-Zip before 23.00 allows an integer underflow and invalid read operation via a crafted 7Z archive. |
| CVE-2023-46954 | CRITICAL | 9.8 | 1.1% | Nov 3, 2023 | SQL Injection vulnerability in Relativity ODA LLC RelativityOne v.12.1.537.3 Patch 2 and earlier allows a remote attacke... |
| CVE-2023-35896 | MEDIUM | 5.4 | 0.3% | Nov 3, 2023 | IBM Content Navigator 3.0.13 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attack... |
| CVE-2023-46176 | HIGH | 7.8 | 0.2% | Nov 3, 2023 | IBM MQ Appliance 9.3 CD could allow a local attacker to gain elevated privileges on the system, caused by improper valid... |
| CVE-2023-36034 | HIGH | 7.3 | 2.7% | Nov 3, 2023 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
| CVE-2023-36029 | MEDIUM | 4.3 | 1.0% | Nov 3, 2023 | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
| CVE-2023-36022 | MEDIUM | 6.6 | 1.2% | Nov 3, 2023 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
| CVE-2023-43018 | HIGH | 7.5 | 0.4% | Nov 3, 2023 | IBM CICS TX Standard 11.1 and Advanced 10.1, 11.1 performs an operation at a privilege level that is higher than the min... |
| CVE-2023-42029 | MEDIUM | 5.4 | 0.4% | Nov 3, 2023 | IBM CICS TX Standard 11.1, Advanced 10.1, 11.1, and TXSeries for Multiplatforms 8.1, 8.2, 9.1 are vulnerable to cross-si... |
| CVE-2023-42027 | HIGH | 8.8 | 0.3% | Nov 3, 2023 | IBM CICS TX Standard 11.1, Advanced 10.1, 11.1, and TXSeries for Multiplatforms 8.1, 8.2, 9.1 are vulnerable to cross-si... |
| CVE-2023-46958 | CRITICAL | 9.8 | 1.3% | Nov 2, 2023 | An issue in lmxcms v.1.41 allows a remote attacker to execute arbitrary code via a crafted script to the admin.php file. |
| CVE-2023-46352 | HIGH | 7.5 | 0.5% | Nov 2, 2023 | In the module "Pixel Plus: Events + CAPI + Pixel Catalog for Facebook Module" (facebookconversiontrackingplus) up to ver... |
| CVE-2023-43194 | MEDIUM | 5.3 | 0.5% | Nov 2, 2023 | Submitty before v22.06.00 is vulnerable to Incorrect Access Control. An attacker can delete any post in the forum by mod... |
| CVE-2023-42299 | CRITICAL | 9.8 | 1.3% | Nov 2, 2023 | Buffer Overflow vulnerability in OpenImageIO oiio v.2.4.12.0 allows a remote attacker to execute arbitrary code and caus... |
| CVE-2023-39283 | HIGH | 7.8 | 0.2% | Nov 2, 2023 | An SMM memory corruption vulnerability in the SMM driver (SMRAM write) in CsmInt10HookSmm in Insyde InsydeH2O with kerne... |
| CVE-2023-39057 | HIGH | 7.5 | 0.6% | Nov 2, 2023 | An information leak in hirochanKAKIwaiting v13.6.1 allows attackers to obtain the channel access token and send crafted ... |
| CVE-2023-39054 | HIGH | 7.5 | 0.6% | Nov 2, 2023 | An information leak in Tokudaya.ekimae_mc v13.6.1 allows attackers to obtain the channel access token and send crafted m... |
| CVE-2023-39053 | HIGH | 7.5 | 0.6% | Nov 2, 2023 | An information leak in Hattoriya v13.6.1 allows attackers to obtain the channel access token and send crafted messages. |
| CVE-2023-39051 | HIGH | 7.5 | 0.6% | Nov 2, 2023 | An information leak in VISION MEAT WORKS Track Diner 10/10mbl v13.6.1 allows attackers to obtain the channel access toke... |
| CVE-2023-39050 | HIGH | 7.5 | 0.6% | Nov 2, 2023 | An information leak in Daiky-value.Fukueten v13.6.1 allows attackers to obtain the channel access token and send crafted... |
| CVE-2023-39048 | HIGH | 7.5 | 0.6% | Nov 2, 2023 | An information leak in Tokudaya.honten v13.6.1 allows attackers to obtain the channel access token and send crafted mess... |
| CVE-2023-39047 | HIGH | 7.5 | 0.6% | Nov 2, 2023 | An information leak in shouzu sweets oz v13.6.1 allows attackers to obtain the channel access token and send crafted mes... |
| CVE-2023-39042 | HIGH | 7.5 | 0.6% | Nov 2, 2023 | An information leak in Gyouza-newhushimi v13.6.1 allows attackers to obtain the channel access token and send crafted me... |
| CVE-2023-31579 | CRITICAL | 9.8 | 0.7% | Nov 2, 2023 | Dromara Lamp-Cloud before v3.8.1 was discovered to use a hardcoded cryptographic key when creating and verifying a Json ... |
| CVE-2023-5930 | MEDIUM | 6.1 | 0.5% | Nov 2, 2023 | A vulnerability was found in Campcodes Simple Student Information System 1.0. It has been declared as problematic. This ... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now