2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-46448 | MEDIUM | 6.1 | 0.4% | Nov 1, 2023 | Reflected Cross-Site Scripting (XSS) vulnerability in dmpop Mejiro Commit Versions Prior To 3096393 allows attackers to ... |
| CVE-2023-45201 | MEDIUM | 6.1 | 0.4% | Nov 1, 2023 | Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The 'q' parameter of the admin.p... |
| CVE-2023-44025 | CRITICAL | 9.8 | 0.8% | Nov 1, 2023 | SQL injection vulnerability in addify Addifyfreegifts v.1.0.2 and before allows a remote attacker to execute arbitrary c... |
| CVE-2023-39281 | CRITICAL | 9.8 | 0.5% | Nov 1, 2023 | A stack buffer overflow vulnerability discovered in AsfSecureBootDxe in Insyde InsydeH2O with kernel 5.0 through 5.5 all... |
| CVE-2023-46428 | HIGH | 8.8 | 1.0% | Nov 1, 2023 | An arbitrary file upload vulnerability in HadSky v7.12.10 allows attackers to execute arbitrary code via a crafted file. |
| CVE-2023-46724 | HIGH | 7.5 | 4.0% | Nov 1, 2023 | Squid is a caching proxy for the Web. Due to an Improper Validation of Specified Index bug, Squid versions 3.3.0.1 throu... |
| CVE-2023-3397 | MEDIUM | 6.3 | 0.2% | Nov 1, 2023 | A race condition occurred between the functions lmLogClose and txEnd in JFS, in the Linux Kernel, executed in different ... |
| CVE-2023-1193 | MEDIUM | 6.5 | 1.0% | Nov 1, 2023 | A use-after-free flaw was found in setup_async_work in the KSMBD implementation of the in-kernel samba server and CIFS i... |
| CVE-2023-1192 | MEDIUM | 6.5 | 1.1% | Nov 1, 2023 | A use-after-free flaw was found in smb2_is_status_io_timeout() in CIFS in the Linux Kernel. After CIFS transfers respons... |
| CVE-2023-46482 | CRITICAL | 9.8 | 1.2% | Nov 1, 2023 | SQL injection vulnerability in wuzhicms v.4.1.0 allows a remote attacker to execute arbitrary code via the Database Back... |
| CVE-2023-5859 | MEDIUM | 4.3 | 0.6% | Nov 1, 2023 | Incorrect security UI in Picture In Picture in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perfor... |
| CVE-2023-5858 | MEDIUM | 4.3 | 0.6% | Nov 1, 2023 | Inappropriate implementation in WebApp Provider in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to ob... |
| CVE-2023-5857 | HIGH | 8.8 | 1.3% | Nov 1, 2023 | Inappropriate implementation in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentia... |
| CVE-2023-5856 | HIGH | 8.8 | 1.2% | Nov 1, 2023 | Use after free in Side Panel in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to ... |
| CVE-2023-5855 | HIGH | 8.8 | 1.0% | Nov 1, 2023 | Use after free in Reading Mode in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user t... |
| CVE-2023-5854 | HIGH | 8.8 | 1.1% | Nov 1, 2023 | Use after free in Profiles in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to en... |
| CVE-2023-5853 | MEDIUM | 4.3 | 0.6% | Nov 1, 2023 | Incorrect security UI in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to obfuscate secur... |
| CVE-2023-5852 | HIGH | 8.8 | 1.0% | Nov 1, 2023 | Use after free in Printing in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to en... |
| CVE-2023-5851 | MEDIUM | 4.3 | 0.9% | Nov 1, 2023 | Inappropriate implementation in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to obfuscat... |
| CVE-2023-5850 | MEDIUM | 4.3 | 0.9% | Nov 1, 2023 | Incorrect security UI in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform domain ... |
| CVE-2023-5849 | HIGH | 8.8 | 1.2% | Nov 1, 2023 | Integer overflow in USB in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentially exploit heap c... |
| CVE-2023-5766 | CRITICAL | 9.8 | 0.6% | Nov 1, 2023 | A remote code execution vulnerability in Remote Desktop Manager 2023.2.33 and earlier on Windows allows an attacker to... |
| CVE-2023-5765 | CRITICAL | 9.8 | 0.6% | Nov 1, 2023 | Improper access control in the password analyzer feature in Devolutions Remote Desktop Manager 2023.2.33 and earlier on ... |
| CVE-2023-5482 | HIGH | 8.8 | 7.1% | Nov 1, 2023 | Insufficient data validation in USB in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform out of... |
| CVE-2023-5480 | MEDIUM | 6.1 | 1.1% | Nov 1, 2023 | Inappropriate implementation in Payments in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to bypass XS... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now