2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-5731 | CRITICAL | 9.8 | 1.0% | Oct 25, 2023 | Memory safety bugs present in Firefox 118. Some of these bugs showed evidence of memory corruption and we presume that w... |
| CVE-2023-5730 | CRITICAL | 9.8 | 1.5% | Oct 25, 2023 | Memory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. Some of these bugs showed evidence ... |
| CVE-2023-5729 | MEDIUM | 4.3 | 0.6% | Oct 25, 2023 | A malicious web site can enter fullscreen mode while simultaneously triggering a WebAuthn prompt. This could have obscur... |
| CVE-2023-5728 | HIGH | 7.5 | 1.2% | Oct 25, 2023 | During garbage collection extra operations were performed on a object that should not be. This could have led to a poten... |
| CVE-2023-5727 | MEDIUM | 6.5 | 0.9% | Oct 25, 2023 | The executable file warning was not presented when downloading .msix, .msixbundle, .appx, and .appxbundle files, which c... |
| CVE-2023-5726 | MEDIUM | 4.3 | 0.6% | Oct 25, 2023 | A website could have obscured the full screen notification by using the file open dialog. This could have led to user co... |
| CVE-2023-5725 | MEDIUM | 4.3 | 0.9% | Oct 25, 2023 | A malicious installed WebExtension could open arbitrary URLs, which under the right circumstance could be leveraged to c... |
| CVE-2023-5724 | HIGH | 7.5 | 1.6% | Oct 25, 2023 | Drivers are not always robust to extremely large draw calls and in some cases this scenario could have led to a crash. T... |
| CVE-2023-5723 | MEDIUM | 5.3 | 0.7% | Oct 25, 2023 | An attacker with temporary script access to a site could have set a cookie containing invalid characters using `document... |
| CVE-2023-5722 | MEDIUM | 5.3 | 0.6% | Oct 25, 2023 | Using iterative requests an attacker was able to learn the size of an opaque response, as well as the contents of a serv... |
| CVE-2023-5721 | MEDIUM | 4.3 | 0.8% | Oct 25, 2023 | It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the user due to ... |
| CVE-2023-5717 | HIGH | 7.8 | 0.8% | Oct 25, 2023 | A heap out-of-bounds write vulnerability in the Linux kernel's Linux Kernel Performance Events (perf) component can be e... |
| CVE-2023-5671 | HIGH | 7.8 | 0.2% | Oct 25, 2023 | HP Print and Scan Doctor for Windows may potentially be vulnerable to escalation of privilege. HP is releasing software ... |
| CVE-2023-5568 | MEDIUM | 6.5 | 1.6% | Oct 25, 2023 | A heap-based Buffer Overflow flaw was discovered in Samba. It could allow a remote, authenticated attacker to exploit th... |
| CVE-2023-5472 | HIGH | 8.8 | 1.2% | Oct 25, 2023 | Use after free in Profiles in Google Chrome prior to 118.0.5993.117 allowed a remote attacker to potentially exploit hea... |
| CVE-2023-5363 | HIGH | 7.5 | 3.3% | Oct 25, 2023 | Issue summary: A bug has been identified in the processing of key and initialisation vector (IV) lengths. This can lead... |
| CVE-2023-5311 | HIGH | 8.8 | 1.5% | Oct 25, 2023 | The WP EXtra plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check o... |
| CVE-2023-5127 | MEDIUM | 5.4 | 0.6% | Oct 25, 2023 | The WP Font Awesome plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, ... |
| CVE-2023-5126 | MEDIUM | 5.4 | 0.4% | Oct 25, 2023 | The Delete Me plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'plugin_delete_me' shortcode in vers... |
| CVE-2023-5110 | MEDIUM | 5.4 | 0.4% | Oct 25, 2023 | The BSK PDF Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'bsk-pdfm-category-dropdown' s... |
| CVE-2023-5085 | MEDIUM | 5.4 | 0.4% | Oct 25, 2023 | The Advanced Menu Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'advMenu' shortcode in ve... |
| CVE-2023-4693 | MEDIUM | 4.6 | 0.5% | Oct 25, 2023 | An out-of-bounds read flaw was found on grub2's NTFS filesystem driver. This issue may allow a physically present attack... |
| CVE-2023-4692 | HIGH | 7.8 | 0.5% | Oct 25, 2023 | An out-of-bounds write flaw was found in grub2's NTFS filesystem driver. This issue may allow an attacker to present a s... |
| CVE-2023-4608 | HIGH | 7.2 | 0.3% | Oct 25, 2023 | An authenticated XCC user with elevated privileges can perform blind SQL injection in limited cases through a crafted AP... |
| CVE-2023-4607 | HIGH | 8.8 | 0.4% | Oct 25, 2023 | An authenticated XCC user can change permissions for any user through a crafted API command. |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now