2023 CVE Vulnerabilities

31,509 CVEs published in 2023.

CVE IDSeverityCVSSDescription
CVE-2023-28804MEDIUM5.3An Improper Verification of Cryptographic Signature vulnerability in Zscaler Client Connector on Linux allows replacing ...
CVE-2023-28803MEDIUM6.5An authentication bypass by spoofing of a device with a synthetic IP address is possible in Zscaler Client Connector on ...
CVE-2023-28797HIGH7.3Zscaler Client Connector for Windows before 4.1 writes/deletes a configuration file inside specific folders on the disk....
CVE-2023-28796HIGH7.8Improper Verification of Cryptographic Signature vulnerability in Zscaler Client Connector on Linux allows Code Injectio...
CVE-2023-28795HIGH7.8Origin Validation Error vulnerability in Zscaler Client Connector on Linux allows Inclusion of Code in Existing Process....
CVE-2023-28793HIGH7.8Buffer overflow vulnerability in the signelf library used by Zscaler Client Connector on Linux allows Code Injection. Th...
CVE-2023-5246HIGH8.8Authentication Bypass by Capture-replay in SICK Flexi Soft Gateways with Partnumbers 1044073, 1127717, 1130282, 1044074,...
CVE-2023-45802MEDIUM5.9When a HTTP/2 stream was reset (RST frame) by a client, there was a time window were the request's memory resources were...
CVE-2023-43622HIGH7.5An attacker, opening a HTTP/2 connection with an initial window size of 0, was able to block handling of that connection...
CVE-2023-31122HIGH7.5Out-of-bounds Read vulnerability in mod_macro of Apache HTTP Server.This issue affects Apache HTTP Server: through 2.4.5...
CVE-2023-43624MEDIUM5.5CX-Designer Ver.3.740 and earlier (included in CX-One CXONE-AL[][]D-V4) contains an improper restriction of XML externa...
CVE-2023-5702MEDIUM6.5A vulnerability was found in Viessmann Vitogate 300 up to 2.1.3.0 and classified as problematic. Affected by this issue ...
CVE-2023-5701MEDIUM6.1A vulnerability has been found in vnotex vnote up to 3.17.0 and classified as problematic. Affected by this vulnerabilit...
CVE-2023-46324HIGH7.5pkg/suci/suci.go in free5GC udm before 1.2.0, when Go before 1.19 is used, allows an Invalid Curve Attack because it may...
CVE-2023-5700CRITICAL9.8A vulnerability, which was classified as critical, was found in Netentsec NS-ASG Application Security Gateway 6.3. Affec...
CVE-2023-5699MEDIUM6.1A vulnerability, which was classified as problematic, has been found in CodeAstro Internet Banking System 1.0. This issu...
CVE-2023-5698MEDIUM6.1A vulnerability classified as problematic was found in CodeAstro Internet Banking System 1.0. This vulnerability affects...
CVE-2023-5697MEDIUM6.1A vulnerability classified as problematic has been found in CodeAstro Internet Banking System 1.0. This affects an unkno...
CVE-2023-46322CRITICAL9.8iTermSessionLauncher.m in iTerm2 before 3.5.0beta12 does not sanitize ssh hostnames in URLs. The hostname's initial char...
CVE-2023-46321CRITICAL9.8iTermSessionLauncher.m in iTerm2 before 3.5.0beta12 does not sanitize paths in x-man-page URLs. They may have shell meta...
CVE-2023-46319HIGH7.5WALLIX Bastion 9.x before 9.0.9 and 10.x before 10.0.5 allows unauthenticated access to sensitive information by bypassi...
CVE-2023-5696MEDIUM6.1A vulnerability was found in CodeAstro Internet Banking System 1.0. It has been rated as problematic. Affected by this i...
CVE-2023-5695MEDIUM6.1A vulnerability was found in CodeAstro Internet Banking System 1.0. It has been declared as problematic. Affected by thi...
CVE-2023-5694MEDIUM6.1A vulnerability was found in CodeAstro Internet Banking System 1.0. It has been classified as problematic. Affected is a...
CVE-2023-5693CRITICAL9.8A vulnerability was found in CodeAstro Internet Banking System 1.0 and classified as critical. This issue affects some u...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now