2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-38552 | HIGH | 7.5 | 1.1% | Oct 18, 2023 | When the Node.js policy feature checks the integrity of a resource against a trusted manifest, the application can inter... |
| CVE-2023-38546 | LOW | 3.7 | 6.2% | Oct 18, 2023 | This flaw allows an attacker to insert cookies at will into a running program using libcurl, if the specific series of c... |
| CVE-2023-38545 | CRITICAL | 9.8 | 78.5% | Oct 18, 2023 | This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is asked to pass along the h... |
| CVE-2023-35084 | CRITICAL | 9.8 | 2.8% | Oct 18, 2023 | Unsafe Deserialization of User Input could lead to Execution of Unauthorized Operations in Ivanti Endpoint Manager 2022 ... |
| CVE-2023-35083 | MEDIUM | 6.5 | 1.1% | Oct 18, 2023 | Allows an authenticated attacker with network access to read arbitrary files on Endpoint Manager recently discovered on ... |
| CVE-2023-5626 | HIGH | 8.8 | 0.3% | Oct 18, 2023 | Cross-Site Request Forgery (CSRF) in GitHub repository pkp/ojs prior to 3.3.0-16. |
| CVE-2023-5552 | HIGH | 7.5 | 0.5% | Oct 18, 2023 | A password disclosure vulnerability in the Secure PDF eXchange (SPX) feature allows attackers with full email access to ... |
| CVE-2023-45811 | HIGH | 7.8 | 0.4% | Oct 17, 2023 | Synchrony deobfuscator is a javascript cleaner & deobfuscator. A `__proto__` pollution vulnerability exists in versions... |
| CVE-2023-45810 | HIGH | 7.5 | 0.5% | Oct 17, 2023 | OpenFGA is a flexible authorization/permission engine built for developers and inspired by Google Zanzibar. Affected ver... |
| CVE-2023-42507 | HIGH | 7.8 | 0.2% | Oct 17, 2023 | Stack-based buffer overflow vulnerability exists in OnSinView2 versions 2.0.1 and earlier. If this vulnerability is expl... |
| CVE-2023-42506 | HIGH | 7.8 | 0.2% | Oct 17, 2023 | Improper restriction of operations within the bounds of a memory buffer issue exists in OnSinView2 versions 2.0.1 and ea... |
| CVE-2023-41715 | HIGH | 8.8 | 0.8% | Oct 17, 2023 | SonicOS post-authentication Improper Privilege Management vulnerability in the SonicOS SSL VPN Tunnel allows users to el... |
| CVE-2023-41713 | HIGH | 7.5 | 0.7% | Oct 17, 2023 | SonicOS Use of Hard-coded Password vulnerability in the 'dynHandleBuyToolbar' demo function. |
| CVE-2023-41712 | MEDIUM | 6.5 | 1.0% | Oct 17, 2023 | SonicOS post-authentication Stack-Based Buffer Overflow Vulnerability in the SSL VPN plainprefs.exp URL endpoint leads t... |
| CVE-2023-41711 | MEDIUM | 6.5 | 1.0% | Oct 17, 2023 | SonicOS post-authentication Stack-Based Buffer Overflow Vulnerability in the sonicwall.exp, prefs.exp URL endpoints lead... |
| CVE-2023-3042 | MEDIUM | 6.1 | 0.4% | Oct 17, 2023 | In dotCMS, versions mentioned, a flaw in the NormalizationFilter does not strip double slashes (//) from URLs, potential... |
| CVE-2023-39280 | MEDIUM | 6.5 | 1.0% | Oct 17, 2023 | SonicOS p ost-authentication Stack-Based Buffer Overflow vulnerability in the ssoStats-s.xml, ssoStats-s.wri URL endpoi... |
| CVE-2023-39279 | MEDIUM | 6.5 | 1.0% | Oct 17, 2023 | SonicOS post-authentication Stack-Based Buffer Overflow vulnerability in the getPacketReplayData.json URL endpoint leads... |
| CVE-2023-39278 | MEDIUM | 6.5 | 1.0% | Oct 17, 2023 | SonicOS post-authentication user assertion failure leads to Stack-Based Buffer Overflow vulnerability via main.cgi leads... |
| CVE-2023-39277 | MEDIUM | 6.5 | 1.0% | Oct 17, 2023 | SonicOS post-authentication stack-based buffer overflow vulnerability in the sonicflow.csv and appflowsessions.csv URL ... |
| CVE-2023-39276 | MEDIUM | 6.5 | 1.0% | Oct 17, 2023 | SonicOS post-authentication stack-based buffer overflow vulnerability in the getBookmarkList.json URL endpoint leads to... |
| CVE-2023-36321 | HIGH | 7.5 | 0.9% | Oct 17, 2023 | Connected Vehicle Systems Alliance (COVESA) up to v2.18.8 was discovered to contain a buffer overflow via the component ... |
| CVE-2023-41631 | HIGH | 8.8 | 1.1% | Oct 17, 2023 | eSST Monitoring v2.147.1 was discovered to contain a remote code execution (RCE) vulnerability via the file upload funct... |
| CVE-2023-41630 | CRITICAL | 9.8 | 1.2% | Oct 17, 2023 | eSST Monitoring v2.147.1 was discovered to contain a remote code execution (RCE) vulnerability via the Gii code generato... |
| CVE-2023-41629 | HIGH | 7.5 | 0.7% | Oct 17, 2023 | A lack of input sanitizing in the file download feature of eSST Monitoring v2.147.1 allows attackers to execute a path t... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now