2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-29453 | CRITICAL | 9.8 | 0.8% | Oct 12, 2023 | Templates do not properly consider backticks (`) as Javascript string delimiters, and do not escape them as expected. Ba... |
| CVE-2023-44793 | — | — | — | Oct 12, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2023-40829 | HIGH | 7.5 | 0.5% | Oct 12, 2023 | There is an interface unauthorized access vulnerability in the background of Tencent Enterprise Wechat Privatization 2.5... |
| CVE-2023-42298 | MEDIUM | 5.5 | 0.2% | Oct 12, 2023 | An issue in GPAC GPAC v.2.2.1 and before allows a local attacker to cause a denial of service via the Q_DecCoordOnUnitSp... |
| CVE-2023-1943 | HIGH | 8.8 | 0.6% | Oct 12, 2023 | Privilege Escalation in kOps using GCE/GCP Provider in Gossip Mode. |
| CVE-2023-5487 | MEDIUM | 6.5 | 0.6% | Oct 11, 2023 | Inappropriate implementation in Fullscreen in Google Chrome prior to 118.0.5993.70 allowed an attacker who convinced a u... |
| CVE-2023-5486 | MEDIUM | 4.3 | 0.7% | Oct 11, 2023 | Inappropriate implementation in Input in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to spoof securit... |
| CVE-2023-5485 | MEDIUM | 4.3 | 0.7% | Oct 11, 2023 | Inappropriate implementation in Autofill in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to bypass aut... |
| CVE-2023-5484 | MEDIUM | 6.5 | 1.0% | Oct 11, 2023 | Inappropriate implementation in Navigation in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to spoof se... |
| CVE-2023-5483 | MEDIUM | 6.5 | 0.8% | Oct 11, 2023 | Inappropriate implementation in Intents in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to bypass cont... |
| CVE-2023-5481 | MEDIUM | 6.5 | 0.7% | Oct 11, 2023 | Inappropriate implementation in Downloads in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to spoof sec... |
| CVE-2023-5479 | MEDIUM | 6.5 | 0.6% | Oct 11, 2023 | Inappropriate implementation in Extensions API in Google Chrome prior to 118.0.5993.70 allowed an attacker who convinced... |
| CVE-2023-5478 | MEDIUM | 4.3 | 0.8% | Oct 11, 2023 | Inappropriate implementation in Autofill in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to leak cross... |
| CVE-2023-5477 | MEDIUM | 4.3 | 0.5% | Oct 11, 2023 | Inappropriate implementation in Installer in Google Chrome prior to 118.0.5993.70 allowed a local attacker to bypass dis... |
| CVE-2023-5476 | HIGH | 8.8 | 0.9% | Oct 11, 2023 | Use after free in Blink History in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to potentially exploit... |
| CVE-2023-5475 | MEDIUM | 6.5 | 0.6% | Oct 11, 2023 | Inappropriate implementation in DevTools in Google Chrome prior to 118.0.5993.70 allowed an attacker who convinced a use... |
| CVE-2023-5474 | HIGH | 8.8 | 0.9% | Oct 11, 2023 | Heap buffer overflow in PDF in Google Chrome prior to 118.0.5993.70 allowed a remote attacker who convinced a user to en... |
| CVE-2023-5473 | MEDIUM | 6.3 | 0.7% | Oct 11, 2023 | Use after free in Cast in Google Chrome prior to 118.0.5993.70 allowed a remote attacker who had compromised the rendere... |
| CVE-2023-5218 | HIGH | 8.8 | 1.3% | Oct 11, 2023 | Use after free in Site Isolation in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to potentially exploi... |
| CVE-2023-44190 | MEDIUM | 5.4 | 0.2% | Oct 11, 2023 | An Origin Validation vulnerability in MAC address validation of Juniper Networks Junos OS Evolved on PTX10001, PTX10004... |
| CVE-2023-44189 | MEDIUM | 5.4 | 0.2% | Oct 11, 2023 | An Origin Validation vulnerability in MAC address validation of Juniper Networks Junos OS Evolved on PTX10003 Series al... |
| CVE-2023-39325 | HIGH | 7.5 | 3.8% | Oct 11, 2023 | A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource... |
| CVE-2023-45132 | CRITICAL | 9.8 | 0.8% | Oct 11, 2023 | NAXSI is an open-source maintenance web application firewall (WAF) for NGINX. An issue present starting in version 1.3 a... |
| CVE-2023-44188 | MEDIUM | 5.3 | 0.3% | Oct 11, 2023 | A Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in telemetry processing of Juniper Networks Junos OS ... |
| CVE-2023-44187 | MEDIUM | 5.5 | 0.2% | Oct 11, 2023 | An Exposure of Sensitive Information vulnerability in the 'file copy' command of Junos OS Evolved allows a local, authen... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now