2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-33272 | CRITICAL | 9.8 | 2.5% | Oct 3, 2023 | An issue was discovered in DTS Monitoring 3.57.0. The parameter ip within the Ping check function is vulnerable to OS co... |
| CVE-2023-33271 | CRITICAL | 9.8 | 1.6% | Oct 3, 2023 | An issue was discovered in DTS Monitoring 3.57.0. The parameter common_name within the SSL Certificate check function is... |
| CVE-2023-33270 | CRITICAL | 9.8 | 2.5% | Oct 3, 2023 | An issue was discovered in DTS Monitoring 3.57.0. The parameter url within the Curl check function is vulnerable to OS c... |
| CVE-2023-33269 | CRITICAL | 9.8 | 2.0% | Oct 3, 2023 | An issue was discovered in DTS Monitoring 3.57.0. The parameter options within the WGET check function is vulnerable to ... |
| CVE-2023-33268 | CRITICAL | 9.8 | 1.2% | Oct 3, 2023 | An issue was discovered in DTS Monitoring 3.57.0. The parameter port within the SSL Certificate check function is vulner... |
| CVE-2023-40830 | CRITICAL | 9.8 | 0.7% | Oct 3, 2023 | Tenda AC6 v15.03.05.19 is vulnerable to Buffer Overflow as the Index parameter does not verify the length. |
| CVE-2023-43976 | HIGH | 8.1 | 0.5% | Oct 3, 2023 | An issue in CatoNetworks CatoClient before v.5.4.0 allows attackers to escalate privileges and winning the race conditio... |
| CVE-2023-5255 | HIGH | 7.5 | 0.4% | Oct 3, 2023 | For certificates that utilize the auto-renew feature in Puppet Server, a flaw exists which prevents the certificates fro... |
| CVE-2023-4911 | HIGH | 7.8 | 63.8% | Oct 3, 2023 | A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environ... |
| CVE-2023-4732 | MEDIUM | 4.7 | 0.2% | Oct 3, 2023 | A flaw was found in pfn_swap_entry_to_page in memory management subsystem in the Linux Kernel. In this flaw, an attacker... |
| CVE-2023-34970 | MEDIUM | 4.7 | 0.3% | Oct 3, 2023 | A local non-privileged user can make improper GPU processing operations to access a limited amount outside of buffer bou... |
| CVE-2023-33200 | MEDIUM | 4.7 | 0.3% | Oct 3, 2023 | A local non-privileged user can make improper GPU processing operations to exploit a software race condition. If the sys... |
| CVE-2023-4817 | HIGH | 8.8 | 0.6% | Oct 3, 2023 | This vulnerability allows an authenticated attacker to upload malicious files by bypassing the restrictions of the uploa... |
| CVE-2023-4564 | MEDIUM | 4.8 | 0.4% | Oct 3, 2023 | This vulnerability could allow an attacker to store a malicious JavaScript payload in the broadcast message parameter wi... |
| CVE-2023-3196 | MEDIUM | 4.8 | 0.4% | Oct 3, 2023 | This vulnerability could allow an attacker to store a malicious JavaScript payload in the login footer and login page de... |
| CVE-2023-2222 | — | — | — | Oct 3, 2023 | Rejected reason: This was deemed not a security vulnerability by upstream. |
| CVE-2023-4886 | MEDIUM | 4.4 | 0.3% | Oct 3, 2023 | A sensitive information exposure vulnerability was found in foreman. Contents of tomcat's server.xml file, which contain... |
| CVE-2023-4885 | MEDIUM | 5.9 | 0.3% | Oct 3, 2023 | Man in the Middle vulnerability, which could allow an attacker to intercept VNF (Virtual Network Function) communication... |
| CVE-2023-4884 | HIGH | 7.5 | 0.4% | Oct 3, 2023 | An attacker could send an HTTP request to an Open5GS endpoint and retrieve the information stored on the device due to t... |
| CVE-2023-4883 | HIGH | 7.5 | 0.5% | Oct 3, 2023 | Invalid pointer release vulnerability. Exploitation of this vulnerability could allow an attacker to interrupt the corr... |
| CVE-2023-4882 | HIGH | 7.5 | 0.5% | Oct 3, 2023 | DOS vulnerability that could allow an attacker to register a new VNF (Virtual Network Function) value. This action could... |
| CVE-2023-4929 | HIGH | 8.8 | 0.3% | Oct 3, 2023 | All firmware versions of the NPort 5000 Series are affected by an improper validation of integrity check vulnerability. ... |
| CVE-2023-41693 | HIGH | 8.8 | 0.2% | Oct 3, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in edward_plainview MyCryptoCheckout plugin <= 2.125 versions. |
| CVE-2023-41244 | HIGH | 8.8 | 0.2% | Oct 3, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Buildfail Localize Remote Images plugin <= 1.0.9 versions. |
| CVE-2023-40558 | HIGH | 8.8 | 0.2% | Oct 3, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in eMarket Design YouTube Video Gallery by YouTube Showcase plugin <= 3.... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now