2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-41991 | MEDIUM | 5.5 | 4.5% | Sep 21, 2023 | A certificate validation issue was addressed. This issue is fixed in macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7. A mal... |
| CVE-2023-42810 | CRITICAL | 9.8 | 1.8% | Sep 21, 2023 | systeminformation is a System Information Library for Node.JS. Versions 5.0.0 through 5.21.6 have a SSID Command Injecti... |
| CVE-2023-42279 | CRITICAL | 9.8 | 0.7% | Sep 21, 2023 | Dreamer CMS v4.1.3 was discovered to contain a SQL injection vulnerability via the model-form-management-field form. |
| CVE-2023-42807 | CRITICAL | 9.8 | 0.3% | Sep 21, 2023 | Frappe LMS is an open source learning management system. In versions 1.0.0 and prior, on the People Page of LMS, there w... |
| CVE-2023-42806 | MEDIUM | 6.5 | 0.4% | Sep 21, 2023 | Hydra is the layer-two scalability solution for Cardano. Prior to version 0.13.0, not signing and verifying `$\mathsf{ci... |
| CVE-2023-42805 | HIGH | 7.5 | 0.8% | Sep 21, 2023 | quinn-proto is a state machine for the QUIC transport protocol. Prior to versions 0.9.5 and 0.10.5, receiving unknown QU... |
| CVE-2023-42458 | MEDIUM | 5.4 | 0.6% | Sep 21, 2023 | Zope is an open-source web application server. Prior to versions 4.8.10 and 5.8.5, there is a stored cross site scriptin... |
| CVE-2023-34577 | CRITICAL | 9.8 | 0.7% | Sep 21, 2023 | SQL injection vulnerability in Prestashop opartplannedpopup 1.4.11 and earlier allows remote attackers to run arbitrary ... |
| CVE-2023-42456 | HIGH | 8.1 | 0.6% | Sep 21, 2023 | Sudo-rs, a memory safe implementation of sudo and su, allows users to not have to enter authentication at every sudo att... |
| CVE-2023-42457 | HIGH | 7.5 | 0.8% | Sep 21, 2023 | plone.rest allows users to use HTTP verbs such as GET, POST, PUT, DELETE, etc. in Plone. Starting in the 2.x branch and ... |
| CVE-2023-41048 | MEDIUM | 5.4 | 0.5% | Sep 21, 2023 | plone.namedfile allows users to handle `File` and `Image` fields targeting, but not depending on, Plone Dexterity conten... |
| CVE-2023-40183 | MEDIUM | 5.3 | 0.6% | Sep 21, 2023 | DataEase is an open source data visualization and analysis tool. Prior to version 1.18.11, DataEase has a vulnerability ... |
| CVE-2023-43637 | HIGH | 7.8 | 0.1% | Sep 21, 2023 | Due to the implementation of "deriveVaultKey", prior to version 7.10, the generated vault key would always have the las... |
| CVE-2023-43634 | HIGH | 8.8 | 0.2% | Sep 21, 2023 | When sealing/unsealing the “vault” key, a list of PCRs is used, which defines which PCRs are used. In a previous proje... |
| CVE-2023-43633 | HIGH | 8.8 | 0.2% | Sep 21, 2023 | On boot, the Pillar eve container checks for the existence and content of “/config/GlobalConfig/global.json”. If the f... |
| CVE-2023-43632 | CRITICAL | 9.9 | 0.5% | Sep 21, 2023 | As noted in the “VTPM.md” file in the eve documentation, “VTPM is a server listening on port 8877 in EVE, exposing limi... |
| CVE-2023-43631 | HIGH | 8.8 | 0.2% | Sep 21, 2023 | On boot, the Pillar eve container checks for the existence and content of “/config/authorized_keys”. If the file is pr... |
| CVE-2023-43309 | MEDIUM | 4.8 | 0.4% | Sep 21, 2023 | There is a stored cross-site scripting (XSS) vulnerability in Webmin 2.002 and below via the Cluster Cron Job tab Input ... |
| CVE-2023-43274 | HIGH | 7.5 | 0.6% | Sep 21, 2023 | Phpjabbers PHP Shopping Cart 4.2 is vulnerable to SQL Injection via the id parameter. |
| CVE-2023-43242 | CRITICAL | 9.8 | 1.0% | Sep 21, 2023 | D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter removeRuleList in form2IPQoSTcDel. |
| CVE-2023-43241 | CRITICAL | 9.8 | 1.0% | Sep 21, 2023 | D-Link DIR-823G v1.0.2B05 was discovered to contain a stack overflow via parameter TXPower and GuardInt in SetWLanRadioS... |
| CVE-2023-43240 | CRITICAL | 9.8 | 12.2% | Sep 21, 2023 | D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter sip_address in ipportFilter. |
| CVE-2023-43239 | CRITICAL | 9.8 | 12.2% | Sep 21, 2023 | D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter flag_5G in showMACfilterMAC. |
| CVE-2023-43238 | CRITICAL | 9.8 | 1.0% | Sep 21, 2023 | D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter nvmacaddr in form2Dhcpip.cgi. |
| CVE-2023-43237 | CRITICAL | 9.8 | 12.2% | Sep 21, 2023 | D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter macCloneMac in setMAC. |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now