2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-42387 | HIGH | 7.5 | 0.7% | Sep 18, 2023 | An issue in TDSQL Chitu management platform v.10.3.19.5.0 allows a remote attacker to obtain sensitive information via g... |
| CVE-2023-42371 | MEDIUM | 5.4 | 0.5% | Sep 18, 2023 | Cross Site Scripting vulnerability in Summernote Rich Text Editor v.0.8.18 and before allows a remote attacker to execut... |
| CVE-2023-34195 | HIGH | 7.8 | 0.2% | Sep 18, 2023 | An issue was discovered in SystemFirmwareManagementRuntimeDxe in Insyde InsydeH2O with kernel 5.0 through 5.5. The imple... |
| CVE-2023-32187 | HIGH | 7.5 | 0.6% | Sep 18, 2023 | An Allocation of Resources Without Limits or Throttling vulnerability in SUSE k3s allows attackers with access to K3s se... |
| CVE-2023-42359 | CRITICAL | 9.8 | 0.7% | Sep 18, 2023 | SQL injection vulnerability in Exam Form Submission in PHP with Source Code v.1.0 allows a remote attacker to escalate p... |
| CVE-2023-42253 | MEDIUM | 6.1 | 0.4% | Sep 18, 2023 | Code-Projects Vehicle Management 1.0 is vulnerable to Cross Site Scripting (XSS) in Add Accounts via Invoice No, To, and... |
| CVE-2023-41929 | HIGH | 7.3 | 0.2% | Sep 18, 2023 | A DLL hijacking vulnerability in Samsung Memory Card & UFD Authentication Utility PC Software before 1.0.1 could allow a... |
| CVE-2023-34999 | HIGH | 7.2 | 1.1% | Sep 18, 2023 | A command injection vulnerability exists in RTS VLink Virtual Matrix Software Versions v5 (< 5.7.6) and v6 (< 6.5.0) tha... |
| CVE-2023-43115 | HIGH | 8.8 | 5.9% | Sep 18, 2023 | In Artifex Ghostscript through 10.01.2, gdevijs.c in GhostPDL can lead to remote code execution via crafted PostScript d... |
| CVE-2023-43114 | MEDIUM | 5.5 | 0.2% | Sep 18, 2023 | An issue was discovered in Qt before 5.15.16, 6.x before 6.2.10, and 6.3.x through 6.5.x before 6.5.3 on Windows. When u... |
| CVE-2023-42525 | HIGH | 7.5 | 0.5% | Sep 18, 2023 | Certain WithSecure products allow an infinite loop in a scanning engine via unspecified file types. This affects WithSec... |
| CVE-2023-42524 | HIGH | 7.5 | 0.5% | Sep 18, 2023 | Certain WithSecure products allow an infinite loop in a scanning engine via unspecified file types. This affects WithSec... |
| CVE-2023-42523 | HIGH | 7.5 | 0.5% | Sep 18, 2023 | Certain WithSecure products allow a remote crash of a scanning engine via unpacking of a PE file. This affects WithSecur... |
| CVE-2023-42522 | HIGH | 7.5 | 0.5% | Sep 18, 2023 | Certain WithSecure products allow a remote crash of a scanning engine via processing of an import struct in a PE file. T... |
| CVE-2023-42521 | HIGH | 7.5 | 0.5% | Sep 18, 2023 | Certain WithSecure products allow a remote crash of a scanning engine via processing of a compressed file. This affects ... |
| CVE-2023-5036 | HIGH | 8.8 | 0.3% | Sep 18, 2023 | Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.15.1. |
| CVE-2023-42526 | HIGH | 7.5 | 0.5% | Sep 18, 2023 | Certain WithSecure products allow a remote crash of a scanning engine via decompression of crafted data files. This affe... |
| CVE-2023-42520 | HIGH | 7.5 | 0.5% | Sep 18, 2023 | Certain WithSecure products allow a remote crash of a scanning engine via unpacking of crafted data files. This affects ... |
| CVE-2023-5034 | CRITICAL | 9.8 | 0.6% | Sep 18, 2023 | A vulnerability classified as problematic was found in SourceCodester My Food Recipe 1.0. This vulnerability affects unk... |
| CVE-2023-5033 | HIGH | 7.2 | 0.6% | Sep 18, 2023 | A vulnerability classified as critical has been found in OpenRapid RapidCMS 1.3.1. This affects an unknown part of the f... |
| CVE-2023-5032 | HIGH | 7.2 | 0.5% | Sep 18, 2023 | A vulnerability was found in OpenRapid RapidCMS 1.3.1. It has been rated as critical. Affected by this issue is some unk... |
| CVE-2023-41349 | HIGH | 8.8 | 0.6% | Sep 18, 2023 | ASUS router RT-AX88U has a vulnerability of using externally controllable format strings within its Advanced Open VPN f... |
| CVE-2023-35851 | HIGH | 7.5 | 0.6% | Sep 18, 2023 | SUNNET WMPro portal's FAQ function has insufficient validation for user input. An unauthenticated remote attacker can i... |
| CVE-2023-35850 | HIGH | 7.2 | 0.7% | Sep 18, 2023 | SUNNET WMPro portal's file management function has a vulnerability of insufficient filtering for user input. A remote a... |
| CVE-2023-5031 | MEDIUM | 6.5 | 0.4% | Sep 18, 2023 | A vulnerability was found in OpenRapid RapidCMS 1.3.1. It has been declared as critical. Affected by this vulnerability ... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now