2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-25584 | HIGH | 7.1 | 0.4% | Sep 14, 2023 | An out-of-bounds read flaw was found in the parse_module function in bfd/vms-alpha.c in Binutils. |
| CVE-2023-4972 | CRITICAL | 9.8 | 0.6% | Sep 14, 2023 | Incorrect Use of Privileged APIs vulnerability in Yepas Digital Yepas allows Collect Data as Provided by Users. This is... |
| CVE-2023-4965 | MEDIUM | 4.8 | 0.5% | Sep 14, 2023 | A vulnerability was found in phpipam 1.5.1. It has been rated as problematic. Affected by this issue is some unknown fun... |
| CVE-2023-4702 | CRITICAL | 9.8 | 0.7% | Sep 14, 2023 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Yepas Digital Yepas allows Authentication Bypa... |
| CVE-2023-4676 | MEDIUM | 6.1 | 0.3% | Sep 14, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Yordam MedasPro al... |
| CVE-2023-4563 | — | — | — | Sep 14, 2023 | Rejected reason: This was assigned as a duplicate of CVE-2023-4244. |
| CVE-2023-41588 | MEDIUM | 6.1 | 0.4% | Sep 14, 2023 | A cross-site scripting (XSS) vulnerability in Time to SLA plugin v10.13.5 allows attackers to execute arbitrary web scri... |
| CVE-2023-37755 | CRITICAL | 9.8 | 1.1% | Sep 14, 2023 | i-doit pro 25 and below and I-doit open 25 and below are configured with insecure default administrator credentials, and... |
| CVE-2023-37739 | MEDIUM | 6.5 | 1.1% | Sep 14, 2023 | i-doit Pro v25 and below was discovered to be vulnerable to path traversal. |
| CVE-2023-32665 | MEDIUM | 5.5 | 0.4% | Sep 14, 2023 | A flaw was found in GLib. GVariant deserialization is vulnerable to an exponential blowup issue where a crafted GVariant... |
| CVE-2023-32643 | HIGH | 7.8 | 0.4% | Sep 14, 2023 | A flaw was found in GLib. The GVariant deserialization code is vulnerable to a heap buffer overflow introduced by the fi... |
| CVE-2023-32636 | HIGH | 7.5 | 0.8% | Sep 14, 2023 | A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service introduced by add... |
| CVE-2023-32611 | MEDIUM | 5.5 | 0.4% | Sep 14, 2023 | A flaw was found in GLib. GVariant deserialization is vulnerable to a slowdown issue where a crafted GVariant can cause ... |
| CVE-2023-29499 | HIGH | 7.5 | 0.8% | Sep 14, 2023 | A flaw was found in GLib. GVariant deserialization fails to validate that the input conforms to the expected format, lea... |
| CVE-2023-4766 | CRITICAL | 9.8 | 0.5% | Sep 14, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Movus allows SQL I... |
| CVE-2023-4669 | CRITICAL | 9.8 | 1.0% | Sep 14, 2023 | Authentication Bypass by Assumed-Immutable Data vulnerability in Exagate SYSGuard 3001 allows Authentication Bypass. Th... |
| CVE-2023-41011 | CRITICAL | 9.8 | 2.0% | Sep 14, 2023 | Command Execution vulnerability in China Mobile Communications China Mobile Intelligent Home Gateway v.HG6543C4 allows a... |
| CVE-2023-39286 | MEDIUM | 4.3 | 0.2% | Sep 14, 2023 | A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2304.102 could allow an un... |
| CVE-2023-39285 | MEDIUM | 4.3 | 0.2% | Sep 14, 2023 | A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 SP3 (22.24.5800.0) could allow an un... |
| CVE-2023-4832 | CRITICAL | 9.8 | 0.5% | Sep 14, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aceka Company Mana... |
| CVE-2023-41010 | MEDIUM | 5.5 | 0.2% | Sep 14, 2023 | Insecure Permissions vulnerability in Sichuan Tianyi Kanghe Communication Co., Ltd China Telecom Tianyi Home Gateway v.T... |
| CVE-2023-40779 | MEDIUM | 6.1 | 1.4% | Sep 14, 2023 | An issue in IceWarp Mail Server Deep Castle 2 v.13.0.1.2 allows a remote attacker to execute arbitrary code via a crafte... |
| CVE-2023-1576 | — | — | — | Sep 14, 2023 | Rejected reason: This is a duplicate of an earlier CVE, CVE-2022-47069. |
| CVE-2023-4951 | MEDIUM | 4.8 | 0.3% | Sep 14, 2023 | A cross site scripting issue was discovered with the pagination function on the "Client-based Authentication Policy Conf... |
| CVE-2023-36250 | HIGH | 7.8 | 0.6% | Sep 14, 2023 | CSV Injection vulnerability in GNOME time tracker version 3.0.2, allows local attackers to execute arbitrary code via cr... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now