2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-36980 | MEDIUM | 5.3 | 0.4% | Sep 11, 2023 | An issue in Ethereum Blockchain v0.1.1+commit.6ff4cd6 cause the balance to be zeroed out when the value of betsize+casin... |
| CVE-2023-36161 | HIGH | 7.5 | 0.5% | Sep 11, 2023 | An issue was discovered in Qubo Smart Plug 10A version HSP02_01_01_14_SYSTEM-10A, allows attackers to cause a denial of ... |
| CVE-2023-3612 | HIGH | 8.8 | 0.4% | Sep 11, 2023 | Govee Home app has unprotected access to WebView component which can be opened by any app on the device. By sending an U... |
| CVE-2023-4585 | HIGH | 8.8 | 0.7% | Sep 11, 2023 | Memory safety bugs present in Firefox 116, Firefox ESR 115.1, and Thunderbird 115.1. Some of these bugs showed evidence ... |
| CVE-2023-4584 | HIGH | 8.8 | 0.7% | Sep 11, 2023 | Memory safety bugs present in Firefox 116, Firefox ESR 102.14, Firefox ESR 115.1, Thunderbird 102.14, and Thunderbird 11... |
| CVE-2023-4583 | HIGH | 7.5 | 0.6% | Sep 11, 2023 | When checking if the Browsing Context had been discarded in `HttpBaseChannel`, if the load group was not available then ... |
| CVE-2023-4582 | HIGH | 8.8 | 0.8% | Sep 11, 2023 | Due to large allocation checks in Angle for glsl shaders being too lenient a buffer overflow could have occurred when al... |
| CVE-2023-4581 | MEDIUM | 4.3 | 0.5% | Sep 11, 2023 | Excel `.xll` add-in files did not have a blocklist entry in Firefox's executable blocklist which allowed them to be down... |
| CVE-2023-4580 | MEDIUM | 6.5 | 0.4% | Sep 11, 2023 | Push notifications stored on disk in private browsing mode were not being encrypted potentially allowing the leak of sen... |
| CVE-2023-4579 | LOW | 3.1 | 0.4% | Sep 11, 2023 | Search queries in the default search engine could appear to have been the currently navigated URL if the search query it... |
| CVE-2023-4578 | MEDIUM | 6.5 | 0.5% | Sep 11, 2023 | When calling `JS::CheckRegExpSyntax` a Syntax Error could have been set which would end in calling `convertToRuntimeErro... |
| CVE-2023-4577 | MEDIUM | 6.5 | 0.6% | Sep 11, 2023 | When `UpdateRegExpStatics` attempted to access `initialStringHeap` it could already have been garbage collected prior to... |
| CVE-2023-4576 | HIGH | 8.6 | 0.7% | Sep 11, 2023 | On Windows, an integer overflow could occur in `RecordedSourceSurfaceCreation` which resulted in a heap buffer overflow ... |
| CVE-2023-4575 | MEDIUM | 6.5 | 0.6% | Sep 11, 2023 | When creating a callback over IPC for showing the File Picker window, multiple of the same callbacks could have been cre... |
| CVE-2023-4574 | MEDIUM | 6.5 | 0.6% | Sep 11, 2023 | When creating a callback over IPC for showing the Color Picker window, multiple of the same callbacks could have been cr... |
| CVE-2023-4104 | MEDIUM | 5.5 | 0.4% | Sep 11, 2023 | An invalid Polkit Authentication check and missing authentication requirements for D-Bus methods allowed any local user ... |
| CVE-2023-4816 | HIGH | 8.8 | 0.5% | Sep 11, 2023 | A vulnerability exists in the Equipment Tag Out authentication, when configured with Single Sign-On (SSO) with password ... |
| CVE-2023-4573 | MEDIUM | 6.5 | 0.5% | Sep 11, 2023 | When receiving rendering data over IPC `mStream` could have been destroyed when initialized, which could have led to a u... |
| CVE-2023-42471 | CRITICAL | 9.8 | 1.4% | Sep 11, 2023 | The wave.ai.browser application through 1.0.35 for Android allows a remote attacker to execute arbitrary JavaScript code... |
| CVE-2023-42470 | CRITICAL | 9.8 | 2.0% | Sep 11, 2023 | The Imou Life com.mm.android.smartlifeiot application through 6.8.0 for Android allows Remote Code Execution via a craft... |
| CVE-2023-35845 | MEDIUM | 4.7 | 0.1% | Sep 11, 2023 | Anaconda 3 2023.03-1-Linux allows local users to disrupt TLS certificate validation by modifying the cacert.pem file use... |
| CVE-2023-40039 | CRITICAL | 9.8 | 0.9% | Sep 11, 2023 | An issue was discovered on ARRIS TG852G, TG862G, and TG1672G devices. A remote attacker (in proximity to a Wi-Fi network... |
| CVE-2023-40040 | MEDIUM | 5.3 | 0.5% | Sep 11, 2023 | An issue was discovered in the MyCrops HiGrade "THC Testing & Cannabi" application 1.0.337 for Android. A remote attacke... |
| CVE-2023-42467 | MEDIUM | 5.5 | 0.4% | Sep 11, 2023 | QEMU through 8.0.0 could trigger a division by zero in scsi_disk_reset in hw/scsi/scsi-disk.c because scsi_disk_emulate_... |
| CVE-2023-4879 | MEDIUM | 4.8 | 0.3% | Sep 10, 2023 | Cross-site Scripting (XSS) - Stored in GitHub repository instantsoft/icms2 prior to 2.16.1.-git. |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now