2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-41520 | HIGH | 8.8 | 0.3% | Aug 7, 2025 | Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createClassA... |
| CVE-2023-41519 | MEDIUM | 6.1 | 0.2% | Aug 7, 2025 | Student Attendance Management System v1 was discovered to contain a cross-site scripting (XSS) vulnerability via the ses... |
| CVE-2023-40992 | MEDIUM | 6.5 | 0.2% | Aug 7, 2025 | Hospital Management System 4 is vulnerable to a SQL injection in /Hospital-Management-System-master/func.php via the pas... |
| CVE-2023-3194 | — | — | — | Aug 6, 2025 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2023-32255 | MEDIUM | 5.3 | 0.5% | Aug 2, 2025 | A flaw was found in the Linux kernel's ksmbd component. A memory leak can occur if a client sends a session setup reques... |
| CVE-2023-32253 | MEDIUM | 5.9 | 0.3% | Aug 2, 2025 | A flaw was found in the Linux kernel's ksmbd component. A deadlock is triggered by sending multiple concurrent session s... |
| CVE-2023-32256 | HIGH | 7.5 | 0.5% | Aug 1, 2025 | A flaw was found in the Linux kernel's ksmbd component. A race condition between smb2 close operation and logoff in mult... |
| CVE-2023-44976 | LOW | 3.2 | 0.2% | Aug 1, 2025 | Hangzhou Shunwang Rentdrv2 before 2024-12-24 allows local users to terminate EDR processes and possibly have unspecified... |
| CVE-2023-32251 | LOW | 3.7 | 0.4% | Jul 31, 2025 | A vulnerability has been identified in the Linux kernel's ksmbd component (kernel SMB/CIFS server). A security control d... |
| CVE-2023-41674 | — | — | — | Jul 31, 2025 | Rejected reason: Not used |
| CVE-2023-2593 | MEDIUM | 5.9 | 0.7% | Jul 30, 2025 | A flaw exists within the Linux kernel's handling of new TCP connections. The issue results from the lack of memory relea... |
| CVE-2023-53161 | MEDIUM | 5.3 | 0.3% | Jul 28, 2025 | The buffered-reader crate before 1.1.5 for Rust allows out-of-bounds array access and a panic. |
| CVE-2023-53160 | MEDIUM | 5.3 | 0.3% | Jul 28, 2025 | The sequoia-openpgp crate before 1.16.0 for Rust allows out-of-bounds array access and a panic. |
| CVE-2023-53159 | LOW | 3.3 | 0.3% | Jul 28, 2025 | The openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to X509VerifyParamRef::set_ho... |
| CVE-2023-53158 | MEDIUM | 4.1 | 0.2% | Jul 28, 2025 | The gix-transport crate before 0.36.1 for Rust allows command execution via the "gix clone 'ssh://-oProxyCommand=open$IF... |
| CVE-2023-53157 | HIGH | 7.5 | 0.5% | Jul 28, 2025 | The rosenpass crate before 0.2.1 for Rust allows remote attackers to cause a denial of service (panic) via a one-byte UD... |
| CVE-2023-53156 | MEDIUM | 5.3 | 0.3% | Jul 27, 2025 | The transpose crate before 0.2.3 for Rust allows an integer overflow via input_width and input_height arguments. |
| CVE-2023-2274 | — | — | — | Jul 26, 2025 | Rejected reason: This CVE assignment was considered invalid after investigation. |
| CVE-2023-53155 | HIGH | 7.2 | 0.5% | Jul 25, 2025 | goform/formTest in EmbedThis GoAhead 2.5 allows HTML injection via the name parameter. |
| CVE-2023-7306 | HIGH | 7.5 | 0.3% | Jul 25, 2025 | The Frontend File Manager Plugin plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capabi... |
| CVE-2023-47356 | HIGH | 8.8 | 0.7% | Jul 17, 2025 | Mingyu Security Gateway before v3.0-5.3p was discovered to contain a remote command execution (RCE) vulnerability via th... |
| CVE-2023-41566 | HIGH | 8.1 | 0.3% | Jul 17, 2025 | OA EKP v16 was discovered to contain an arbitrary download vulnerability via the component /ui/sys_ui_extend/sysUiExtend... |
| CVE-2023-39339 | MEDIUM | 4.9 | 0.9% | Jul 12, 2025 | A vulnerability exists on all versions of Ivanti Policy Secure below 22.6R1 where an authenticated administrator can per... |
| CVE-2023-39338 | MEDIUM | 6.8 | 0.8% | Jul 12, 2025 | Enables an authenticated user (enrolled device) to access a service protected by Sentry even if they are not authorized ... |
| CVE-2023-38036 | CRITICAL | 9.8 | 1.8% | Jul 12, 2025 | A security vulnerability within Ivanti Avalanche Manager before version 6.4.1 may allow an unauthenticated attacker to c... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now