2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-4544 | MEDIUM | 4.3 | 1.0% | Aug 26, 2023 | A vulnerability was found in Byzoro Smart S85F Management Platform up to 20230809. It has been rated as problematic. Thi... |
| CVE-2023-36741 | HIGH | 7.5 | 2.1% | Aug 26, 2023 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
| CVE-2023-4543 | CRITICAL | 9.8 | 0.8% | Aug 25, 2023 | A vulnerability was found in IBOS OA 4.5.5. It has been declared as critical. This vulnerability affects unknown code of... |
| CVE-2023-4542 | CRITICAL | 9.8 | 86.5% | Aug 25, 2023 | A vulnerability was found in D-Link DAR-8000-10 up to 20230809. It has been classified as critical. This affects an unkn... |
| CVE-2023-4524 | — | — | — | Aug 25, 2023 | Rejected reason: CVE reject in favor of CVE-2023-40547 |
| CVE-2023-41121 | HIGH | 7.5 | 0.6% | Aug 25, 2023 | Array AG OS before 9.4.0.499 allows denial of service: remote attackers can cause system service processes to crash thro... |
| CVE-2023-39291 | MEDIUM | 4.9 | 0.5% | Aug 25, 2023 | A vulnerability in the Connect Mobility Router component of MiVoice Connect through 9.6.2304.102 could allow an authenti... |
| CVE-2023-39290 | MEDIUM | 4.9 | 0.5% | Aug 25, 2023 | A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through R19.3 SP3 (22.24.5800.0) could allow an a... |
| CVE-2023-39289 | HIGH | 7.5 | 0.5% | Aug 25, 2023 | A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2208.101 could allow an un... |
| CVE-2023-39288 | MEDIUM | 5.5 | 0.5% | Aug 25, 2023 | A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2304.102 could allow an au... |
| CVE-2023-39287 | MEDIUM | 5.5 | 0.5% | Aug 25, 2023 | A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 SP3 (22.24.5800.0) could allow an au... |
| CVE-2023-34723 | HIGH | 7.5 | 2.5% | Aug 25, 2023 | An issue was discovered in TechView LA-5570 Wireless Gateway 1.0.19_T53, allows attackers to gain sensitive information ... |
| CVE-2023-41080 | MEDIUM | 6.1 | 6.0% | Aug 25, 2023 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Tomcat.This issu... |
| CVE-2023-40587 | MEDIUM | 5.3 | 0.6% | Aug 25, 2023 | Pyramid is an open source Python web framework. A path traversal vulnerability in Pyramid versions 2.0.0 and 2.0.1 impac... |
| CVE-2023-40586 | HIGH | 7.5 | 0.6% | Aug 25, 2023 | OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. Due to the misuse of `log.Fatalf`,... |
| CVE-2023-40585 | HIGH | 7.5 | 0.4% | Aug 25, 2023 | ironic-image is a container image to run OpenStack Ironic as part of Metal³. Prior to version capm3-v1.4.3, if Ironic is... |
| CVE-2023-40583 | HIGH | 7.5 | 0.8% | Aug 25, 2023 | libp2p is a networking stack and library modularized out of The IPFS Project, and bundled separately for other tools to ... |
| CVE-2023-40571 | CRITICAL | 9.8 | 1.2% | Aug 25, 2023 | weblogic-framework is a tool for detecting weblogic vulnerabilities. Versions 0.2.3 and prior do not verify the returned... |
| CVE-2023-40166 | MEDIUM | 5.5 | 0.5% | Aug 25, 2023 | Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to heap buffer read over... |
| CVE-2023-40164 | MEDIUM | 5.5 | 0.5% | Aug 25, 2023 | Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to global buffer read ov... |
| CVE-2023-38712 | MEDIUM | 6.5 | 0.7% | Aug 25, 2023 | An issue was discovered in Libreswan 3.x and 4.x before 4.12. When an IKEv1 ISAKMP SA Informational Exchange packet cont... |
| CVE-2023-38711 | MEDIUM | 6.5 | 0.7% | Aug 25, 2023 | An issue was discovered in Libreswan before 4.12. When an IKEv1 Quick Mode connection configured with ID_IPV4_ADDR or ID... |
| CVE-2023-38710 | MEDIUM | 6.5 | 0.7% | Aug 25, 2023 | An issue was discovered in Libreswan before 4.12. When an IKEv2 Child SA REKEY packet contains an invalid IPsec protocol... |
| CVE-2023-32678 | MEDIUM | 6.5 | 0.4% | Aug 25, 2023 | Zulip is an open-source team collaboration tool with topic-based threading that combines email and chat. Users who used ... |
| CVE-2023-2906 | MEDIUM | 6.5 | 2.8% | Aug 25, 2023 | Due to a failure in validating the length provided by an attacker-crafted CP2179 packet, Wireshark versions 2.0.0 throug... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now