2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-40580 | MEDIUM | 6.5 | 0.6% | Aug 25, 2023 | Freighter is a Stellar chrome extension. It may be possible for a malicious website to access the recovery mnemonic phra... |
| CVE-2023-40579 | MEDIUM | 6.5 | 0.5% | Aug 25, 2023 | OpenFGA is an authorization/permission engine built for developers and inspired by Google Zanzibar. Some end users of Op... |
| CVE-2023-40568 | — | — | — | Aug 25, 2023 | Rejected reason: GitHub has been informed that the requestor is working with another CNA for these vulnerabilities. |
| CVE-2023-40036 | MEDIUM | 5.5 | 0.4% | Aug 25, 2023 | Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to global buffer read ov... |
| CVE-2023-40031 | HIGH | 7.8 | 0.5% | Aug 25, 2023 | Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to heap buffer write ove... |
| CVE-2023-39707 | MEDIUM | 5.4 | 0.6% | Aug 25, 2023 | A stored cross-site scripting (XSS) vulnerability in Free and Open Source Inventory Management System v1.0 allows attack... |
| CVE-2023-39600 | MEDIUM | 6.1 | 1.2% | Aug 25, 2023 | IceWarp 11.4.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the color parameter. |
| CVE-2023-37249 | HIGH | 8.8 | 0.6% | Aug 25, 2023 | Infoblox NIOS through 8.5.1 has a faulty component that accepts malicious input without sanitization, resulting in shell... |
| CVE-2023-36199 | HIGH | 7.5 | 0.6% | Aug 25, 2023 | An issue in skalenetwork sgxwallet v.1.9.0 and below allows an attacker to cause a denial of service via the trustedGene... |
| CVE-2023-36198 | HIGH | 7.5 | 0.6% | Aug 25, 2023 | Buffer Overflow vulnerability in skalenetwork sgxwallet v.1.9.0 allows an attacker to cause a denial of service via the ... |
| CVE-2023-24621 | HIGH | 7.8 | 0.4% | Aug 25, 2023 | An issue was discovered in Esoteric YamlBeans through 1.15. It allows untrusted deserialisation to Java classes by defau... |
| CVE-2023-24620 | MEDIUM | 5.5 | 0.4% | Aug 25, 2023 | An issue was discovered in Esoteric YamlBeans through 1.15. A crafted YAML document is able perform am XML Entity Expans... |
| CVE-2023-25848 | MEDIUM | 5.3 | 0.2% | Aug 25, 2023 | ArcGIS Enterprise Server versions 11.0 and below have an information disclosure vulnerability where a remote, unauthoriz... |
| CVE-2023-38201 | MEDIUM | 6.5 | 0.5% | Aug 25, 2023 | A flaw was found in the Keylime registrar that could allow a bypass of the challenge-response protocol during agent regi... |
| CVE-2023-40798 | HIGH | 8.8 | 0.8% | Aug 25, 2023 | In Tenda AC23 v16.03.07.45_cn, the formSetIPv6status and formGetWanParameter functions do not authenticate user input pa... |
| CVE-2023-40797 | HIGH | 8.8 | 0.8% | Aug 25, 2023 | In Tenda AC23 v16.03.07.45_cn, the sub_4781A4 function does not validate the parameters entered by the user, resulting i... |
| CVE-2023-40796 | HIGH | 7.8 | 0.8% | Aug 25, 2023 | Phicomm k2 v22.6.529.216 was discovered to contain a command injection vulnerability via the function luci.sys.call. |
| CVE-2023-4534 | MEDIUM | 6.1 | 0.5% | Aug 25, 2023 | A vulnerability, which was classified as problematic, was found in NeoMind Fusion Platform up to 20230731. Affected is a... |
| CVE-2023-40915 | HIGH | 7.5 | 0.6% | Aug 25, 2023 | Tenda AX3 v16.03.12.11 has a stack buffer overflow vulnerability detected at function form_fast_setting_wifi_set. This v... |
| CVE-2023-40802 | MEDIUM | 6.5 | 0.7% | Aug 25, 2023 | The get_parentControl_list_Info function does not verify the parameters entered by the user, causing a post-authenticati... |
| CVE-2023-40801 | HIGH | 8.8 | 0.7% | Aug 25, 2023 | The sub_451784 function does not validate the parameters entered by the user, resulting in a stack overflow vulnerabilit... |
| CVE-2023-40800 | HIGH | 8.8 | 0.8% | Aug 25, 2023 | The compare_parentcontrol_time function does not authenticate user input parameters, resulting in a post-authentication ... |
| CVE-2023-40799 | CRITICAL | 9.8 | 0.8% | Aug 25, 2023 | Tenda AC23 Vv16.03.07.45_cn is vulnerable to Buffer Overflow via sub_450A4C function. |
| CVE-2023-41167 | MEDIUM | 4.8 | 0.3% | Aug 25, 2023 | @webiny/react-rich-text-renderer before 5.37.2 allows XSS attacks by content managers. This is a react component to rend... |
| CVE-2023-39742 | MEDIUM | 5.5 | 0.3% | Aug 25, 2023 | giflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c. |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now