2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-4326 | HIGH | 7.5 | 0.3% | Aug 15, 2023 | Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that supports obsolete SH... |
| CVE-2023-4325 | CRITICAL | 9.8 | 0.6% | Aug 15, 2023 | Broadcom RAID Controller web interface is vulnerable due to usage of Libcurl with LSA has known vulnerabilities |
| CVE-2023-4324 | CRITICAL | 9.8 | 0.6% | Aug 15, 2023 | Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP Content-Security-Policy h... |
| CVE-2023-4323 | CRITICAL | 9.8 | 0.6% | Aug 15, 2023 | Broadcom RAID Controller web interface is vulnerable to improper session management of active sessions on Gateway setup |
| CVE-2023-38865 | CRITICAL | 9.8 | 2.1% | Aug 15, 2023 | COMFAST CF-XR11 V2.7.2 has a command injection vulnerability detected at function sub_4143F0. Attackers can send POST re... |
| CVE-2023-38863 | CRITICAL | 9.8 | 1.1% | Aug 15, 2023 | An issue in COMFAST CF-XR11 v.2.7.2 allows an attacker to execute arbitrary code via the ifname and mac parameters in th... |
| CVE-2023-38862 | CRITICAL | 9.8 | 1.1% | Aug 15, 2023 | An issue in COMFAST CF-XR11 v.2.7.2 allows an attacker to execute arbitrary code via the destination parameter of sub_43... |
| CVE-2023-38861 | CRITICAL | 9.8 | 1.4% | Aug 15, 2023 | An issue in Wavlink WL_WNJ575A3 v.R75A3_V1410_220513 allows a remote attacker to execute arbitrary code via username par... |
| CVE-2023-38402 | HIGH | 7.1 | 0.2% | Aug 15, 2023 | A vulnerability in the HPE Aruba Networking Virtual Intranet Access (VIA) client could allow malicious users to overwrit... |
| CVE-2023-38401 | HIGH | 7.8 | 0.2% | Aug 15, 2023 | A vulnerability in the HPE Aruba Networking Virtual Intranet Access (VIA) client could allow local users to elevate priv... |
| CVE-2023-4369 | HIGH | 8.8 | 0.3% | Aug 15, 2023 | Insufficient data validation in Systems Extensions in Google Chrome on ChromeOS prior to 116.0.5845.120 allowed an attac... |
| CVE-2023-4368 | HIGH | 8.8 | 0.7% | Aug 15, 2023 | Insufficient policy enforcement in Extensions API in Google Chrome prior to 116.0.5845.96 allowed an attacker who convin... |
| CVE-2023-4367 | MEDIUM | 6.5 | 0.6% | Aug 15, 2023 | Insufficient policy enforcement in Extensions API in Google Chrome prior to 116.0.5845.96 allowed an attacker who convin... |
| CVE-2023-4366 | HIGH | 8.8 | 0.6% | Aug 15, 2023 | Use after free in Extensions in Google Chrome prior to 116.0.5845.96 allowed an attacker who convinced a user to install... |
| CVE-2023-4365 | MEDIUM | 4.3 | 0.7% | Aug 15, 2023 | Inappropriate implementation in Fullscreen in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to obfuscat... |
| CVE-2023-4364 | MEDIUM | 4.3 | 0.7% | Aug 15, 2023 | Inappropriate implementation in Permission Prompts in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to ... |
| CVE-2023-4363 | MEDIUM | 4.3 | 0.7% | Aug 15, 2023 | Inappropriate implementation in WebShare in Google Chrome on Android prior to 116.0.5845.96 allowed a remote attacker to... |
| CVE-2023-4362 | HIGH | 8.8 | 18.5% | Aug 15, 2023 | Heap buffer overflow in Mojom IDL in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who had compromised ... |
| CVE-2023-4361 | MEDIUM | 5.3 | 0.8% | Aug 15, 2023 | Inappropriate implementation in Autofill in Google Chrome on Android prior to 116.0.5845.96 allowed a remote attacker to... |
| CVE-2023-4360 | MEDIUM | 4.3 | 0.7% | Aug 15, 2023 | Inappropriate implementation in Color in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to obfuscate sec... |
| CVE-2023-4359 | MEDIUM | 5.3 | 0.7% | Aug 15, 2023 | Inappropriate implementation in App Launcher in Google Chrome on iOS prior to 116.0.5845.96 allowed a remote attacker to... |
| CVE-2023-4358 | HIGH | 8.8 | 0.8% | Aug 15, 2023 | Use after free in DNS in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corr... |
| CVE-2023-4357 | HIGH | 8.8 | 45.9% | Aug 15, 2023 | Insufficient validation of untrusted input in XML in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to b... |
| CVE-2023-4356 | HIGH | 8.8 | 0.8% | Aug 15, 2023 | Use after free in Audio in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who has convinced a user to en... |
| CVE-2023-4355 | HIGH | 8.8 | 26.8% | Aug 15, 2023 | Out of bounds memory access in V8 in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially explo... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now