2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-4354 | HIGH | 8.8 | 1.6% | Aug 15, 2023 | Heap buffer overflow in Skia in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who had compromised the r... |
| CVE-2023-4353 | HIGH | 8.8 | 0.9% | Aug 15, 2023 | Heap buffer overflow in ANGLE in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit h... |
| CVE-2023-4352 | HIGH | 8.8 | 1.8% | Aug 15, 2023 | Type confusion in V8 in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corru... |
| CVE-2023-4351 | HIGH | 8.8 | 0.8% | Aug 15, 2023 | Use after free in Network in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who has elicited a browser s... |
| CVE-2023-4350 | MEDIUM | 6.5 | 0.8% | Aug 15, 2023 | Inappropriate implementation in Fullscreen in Google Chrome on Android prior to 116.0.5845.96 allowed a remote attacker ... |
| CVE-2023-4349 | HIGH | 8.8 | 0.8% | Aug 15, 2023 | Use after free in Device Trust Connectors in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potential... |
| CVE-2023-4345 | MEDIUM | 6.5 | 0.6% | Aug 15, 2023 | Broadcom RAID Controller web interface is vulnerable client-side control bypass leads to unauthorized data access for lo... |
| CVE-2023-40028 | MEDIUM | 6.5 | 57.8% | Aug 15, 2023 | Ghost is an open source content management system. Versions prior to 5.59.1 are subject to a vulnerability which allows ... |
| CVE-2023-40027 | MEDIUM | 5.3 | 0.5% | Aug 15, 2023 | Keystone is an open source headless CMS for Node.js — built with GraphQL and React. When `ui.isAccessAllowed` is set as ... |
| CVE-2023-2312 | HIGH | 8.8 | 0.8% | Aug 15, 2023 | Use after free in Offline in Google Chrome on Android prior to 116.0.5845.96 allowed a remote attacker who had compromis... |
| CVE-2023-39662 | CRITICAL | 9.8 | 1.2% | Aug 15, 2023 | An issue in llama_index v.0.7.13 and before allows a remote attacker to execute arbitrary code via the `exec` parameter ... |
| CVE-2023-39661 | CRITICAL | 9.8 | 1.2% | Aug 15, 2023 | An issue in pandas-ai v.0.9.1 and before allows a remote attacker to execute arbitrary code via the _is_jailbreak functi... |
| CVE-2023-39659 | CRITICAL | 9.8 | 1.3% | Aug 15, 2023 | An issue in langchain langchain-ai v.0.0.232 and before allows a remote attacker to execute arbitrary code via a crafted... |
| CVE-2023-39438 | HIGH | 8.1 | 0.4% | Aug 15, 2023 | A missing authorization check allows an arbitrary authenticated user to perform certain operations through the API of CL... |
| CVE-2023-38916 | HIGH | 8.8 | 0.9% | Aug 15, 2023 | SQL Injection vulnerability in eVotingSystem-PHP v.1.0 allows a remote attacker to execute arbitrary code and obtain sen... |
| CVE-2023-38915 | CRITICAL | 9.8 | 0.7% | Aug 15, 2023 | File Upload vulnerability in Wolf-leo EasyAdmin8 v.1.0 allows a remote attacker to execute arbtirary code via the upload... |
| CVE-2023-38898 | MEDIUM | 5.3 | 1.5% | Aug 15, 2023 | An issue in Python cpython v.3.7 allows an attacker to obtain sensitive information via the _asyncio._swap_current_task ... |
| CVE-2023-38896 | CRITICAL | 9.8 | 1.5% | Aug 15, 2023 | An issue in Harrison Chase langchain v.0.0.194 and before allows a remote attacker to execute arbitrary code via the fro... |
| CVE-2023-38889 | CRITICAL | 9.8 | 1.0% | Aug 15, 2023 | An issue in Alluxio v.2.9.3 and before allows an attacker to execute arbitrary code via a crafted script to the username... |
| CVE-2023-38860 | CRITICAL | 9.8 | 1.2% | Aug 15, 2023 | An issue in LangChain v.0.0.231 allows a remote attacker to execute arbitrary code via the prompt parameter. |
| CVE-2023-38858 | MEDIUM | 6.5 | 0.9% | Aug 15, 2023 | Buffer Overflow vulnerability infaad2 v.2.10.1 allows a remote attacker to execute arbitrary code and cause a denial of ... |
| CVE-2023-38857 | MEDIUM | 5.5 | 0.5% | Aug 15, 2023 | Buffer Overflow vulnerability infaad2 v.2.10.1 allows a remote attacker to execute arbitrary code and cause a denial of ... |
| CVE-2023-38856 | MEDIUM | 6.5 | 0.8% | Aug 15, 2023 | Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of ... |
| CVE-2023-38855 | MEDIUM | 6.5 | 0.8% | Aug 15, 2023 | Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of ... |
| CVE-2023-38854 | MEDIUM | 6.5 | 0.8% | Aug 15, 2023 | Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of ... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now