2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-38853 | MEDIUM | 6.5 | 0.8% | Aug 15, 2023 | Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of ... |
| CVE-2023-38852 | MEDIUM | 6.5 | 1.2% | Aug 15, 2023 | Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of ... |
| CVE-2023-38851 | MEDIUM | 6.5 | 0.8% | Aug 15, 2023 | Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of ... |
| CVE-2023-38850 | MEDIUM | 5.5 | 0.2% | Aug 15, 2023 | Buffer Overflow vulnerability in Michaelrsweet codedoc v.3.7 allows an attacker to cause a denial of service via the cod... |
| CVE-2023-38840 | MEDIUM | 5.5 | 0.6% | Aug 15, 2023 | Bitwarden Desktop 2023.7.0 and below allows an attacker with local access to obtain sensitive information via the Bitwar... |
| CVE-2023-35082 | CRITICAL | 9.8 | 100.0% | Aug 15, 2023 | An authentication bypass vulnerability in Ivanti EPMM 11.10 and older, allows unauthorized users to access restricted fu... |
| CVE-2023-32006 | HIGH | 8.8 | 1.3% | Aug 15, 2023 | The use of `module.constructor.createRequire()` can bypass the policy mechanism and require modules outside of the polic... |
| CVE-2023-32004 | HIGH | 8.8 | 1.8% | Aug 15, 2023 | A vulnerability has been discovered in Node.js version 20, specifically within the experimental permission model. This f... |
| CVE-2023-32003 | MEDIUM | 5.3 | 1.0% | Aug 15, 2023 | `fs.mkdtemp()` and `fs.mkdtempSync()` can be used to bypass the permission model check using a path traversal attack. Th... |
| CVE-2023-4371 | MEDIUM | 6.1 | 0.3% | Aug 15, 2023 | A vulnerability was found in phpRecDB 1.3.1. It has been rated as problematic. Affected by this issue is some unknown fu... |
| CVE-2023-28479 | HIGH | 8.8 | 0.7% | Aug 15, 2023 | An issue was discovered in Tigergraph Enterprise 3.7.0. The TigerGraph platform installs a full development toolchain wi... |
| CVE-2023-30778 | MEDIUM | 5.4 | 0.3% | Aug 15, 2023 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Blubrry PowerPress Podcasting plugin by Blubrry ... |
| CVE-2023-30747 | MEDIUM | 6.1 | 0.4% | Aug 15, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPGem WooCommerce Easy Duplicate Product plugin <= 0.3.0.0... |
| CVE-2023-30498 | MEDIUM | 6.1 | 0.4% | Aug 15, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in CodeFlavors Vimeotheque: Vimeo WordPress Plugin <= 2.2.1 v... |
| CVE-2023-24478 | MEDIUM | 5.5 | 0.2% | Aug 15, 2023 | Use of insufficiently random values for some Intel Agilex(R) software included as part of Intel(R) Quartus(R) Prime Pro ... |
| CVE-2023-2916 | MEDIUM | 5.3 | 20.9% | Aug 15, 2023 | The InfiniteWP Client plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and includ... |
| CVE-2023-4308 | MEDIUM | 5.4 | 0.4% | Aug 15, 2023 | The User Submitted Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘user-submitted-conte... |
| CVE-2023-4347 | MEDIUM | 5.4 | 66.9% | Aug 15, 2023 | Cross-site Scripting (XSS) - Reflected in GitHub repository librenms/librenms prior to 23.8.0. |
| CVE-2023-32358 | HIGH | 8.8 | 0.6% | Aug 14, 2023 | A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.4 and iPadOS 16.4, macOS Ventur... |
| CVE-2023-28199 | MEDIUM | 5.5 | 0.2% | Aug 14, 2023 | An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input ... |
| CVE-2023-28198 | HIGH | 8.8 | 0.8% | Aug 14, 2023 | A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 16.4 and iPadOS 16.4, m... |
| CVE-2023-28179 | HIGH | 7.1 | 0.2% | Aug 14, 2023 | The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. Processing a malicious... |
| CVE-2023-27948 | MEDIUM | 5.5 | 0.2% | Aug 14, 2023 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3. Processin... |
| CVE-2023-27947 | MEDIUM | 5.5 | 0.2% | Aug 14, 2023 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3. Processin... |
| CVE-2023-27939 | MEDIUM | 5.5 | 0.2% | Aug 14, 2023 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3. Processin... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now