2023 CVE Vulnerabilities
31,510 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-0871 | MEDIUM | 6.1 | 0.5% | Aug 11, 2023 | XXE injection in /rtc/post/ endpoint in OpenMNS Horizon 31.0.8 and versions earlier than 32.0.2 on multiple platforms is... |
| CVE-2023-39949 | HIGH | 7.5 | 0.9% | Aug 11, 2023 | eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prio... |
| CVE-2023-39948 | HIGH | 7.5 | 0.9% | Aug 11, 2023 | eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prio... |
| CVE-2023-39947 | HIGH | 7.5 | 0.8% | Aug 11, 2023 | eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prio... |
| CVE-2023-39946 | HIGH | 7.5 | 0.8% | Aug 11, 2023 | eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prio... |
| CVE-2023-39945 | HIGH | 7.5 | 0.8% | Aug 11, 2023 | eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prio... |
| CVE-2023-39534 | HIGH | 7.5 | 0.9% | Aug 11, 2023 | eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prio... |
| CVE-2023-32267 | HIGH | 8.8 | 0.4% | Aug 11, 2023 | A potential vulnerability has been identified in OpenText / Micro Focus ArcSight Management Center. The vulnerability co... |
| CVE-2023-39418 | MEDIUM | 4.3 | 1.1% | Aug 11, 2023 | A vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row secu... |
| CVE-2023-39417 | HIGH | 8.8 | 1.7% | Aug 11, 2023 | IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in PostgreSQL if it uses @extowner@, @extschema@, or @e... |
| CVE-2023-3937 | MEDIUM | 4.8 | 0.3% | Aug 11, 2023 | Cross site scripting vulnerability in web portal in Snow Software License Manager from version 9.0.0 up to and including... |
| CVE-2023-3864 | HIGH | 7.2 | 0.5% | Aug 11, 2023 | Blind SQL injection in a service running in Snow Software license manager from version 8.0.0 up to and including 9.30.1 ... |
| CVE-2023-39553 | HIGH | 7.5 | 1.8% | Aug 11, 2023 | Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Drill Provider. Apache Airflow Dri... |
| CVE-2023-4108 | HIGH | 7.5 | 0.5% | Aug 11, 2023 | Mattermost fails to sanitize post metadata during audit logging resulting in permalinks contents being logged |
| CVE-2023-4107 | MEDIUM | 6.5 | 0.4% | Aug 11, 2023 | Mattermost fails to properly validate the requesting user permissions when updating a system admin, allowing a user mana... |
| CVE-2023-4106 | MEDIUM | 6.5 | 0.3% | Aug 11, 2023 | Mattermost fails to check if the requesting user is a guest before performing different actions to public playbooks, res... |
| CVE-2023-4105 | MEDIUM | 4.3 | 0.3% | Aug 11, 2023 | Mattermost fails to delete the attachments when deleting a message in a thread allowing a simple user to still be able t... |
| CVE-2023-40267 | CRITICAL | 9.8 | 1.0% | Aug 11, 2023 | GitPython before 3.1.32 does not block insecure non-multi options in clone and clone_from. NOTE: this issue exists becau... |
| CVE-2023-40254 | CRITICAL | 9.8 | 0.2% | Aug 11, 2023 | Download of Code Without Integrity Check vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Geni... |
| CVE-2023-40260 | CRITICAL | 9.1 | 0.5% | Aug 11, 2023 | EmpowerID before 7.205.0.1 allows an attacker to bypass an MFA (multi factor authentication) requirement if the first fa... |
| CVE-2023-40253 | CRITICAL | 9.8 | 0.4% | Aug 11, 2023 | Improper Authentication vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0... |
| CVE-2023-3824 | CRITICAL | 9.8 | 8.0% | Aug 11, 2023 | In PHP version 8.0.* before 8.0.30, 8.1.* before 8.1.22, and 8.2.* before 8.2.8, when loading phar file, while reading ... |
| CVE-2023-3823 | HIGH | 7.5 | 1.2% | Aug 11, 2023 | In PHP versions 8.0.* before 8.0.30, 8.1.* before 8.1.22, and 8.2.* before 8.2.8 various XML functions rely on libxml gl... |
| CVE-2023-40256 | CRITICAL | 9.8 | 0.3% | Aug 11, 2023 | A vulnerability was discovered in Veritas NetBackup Snapshot Manager before 10.2.0.1 that allowed untrusted clients to i... |
| CVE-2023-34438 | HIGH | 7.8 | 0.1% | Aug 11, 2023 | Race condition in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privil... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now