2023 CVE Vulnerabilities

31,475 CVEs published in 2023.

CVE IDSeverityCVSSDescription
CVE-2023-44755CRITICAL9.8Sacco Management system v1.0 was discovered to contain a SQL injection vulnerability via the password parameter at /sacc...
CVE-2023-44753MEDIUM6.1A stored cross-site scripting (XSS) vulnerability fin Student Management System v1.0 allows attackers to execute arbitra...
CVE-2023-44752CRITICAL9.8An issue in Student Study Center Desk Management System v1.0 allows attackers to bypass authentication via a crafted GET...
CVE-2023-43958CRITICAL9.8An arbitrary file upload vulnerability in the component /jquery-file-upload/server/php/index.php of Hospital Management ...
CVE-2023-43378MEDIUM6.1A cross-site scripting (XSS) vulnerability in Hoteldruid v3.0.5 allows attackers to execute arbitrary web scripts or HTM...
CVE-2023-30421LOW2.9mystrtod in mjson 1.2.7 requires more than a billion iterations during processing of certain digit strings such as 88911...
CVE-2023-26819LOW2.9cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as {"a": true, "b": [ null,999999999999999...
CVE-2023-53034HIGH7.1In the Linux kernel, the following vulnerability has been resolved: ntb_hw_switchtec: Fix shift-out-of-bounds in switch...
CVE-2023-32197HIGH7.5A Improper Privilege Management vulnerability in SUSE rancher in RoleTemplateobjects when external=true is set can lead ...
CVE-2023-5616MEDIUM4.9In Ubuntu, gnome-control-center did not properly reflect SSH remote login status when the system was configured to use s...
CVE-2023-27272HIGH8.8IBM Aspera Console 3.4.0 through 3.4.4 allows passwords to be reused when a new user logs into the system.
CVE-2023-42983MEDIUM6.4Processing a file may lead to a denial-of-service or potentially disclose memory contents. This issue is fixed in macOS ...
CVE-2023-42982MEDIUM6.4Processing a file may lead to a denial-of-service or potentially disclose memory contents. This issue is fixed in macOS ...
CVE-2023-42981MEDIUM5.4Processing a file may lead to a denial-of-service or potentially disclose memory contents. This issue is fixed in macOS ...
CVE-2023-42977HIGH7.8A path handling issue was addressed with improved validation. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma ...
CVE-2023-42973MEDIUM4Private Browsing tabs may be accessed without authentication. This issue is fixed in iOS 17 and iPadOS 17. The issue was...
CVE-2023-42970HIGH8.8A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, macOS...
CVE-2023-42969LOW3.3An app may be able to break out of its sandbox. This issue is fixed in iOS 17 and iPadOS 17, iOS 16.7 and iPadOS 16.7, m...
CVE-2023-42961MEDIUM6.3A path handling issue was addressed with improved validation. This issue is fixed in iOS 17 and iPadOS 17, iOS 16.7 and ...
CVE-2023-42875HIGH7.3Processing web content may lead to arbitrary code execution. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 1...
CVE-2023-41076HIGH7.3An app may be able to elevate privileges. This issue is fixed in macOS 14. This issue was addressed by removing the vuln...
CVE-2023-38614MEDIUM4.3A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonom...
CVE-2023-43037MEDIUM6.5IBM Maximo Application Suite 8.11 and 9.0 could allow an authenticated user to perform unauthorized actions due to impro...
CVE-2023-43035LOW3.3IBM Sterling Control Center 6.2.1, 6.3.1, and 6.4.0 allows web pages to be stored locally which can be read by another u...
CVE-2023-42007MEDIUM5.4IBM Sterling Control Center 6.2.1, 6.3.1, and 6.4.0 is vulnerable to cross-site scripting. This vulnerability allows use...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now