2023 CVE Vulnerabilities
31,244 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-50945 | MEDIUM | 5.5 | 0.1% | Jan 26, 2025 | IBM Common Licensing 9.0 stores user credentials in plain clear text which can be read by a local user. |
| CVE-2023-38009 | MEDIUM | 5.9 | 0.2% | Jan 26, 2025 | IBM Cognos Mobile Client 1.1 iOS may be vulnerable to information disclosure through man in the middle techniques due to... |
| CVE-2023-38716 | HIGH | 7.5 | 0.3% | Jan 25, 2025 | IBM Cloud Pak System 2.3.3.6, 2.3.36 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1, and 2.3.4.0 could disclose sensitive ... |
| CVE-2023-38714 | HIGH | 7.5 | 0.3% | Jan 25, 2025 | IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, 2.3.3.7, ... |
| CVE-2023-38713 | HIGH | 7.5 | 0.3% | Jan 25, 2025 | IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, 2.3.3.7, ... |
| CVE-2023-38271 | MEDIUM | 6.5 | 0.3% | Jan 25, 2025 | IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, 2.3.3.7, ... |
| CVE-2023-38013 | HIGH | 7.5 | 0.3% | Jan 25, 2025 | IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, 2.3.3.7, ... |
| CVE-2023-38012 | MEDIUM | 5.3 | 0.5% | Jan 25, 2025 | IBM Cloud Pak System 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1, and 2.3.4.0 could allow a remote att... |
| CVE-2023-46401 | CRITICAL | 9.8 | 0.5% | Jan 23, 2025 | KWHotel 0.47 is vulnerable to CSV Formula Injection in the invoice adding function. |
| CVE-2023-46400 | CRITICAL | 9.8 | 0.4% | Jan 23, 2025 | KWHotel 0.47 is vulnerable to CSV Formula Injection in the add guest function. |
| CVE-2023-50309 | MEDIUM | 5.4 | 0.2% | Jan 23, 2025 | IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 is vulnerable to stored cross-site scripting. This vulne... |
| CVE-2023-32340 | MEDIUM | 5.4 | 0.2% | Jan 23, 2025 | IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 is vulnerable to cross-site scripting. This vulnerabilit... |
| CVE-2023-37777 | CRITICAL | 9.8 | 0.4% | Jan 22, 2025 | A SQL injection vulnerability exists in Synnefo Internet Management Software (IMS) version 2023 and earlier. This vulner... |
| CVE-2023-37023 | HIGH | 8.6 | 0.8% | Jan 22, 2025 | Open5GS MME versions <= 2.6.4 contain a reachable assertion in the `Uplink NAS Transport` packet handler. A packet missi... |
| CVE-2023-37022 | HIGH | 7.5 | 0.8% | Jan 22, 2025 | Open5GS MME versions <= 2.6.4 contain a reachable assertion in the `UE Context Release Request` packet handler. A packet... |
| CVE-2023-37021 | HIGH | 8.6 | 0.8% | Jan 22, 2025 | Open5GS MME version <= 2.6.4 contains an assertion that can be remotely triggered via a malformed ASN.1 packet over the ... |
| CVE-2023-37020 | HIGH | 8.6 | 0.8% | Jan 22, 2025 | Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the ... |
| CVE-2023-37019 | HIGH | 8.6 | 0.8% | Jan 22, 2025 | Open5GS MME versions <= 2.6.4 contains an assertion that can be remotely triggered via a malformed ASN.1 packet over the... |
| CVE-2023-37018 | HIGH | 8.6 | 0.8% | Jan 22, 2025 | Open5GS MME versions <= 2.6.4 contains an assertion that can be remotely triggered via a malformed ASN.1 packet over the... |
| CVE-2023-37017 | HIGH | 8.6 | 0.8% | Jan 22, 2025 | Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the ... |
| CVE-2023-37016 | HIGH | 8.6 | 0.8% | Jan 22, 2025 | Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the ... |
| CVE-2023-37015 | HIGH | 8.6 | 0.8% | Jan 22, 2025 | Open5GS MME versions <= 2.6.4 contains an assertion that can be remotely triggered via a malformed ASN.1 packet over the... |
| CVE-2023-37014 | HIGH | 7.5 | 0.8% | Jan 22, 2025 | Open5GS MME versions <= 2.6.4 contains an assertion that can be remotely triggered via a malformed ASN.1 packet over the... |
| CVE-2023-37013 | HIGH | 7.3 | 0.5% | Jan 22, 2025 | Open5GS MME versions <= 2.6.4 contains an assertion that can be remotely triggered via a sufficiently large ASN.1 packet... |
| CVE-2023-37012 | MEDIUM | 5.3 | 0.3% | Jan 22, 2025 | Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the ... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now