2023 CVE Vulnerabilities
31,510 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-31998 | HIGH | 7.5 | 0.7% | Jul 18, 2023 | A heap overflow vulnerability found in EdgeRouters and Aircubes allows a malicious actor to interrupt UPnP service to sa... |
| CVE-2023-38432 | CRITICAL | 9.1 | 2.4% | Jul 18, 2023 | An issue was discovered in the Linux kernel before 6.3.10. fs/smb/server/smb2misc.c in ksmbd does not validate the relat... |
| CVE-2023-38431 | CRITICAL | 9.1 | 1.1% | Jul 18, 2023 | An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/connection.c in ksmbd does not validate the rela... |
| CVE-2023-38430 | CRITICAL | 9.1 | 1.1% | Jul 18, 2023 | An issue was discovered in the Linux kernel before 6.3.9. ksmbd does not validate the SMB request protocol ID, leading t... |
| CVE-2023-38429 | CRITICAL | 9.8 | 1.1% | Jul 18, 2023 | An issue was discovered in the Linux kernel before 6.3.4. fs/ksmbd/connection.c in ksmbd has an off-by-one error in memo... |
| CVE-2023-38428 | CRITICAL | 9.1 | 3.0% | Jul 18, 2023 | An issue was discovered in the Linux kernel before 6.3.4. fs/ksmbd/smb2pdu.c in ksmbd does not properly check the UserNa... |
| CVE-2023-38427 | CRITICAL | 9.8 | 1.1% | Jul 18, 2023 | An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/smb2pdu.c in ksmbd has an integer underflow and ... |
| CVE-2023-38426 | CRITICAL | 9.1 | 2.4% | Jul 18, 2023 | An issue was discovered in the Linux kernel before 6.3.4. ksmbd has an out-of-bounds read in smb2_find_context_vals when... |
| CVE-2023-37850 | — | — | — | Jul 17, 2023 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2023-37479 | HIGH | 7.5 | 0.6% | Jul 17, 2023 | Open Enclave is a hardware-agnostic open source library for developing applications that utilize Hardware-based Trusted ... |
| CVE-2023-3724 | HIGH | 8.8 | 0.5% | Jul 17, 2023 | If a TLS 1.3 client gets neither a PSK (pre shared key) extension nor a KSE (key share extension) when connecting to a m... |
| CVE-2023-38409 | MEDIUM | 5.5 | 0.2% | Jul 17, 2023 | An issue was discovered in set_con2fb_map in drivers/video/fbdev/core/fbcon.c in the Linux kernel before 6.2.12. Because... |
| CVE-2023-37476 | HIGH | 7.8 | 0.6% | Jul 17, 2023 | OpenRefine is a free, open source tool for data processing. A carefully crafted malicious OpenRefine project tar file ca... |
| CVE-2023-38405 | HIGH | 7.5 | 0.5% | Jul 17, 2023 | On Crestron 3-Series Control Systems before 1.8001.0187, crafting and sending a specific BACnet packet can cause a crash... |
| CVE-2023-38404 | HIGH | 8.8 | 0.8% | Jul 17, 2023 | The XPRTLD web application in Veritas InfoScale Operations Manager (VIOM) before 8.0.0.410 allows an authenticated attac... |
| CVE-2023-38403 | HIGH | 7.5 | 1.7% | Jul 17, 2023 | iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field. |
| CVE-2023-37266 | CRITICAL | 9.8 | 5.9% | Jul 17, 2023 | CasaOS is an open-source Personal Cloud system. Unauthenticated attackers can craft arbitrary JWTs and access features t... |
| CVE-2023-37265 | CRITICAL | 9.8 | 6.4% | Jul 17, 2023 | CasaOS is an open-source Personal Cloud system. Due to a lack of IP address verification an unauthenticated attackers ca... |
| CVE-2023-37781 | MEDIUM | 6.5 | 0.7% | Jul 17, 2023 | An issue in the emqx_sn plugin of EMQX v4.3.8 allows attackers to execute a directory traversal via uploading a crafted ... |
| CVE-2023-37770 | MEDIUM | 5.5 | 0.3% | Jul 17, 2023 | faust commit ee39a19 was discovered to contain a stack overflow via the component boxppShared::print() at /boxes/ppbox.c... |
| CVE-2023-37769 | MEDIUM | 6.5 | 0.5% | Jul 17, 2023 | stress-test master commit e4c878 was discovered to contain a FPE vulnerability via the component combine_inner at /pixma... |
| CVE-2023-37461 | CRITICAL | 9.8 | 0.5% | Jul 17, 2023 | Metersphere is an opensource testing framework. Files uploaded to Metersphere may define a `belongType` value with a rel... |
| CVE-2023-28864 | MEDIUM | 5.5 | 0.2% | Jul 17, 2023 | Progress Chef Infra Server before 15.7 allows a local attacker to exploit a /var/opt/opscode/local-mode-cache/backup wor... |
| CVE-2023-37791 | CRITICAL | 9.8 | 11.5% | Jul 17, 2023 | D-Link DIR-619L v2.04(TW) was discovered to contain a stack overflow via the curTime parameter at /goform/formLogin. |
| CVE-2023-34141 | HIGH | 8 | 0.6% | Jul 17, 2023 | A command injection vulnerability in the access point (AP) management feature of the Zyxel ATP series firmware versions ... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now