CVEs from 2023

6,100 normalized CVEs published or assigned in this year.

Total
6,100
critical
critical 240
high
high 1,530
medium
medium 1,393
low
low 32
% Critical
3.9%
% with KEV
2.7%
% with exploit
3.5%

Top vendors

Top products

  • office 29
  • office_long_term_servicing_channel 15
  • 365_apps 14
  • ftmg-esr50sxx 8
  • ftmg-esn40sxx 8
  • ftmg-esd25axx 8
  • ftmg-esr40sxx 8
  • ftmg-esd15axx 8
0
KEVHas exploit
Reset
CVE Severity CVSS Risk Flags OS Vendor Published Description
CVE-2023-36761 unknown 1.5 3y ago Microsoft Word contains an unspecified vulnerability that allows for information disclosure.
CVE-2023-36802 unknown 1.5 3y ago Microsoft Streaming Service Proxy contains an unspecified vulnerability that allows for privilege escalation.
CVE-2023-41061 unknown 1.5 3y ago Apple iOS, iPadOS, and watchOS contain an unspecified vulnerability due to a validation issue affecting Wallet in which a maliciously crafted attachment may result in code execution. This vulnerabili…
CVE-2023-41064 unknown 1.5 3y ago Apple iOS, iPadOS, and macOS contain a buffer overflow vulnerability in ImageIO when processing a maliciously crafted image, which may lead to code execution. This vulnerability was chained with CVE-…
CVE-2023-28434 unknown 1.5 3y ago MinIO contains a security feature bypass vulnerability that allows an attacker to use crafted requests to bypass metadata bucket name checking and put an object into any bucket while processing `Post…
CVE-2023-27532 unknown 1.5 3y ago Veeam Backup & Replication Cloud Connect component contains a missing authentication for critical function vulnerability that allows an unauthenticated user operating within the backup infrastructure…
CVE-2023-26359 unknown 1.5 3y ago Adobe ColdFusion contains a deserialization of untrusted data vulnerability that could result in code execution in the context of the current user.
CVE-2023-24489 unknown 1.5 3y ago Citrix Content Collaboration contains an improper access control vulnerability that could allow an unauthenticated attacker to remotely compromise customer-managed ShareFile storage zones controllers.
CVE-2023-35081 unknown 1.5 3y ago Ivanti Endpoint Manager Mobile (EPMM) contains a path traversal vulnerability that enables an authenticated administrator to perform malicious file writes to the EPMM server. This vulnerability can b…
CVE-2023-37580 unknown 1.5 3y ago Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability impacting the confidentiality and integrity of data.
CVE-2023-38606 unknown 1.5 3y ago Apple iOS, iPadOS, macOS, tvOS, and watchOS contain an unspecified vulnerability allowing an app to modify a sensitive kernel state.
CVE-2023-35078 unknown 1.5 3y ago Ivanti Endpoint Manager Mobile (EPMM, previously branded MobileIron Core) contains an authentication bypass vulnerability that allows unauthenticated access to specific API paths. An attacker with ac…
CVE-2023-38205 unknown 1.5 3y ago Adobe ColdFusion contains an improper access control vulnerability that allows for a security feature bypass.
CVE-2023-29298 unknown 1.5 3y ago Adobe ColdFusion contains an improper access control vulnerability that allows for a security feature bypass.
CVE-2023-36884 unknown 1.5 3y ago Microsoft Windows Search contains an unspecified vulnerability that could allow an attacker to evade Mark of the Web (MOTW) defenses via a specially crafted malicious file, leading to remote code exe…
CVE-2023-32046 unknown 1.5 3y ago Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for privilege escalation.
CVE-2023-32049 unknown 1.5 3y ago Microsoft Windows Defender SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the Open File - Security Warning prompt.
CVE-2023-35311 unknown 1.5 3y ago Microsoft Outlook contains a security feature bypass vulnerability that allows an attacker to bypass the Microsoft Outlook Security Notice prompt.
CVE-2023-27992 unknown 1.5 3y ago Multiple Zyxel network-attached storage (NAS) devices contain a pre-authentication command injection vulnerability that could allow an unauthenticated attacker to execute commands remotely via a craf…
CVE-2023-32434 unknown 1.5 3y ago Apple iOS. iPadOS, macOS, and watchOS contain an integer overflow vulnerability that could allow an application to execute code with kernel privileges.
CVE-2023-27997 unknown 1.5 3y ago Fortinet FortiOS and FortiProxy SSL-VPN contain a heap-based buffer overflow vulnerability which can allow an unauthenticated, remote attacker to execute code or commands via specifically crafted req…
CVE-2023-3079 unknown 1.5 3y ago Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2023-33009 unknown 1.5 3y ago Zyxel ATP, USG FLEX, USG FLEX 50(W), USG20(W)-VPN, VPN, and ZyWALL/USG firewalls contain a buffer overflow vulnerability in the notification function that could allow an unauthenticated attacker to c…
CVE-2023-33010 unknown 1.5 3y ago Zyxel ATP, USG FLEX, USG FLEX 50(W), USG20(W)-VPN, VPN, and ZyWALL/USG firewalls contain a buffer overflow vulnerability in the ID processing function that could allow an unauthenticated attacker to …
CVE-2023-32409 unknown 1.5 3y ago The issue was addressed with improved bounds checks. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.8 and iPadOS 15.7.8, Safari 16.5, iOS 16.5 and iPadOS 16.5. A remote a…
CVE-2023-21492 unknown 1.5 3y ago Samsung mobile devices running Android 11, 12, and 13 contain an insertion of sensitive information into log file vulnerability that allows a privileged, local attacker to conduct an address space la…
CVE-2023-25717 unknown 1.5 3y ago Ruckus Wireless Access Point (AP) software contains an unspecified vulnerability in the web services component. If the web services component is enabled on the AP, an attacker can perform cross-site …
CVE-2023-2136 unknown 1.5 3y ago Integer overflow in Skia in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (…
CVE-2023-2033 unknown 1.5 3y ago Type confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2023-29492 unknown 1.5 3y ago Novi Survey contains an insecure deserialization vulnerability that allows remote attackers to execute code on the server in the context of the service account.
CVE-2023-20963 unknown 1.5 3y ago Android Framework contains an unspecified vulnerability that allows for privilege escalation after updating an app to a higher Target SDK with no additional execution privileges needed.
CVE-2023-28206 unknown 1.5 3y ago Apple iOS, iPadOS, and macOS IOSurfaceAccelerator contain an out-of-bounds write vulnerability that allows an app to execute code with kernel privileges.
CVE-2023-26083 unknown 1.5 3y ago Arm Mali GPU Kernel Driver contains an information disclosure vulnerability that allows a non-privileged user to make valid GPU processing operations that expose sensitive kernel metadata.
CVE-2023-23397 unknown 1.5 3y ago Microsoft Office Outlook contains a privilege escalation vulnerability that allows for a NTLM Relay attack against another service to authenticate as the user.
CVE-2023-24880 unknown 1.5 3y ago Microsoft Windows SmartScreen contains a security feature bypass vulnerability that could allow an attacker to evade Mark of the Web (MOTW) defenses via a specially crafted malicious file.
CVE-2023-23376 unknown 1.5 3y ago Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation.
CVE-2023-21715 unknown 1.5 3y ago Microsoft Office Publisher contains a security feature bypass vulnerability that allows for a local, authenticated attack on a targeted system.
CVE-2023-21823 unknown 1.5 3y ago Microsoft Windows Graphic Component contains an unspecified vulnerability that allows for privilege escalation.
CVE-2023-21674 unknown 1.5 3y ago Microsoft Windows Advanced Local Procedure Call (ALPC) contains an unspecified vulnerability that allows for privilege escalation.
CVE-2023-39362 unknown 1.0 Cacti is an open source operational monitoring and fault management framework. In Cacti 1.2.24, under certain conditions, an authenticated privileged user, can use a malicious string in the SNMP opti…
CVE-2023-49084 unknown 1.0 Cacti is a robust performance and fault management framework and a frontend to RRDTool - a Time Series Database (TSDB). While using the detected SQL Injection and insufficient processing of the inclu…
CVE-2023-2640 unknown 1.0 On Ubuntu kernels carrying both c914c0e27eb0 and "UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overlayfs.* xattrs", an unprivileged user may set privileged extended attributes on th…
CVE-2023-2745 unknown 1.0 WordPress Core is vulnerable to Directory Traversal in versions up to, and including, 6.2, via the ‘wp_lang’ parameter. This allows unauthenticated attackers to access and load arbitrary translation …
CVE-2023-24626 unknown 1.0 socket.c in GNU Screen through 4.9.0, when installed setuid or setgid (the default on platforms such as Arch Linux and FreeBSD), allows local users to send a privileged SIGHUP signal to any PID, caus…
CVE-2023-36661 unknown 1.0 Shibboleth XMLTooling before 3.2.4, as used in OpenSAML and Shibboleth Service Provider, allows SSRF via a crafted KeyInfo element. (This is fixed in, for example, Shibboleth Service Provider 3.4.1.3…
CVE-2023-26035 unknown 1.0 ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 are vulnerable to Unauthent…
CVE-2023-27372 unknown 1.0 SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. The fixed versions are 3.2.18, 4.0.10, 4.1.8, and 4.2.1.
CVE-2023-49085 unknown 1.0 Cacti provides an operational monitoring and fault management framework. In versions 1.2.25 and prior, it is possible to execute arbitrary SQL code through the `pollers.php` script. An authorized use…
CVE-2023-32629 unknown 1.0 Local privilege escalation vulnerability in Ubuntu Kernels overlayfs ovl_copy_up_meta_inode_data skip permission checks when calling ovl_do_setxattr on Ubuntu kernels
CVE-2023-25440 unknown 1.0 Stored Cross Site Scripting (XSS) vulnerability in the add contact function CiviCRM 5.59.alpha1, allows attackers to execute arbitrary code in first/second name field.
CVE-2023-30625 unknown 1.0 2y ago rudder-server is vulnerable to SQL injection in github.com/rudderlabs/rudder-server
CVE-2023-50386 unknown 1.0 2y ago Apache Solr: Backup/Restore APIs allow for deployment of executables in malicious ConfigSets
CVE-2023-22649 unknown 1.0 2y ago Rancher 'Audit Log' leaks sensitive information in github.com/rancher/rancher
CVE-2023-48022 unknown 1.0 3y ago Ray has arbitrary code execution via jobs submission API
CVE-2023-48292 unknown 1.0 3y ago Run Shell Command allows Cross-Site Request Forgery
CVE-2023-6020 unknown 1.0 3y ago Ray Missing Authorization vulnerability
CVE-2023-6019 unknown 1.0 3y ago Ray OS Command Injection vulnerability
CVE-2023-43654 unknown 1.0 3y ago TorchServe Server-Side Request Forgery vulnerability
CVE-2023-41892 unknown 1.0 3y ago Craft CMS Remote Code Execution vulnerability
CVE-2023-37941 unknown 1.0 3y ago Apache Superset Deserialization of Untrusted Data vulnerability
CVE-2023-39265 unknown 1.0 3y ago Apache Superset Improper Input Validation vulnerability
CVE-2023-40315 unknown 1.0 3y ago OpenNMS privilege escalation vulnerability
CVE-2023-40028 unknown 1.0 3y ago Ghost vulnerable to arbitrary file read via symlinks in content import
CVE-2023-0872 unknown 1.0 3y ago OpenNMS privilege elevation vulnerability
CVE-2023-29689 unknown 1.0 3y ago PyroCMS remote code execution vulnerability
CVE-2023-38501 unknown 1.0 3y ago copyparty is file server software. Prior to version 1.8.7, the application contains a reflected cross-site scripting via URL-parameter `?k304=...` and `?setck=...`. The worst-case outcome of this is …
CVE-2023-37269 unknown 1.0 3y ago Winter CMS stored XSS through privileged upload of SVG file
CVE-2023-36812 unknown 1.0 3y ago Remote Code Execution for 2.4.1 and earlier
CVE-2023-34927 unknown 1.0 3y ago Casdoor Cross-Site Request Forgery vulnerability
CVE-2023-33568 unknown 1.0 3y ago Dolibarr vulnerable to unauthenticated database access
CVE-2023-34468 unknown 1.0 3y ago Apache NiFi vulnerable to Code Injection
CVE-2023-30253 unknown 1.0 3y ago Dolibarr vulnerable to remote code execution via uppercase manipulation
CVE-2023-30145 unknown 1.0 3y ago Server-Side Template Injection in Camaleon CMS
CVE-2023-32235 unknown 1.0 3y ago Path Traversal in Ghost
CVE-2023-25826 unknown 1.0 3y ago Command injection in OpenTSDB
CVE-2023-29918 unknown 1.0 3y ago RosarioSIS vulnerable to CSV Injection
CVE-2023-28458 unknown 1.0 3y ago pretalx 2.3.1 before 2.3.2 allows path traversal in HTML export (a non-default feature). Organizers can trigger the overwriting (with the standard pretalx 404 page content) of an arbitrary file.
CVE-2023-28459 unknown 1.0 3y ago pretalx 2.3.1 before 2.3.2 allows path traversal in HTML export (a non-default feature). Users were able to upload crafted HTML documents that trigger the reading of arbitrary files.
CVE-2023-24788 unknown 1.0 3y ago NotrinosERP vulnerable to SQL Injection
CVE-2023-1545 unknown 1.0 3y ago Teampass SQL Injection vulnerability
CVE-2023-0777 unknown 1.0 3y ago Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to 2.0.4.
CVE-2023-0744 unknown 1.0 3y ago Answer contains Improper Access Control vulnerability in github.com/answerdev/answer
CVE-2023-25194 unknown 1.0 3y ago Apache Kafka Connect vulnerable to Deserialization of Untrusted Data
CVE-2023-0315 unknown 1.0 3y ago Froxlor vulnerable to Command Injection
CVE-2023-0297 unknown 1.0 3y ago Code Injection in pyload-ng
CVE-2023-2430 unknown A vulnerability was found due to missing lock for IOPOLL flaw in io_cqring_event_overflow() in io_uring.c in Linux Kernel. This flaw allows a local attacker with user privilege to trigger a Denial of…
CVE-2023-23006 unknown In the Linux kernel before 5.15.13, drivers/net/ethernet/mellanox/mlx5/core/steering/dr_domain.c misinterprets the mlx5_get_uars_page return value (expects it to be NULL in the error case, whereas it…
CVE-2023-23005 unknown In the Linux kernel before 6.2, mm/memory-tiers.c misinterprets the alloc_memory_type return value (expects it to be NULL in the error case, whereas it is actually an error pointer). NOTE: this is di…
CVE-2023-23004 unknown In the Linux kernel before 5.19, drivers/gpu/drm/arm/malidp_planes.c misinterprets the get_sg_table return value (expects it to be NULL in the error case, whereas it is actually an error pointer).
CVE-2023-23003 unknown In the Linux kernel before 5.16, tools/perf/util/expr.c lacks a check for the hashmap__new return value.
CVE-2023-23002 unknown In the Linux kernel before 5.16.3, drivers/bluetooth/hci_qca.c misinterprets the devm_gpiod_get_index_optional return value (expects it to be NULL in the error case, whereas it is actually an error p…
CVE-2023-22999 unknown In the Linux kernel before 5.16.3, drivers/usb/dwc3/dwc3-qcom.c misinterprets the dwc3_qcom_create_urs_usb_platdev return value (expects it to be NULL in the error case, whereas it is actually an err…
CVE-2023-2019 unknown A flaw was found in the Linux kernel's netdevsim device driver, within the scheduling of events. This issue results from the improper management of a reference count. This may allow an attacker to cr…
CVE-2023-2007 unknown The specific flaw exists within the DPT I2O Controller driver. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this in conjunction …
CVE-2023-1990 unknown A use-after-free flaw was found in ndlc_remove in drivers/nfc/st-nci/ndlc.c in the Linux Kernel. This flaw could allow an attacker to crash the system due to a race problem.
CVE-2023-1193 unknown A use-after-free flaw was found in setup_async_work in the KSMBD implementation of the in-kernel samba server and CIFS in the Linux kernel. This issue could allow an attacker to crash the system by a…
CVE-2023-42114 unknown Exim NTLM Challenge Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Exim. Authentica…
CVE-2023-35704 unknown Multiple stack-based buffer overflow vulnerabilities exist in the FST LEB128 varint functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim woul…
CVE-2023-4256 unknown Within tcpreplay's tcprewrite, a double free vulnerability has been identified in the tcpedit_dlt_cleanup() function within plugins/dlt_plugins.c. This vulnerability can be exploited by supplying a s…
CVE-2023-46570 unknown An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32 function of libr/arch/p/nds32/nds32-dis.h.