CVEs from 2023
Total
6,107
critical
critical 240
high
high 1,530
medium
medium 1,393
low
low 32
% Critical
3.9%
% with KEV
2.7%
% with exploit
3.5%
Top products
- office 29
- office_long_term_servicing_channel 15
- 365_apps 14
- ftmg-esr50sxx 8
- ftmg-esn40sxx 8
- ftmg-esd25axx 8
- ftmg-esr40sxx 8
- ftmg-esd15axx 8
| CVE | Severity | CVSS | Risk | Flags | OS | Vendor | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2023-5367 | medium | — | 5.5 | 3y ago | A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data stored in the heap in the XIChangeDeviceProperty fu… | |||
| CVE-2023-6377 | medium | — | 5.5 | 3y ago | A flaw was found in xorg-server. Querying or changing XKB button actions such as moving from a touchpad to a mouse can result in out-of-bounds memory reads and writes. This may allow local privilege … | |||
| CVE-2023-4535 | medium | — | 5.5 | 3y ago | Moderate: opensc security update | |||
| CVE-2023-40661 | medium | — | 5.5 | 3y ago | RHSA-2023:7876: opensc security update (Moderate) | |||
| CVE-2023-40660 | medium | — | 5.5 | 3y ago | RHSA-2023:7876: opensc security update (Moderate) | |||
| CVE-2023-51384 | medium | 5.5 | 5.5 | 3y ago | In ssh-agent in OpenSSH before 9.6, certain destination constraints can be incompletely applied. When destination constraints are specified during addition of PKCS#11-hosted private keys, these const… | |||
| CVE-2023-36009 | medium | 5.5 | 5.5 | 3y ago | Microsoft Word Information Disclosure Vulnerability | |||
| CVE-2023-54170 | medium | — | 5.5 | 3y ago | In the Linux kernel, the following vulnerability has been resolved: keys: Fix linking a duplicate key to a keyring's assoc_array When making a DNS query inside the kernel using dns_query(), the req… | |||
| CVE-2023-39615 | medium | — | 5.5 | 3y ago | Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial of Service (Do… | |||
| CVE-2023-53657 | medium | — | 5.5 | 3y ago | In the Linux kernel, the following vulnerability has been resolved: ice: Don't tx before switchdev is fully configured There is possibility that ice_eswitch_port_start_xmit might be called while so… | |||
| CVE-2023-43804 | medium | — | 5.5 | 3y ago | Moderate: python3.11-urllib3 security update | |||
| CVE-2023-53996 | medium | — | 5.5 | 3y ago | In the Linux kernel, the following vulnerability has been resolved: x86/sev: Make enc_dec_hypercall() accept a size instead of npages enc_dec_hypercall() accepted a page count instead of a size, wh… | |||
| CVE-2023-6460 | medium | 5.5 | 5.5 | 3y ago | Logging of the firestore key within nodejs-firestore | |||
| CVE-2023-20240 | medium | 5.5 | 5.5 | 3y ago | Multiple vulnerabilities in Cisco Secure Client Software, formerly AnyConnect Secure Mobility Client, could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an a… | |||
| CVE-2023-44357 | medium | 5.5 | 5.5 | 3y ago | Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attac… | |||
| CVE-2023-44348 | medium | 5.5 | 5.5 | 3y ago | Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attac… | |||
| CVE-2023-44360 | medium | 5.5 | 5.5 | 3y ago | Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attac… | |||
| CVE-2023-44361 | medium | 5.5 | 5.5 | 3y ago | Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker c… | |||
| CVE-2023-44358 | medium | 5.5 | 5.5 | 3y ago | Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attac… | |||
| CVE-2023-44339 | medium | 5.5 | 5.5 | 3y ago | Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attac… | |||
| CVE-2023-36049 | medium | — | 5.5 | 3y ago | RHSA-2023:7258: dotnet6.0 security update (Moderate) | |||
| CVE-2023-36558 | medium | — | 5.5 | 3y ago | RHSA-2023:7258: dotnet6.0 security update (Moderate) | |||
| CVE-2023-4042 | medium | — | 5.5 | 3y ago | RHSA-2023:7053: ghostscript security and bug fix update (Moderate) | |||
| CVE-2023-3301 | medium | — | 5.5 | 3y ago | A flaw was found in QEMU. The async nature of hot-unplug enables a race scenario where the net device backend is cleared before the virtio-net pci frontend has been unplugged. A malicious guest could… | |||
| CVE-2023-27536 | medium | — | 5.5 | 3y ago | An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user permissions due to a failure to che… | |||
| CVE-2023-33285 | medium | — | 5.5 | 3y ago | An issue was discovered in Qt 5.x before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. QDnsLookup has a buffer over-read via a crafted reply from a DNS server. | |||
| CVE-2023-3750 | medium | — | 5.5 | 3y ago | Moderate: libvirt security, bug fix, and enhancement update | |||
| CVE-2023-0950 | medium | — | 5.5 | 3y ago | Moderate: libreoffice security update | |||
| CVE-2023-1183 | medium | — | 5.5 | 3y ago | Moderate: libreoffice security update | |||
| CVE-2023-31486 | medium | — | 5.5 | 3y ago | Moderate: perl-HTTP-Tiny security update | |||
| CVE-2023-26767 | medium | — | 5.5 | 3y ago | Buffer Overflow vulnerability found in Liblouis v.3.24.0 allows a remote attacker to cause a denial of service via the lou_logFile function at logginc.c endpoint. | |||
| CVE-2023-26768 | medium | — | 5.5 | 3y ago | Buffer Overflow vulnerability found in Liblouis v.3.24.0 allows a remote attacker to cause a denial of service via the compileTranslationTable.c and lou_setDataPath functions. | |||
| CVE-2023-26769 | medium | — | 5.5 | 3y ago | Buffer Overflow vulnerability found in Liblouis Lou_Trace v.3.24.0 allows a remote attacker to cause a denial of service via the resolveSubtable function at compileTranslationTabel.c. | |||
| CVE-2023-4091 | medium | — | 5.5 | 3y ago | RHSA-2023:7467: samba security update (Moderate) | |||
| CVE-2023-2255 | medium | — | 5.5 | 3y ago | Moderate: libreoffice security update | |||
| CVE-2023-34966 | medium | — | 5.5 | 3y ago | RHSA-2023:7139: samba security, bug fix, and enhancement update (Moderate) | |||
| CVE-2023-39976 | medium | — | 5.5 | 3y ago | Moderate: libqb security update | |||
| CVE-2023-53292 | medium | 5.5 | 5.5 | 3y ago | In the Linux kernel, the following vulnerability has been resolved: blk-mq: fix NULL dereference on q->elevator in blk_mq_elv_switch_none After grabbing q->sysfs_lock, q->elevator may become NULL b… | |||
| CVE-2023-53623 | medium | — | 5.5 | 3y ago | In the Linux kernel, the following vulnerability has been resolved: mm/swap: fix swap_info_struct race between swapoff and get_swap_pages() The si->lock must be held when deleting the si from the a… | |||
| CVE-2023-0836 | medium | — | 5.5 | 3y ago | Moderate: haproxy security and bug fix update | |||
| CVE-2023-2858 | medium | — | 5.5 | 3y ago | RHSA-2023:7015: wireshark security update (Moderate) | |||
| CVE-2023-39321 | medium | — | 5.5 | 3y ago | Moderate: container-tools:rhel8 security update | |||
| CVE-2023-31484 | medium | — | 5.5 | 3y ago | RHSA-2024:3094: perl-CPAN security update (Moderate) | |||
| CVE-2023-2731 | medium | — | 5.5 | 3y ago | Moderate: libtiff security update | |||
| CVE-2023-39322 | medium | — | 5.5 | 3y ago | Moderate: container-tools:rhel8 security update | |||
| CVE-2023-42669 | medium | — | 5.5 | 3y ago | RHSA-2023:7467: samba security update (Moderate) | |||
| CVE-2023-32324 | medium | — | 5.5 | 3y ago | RHSA-2023:7165: cups security and bug fix update (Moderate) | |||
| CVE-2023-35789 | medium | — | 5.5 | 3y ago | RHSA-2023:7150: librabbitmq security update (Moderate) | |||
| CVE-2023-34967 | medium | — | 5.5 | 3y ago | RHSA-2023:7139: samba security, bug fix, and enhancement update (Moderate) | |||
| CVE-2023-34968 | medium | — | 5.5 | 3y ago | RHSA-2023:7139: samba security, bug fix, and enhancement update (Moderate) | |||
| CVE-2023-53205 | medium | — | 5.5 | 3y ago | In the Linux kernel, the following vulnerability has been resolved: KVM: s390/diag: fix racy access of physical cpu number in diag 9c handler We do check for target CPU == -1, but this might change… | |||
| CVE-2023-28100 | medium | — | 5.5 | 3y ago | RHSA-2023:7038: flatpak security, bug fix, and enhancement update (Moderate) | |||
| CVE-2023-28450 | medium | — | 5.5 | 3y ago | RHSA-2023:7046: dnsmasq security and bug fix update (Moderate) | |||
| CVE-2023-38712 | medium | — | 5.5 | 3y ago | RHSA-2023:7052: libreswan security update (Moderate) | |||
| CVE-2023-2952 | medium | — | 5.5 | 3y ago | RHSA-2023:7015: wireshark security update (Moderate) | |||
| CVE-2023-1672 | medium | — | 5.5 | 3y ago | RHSA-2023:7022: tang security and bug fix update (Moderate) | |||
| CVE-2023-3138 | medium | — | 5.5 | 3y ago | RHSA-2023:7029: libX11 security update (Moderate) | |||
| CVE-2023-28879 | medium | — | 5.5 | 3y ago | RHSA-2023:7053: ghostscript security and bug fix update (Moderate) | |||
| CVE-2023-33204 | medium | — | 5.5 | 3y ago | RHSA-2023:7010: sysstat security and bug fix update (Moderate) | |||
| CVE-2023-0666 | medium | — | 5.5 | 3y ago | RHSA-2023:7015: wireshark security update (Moderate) | |||
| CVE-2023-53072 | medium | — | 5.5 | 3y ago | In the Linux kernel, the following vulnerability has been resolved: mptcp: use the workqueue to destroy unaccepted sockets Christoph reported a UaF at token lookup time after having refactored the … | |||
| CVE-2023-2856 | medium | — | 5.5 | 3y ago | RHSA-2023:7015: wireshark security update (Moderate) | |||
| CVE-2023-33460 | medium | — | 5.5 | 3y ago | RHSA-2023:7057: yajl security update (Moderate) | |||
| CVE-2023-3316 | medium | — | 5.5 | 3y ago | Moderate: libtiff security update | |||
| CVE-2023-28708 | medium | — | 5.5 | 3y ago | When using the RemoteIpFilter with requests received from a reverse proxy via HTTP that include the X-Forwarded-Proto header set to https, session cookies created by Apache Tomcat 11.0.0-M1 to … | |||
| CVE-2023-28370 | medium | — | 5.5 | 3y ago | Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user acc… | |||
| CVE-2023-24998 | medium | — | 5.5 | 3y ago | Apache Commons FileUpload before 1.5 does not limit the number of request parts to be processed resulting in the possibility of an attacker triggering a DoS with a malicious upload or series of uploa… | |||
| CVE-2023-28101 | medium | — | 5.5 | 3y ago | RHSA-2023:7038: flatpak security, bug fix, and enhancement update (Moderate) | |||
| CVE-2023-27561 | medium | — | 5.5 | 3y ago | RHSA-2023:6939: container-tools:rhel8 security and bug fix update (Moderate) | |||
| CVE-2023-1786 | medium | — | 5.5 | 3y ago | RHSA-2023:6943: cloud-init security, bug fix, and enhancement update (Moderate) | |||
| CVE-2023-25809 | medium | — | 5.5 | 3y ago | RHSA-2023:6939: container-tools:rhel8 security and bug fix update (Moderate) | |||
| CVE-2023-28642 | medium | — | 5.5 | 3y ago | RHSA-2023:6939: container-tools:rhel8 security and bug fix update (Moderate) | |||
| CVE-2023-2855 | medium | — | 5.5 | 3y ago | Moderate: wireshark security update | |||
| CVE-2023-25173 | medium | — | 5.5 | 3y ago | RHSA-2023:6939: container-tools:rhel8 security and bug fix update (Moderate) | |||
| CVE-2023-27534 | medium | — | 5.5 | 3y ago | A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be wrongly replaced when used as a prefix in the first path element, in addition to its inte… | |||
| CVE-2023-53705 | medium | — | 5.5 | 3y ago | In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix out-of-bounds access in ipv6_find_tlv() optlen is fetched without checking whether there is more than one byte to parse… | |||
| CVE-2023-54004 | medium | — | 5.5 | 3y ago | In the Linux kernel, the following vulnerability has been resolved: udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated(). syzbot reported [0] a null-ptr-deref in sk_get_rmem0() while… | |||
| CVE-2023-28709 | medium | — | 5.5 | 3y ago | The fix for CVE-2023-24998 was incomplete for Apache Tomcat 11.0.0-M2 to 11.0.0-M4, 10.1.5 to 10.1.7, 9.0.71 to 9.0.73 and 8.5.85 to 8.5.87. If non-default HTTP connector settings were used suc… | |||
| CVE-2023-54057 | medium | — | 5.5 | 3y ago | In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter The 'acpiid' buffer in the parse_ivrs_acpihid func… | |||
| CVE-2023-27533 | medium | — | 5.5 | 3y ago | A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and "telnet options" during serve… | |||
| CVE-2023-0668 | medium | — | 5.5 | 3y ago | Moderate: wireshark security update | |||
| CVE-2023-23931 | medium | — | 5.5 | 3y ago | RHSA-2024:2985: python39:3.9 and python39-devel:3.9 security update (Moderate) | |||
| CVE-2023-53867 | medium | — | 5.5 | 3y ago | In the Linux kernel, the following vulnerability has been resolved: ceph: fix potential use-after-free bug when trimming caps When trimming the caps and just after the 'session->s_cap_lock' is rele… | |||
| CVE-2023-27371 | medium | — | 5.5 | 3y ago | RHSA-2023:7090: libmicrohttpd security update (Moderate) | |||
| CVE-2023-1667 | medium | — | 5.5 | 3y ago | RHSA-2023:3839: libssh security update (Moderate) | |||
| CVE-2023-3576 | medium | — | 5.5 | 3y ago | Moderate: libtiff security update | |||
| CVE-2023-53576 | medium | — | 5.5 | 3y ago | In the Linux kernel, the following vulnerability has been resolved: null_blk: Always check queue mode setting from configfs Make sure to check device queue mode in the null_validate_conf() and retu… | |||
| CVE-2023-29491 | medium | — | 5.5 | 3y ago | RHSA-2023:5249: ncurses security update (Moderate) | |||
| CVE-2023-34241 | medium | — | 5.5 | 3y ago | RHSA-2023:7165: cups security and bug fix update (Moderate) | |||
| CVE-2023-41105 | medium | — | 5.5 | 3y ago | RHSA-2023:7024: python3.11 security update (Moderate) | |||
| CVE-2023-3961 | medium | — | 5.5 | 3y ago | RHSA-2023:7467: samba security update (Moderate) | |||
| CVE-2023-26966 | medium | — | 5.5 | 3y ago | Moderate: libtiff security update | |||
| CVE-2023-53089 | medium | — | 5.5 | 3y ago | In the Linux kernel, the following vulnerability has been resolved: ext4: fix task hung in ext4_xattr_delete_inode Syzbot reported a hung task problem: =============================================… | |||
| CVE-2023-38710 | medium | — | 5.5 | 3y ago | RHSA-2023:7052: libreswan security update (Moderate) | |||
| CVE-2023-38711 | medium | — | 5.5 | 3y ago | RHSA-2023:7052: libreswan security update (Moderate) | |||
| CVE-2023-2283 | medium | — | 5.5 | 3y ago | RHSA-2023:3839: libssh security update (Moderate) | |||
| CVE-2023-37369 | medium | — | 5.5 | 3y ago | In Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2, there can be an application crash in QXmlStreamReader via a crafted XML string that triggers a situation in which a prefi… | |||
| CVE-2023-28625 | medium | — | 5.5 | 3y ago | RHSA-2023:6940: mod_auth_openidc:2.3 security and bug fix update (Moderate) | |||
| CVE-2023-27538 | medium | — | 5.5 | 3y ago | An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH connection despite the fact that an SSH option was modified, which should have pr… | |||
| CVE-2023-53224 | medium | — | 5.5 | 3y ago | In the Linux kernel, the following vulnerability has been resolved: ext4: Fix function prototype mismatch for ext4_feat_ktype With clang's kernel control flow integrity (kCFI, CONFIG_CFI_CLANG), in… |