CVE-2023 records published in July 2023
Page three of three: records 2,001 to 2,030 of the 2,030 published in July 2023, newest first. The first page carries the figures for July 2023.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2023-36609 | Ovarro TBox MS-CPU32 inclusion of untrusted functionality | 7.2v3.1 | 0.7% | 2023-07-03 | Fix |
| CVE-2023-36608 | Ovarro TBox MS-CPU32 weak cryptographic algorithm | 6.5v3.1 | 0.2% | 2023-07-03 | Fix |
| CVE-2023-36377 | osslsigncode mtrojnar buffer overflow | 7.8v3.1 | 0.3% | 2023-07-03 | Fix |
| CVE-2023-36291 | MaxSite CMS cross-site scripting | 6.1v3.1 | 0.5% | 2023-07-03 | |
| CVE-2023-36258 | langchain arbitrary code execution | 9.8v3.1 | 1.1% | 2023-07-03 | Fix |
| CVE-2023-36223 | bbs-go mlogclub cross-site scripting | 5.4v3.1 | 0.6% | 2023-07-03 | |
| CVE-2023-36222 | bbs-go mlogclub cross-site scripting | 5.4v3.1 | 0.6% | 2023-07-03 | |
| CVE-2023-36183 | OpenImageIO buffer overflow | 7.8v3.1 | 0.4% | 2023-07-03 | Fix |
| CVE-2023-36162 | zzcms cross-site request forgery | 8.8v3.1 | 0.5% | 2023-07-03 | |
| CVE-2023-36053 | Django has regular expression denial of service vulnerability in EmailValidator/URLValidator | 7.5v3.1 | 3.0% | 2023-07-03 | Fix |
| CVE-2023-35797 | Apache Airflow Hive Provider Beeline RCE with Principal | 9.8v3.1 | 2.8% | 2023-07-03 | Fix |
| CVE-2023-34451 | CometBFT may duplicate transactions in the mempool's data structures | 8.2CNA v3.1 | 0.9% | 2023-07-03 | Fix |
| CVE-2023-34450 | CometBFT PeerState JSON serialization deadlock | 3.7CNA v3.1 | 0.9% | 2023-07-03 | Fix |
| CVE-2023-26509 | AnyDesk denial of service | 7.5v3.1 | 1.1% | 2023-07-03 | |
| CVE-2023-26258 | Arcserve UDP incorrect authorization | 9.8v3.1 | 39.8% | 2023-07-03 | NucleiExploit code |
| CVE-2023-3497 | Google Chrome Google Security Processor firmware out-of-bounds read | 4.6v3.1 | 0.1% | 2023-07-03 | Fix |
| CVE-2023-3438 | Trellix Move unquoted search path | 4.4CNA v3.1 | 0.2% | 2023-07-03 | Fix |
| CVE-2023-3395 | Ovarro TBox MS-CPU32 plaintext password storage | 6.5v3.1 | 0.3% | 2023-07-03 | Fix |
| CVE-2023-3314 | Trellix Enterprise Security Manager OS command injection | 8.1CNA v3.1 | 0.9% | 2023-07-03 | Fix |
| CVE-2023-3313 | Trellix Enterprise Security Manager ESM certificate API injection | 7.8CNA v3.1 | 0.5% | 2023-07-03 | Fix |
| CVE-2023-2728 | Kubernetes bypassing enforce mountable secrets policy imposed by the ServiceAccount admission plugin | 6.5CNA v3.1 | 2.2% | 2023-07-03 | Exploit codeFix |
| CVE-2023-2727 | Kubernetes bypassing policies imposed by the ImagePolicyWebhook admission plugin | 6.5CNA v3.1 | 1.1% | 2023-07-03 | Fix |
| CVE-2023-31997 | Ubiquiti UniFi OS incorrect authorization | 9.0v3.1 | 0.3% | 2023-07-01 | |
| CVE-2023-30586 | Node.js Node A privilege escalation | 7.5v3.1 | 1.3% | 2023-07-01 | Fix |
| CVE-2023-28365 | Ubiquiti UniFi Network Application command injection | 9.1v3.1 | 0.8% | 2023-07-01 | Fix |
| CVE-2023-28364 | Brave Browser Android open redirect | 6.1v3.1 | 0.5% | 2023-07-01 | Fix |
| CVE-2023-28324 | Ivanti Endpoint Manager improper input validation | 9.8v3.1 | 12.9% | 2023-07-01 | MetasploitExploit codeFix |
| CVE-2023-28323 | Ivanti Endpoint Manager EPM deserialization of untrusted data | 9.8v3.1 | 3.1% | 2023-07-01 | Fix |
| CVE-2023-26136 | tough-cookie prototype pollution | 9.8NVD v3.1 | 2.6% | 2023-07-01 | Exploit codeFix |
| CVE-2023-22814 | Authentication bypass issue in My Cloud OS 5 devices | 10.0CNA v3.1 | 0.7% | 2023-07-01 | Fix |