2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-22793 | CRITICAL | 9.3 | 0.5% | Oct 29, 2026 | A vulnerability allowing an unauthenticated attacker to perform remote code execution (RCE) on servers running the Veeam... |
| CVE-2023-7357 | HIGH | 8.6 | 0.4% | Oct 29, 2026 | A remote code execution (RCE) vulnerability was identified in the FlexNet Publisher lmadmin web user interface. This vul... |
| CVE-2023-54413 | MEDIUM | 6.1 | — | Oct 22, 2026 | WPML Multilingual CMS plugin for WordPress before 4.6.1 contains a reflected cross-site scripting vulnerability that all... |
| CVE-2023-7356 | HIGH | 8.8 | 0.3% | Oct 21, 2026 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Copy BASE if service data matches E... |
| CVE-2023-42999 | — | — | — | Oct 19, 2026 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. |
| CVE-2023-42998 | — | — | — | Oct 19, 2026 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. |
| CVE-2023-42997 | — | — | — | Oct 19, 2026 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. |
| CVE-2023-42996 | — | — | — | Oct 19, 2026 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. |
| CVE-2023-42995 | — | — | — | Oct 19, 2026 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. |
| CVE-2023-42994 | — | — | — | Oct 19, 2026 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. |
| CVE-2023-42993 | — | — | — | Oct 19, 2026 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. |
| CVE-2023-42992 | — | — | — | Oct 19, 2026 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. |
| CVE-2023-42991 | — | — | — | Oct 19, 2026 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. |
| CVE-2023-42990 | — | — | — | Oct 19, 2026 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. |
| CVE-2023-38375 | MEDIUM | 6.1 | 0.3% | Oct 19, 2026 | IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embe... |
| CVE-2023-32198 | HIGH | 8 | 0.3% | Oct 15, 2026 | A vulnerability has been identified in Steve where by default it was using an insecure option that did not validate the ... |
| CVE-2023-54412 | MEDIUM | 6.5 | 0.2% | Oct 12, 2026 | Frappe before 13.46.3 and 14.x before 14.21.1 contains an improper access control vulnerability in Email Template permis... |
| CVE-2023-54411 | MEDIUM | 5.9 | 0.3% | Oct 12, 2026 | Frappe framework before 13.32.0 uses weak authentication for print view access, because the print view key can be derive... |
| CVE-2023-54410 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | Frappe before 13.22.0 contains an improper authorization vulnerability that allows authenticated users to rename documen... |
| CVE-2023-54409 | MEDIUM | 4.8 | — | Oct 12, 2026 | Frappe before 13.46.1 and 14.x before 14.20.0 contains a cross-site scripting vulnerability because the html2text functi... |
| CVE-2023-54408 | MEDIUM | 6.1 | 0.2% | Oct 12, 2026 | Frappe before 13.52.0 and 14.x before 14.31.0 contains an HTML injection vulnerability caused by weak escaping of user-s... |
| CVE-2023-54407 | MEDIUM | 4.9 | 0.3% | Oct 12, 2026 | Frappe 14.x before 14.45.0 contains an information disclosure vulnerability that allows users with error log access to v... |
| CVE-2023-54406 | MEDIUM | 4.9 | 0.3% | Oct 12, 2026 | Frappe before 14.59.0 and 15.x before 15.5.0 contains a sandbox flaw where the frappe.flags.in_safe_exec global flag can... |
| CVE-2023-25996 | MEDIUM | 6.5 | 0.3% | Oct 12, 2026 | Insertion of Sensitive Information Into Sent Data vulnerability in Pluggabl LLC. Booster Elite for WooCommerce booster-e... |
| CVE-2023-5649 | MEDIUM | 5.5 | 0.1% | Oct 8, 2026 | An Improper Input Validation vulnerability for the registered case credentials in Brocade ASCG before v3.0 could allow a... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now