2023 CVE Vulnerabilities
31,510 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-2342 | MEDIUM | 5.4 | 0.4% | Apr 27, 2023 | Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21. |
| CVE-2023-2341 | MEDIUM | 6.1 | 1.1% | Apr 27, 2023 | Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.21. |
| CVE-2023-24966 | MEDIUM | 6.1 | 0.4% | Apr 27, 2023 | IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to e... |
| CVE-2023-30444 | MEDIUM | 6.5 | 0.4% | Apr 27, 2023 | IBM Watson Machine Learning on Cloud Pak for Data 4.0 and 4.5 is vulnerable to server-side request forgery (SSRF). This ... |
| CVE-2023-2340 | MEDIUM | 5.4 | 0.5% | Apr 27, 2023 | Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21. |
| CVE-2023-29255 | HIGH | 7.5 | 1.0% | Apr 27, 2023 | IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a denial of serv... |
| CVE-2023-2339 | MEDIUM | 5.4 | 0.5% | Apr 27, 2023 | Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21. |
| CVE-2023-2338 | HIGH | 8.8 | 0.9% | Apr 27, 2023 | SQL Injection in GitHub repository pimcore/pimcore prior to 10.5.21. |
| CVE-2023-2336 | MEDIUM | 6.5 | 0.7% | Apr 27, 2023 | Path Traversal in GitHub repository pimcore/pimcore prior to 10.5.21. |
| CVE-2023-2331 | HIGH | 7.8 | 0.2% | Apr 27, 2023 | Unquoted service Path or Element vulnerability in 42Gears Surelock Windows SureLock Service (NixService.Exe) on Windows ... |
| CVE-2023-2328 | MEDIUM | 5.4 | 0.4% | Apr 27, 2023 | Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.21. |
| CVE-2023-2327 | MEDIUM | 5.4 | 0.4% | Apr 27, 2023 | Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21. |
| CVE-2023-1778 | CRITICAL | 9.8 | 1.1% | Apr 27, 2023 | This vulnerability exists in GajShield Data Security Firewall firmware versions prior to v4.28 (except v4.21) due to ins... |
| CVE-2023-2323 | MEDIUM | 5.4 | 0.5% | Apr 27, 2023 | Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21. |
| CVE-2023-2322 | MEDIUM | 5.4 | 0.6% | Apr 27, 2023 | Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21. |
| CVE-2023-28770 | HIGH | 7.5 | 57.8% | Apr 27, 2023 | The sensitive information exposure vulnerability in the CGI “Export_Log” and the binary “zcmd” in Zyxel DX5401-B0 firmwa... |
| CVE-2023-28769 | CRITICAL | 9.8 | 5.4% | Apr 27, 2023 | The buffer overflow vulnerability in the library “libclinkc.so” of the web server “zhttpd” in Zyxel DX5401-B0 firmware v... |
| CVE-2023-31290 | MEDIUM | 5.9 | 1.0% | Apr 27, 2023 | Trust Wallet Core before 3.1.1, as used in the Trust Wallet browser extension before 0.0.183, allows theft of funds beca... |
| CVE-2023-31287 | HIGH | 7.8 | 0.4% | Apr 27, 2023 | An issue was discovered in Serenity Serene (and StartSharp) before 6.7.0. Password reset links are sent by email. A link... |
| CVE-2023-31286 | MEDIUM | 5.3 | 1.0% | Apr 27, 2023 | An issue was discovered in Serenity Serene (and StartSharp) before 6.7.0. When a password reset request occurs, the serv... |
| CVE-2023-31285 | MEDIUM | 6.1 | 0.8% | Apr 27, 2023 | An XSS issue was discovered in Serenity Serene (and StartSharp) before 6.7.0. When users upload temporary files, some sp... |
| CVE-2023-28697 | CRITICAL | 9.8 | 0.9% | Apr 27, 2023 | Moxa MiiNePort E1 has a vulnerability of insufficient access control. An unauthenticated remote user can exploit this vu... |
| CVE-2023-24836 | HIGH | 8.8 | 1.2% | Apr 27, 2023 | SUNNET CTMS has vulnerability of path traversal within its file uploading function. An authenticated remote attacker wit... |
| CVE-2023-22901 | MEDIUM | 4.9 | 0.9% | Apr 27, 2023 | ChangingTec MOTP system has a path traversal vulnerability. A remote attacker with administrator’s privilege can exploit... |
| CVE-2023-20853 | CRITICAL | 9.8 | 1.0% | Apr 27, 2023 | aEnrich Technology a+HRD has a vulnerability of Deserialization of Untrusted Data within its MSMQ asynchronized message ... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now