2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-6728 | LOW | 3.3 | 0.1% | Oct 17, 2024 | Nokia SR OS bof.cfg file encryption is vulnerable to a brute force attack. This weakness allows an attacker in possessio... |
| CVE-2023-32266 | MEDIUM | 5.3 | 0.2% | Oct 16, 2024 | Untrusted Search Path vulnerability in OpenText™ Application Lifecycle Management (ALM),Quality Center allows Code Inclu... |
| CVE-2023-32189 | MEDIUM | 6.4 | 0.1% | Oct 16, 2024 | Insecure handling of ssh keys used to bootstrap clients allows local attackers to potentially gain access to the keys |
| CVE-2023-32196 | HIGH | 7.5 | 0.5% | Oct 16, 2024 | A vulnerability has been identified whereby privilege escalation checks are not properly enforced for RoleTemplateobject... |
| CVE-2023-32194 | HIGH | 8.6 | 0.4% | Oct 16, 2024 | A vulnerability has been identified when granting a create or * global role for a resource type of "namespaces"; no matt... |
| CVE-2023-32193 | HIGH | 8.3 | 0.4% | Oct 16, 2024 | A vulnerability has been identified in which unauthenticated cross-site scripting (XSS) in Norman's public API endpoint... |
| CVE-2023-32192 | HIGH | 8.3 | 0.3% | Oct 16, 2024 | A vulnerability has been identified in which unauthenticated cross-site scripting (XSS) in the API Server's public API ... |
| CVE-2023-32191 | CRITICAL | 9.9 | 0.6% | Oct 16, 2024 | When RKE provisions a cluster, it stores the cluster state in a configmap called `full-cluster-state` inside the `kube-s... |
| CVE-2023-32190 | HIGH | 8.5 | 0.2% | Oct 16, 2024 | mlocate's %post script allows RUN_UPDATEDB_AS user to make arbitrary files world readable by abusing insecure file opera... |
| CVE-2023-32188 | CRITICAL | 9.4 | 0.5% | Oct 16, 2024 | A user can reverse engineer the JWT token (JSON Web Token) used in authentication for Manager and API access, forging a ... |
| CVE-2023-22650 | HIGH | 8.8 | 0.6% | Oct 16, 2024 | A vulnerability has been identified in which Rancher does not automatically clean up a user which has been deleted from ... |
| CVE-2023-7296 | MEDIUM | 6.4 | 0.3% | Oct 16, 2024 | The BigBlueButton plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the the moderator code and viewe... |
| CVE-2023-7295 | MEDIUM | 6.1 | 0.3% | Oct 16, 2024 | The Video Grid plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search_term parameter in ver... |
| CVE-2023-22649 | MEDIUM | 6.5 | 1.9% | Oct 16, 2024 | A vulnerability has been identified which may lead to sensitive data being leaked into Rancher's audit logs. [Rancher Au... |
| CVE-2023-7294 | MEDIUM | 6.5 | 0.3% | Oct 16, 2024 | The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized data modification due t... |
| CVE-2023-7293 | MEDIUM | 4.3 | 0.2% | Oct 16, 2024 | The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized access of data due to a... |
| CVE-2023-7292 | MEDIUM | 4.3 | 0.3% | Oct 16, 2024 | The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized notification dismissal ... |
| CVE-2023-7291 | HIGH | 8.1 | 0.4% | Oct 16, 2024 | The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized modification of data du... |
| CVE-2023-7290 | MEDIUM | 4.3 | 0.2% | Oct 16, 2024 | The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized access of data due to a... |
| CVE-2023-7289 | MEDIUM | 4.3 | 0.3% | Oct 16, 2024 | The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized API key update due to a... |
| CVE-2023-7288 | MEDIUM | 4.3 | 0.3% | Oct 16, 2024 | The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized data modification due t... |
| CVE-2023-7287 | MEDIUM | 5.4 | 0.3% | Oct 16, 2024 | The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized subscription cancellati... |
| CVE-2023-7286 | MEDIUM | 6.5 | 0.4% | Oct 16, 2024 | The plugin ACF Quick Edit Fields for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and ... |
| CVE-2023-31493 | MEDIUM | 6.6 | 0.7% | Oct 15, 2024 | RCE (Remote Code Execution) exists in ZoneMinder through 1.36.33 as an attacker can create a new .php log file in langua... |
| CVE-2023-48082 | CRITICAL | 9.1 | 1.5% | Oct 14, 2024 | Nagios XI before 2024R1 was discovered to improperly handle API keys generation (randomly-generated), allowing attackers... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now