2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-25189 | LOW | 3.3 | 0.1% | Sep 25, 2024 | BTS is affected by information disclosure vulnerability where mobile network operator personnel connected over BTS Web E... |
| CVE-2023-5359 | HIGH | 7.5 | 0.8% | Sep 25, 2024 | The W3 Total Cache plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including... |
| CVE-2023-26691 | HIGH | 7.2 | 1.2% | Sep 25, 2024 | Directory Traversal vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to run arbitrary code via crafte... |
| CVE-2023-26690 | HIGH | 8.8 | 0.7% | Sep 25, 2024 | File Upload vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to run arbitrary code via File Manager/E... |
| CVE-2023-26689 | CRITICAL | 9.8 | 0.6% | Sep 25, 2024 | An issue discovered in CS-Cart MultiVendor 4.16.1 allows attackers to alter arbitrary user account profiles via crafted ... |
| CVE-2023-26688 | MEDIUM | 5.4 | 0.4% | Sep 25, 2024 | Cross Site Scripting (XSS) vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to run arbitrary code via... |
| CVE-2023-26687 | HIGH | 8.8 | 1.2% | Sep 25, 2024 | Directory Traversal vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to obtain sensitive information ... |
| CVE-2023-26686 | CRITICAL | 9.8 | 0.7% | Sep 25, 2024 | File Upload vulnerability in CS-Cart MultiVendor 4.16.1 allows remote attackers to run arbitrary code via the image uplo... |
| CVE-2023-7282 | MEDIUM | 4.3 | 0.2% | Sep 23, 2024 | Inappropriate implementation in Navigation in Google Chrome prior to 113.0.5672.63 allowed a remote attacker who convinc... |
| CVE-2023-7281 | MEDIUM | 4.3 | 0.2% | Sep 23, 2024 | Inappropriate implementation in Compositing in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perfor... |
| CVE-2023-46948 | MEDIUM | 5.4 | 0.4% | Sep 23, 2024 | A reflected Cross-Site Scripting (XSS) vulnerability was found on Temenos T24 Browser R19.40 that enables a remote attac... |
| CVE-2023-47480 | HIGH | 8.4 | 0.2% | Sep 20, 2024 | An issue in Pure Data 0.54-0 and fixed in 0.54-1 allows a local attacker to escalate privileges via the set*id () functi... |
| CVE-2023-27584 | CRITICAL | 9.8 | 29.8% | Sep 19, 2024 | Dragonfly is an open source P2P-based file distribution and image acceleration system. It is hosted by the Cloud Native ... |
| CVE-2023-30464 | HIGH | 7.5 | 0.4% | Sep 18, 2024 | CoreDNS through 1.10.1 enables attackers to achieve DNS cache poisoning and inject fake responses via a birthday attack. |
| CVE-2023-41612 | HIGH | 8.8 | 0.2% | Sep 18, 2024 | Victure PC420 1.1.39 was discovered to use a weak encryption key for the file enabled_telnet.dat on the Micro SD card. |
| CVE-2023-41611 | MEDIUM | 6.5 | 0.4% | Sep 18, 2024 | Victure PC420 1.1.39 was discovered to use a weak and partially hardcoded key to encrypt data. |
| CVE-2023-41610 | HIGH | 8.8 | 0.4% | Sep 18, 2024 | Victure PC420 1.1.39 was discovered to contain a hardcoded root password which is stored in plaintext. |
| CVE-2023-47105 | HIGH | 8.6 | 1.7% | Sep 18, 2024 | exec.CommandContext in Chaosblade 0.3 through 1.7.3, when server mode is used, allows OS command execution via the cmd p... |
| CVE-2023-49203 | HIGH | 7.5 | 0.6% | Sep 18, 2024 | Technitium 11.5.3 allows remote attackers to cause a denial of service (bandwidth amplification) because the DNSBomb man... |
| CVE-2023-28457 | HIGH | 7.5 | 0.2% | Sep 18, 2024 | An issue was discovered in Technitium through 11.0.3. It enables attackers to conduct a DNS cache poisoning attack and i... |
| CVE-2023-28456 | HIGH | 7.5 | 0.5% | Sep 18, 2024 | An issue was discovered in Technitium through 11.0.2. It enables attackers to launch amplification attacks (3 times more... |
| CVE-2023-28455 | HIGH | 7.5 | 0.5% | Sep 18, 2024 | An issue was discovered in Technitium through 11.0.2. The forwarding mode enables attackers to create a query loop using... |
| CVE-2023-28452 | HIGH | 7.5 | 0.6% | Sep 18, 2024 | An issue was discovered in CoreDNS through 1.10.1. There is a vulnerability in DNS resolving software, which triggers a ... |
| CVE-2023-28451 | HIGH | 7.5 | 0.5% | Sep 18, 2024 | An issue was discovered in Technitium 11.0.2. There is a vulnerability (called BadDNS) in DNS resolving software, which ... |
| CVE-2023-45854 | HIGH | 7.5 | 0.3% | Sep 16, 2024 | A Business Logic vulnerability in Shopkit 1.0 allows an attacker to add products with negative quantities to the shoppin... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now