2023 CVE Vulnerabilities
31,442 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-1320 | MEDIUM | 6.1 | 0.6% | Mar 10, 2023 | Cross-site Scripting (XSS) - Stored in GitHub repository osticket/osticket prior to v1.16.6. |
| CVE-2023-1319 | MEDIUM | 4.8 | 0.5% | Mar 10, 2023 | Cross-site Scripting (XSS) - Stored in GitHub repository osticket/osticket prior to v1.16.6. |
| CVE-2023-1318 | MEDIUM | 5.4 | 1.0% | Mar 10, 2023 | Cross-site Scripting (XSS) - Generic in GitHub repository osticket/osticket prior to v1.16.6. |
| CVE-2023-1317 | MEDIUM | 5.4 | 1.0% | Mar 10, 2023 | Cross-site Scripting (XSS) - Reflected in GitHub repository osticket/osticket prior to v1.16.6. |
| CVE-2023-1316 | MEDIUM | 5.4 | 0.5% | Mar 10, 2023 | Cross-site Scripting (XSS) - Stored in GitHub repository osticket/osticket prior to v1.16.6. |
| CVE-2023-1315 | MEDIUM | 5.4 | 1.1% | Mar 10, 2023 | Cross-site Scripting (XSS) - Reflected in GitHub repository osticket/osticket prior to v1.16.6. |
| CVE-2023-0746 | MEDIUM | 6.1 | 0.4% | Mar 10, 2023 | The help page in GigaVUE-FM, when using GigaVUE-OS software version 5.0 202, does not require an authenticated user. An ... |
| CVE-2023-26464 | HIGH | 7.5 | 1.9% | Mar 10, 2023 | ** UNSUPPORTED WHEN ASSIGNED ** When using the Chainsaw or SocketAppender components with Log4j 1.x on JRE less than 1.... |
| CVE-2023-24774 | CRITICAL | 9.8 | 0.9% | Mar 10, 2023 | Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \controller\au... |
| CVE-2023-1313 | HIGH | 8.8 | 1.0% | Mar 10, 2023 | Unrestricted Upload of File with Dangerous Type in GitHub repository cockpit-hq/cockpit prior to 2.4.1. |
| CVE-2023-1015 | — | — | — | Mar 10, 2023 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2023-25947 | MEDIUM | 5.5 | 0.2% | Mar 10, 2023 | The bundle management subsystem within OpenHarmony-v3.1.4 and prior versions has a null pointer reference vulnerability ... |
| CVE-2023-24465 | MEDIUM | 5.5 | 0.2% | Mar 10, 2023 | Communication Wi-Fi subsystem within OpenHarmony-v3.1.4 and prior versions, OpenHarmony-v3.0.7 and prior versions has a... |
| CVE-2023-22436 | HIGH | 7.8 | 0.2% | Mar 10, 2023 | The kernel subsystem function check_permission_for_set_tokenid within OpenHarmony-v3.1.5 and prior versions has an UAF... |
| CVE-2023-22301 | HIGH | 7.5 | 0.6% | Mar 10, 2023 | The kernel subsystem hmdfs within OpenHarmony-v3.1.5 and prior versions has an arbitrary memory accessing vulnerabilit... |
| CVE-2023-1312 | MEDIUM | 4.8 | 0.4% | Mar 10, 2023 | Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.19. |
| CVE-2023-0083 | MEDIUM | 5.5 | 0.2% | Mar 10, 2023 | The ArKUI framework subsystem within OpenHarmony-v3.1.5 and prior versions, OpenHarmony-v3.0.7 and prior versions has... |
| CVE-2023-1311 | CRITICAL | 9.8 | 0.8% | Mar 10, 2023 | A vulnerability, which was classified as critical, was found in SourceCodester Friendly Island Pizza Website and Orderin... |
| CVE-2023-1310 | CRITICAL | 9.8 | 0.7% | Mar 10, 2023 | A vulnerability, which was classified as critical, has been found in SourceCodester Online Graduate Tracer System 1.0. A... |
| CVE-2023-1309 | CRITICAL | 9.8 | 0.7% | Mar 10, 2023 | A vulnerability classified as critical was found in SourceCodester Online Graduate Tracer System 1.0. Affected by this v... |
| CVE-2023-1308 | CRITICAL | 9.8 | 0.7% | Mar 10, 2023 | A vulnerability classified as critical has been found in SourceCodester Online Graduate Tracer System 1.0. Affected is a... |
| CVE-2023-1091 | CRITICAL | 9.8 | 0.7% | Mar 10, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Alpata Licensed Wa... |
| CVE-2023-27119 | MEDIUM | 5.5 | 0.3% | Mar 10, 2023 | WebAssembly v1.0.29 was discovered to contain a segmentation fault via the component wabt::Decompiler::WrapChild. |
| CVE-2023-27117 | HIGH | 7.8 | 0.3% | Mar 10, 2023 | WebAssembly v1.0.29 was discovered to contain a heap overflow via the component component wabt::Node::operator. |
| CVE-2023-27116 | MEDIUM | 5.5 | 0.3% | Mar 10, 2023 | WebAssembly v1.0.29 discovered to contain an abort in CWriter::MangleType. |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now