2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-37544 | HIGH | 7.5 | 1.4% | Dec 20, 2023 | Improper Authentication vulnerability in Apache Pulsar WebSocket Proxy allows an attacker to connect to the /pingpong en... |
| CVE-2023-6977 | HIGH | 7.5 | 3.9% | Dec 20, 2023 | This vulnerability enables malicious users to read sensitive files on the server. |
| CVE-2023-6976 | HIGH | 8.8 | 1.0% | Dec 20, 2023 | This vulnerability is capable of writing arbitrary files into arbitrary locations on the remote filesystem in the contex... |
| CVE-2023-47706 | HIGH | 8.8 | 0.8% | Dec 20, 2023 | IBM Security Guardium Key Lifecycle Manager 4.3 could allow an authenticated user to upload files of a dangerous file ty... |
| CVE-2023-47704 | HIGH | 7.5 | 0.6% | Dec 20, 2023 | IBM Security Guardium Key Lifecycle Manager 4.3 contains plain text hard-coded credentials or other secrets in source co... |
| CVE-2023-6689 | HIGH | 8.8 | 0.3% | Dec 20, 2023 | A successful CSRF attack could force the user to perform state changing requests on the application. If the victim ... |
| CVE-2023-50707 | HIGH | 7.5 | 0.7% | Dec 20, 2023 | Through the exploitation of active user sessions, an attacker could send custom requests to cause a denial-of-service c... |
| CVE-2023-49147 | HIGH | 7.8 | 0.5% | Dec 19, 2023 | An issue was discovered in PDF24 Creator 11.14.0. The configuration of the msi installer file was found to produce a vis... |
| CVE-2023-50835 | HIGH | 8.8 | 0.3% | Dec 19, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Praveen Goswami Advanced Category Template.This issue affects Advance... |
| CVE-2023-49164 | HIGH | 8.8 | 0.3% | Dec 19, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in OceanWP Ocean Extra.This issue affects Ocean Extra: from n/a through ... |
| CVE-2023-38126 | HIGH | 7.2 | 68.6% | Dec 19, 2023 | Softing edgeAggregator Restore Configuration Directory Traversal Remote Code Execution Vulnerability. This vulnerability... |
| CVE-2023-50466 | HIGH | 8.8 | 1.9% | Dec 19, 2023 | An authenticated command injection vulnerability in Weintek cMT2078X easyweb Web Version v2.1.3, OS v20220215 allows att... |
| CVE-2023-49812 | HIGH | 7.5 | 0.5% | Dec 19, 2023 | Authorization Bypass Through User-Controlled Key vulnerability in J.N. Breetvelt a.K.A. OpaJaap WP Photo Album Plus.This... |
| CVE-2023-49764 | HIGH | 7.2 | 0.7% | Dec 19, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Younes JFR. Advanc... |
| CVE-2023-48764 | HIGH | 7.2 | 0.7% | Dec 19, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in GuardGiant Brute F... |
| CVE-2023-48741 | HIGH | 7.2 | 0.7% | Dec 19, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in QuantumCloud AI Ch... |
| CVE-2023-48327 | HIGH | 7.2 | 0.7% | Dec 19, 2023 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WC Vendors WC Vend... |
| CVE-2023-43826 | HIGH | 8.8 | 0.9% | Dec 19, 2023 | Apache Guacamole 1.5.3 and older do not consistently ensure that values received from a VNC server will not result in in... |
| CVE-2023-34382 | HIGH | 8.8 | 0.5% | Dec 19, 2023 | Deserialization of Untrusted Data vulnerability in weDevs Dokan – Best WooCommerce Multivendor Marketplace Solution – Bu... |
| CVE-2023-46804 | HIGH | 7.5 | 4.1% | Dec 19, 2023 | An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could r... |
| CVE-2023-46803 | HIGH | 7.5 | 4.1% | Dec 19, 2023 | An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could r... |
| CVE-2023-46262 | HIGH | 7.5 | 82.8% | Dec 19, 2023 | An unauthenticated attacked could send a specifically crafted web request causing a Server-Side Request Forgery (SSRF) i... |
| CVE-2023-44991 | HIGH | 7.5 | 0.6% | Dec 19, 2023 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Jordy Meow Media File Renamer: Rename Files ... |
| CVE-2023-44983 | HIGH | 7.5 | 0.6% | Dec 19, 2023 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Aruba.It Aruba HiSpeed Cache.This issue affe... |
| CVE-2023-6913 | HIGH | 8.1 | 0.7% | Dec 19, 2023 | A session hijacking vulnerability has been detected in the Imou Life application affecting version 6.7.0. This vulnerabi... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now