2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-47803 | MEDIUM | 5.3 | 0.7% | Jun 28, 2024 | A vulnerability regarding improper limitation of a pathname to a restricted directory ('Path Traversal') is found in the... |
| CVE-2023-47802 | HIGH | 7.2 | 1.5% | Jun 28, 2024 | A vulnerability regarding improper neutralization of special elements used in an OS command ('OS Command Injection') is ... |
| CVE-2023-52892 | HIGH | 7.5 | 0.4% | Jun 27, 2024 | In phpseclib before 1.0.22, 2.x before 2.0.46, and 3.x before 3.0.33, some characters in Subject Alternative Name fields... |
| CVE-2023-38370 | MEDIUM | 6.5 | 0.7% | Jun 27, 2024 | IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1, under certain configurations, could allow a user on the ne... |
| CVE-2023-38368 | MEDIUM | 5.5 | 0.2% | Jun 27, 2024 | IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could disclose sensitive information to a local user to do ... |
| CVE-2023-30998 | HIGH | 7.8 | 0.2% | Jun 27, 2024 | IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could allow a local user to obtain root access due to impro... |
| CVE-2023-30997 | HIGH | 7.8 | 0.2% | Jun 27, 2024 | IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could allow a local user to obtain root access due to impro... |
| CVE-2023-42014 | MEDIUM | 5.4 | 0.3% | Jun 27, 2024 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.2.0.2 is vulnerable to cross-site scripting. This vulnera... |
| CVE-2023-42011 | MEDIUM | 5.4 | 0.2% | Jun 27, 2024 | IBM Sterling B2B Integrator Standard Edition 6.1 and 6.2 does not restrict or incorrectly restricts frame objects or UI ... |
| CVE-2023-38371 | HIGH | 7.5 | 0.5% | Jun 27, 2024 | IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 uses weaker than expected cryptographic algorithms that cou... |
| CVE-2023-30430 | MEDIUM | 5.5 | 0.2% | Jun 27, 2024 | IBM Security Verify Access 10.0.0 through 10.0.7.1 could allow a local user to obtain sensitive information from trace l... |
| CVE-2023-7270 | MEDIUM | 5.3 | 0.3% | Jun 27, 2024 | An issue was discovered in SoftMaker Office 2024 / NX before revision 1214 and SoftMaker FreeOffice 2014 before revision... |
| CVE-2023-26877 | MEDIUM | 6.3 | 0.4% | Jun 26, 2024 | File upload vulnerability found in Softexpert Excellence Suite v.2.1 allows attackers to execute arbitrary code via a .p... |
| CVE-2023-37541 | MEDIUM | 4.3 | 0.3% | Jun 25, 2024 | HCL Connections contains a broken access control vulnerability that may allow unauthorized user to update data in certai... |
| CVE-2023-5038 | HIGH | 7.5 | 0.4% | Jun 25, 2024 | badmonkey, a Security Researcher has found a flaw that allows for a unauthenticated DoS attack on the camera. An attacke... |
| CVE-2023-6198 | CRITICAL | 9.3 | 0.4% | Jun 25, 2024 | Use of Hard-coded Credentials vulnerability in Baicells Snap Router BaiCE_BMI on EP3011 (User Passwords modules) allows ... |
| CVE-2023-50029 | CRITICAL | 10 | 0.8% | Jun 24, 2024 | PHP Injection vulnerability in the module "M4 PDF Extensions" (m4pdf) up to version 3.3.2 from PrestaAddons for PrestaSh... |
| CVE-2023-45195 | MEDIUM | 5.3 | 0.4% | Jun 24, 2024 | Adminer and AdminerEvo are vulnerable to SSRF via database connection fields. This could allow an unauthenticated remote... |
| CVE-2023-45196 | HIGH | 7.5 | 0.6% | Jun 24, 2024 | Adminer and AdminerEvo allow an unauthenticated remote attacker to cause a denial of service by connecting to an attacke... |
| CVE-2023-49793 | MEDIUM | 6.5 | 0.7% | Jun 24, 2024 | CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Z... |
| CVE-2023-45673 | CRITICAL | 9 | 1.0% | Jun 21, 2024 | Joplin is a free, open source note taking and to-do application. A remote code execution (RCE) vulnerability in affected... |
| CVE-2023-39517 | MEDIUM | 5.4 | 0.5% | Jun 21, 2024 | Joplin is a free, open source note taking and to-do application. A Cross site scripting (XSS) vulnerability in affected ... |
| CVE-2023-38506 | MEDIUM | 5.4 | 0.4% | Jun 21, 2024 | Joplin is a free, open source note taking and to-do application. A Cross-site Scripting (XSS) vulnerability allows pasti... |
| CVE-2023-37898 | MEDIUM | 5.4 | 0.4% | Jun 21, 2024 | Joplin is a free, open source note taking and to-do application. A Cross-site Scripting (XSS) vulnerability allows an un... |
| CVE-2023-38389 | CRITICAL | 9.8 | 1.2% | Jun 21, 2024 | Incorrect Authorization vulnerability in Artbees JupiterX Core allows Accessing Functionality Not Properly Constrained b... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now