2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-45880 | HIGH | 7.2 | 1.2% | Nov 14, 2023 | GibbonEdu Gibbon through version 25.0.0 allows Directory Traversal via the report template builder. An attacker can crea... |
| CVE-2023-43901 | HIGH | 7.5 | 0.4% | Nov 14, 2023 | Incorrect access control in the AdHoc User creation form of eMudhra emSigner v2.8.7 allows unauthenticated attackers to ... |
| CVE-2023-42326 | HIGH | 8.8 | 64.0% | Nov 14, 2023 | An issue in Netgate pfSense v.2.7.0 allows a remote attacker to execute arbitrary code via a crafted request to the inte... |
| CVE-2023-45560 | HIGH | 7.5 | 0.7% | Nov 14, 2023 | An issue in Yasukawa memberscard v.13.6.1 allows attackers to send crafted notifications via leakage of the channel acce... |
| CVE-2023-45558 | HIGH | 7.5 | 0.7% | Nov 14, 2023 | An issue in Golden v.13.6.1 allows attackers to send crafted notifications via leakage of the channel access token. |
| CVE-2023-47629 | HIGH | 8 | 0.5% | Nov 14, 2023 | DataHub is an open-source metadata platform. In affected versions sign-up through an invite link does not properly restr... |
| CVE-2023-31403 | HIGH | 8 | 0.4% | Nov 14, 2023 | SAP Business One installation - version 10.0, does not perform proper authentication and authorization checks for SMB sh... |
| CVE-2023-47346 | HIGH | 7.5 | 0.8% | Nov 13, 2023 | Buffer Overflow vulnerability in free5gc 3.3.0, UPF 1.2.0, and SMF 1.2.0 allows attackers to cause a denial of service v... |
| CVE-2023-47117 | HIGH | 7.5 | 4.1% | Nov 13, 2023 | Label Studio is an open source data labeling tool. In all current versions of Label Studio prior to 1.9.2post0, the appl... |
| CVE-2023-47621 | HIGH | 8.8 | 1.0% | Nov 13, 2023 | Guest Entries is a php library which allows users to create, update & delete entries from the front-end of a site. In af... |
| CVE-2023-6101 | HIGH | 7.5 | 0.9% | Nov 13, 2023 | A vulnerability, which was classified as problematic, has been found in Maiwei Safety Production Control Platform 4.1. T... |
| CVE-2023-48060 | HIGH | 8.8 | 0.4% | Nov 13, 2023 | Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/task/add |
| CVE-2023-48058 | HIGH | 8.8 | 0.4% | Nov 13, 2023 | Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/task/run |
| CVE-2023-6097 | HIGH | 8.8 | 0.8% | Nov 13, 2023 | A SQL injection vulnerability has been found in ICS Business Manager, affecting version 7.06.0028.7089. This vulnerabili... |
| CVE-2023-5747 | HIGH | 8.8 | 0.6% | Nov 13, 2023 | Bashis, a Security Researcher at IPVM has found a flaw that allows for a remote code execution during the installation o... |
| CVE-2023-5037 | HIGH | 7.2 | 1.5% | Nov 13, 2023 | badmonkey, a Security Researcher has found a flaw that allows for a authenticated command injection on the camera. An at... |
| CVE-2023-47163 | HIGH | 7.5 | 1.0% | Nov 13, 2023 | Remarshal prior to v0.17.1 expands YAML alias nodes unlimitedly, hence Remarshal is vulnerable to Billion Laughs Attack.... |
| CVE-2023-46207 | HIGH | 7.5 | 0.5% | Nov 13, 2023 | Server-Side Request Forgery (SSRF) vulnerability in StylemixThemes Motors – Car Dealer, Classifieds & Listing.This issue... |
| CVE-2023-35041 | HIGH | 8.8 | 0.3% | Nov 13, 2023 | Cross-Site Request Forgery (CSRF) vulnerability leading to Local File Inclusion (LF) in Webpushr Web Push Notifications ... |
| CVE-2023-34013 | HIGH | 7.5 | 0.4% | Nov 13, 2023 | Server-Side Request Forgery (SSRF) vulnerability in Poll Maker Team Poll Maker – Best WordPress Poll Plugin.This issue a... |
| CVE-2023-47669 | HIGH | 8.8 | 0.3% | Nov 13, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Cozmoslabs User Profile Builder – Beautiful User Registration Forms, ... |
| CVE-2023-34384 | HIGH | 8.8 | 0.3% | Nov 13, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Kebo Kebo Twitter Feed plugin <= 1.5.12 versions. |
| CVE-2023-34378 | HIGH | 8.8 | 0.3% | Nov 13, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in scriptburn.Com WP Hide Post plugin <= 2.0.10 versions. |
| CVE-2023-33207 | HIGH | 8.8 | 0.3% | Nov 13, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Krzysztof Wielogórski Stop Referrer Spam plugin <= 1.3.0 versions. |
| CVE-2023-32588 | HIGH | 8.8 | 0.3% | Nov 13, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in BRANDbrilliance Post State Tags plugin <= 2.0.6 versions. |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now