2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-25043 | MEDIUM | 4.3 | 0.5% | Apr 17, 2024 | Incorrect Authorization vulnerability in Supsystic Data Tables Generator.This issue affects Data Tables Generator: from ... |
| CVE-2023-51391 | HIGH | 7.5 | 0.8% | Apr 16, 2024 | A bug in Micrium OS Network HTTP Server permits an invalid pointer dereference during header processing - potentially al... |
| CVE-2023-45000 | MEDIUM | 5.3 | 0.4% | Apr 16, 2024 | Missing Authorization vulnerability in LiteSpeed Technologies LiteSpeed Cache.This issue affects LiteSpeed Cache: from n... |
| CVE-2023-40000 | MEDIUM | 6.1 | 54.9% | Apr 16, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LiteSpeed Technolo... |
| CVE-2023-50872 | HIGH | 7.5 | 0.4% | Apr 16, 2024 | The API in Accredible Credential.net December 6th, 2023 allows an Insecure Direct Object Reference attack that discloses... |
| CVE-2023-33806 | HIGH | 7.8 | 0.2% | Apr 15, 2024 | Insecure default configurations in Hikvision Interactive Tablet DS-D5B86RB/B V2.3.0 build220119, allows attackers to exe... |
| CVE-2023-45503 | MEDIUM | 5.3 | 0.9% | Apr 15, 2024 | SQL Injection vulnerability in Macrob7 Macs CMS 1.1.4f, allows remote attackers to execute arbitrary code, cause a denia... |
| CVE-2023-4857 | HIGH | 7.5 | 0.5% | Apr 15, 2024 | An authentication bypass vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user to exe... |
| CVE-2023-4856 | HIGH | 8.8 | 0.7% | Apr 15, 2024 | A format string vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user to execute arbi... |
| CVE-2023-4855 | HIGH | 7.2 | 1.1% | Apr 15, 2024 | A command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user with elevat... |
| CVE-2023-48710 | CRITICAL | 9.8 | 0.7% | Apr 15, 2024 | iTop is an IT service management platform. Files from the `env-production` folder can be retrieved even though they sho... |
| CVE-2023-48709 | HIGH | 8 | 1.0% | Apr 15, 2024 | iTop is an IT service management platform. When exporting data from backoffice or portal in CSV or Excel files, users' ... |
| CVE-2023-47626 | MEDIUM | 6.1 | 0.4% | Apr 15, 2024 | iTop is an IT service management platform. When displaying/editing the user's personal tokens, XSS attacks are possible... |
| CVE-2023-47622 | MEDIUM | 6.1 | 0.4% | Apr 15, 2024 | iTop is an IT service management platform. When dashlet are refreshed, XSS attacks are possible. This vulnerability is... |
| CVE-2023-47123 | MEDIUM | 5.4 | 0.3% | Apr 15, 2024 | iTop is an IT service management platform. By filling malicious code in an object friendlyname / complementary name, an... |
| CVE-2023-45808 | MEDIUM | 5.4 | 0.3% | Apr 15, 2024 | iTop is an IT service management platform. When creating or updating an object, extkey values aren't checked to be in t... |
| CVE-2023-44396 | MEDIUM | 5.4 | 0.4% | Apr 15, 2024 | iTop is an IT service management platform. Dashlet edits ajax endpoints can be used to produce XSS. Fixed in iTop 2.7.1... |
| CVE-2023-43790 | MEDIUM | 5.4 | 0.4% | Apr 15, 2024 | iTop is an IT service management platform. By manipulating HTTP queries, a user can inject malicious content in the fie... |
| CVE-2023-38511 | MEDIUM | 4.3 | 0.7% | Apr 15, 2024 | iTop is an IT service management platform. Dashboard editor : can load multiple files and URL, and full path disclosure... |
| CVE-2023-52144 | MEDIUM | 5.5 | 0.4% | Apr 15, 2024 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in RexTheme Product Feed Ma... |
| CVE-2023-7201 | MEDIUM | 6.5 | 0.6% | Apr 15, 2024 | The Everest Backup WordPress plugin before 2.2.5 does not properly validate backup files to be uploaded, allowing high ... |
| CVE-2023-6067 | MEDIUM | 5.4 | 0.4% | Apr 15, 2024 | The WP User Profile Avatar WordPress plugin through 1.0.1 does not validate and escape some of its shortcode attributes ... |
| CVE-2023-6494 | MEDIUM | 4.4 | 0.3% | Apr 13, 2024 | The WPC Smart Quick View for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin set... |
| CVE-2023-52211 | MEDIUM | 5.3 | 0.4% | Apr 12, 2024 | Missing Authorization vulnerability in Automattic WP Job Manager.This issue affects WP Job Manager: from n/a through 2.0... |
| CVE-2023-51515 | HIGH | 8.8 | 0.6% | Apr 12, 2024 | Missing Authorization vulnerability in Undsgn Uncode Core allows Privilege Escalation.This issue affects Uncode Core: fr... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now