2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-46290 | HIGH | 8.1 | 2.7% | Oct 27, 2023 | Due to inadequate code logic, a previously unauthenticated threat actor could potentially obtain a local Windows OS use... |
| CVE-2023-46289 | HIGH | 7.5 | 0.9% | Oct 27, 2023 | Rockwell Automation FactoryTalk View Site Edition insufficiently validates user input, which could potentially allow th... |
| CVE-2023-27858 | HIGH | 7.8 | 0.2% | Oct 27, 2023 | Rockwell Automation Arena Simulation contains an arbitrary code execution vulnerability that could potentially allow a ... |
| CVE-2023-27854 | HIGH | 7.8 | 0.3% | Oct 27, 2023 | An arbitrary code execution vulnerability was reported to Rockwell Automation in Arena Simulation that could potentiall... |
| CVE-2023-5826 | HIGH | 8.8 | 0.7% | Oct 27, 2023 | A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3 and classified as critical. Affected by t... |
| CVE-2023-5443 | HIGH | 7.5 | 0.4% | Oct 27, 2023 | Improper Protection for Outbound Error Messages and Alert Signals vulnerability in EDM Informatics E-invoice allows Acco... |
| CVE-2023-46393 | HIGH | 7.5 | 0.4% | Oct 27, 2023 | gougucms v4.08.18 was discovered to contain a password reset poisoning vulnerability which allows attackers to arbitrari... |
| CVE-2023-5820 | HIGH | 8.8 | 0.3% | Oct 27, 2023 | The Thumbnail Slider With Lightbox plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This... |
| CVE-2023-5570 | HIGH | 7.5 | 0.4% | Oct 27, 2023 | Improper Protection for Outbound Error Messages and Alert Signals vulnerability in Inohom Home Manager Gateway allows Ac... |
| CVE-2023-44220 | HIGH | 7.3 | 0.3% | Oct 27, 2023 | SonicWall NetExtender Windows (32-bit and 64-bit) client 10.2.336 and earlier versions have a DLL Search Order Hijacking... |
| CVE-2023-44219 | HIGH | 7.8 | 0.2% | Oct 27, 2023 | A local privilege escalation vulnerability in SonicWall Directory Services Connector Windows MSI client 4.1.21 and earli... |
| CVE-2023-34059 | HIGH | 7 | 0.4% | Oct 27, 2023 | open-vm-tools contains a file descriptor hijack vulnerability in the vmware-user-suid-wrapper. A malicious actor with no... |
| CVE-2023-34058 | HIGH | 7.5 | 0.7% | Oct 27, 2023 | VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted Guest Operat... |
| CVE-2023-34057 | HIGH | 7.8 | 0.2% | Oct 27, 2023 | VMware Tools contains a local privilege escalation vulnerability. A malicious actor with local user access to a guest vi... |
| CVE-2023-46818 | HIGH | 7.2 | 13.9% | Oct 27, 2023 | An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the language file editor by ... |
| CVE-2023-46816 | HIGH | 8.8 | 0.6% | Oct 27, 2023 | An issue was discovered in SugarCRM 12 before 12.0.4 and 13 before 13.0.2. A Server Site Template Injection (SSTI) vulne... |
| CVE-2023-46815 | HIGH | 8.8 | 0.6% | Oct 27, 2023 | An issue was discovered in SugarCRM 12 before 12.0.4 and 13 before 13.0.2. An Unrestricted File Upload vulnerability has... |
| CVE-2023-46813 | HIGH | 7 | 0.7% | Oct 27, 2023 | An issue was discovered in the Linux kernel before 6.5.9, exploitable by local users with userspace access to MMIO regis... |
| CVE-2023-5814 | HIGH | 8.8 | 0.4% | Oct 27, 2023 | A vulnerability was found in SourceCodester Task Reminder System 1.0. It has been classified as critical. This affects a... |
| CVE-2023-5813 | HIGH | 8.8 | 0.4% | Oct 27, 2023 | A vulnerability was found in SourceCodester Task Reminder System 1.0 and classified as critical. Affected by this issue ... |
| CVE-2023-5812 | HIGH | 8.8 | 0.7% | Oct 27, 2023 | A vulnerability has been found in flusity CMS and classified as critical. Affected by this vulnerability is the function... |
| CVE-2023-46376 | HIGH | 7.5 | 0.4% | Oct 27, 2023 | Zentao Biz version 8.7 and before is vulnerable to Information Disclosure. |
| CVE-2023-46375 | HIGH | 8.8 | 0.3% | Oct 27, 2023 | ZenTao Biz version 4.1.3 and before is vulnerable to Cross Site Request Forgery (CSRF). |
| CVE-2023-27170 | HIGH | 7.5 | 0.8% | Oct 26, 2023 | Xpand IT Write-back manager v2.3.1 allows attackers to perform a directory traversal via modification of the siteName pa... |
| CVE-2023-43352 | HIGH | 7.8 | 0.5% | Oct 26, 2023 | An issue in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted payload to the Conten... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now