2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-46748 | HIGH | 8.8 | 4.5% | Oct 26, 2023 | An authenticated SQL injection vulnerability exists in the BIG-IP Configuration utility which may allow an authenticat... |
| CVE-2023-46663 | HIGH | 8.1 | 0.4% | Oct 26, 2023 | Sielco PolyEco1000 is vulnerable to an attacker bypassing authorization and accessing resources behind protecte... |
| CVE-2023-33559 | HIGH | 8.8 | 0.7% | Oct 26, 2023 | A local file inclusion vulnerability via the lang parameter in OcoMon before v4.0.1 allows attackers to execute arbitrar... |
| CVE-2023-33558 | HIGH | 7.5 | 0.5% | Oct 26, 2023 | An information disclosure vulnerability in the component users-grid-data.php of Ocomon before v4.0.1 allows attackers to... |
| CVE-2023-46662 | HIGH | 7.5 | 0.6% | Oct 26, 2023 | Sielco PolyEco1000 is vulnerable to an information disclosure vulnerability due to improper access control enforcem... |
| CVE-2023-39936 | HIGH | 7.8 | 0.3% | Oct 26, 2023 | In Ashlar-Vellum Graphite v13.0.48, the affected application lacks proper validation of user-supplied data when parsi... |
| CVE-2023-39427 | HIGH | 7.8 | 0.2% | Oct 26, 2023 | In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share v12 SP0 Build (1204.77), the affected applications lac... |
| CVE-2023-5796 | HIGH | 8.8 | 0.7% | Oct 26, 2023 | A vulnerability was found in CodeAstro POS System 1.0. It has been rated as critical. Affected by this issue is some unk... |
| CVE-2023-5795 | HIGH | 8.8 | 0.8% | Oct 26, 2023 | A vulnerability was found in CodeAstro POS System 1.0. It has been declared as critical. Affected by this vulnerability ... |
| CVE-2023-31419 | HIGH | 7.5 | 60.7% | Oct 26, 2023 | A flaw was discovered in Elasticsearch, affecting the _search API that allowed a specially crafted query string to cause... |
| CVE-2023-31418 | HIGH | 7.5 | 1.2% | Oct 26, 2023 | An issue has been identified with how Elasticsearch handled incoming requests on the HTTP layer. An unauthenticated user... |
| CVE-2023-5624 | HIGH | 7.2 | 0.5% | Oct 26, 2023 | Under certain conditions, Nessus Network Monitor was found to not properly enforce input validation. This could allow a... |
| CVE-2023-5623 | HIGH | 7.8 | 0.2% | Oct 26, 2023 | NNM failed to properly set ACLs on its installation directory, which could allow a low privileged user to run arbitrary... |
| CVE-2023-5622 | HIGH | 8.8 | 0.5% | Oct 26, 2023 | Under certain conditions, Nessus Network Monitor could allow a low privileged user to escalate privileges to NT AUTHORI... |
| CVE-2023-45317 | HIGH | 8.8 | 0.2% | Oct 26, 2023 | The application interface allows users to perform certain actions via HTTP requests without performing any validity ch... |
| CVE-2023-41966 | HIGH | 8.8 | 0.6% | Oct 26, 2023 | The application suffers from a privilege escalation vulnerability. A user with read permissions can elevate privileg... |
| CVE-2023-5787 | HIGH | 8.8 | 0.7% | Oct 26, 2023 | A vulnerability was found in Shaanxi Chanming Education Technology Score Query System 5.0. It has been rated as critical... |
| CVE-2023-5786 | HIGH | 8.8 | 0.8% | Oct 26, 2023 | A vulnerability was found in GeoServer GeoWebCache up to 1.15.1. It has been declared as problematic. This vulnerability... |
| CVE-2023-5785 | HIGH | 7.5 | 0.6% | Oct 26, 2023 | A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been classified as critical. This... |
| CVE-2023-46449 | HIGH | 8.8 | 0.8% | Oct 26, 2023 | Sourcecodester Free and Open Source inventory management system v1.0 is vulnerable to Incorrect Access Control. An arbit... |
| CVE-2023-46234 | HIGH | 7.5 | 0.5% | Oct 26, 2023 | browserify-sign is a package to duplicate the functionality of node's crypto public key functions, much of this is based... |
| CVE-2023-45868 | HIGH | 8.1 | 1.1% | Oct 26, 2023 | The Learning Module in ILIAS 7.25 (2023-09-12 release) allows an attacker (with basic user privileges) to achieve a high... |
| CVE-2023-5783 | HIGH | 7.5 | 0.5% | Oct 26, 2023 | A vulnerability has been found in Tongda OA 2017 up to 11.9 and classified as critical. Affected by this vulnerability i... |
| CVE-2023-5802 | HIGH | 8.8 | 0.2% | Oct 26, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Mihai Iova WordPress Knowledge base & Documentation Plugin – WP Knowl... |
| CVE-2023-5798 | HIGH | 8.8 | 0.7% | Oct 26, 2023 | The Assistant WordPress plugin before 1.4.4 does not validate a parameter before making a request to it via wp_remote_ge... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now