2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-46152 | HIGH | 8.8 | 0.3% | Oct 25, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in realmag777 WOLF – WordPress Posts Bulk Editor and Manager Professiona... |
| CVE-2023-46151 | HIGH | 8.8 | 0.3% | Oct 25, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in AWESOME TOGI Product Category Tree plugin <= 2.5 versions. |
| CVE-2023-46150 | HIGH | 8.8 | 0.3% | Oct 25, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in WP Military WP Radio plugin <= 3.1.9 versions. |
| CVE-2023-46136 | HIGH | 7.5 | 1.1% | Oct 25, 2023 | Werkzeug is a comprehensive WSGI web application library. In versions on the 3.x branch prior to 3.0.1 and on the 2.x br... |
| CVE-2023-46135 | HIGH | 7.5 | 0.8% | Oct 25, 2023 | rs-stellar-strkey is a Rust lib for encode/decode of Stellar Strkeys. A panic vulnerability occurs when a specially craf... |
| CVE-2023-46124 | HIGH | 7.2 | 0.7% | Oct 25, 2023 | Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in runtime en... |
| CVE-2023-46120 | HIGH | 7.5 | 1.1% | Oct 25, 2023 | The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. ... |
| CVE-2023-46119 | HIGH | 7.5 | 1.1% | Oct 25, 2023 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Parse Server cra... |
| CVE-2023-46102 | HIGH | 8.8 | 0.4% | Oct 25, 2023 | The Android Client application, when enrolled to the AppHub server, connects to an MQTT broker to exchange messages and... |
| CVE-2023-45990 | HIGH | 8 | 0.7% | Oct 25, 2023 | Insecure Permissions vulnerability in WenwenaiCMS v.1.0 allows a remote attacker to escalate privileges. |
| CVE-2023-45851 | HIGH | 8.8 | 0.4% | Oct 25, 2023 | The Android Client application, when enrolled to the AppHub server,connects to an MQTT broker without enforcing any serv... |
| CVE-2023-45555 | HIGH | 7.8 | 0.9% | Oct 25, 2023 | File Upload vulnerability in zzzCMS v.2.1.9 allows a remote attacker to execute arbitrary code via a crafted file to the... |
| CVE-2023-45321 | HIGH | 8.8 | 0.1% | Oct 25, 2023 | The Android Client application, when enrolled with the define method 1 (the user manually inserts the server ip address... |
| CVE-2023-45220 | HIGH | 8.8 | 0.4% | Oct 25, 2023 | The Android Client application, when enrolled with the define method 1(the user manually inserts the server ip address),... |
| CVE-2023-43961 | HIGH | 8.8 | 0.8% | Oct 25, 2023 | An issue in Dromara SaToken version 1.3.50RC and before when using Spring dynamic controllers, a specially crafted reque... |
| CVE-2023-43507 | HIGH | 8.8 | 0.8% | Oct 25, 2023 | A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote at... |
| CVE-2023-43506 | HIGH | 7.8 | 0.2% | Oct 25, 2023 | A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their us... |
| CVE-2023-43488 | HIGH | 7.8 | 0.2% | Oct 25, 2023 | The vulnerability allows a low privileged (untrusted) application to modify a critical system property that should be d... |
| CVE-2023-42490 | HIGH | 7.5 | 0.6% | Oct 25, 2023 | EisBaer Scada - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor |
| CVE-2023-42488 | HIGH | 7.5 | 0.8% | Oct 25, 2023 | EisBaer Scada - CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') |
| CVE-2023-41372 | HIGH | 7.8 | 0.2% | Oct 25, 2023 | The vulnerability allows an unprivileged (untrusted) third- party application to arbitrary modify the server settings of... |
| CVE-2023-41255 | HIGH | 8.8 | 0.4% | Oct 25, 2023 | The vulnerability allows an unprivileged user with access to the subnet of the TPC-110W device to gain a root shell on t... |
| CVE-2023-3112 | HIGH | 7.8 | 0.2% | Oct 25, 2023 | A vulnerability was reported in Elliptic Labs Virtual Lock Sensor for ThinkPad T14 Gen 3 that could allow an attacker wi... |
| CVE-2023-39740 | HIGH | 8.2 | 0.6% | Oct 25, 2023 | The leakage of the client secret in Onigiriya-musubee Line 13.6.1 allows attackers to obtain the channel access token an... |
| CVE-2023-39739 | HIGH | 8.2 | 0.6% | Oct 25, 2023 | The leakage of the client secret in REGINA SWEETS&BAKERY Line 13.6.1 allows attackers to obtain the channel access token... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now