2023 CVE Vulnerabilities

31,245 CVEs published in 2023.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2023-44248MEDIUM5.5An improper access control vulnerability [CWE-284] in FortiEDRCollectorWindows version 5.2.0.4549 and below, 5.0.3.1007 ...
CVE-2023-41676MEDIUM6.5An exposure of sensitive information to an unauthorized actor [CWE-200] in FortiSIEM version 7.0.0 and before 6.7.5 may...
CVE-2023-38177MEDIUM6.8Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2023-36641MEDIUM6.5A numeric truncation error in Fortinet FortiProxy version 7.2.0 through 7.2.4, FortiProxy version 7.0.0 through 7.0.10, ...
CVE-2023-36633MEDIUM5.4An improper authorization vulnerability [CWE-285] in FortiMail webmail version 7.2.0 through 7.2.2 and before 7.0.5 allo...
CVE-2023-36428MEDIUM5.5Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability
CVE-2023-36413MEDIUM6.5Microsoft Office Security Feature Bypass Vulnerability
CVE-2023-36410MEDIUM5.4Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2023-36406MEDIUM5.5Windows Hyper-V Information Disclosure Vulnerability
CVE-2023-36404MEDIUM5.5Windows Kernel Information Disclosure Vulnerability
CVE-2023-36398MEDIUM6.5Windows NTFS Information Disclosure Vulnerability
CVE-2023-36043MEDIUM6.5Open Management Infrastructure Information Disclosure Vulnerability
CVE-2023-36042MEDIUM5.5Visual Studio Denial of Service Vulnerability
CVE-2023-36031MEDIUM5.4Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVE-2023-36030MEDIUM6.1Microsoft Dynamics 365 Sales Spoofing Vulnerability
CVE-2023-33304MEDIUM5.5A use of hard-coded credentials vulnerability in Fortinet FortiClient Windows 7.0.0 - 7.0.9 and 7.2.0 - 7.2.1 allows an ...
CVE-2023-28002MEDIUM6.7An improper validation of integrity check value vulnerability [CWE-354] in FortiOS 7.2.0 through 7.2.3, 7.0.0 through 7....
CVE-2023-48094MEDIUM6.1A cross-site scripting (XSS) vulnerability in CesiumJS v1.111 allows attackers to execute arbitrary code in the context ...
CVE-2023-47660MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WP Wham Product Visibility by Country for WooCommerce ...
CVE-2023-47659MEDIUM5.4Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Lavacode Lava Directory Manager plugin <= 1.1.34...
CVE-2023-6128MEDIUM5.4Cross-site Scripting (XSS) - Reflected in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2.
CVE-2023-6127MEDIUM5.4Unrestricted Upload of File with Dangerous Type in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4...
CVE-2023-47262MEDIUM5.2The startup process and device configurations of the Abbott ID NOW device, before v7.1, can be interrupted and/or modifi...
CVE-2023-6124MEDIUM4.3Server-Side Request Forgery (SSRF) in GitHub repository salesagility/suitecrm prior to 7.14.2, 8.4.2, 7.12.14.
CVE-2023-46099MEDIUM4.8A vulnerability has been identified in SIMATIC PCS neo (All versions < V4.1). There is a stored cross-site scripting vul...

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now