2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-5648 | MEDIUM | 6.1 | 0.3% | Oct 8, 2026 | In Brocade ASCG before Brocade ASCG v3.0, several security-related HTTP Headers were missing in various Brocade ASCG URL... |
| CVE-2023-54405 | CRITICAL | 9.8 | 0.6% | Oct 2, 2026 | H3C CVM, the Cloud Virtualization Management component of the H3C CAS cloud platform, contains an unauthenticated arbitr... |
| CVE-2023-54404 | — | — | 0.3% | Oct 1, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. The described memory use onl... |
| CVE-2023-54403 | HIGH | 7.5 | 0.5% | Sep 30, 2026 | Yonyou U8 CRM before V16.5 and V18 contains an arbitrary file read vulnerability in /ajax/getemaildata.php that allows u... |
| CVE-2023-54402 | HIGH | 7.5 | 0.4% | Sep 30, 2026 | iDocView contains a server-side request forgery vulnerability in its /doc/upload endpoint that allows remote unauthentic... |
| CVE-2023-54400 | CRITICAL | 9.8 | — | Sep 29, 2026 | Fumasoft Fumeng Cloud contains a SQL injection vulnerability in the AjaxMethod.ashx endpoint that allows unauthenticated... |
| CVE-2023-54399 | CRITICAL | 9.8 | 0.4% | Sep 18, 2026 | Hongjing e-HR before 8.2 contains a SQL injection vulnerability in the /servlet/codesettree endpoint where the categorie... |
| CVE-2023-5778 | HIGH | 7.5 | — | Sep 18, 2026 | Improper handling of length parameter inconsistency vulnerability in ABB Freelance Controller DCP, ABB Freelance Control... |
| CVE-2023-54398 | CRITICAL | 9.8 | 0.6% | Sep 15, 2026 | Yonyou U8 Cloud contains an unauthenticated Java deserialization vulnerability in the nc.impl.pub.filesystem.FileManageS... |
| CVE-2023-54397 | HIGH | 7.5 | 0.4% | Sep 15, 2026 | Tornado before 6.3.3 contains an HTTP request smuggling vulnerability due to improper parsing of Content-Length headers ... |
| CVE-2023-51769 | MEDIUM | 6.1 | 0.2% | Sep 14, 2026 | Frappe before 14.49.0 allows an XSS attack that is associated with blog pages and exception pages. |
| CVE-2023-50462 | MEDIUM | 5.3 | 0.3% | Sep 14, 2026 | An issue was discovered in the content_consent (aka Content Consent) extension through 2.0.1 for TYPO3. It fails to veri... |
| CVE-2023-50461 | HIGH | 8.8 | 0.3% | Sep 14, 2026 | An issue was discovered in the direct_mail (aka Direct Mail) extension through 9.5.1 for TYPO3. The Configuration backen... |
| CVE-2023-50460 | MEDIUM | 5.4 | 0.2% | Sep 14, 2026 | An issue was discovered in the femanager extension 7.x before 7.2.3 for TYPO3. The backend module allows an authenticate... |
| CVE-2023-50459 | MEDIUM | 5.4 | 0.2% | Sep 14, 2026 | An issue was discovered in the femanager extension 7.x before 7.2.3 for TYPO3. It fails to check access permissions for ... |
| CVE-2023-46273 | HIGH | 8.8 | 0.3% | Sep 14, 2026 | Bonjour Gateway in Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, has an ah_bgd buffer ove... |
| CVE-2023-46035 | MEDIUM | 5.9 | 0.4% | Sep 14, 2026 | The svg_optimizer gem before 0.3.0 for Ruby performs entity expansion on untrusted documents. |
| CVE-2023-45858 | HIGH | 8.6 | 0.7% | Sep 14, 2026 | A directory traversal was identified in Paessler PRTG before 23.4.88.1429 that made it possible to read local files. |
| CVE-2023-45023 | MEDIUM | 4.2 | 0.1% | Sep 14, 2026 | The femanager extension 7 before 7.2.2 for TYPO3 has Incorrect Access Control: it lacks a check for permissions for the ... |
| CVE-2023-40772 | MEDIUM | 4.3 | 1.0% | Sep 14, 2026 | A directory Traversal vulnerability in DataEase before 1.18.10 allows a remote attacker to obtain sensitive information ... |
| CVE-2023-37366 | LOW | 2.8 | 0.1% | Sep 14, 2026 | An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor, and Modem Exynos 9810, Exynos 9610, Ex... |
| CVE-2023-37253 | LOW | 3.1 | 0.2% | Sep 14, 2026 | An issue was discovered in the ProofreadPage extension for MediaWiki through 1.39.3. It leaks information about a suppre... |
| CVE-2023-37252 | LOW | 3.1 | 0.2% | Sep 14, 2026 | An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. Special:CheckUserLog shows usernames th... |
| CVE-2023-34854 | MEDIUM | 6.6 | 0.2% | Sep 14, 2026 | HotelDruid before 3.0.6 has insufficient file upload sanitation in the backup/restore function. |
| CVE-2023-32803 | HIGH | 7.5 | 0.2% | Sep 14, 2026 | The ca-certificates package before ca-certificates-2021.2.50-72 for Amazon Linux 2 (AL2) does not properly remove certai... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now