2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-39737 | HIGH | 8.2 | 0.6% | Oct 25, 2023 | The leakage of the client secret in Matsuya Line 13.6.1 allows attackers to obtain the channel access token and send cra... |
| CVE-2023-39736 | HIGH | 8.2 | 0.6% | Oct 25, 2023 | The leakage of the client secret in Fukunaga_memberscard Line 13.6.1 allows attackers to obtain the channel access token... |
| CVE-2023-39735 | HIGH | 8.2 | 0.6% | Oct 25, 2023 | The leakage of the client secret in Uomasa_Saiji_news Line 13.6.1 allows attackers to obtain the channel access token an... |
| CVE-2023-39734 | HIGH | 8.2 | 0.6% | Oct 25, 2023 | The leakage of the client secret in VISION MEAT WORKS TrackDiner10/10_mc Line v13.6.1 allows attackers to obtain the cha... |
| CVE-2023-39733 | HIGH | 8.2 | 0.6% | Oct 25, 2023 | The leakage of the client secret in TonTon-Tei Line v13.6.1 allows attackers to obtain the channel access token and send... |
| CVE-2023-39732 | HIGH | 8.2 | 0.6% | Oct 25, 2023 | The leakage of the client secret in Tokueimaru_waiting Line 13.6.1 allows attackers to obtain the channel access token a... |
| CVE-2023-39619 | HIGH | 7.5 | 1.1% | Oct 25, 2023 | ReDos in NPMJS Node Email Check v.1.0.4 allows an attacker to cause a denial of service via a crafted string to the scpS... |
| CVE-2023-39219 | HIGH | 7.5 | 0.6% | Oct 25, 2023 | PingFederate Administrative Console dependency contains a weakness where console becomes unresponsive with crafted Java ... |
| CVE-2023-38041 | HIGH | 7 | 0.7% | Oct 25, 2023 | A logged in user may elevate its permissions by abusing a Time-of-Check to Time-of-Use (TOCTOU) race condition. When a p... |
| CVE-2023-37913 | HIGH | 8.8 | 1.1% | Oct 25, 2023 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in ver... |
| CVE-2023-37912 | HIGH | 8.8 | 1.2% | Oct 25, 2023 | XWiki Rendering is a generic Rendering system that converts textual input in a given syntax into another syntax. Prior t... |
| CVE-2023-37910 | HIGH | 8.1 | 0.6% | Oct 25, 2023 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting with t... |
| CVE-2023-37909 | HIGH | 8.8 | 1.6% | Oct 25, 2023 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in ver... |
| CVE-2023-31582 | HIGH | 7.5 | 0.6% | Oct 25, 2023 | jose4j before v0.9.3 allows attackers to set a low iteration count of 1000 or less. |
| CVE-2023-27377 | HIGH | 7.5 | 0.7% | Oct 25, 2023 | Missing authentication in the StudentPopupDetails_EmergencyContactDetails method in IDAttend’s IDWeb application ... |
| CVE-2023-27376 | HIGH | 7.5 | 0.7% | Oct 25, 2023 | Missing authentication in the StudentPopupDetails_StudentDetails method in IDAttend’s IDWeb application 3.1.052 an... |
| CVE-2023-27375 | HIGH | 7.5 | 0.7% | Oct 25, 2023 | Missing authentication in the StudentPopupDetails_ContactDetails method in IDAttend’s IDWeb application 3.1.052 an... |
| CVE-2023-27259 | HIGH | 7.5 | 0.5% | Oct 25, 2023 | Missing authentication in the GetAssignmentsDue method in IDAttend’s IDWeb application 3.1.052 and earlier allows e... |
| CVE-2023-27258 | HIGH | 7.5 | 0.5% | Oct 25, 2023 | Missing authentication in the GetStudentGroupStudents method in IDAttend’s IDWeb application 3.1.052 and earlier all... |
| CVE-2023-27257 | HIGH | 7.5 | 0.7% | Oct 25, 2023 | Missing authentication in the GetActiveToiletPasses method in IDAttend’s IDWeb application 3.1.052 and earlier allows... |
| CVE-2023-26580 | HIGH | 7.5 | 0.7% | Oct 25, 2023 | Unauthenticated arbitrary file read in the IDAttend’s IDWeb application 3.1.013 allows the retrieval of any file present... |
| CVE-2023-26578 | HIGH | 8.8 | 1.5% | Oct 25, 2023 | Arbitrary file upload to web root in the IDAttend’s IDWeb application 3.1.013 allows authenticated attackers to upload d... |
| CVE-2023-26576 | HIGH | 7.5 | 0.7% | Oct 25, 2023 | Missing authentication in the SearchStudentsRFID method in IDAttend’s IDWeb application 3.1.052 and earlier allows ext... |
| CVE-2023-26575 | HIGH | 7.5 | 0.7% | Oct 25, 2023 | Missing authentication in the SearchStudentsStaff method in IDAttend’s IDWeb application 3.1.052 and earlier allows ext... |
| CVE-2023-26574 | HIGH | 7.5 | 0.7% | Oct 25, 2023 | Missing authentication in the SearchStudents method in IDAttend’s IDWeb application 3.1.052 and earlier allows extractio... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now