2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-47438 | MEDIUM | 6.5 | 0.5% | Mar 27, 2024 | SQL Injection vulnerability in Reportico Till 8.1.0 allows attackers to obtain sensitive information or other system inf... |
| CVE-2023-0582 | CRITICAL | 9.8 | 0.8% | Mar 27, 2024 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ForgeRock Access Managem... |
| CVE-2023-44999 | HIGH | 8.8 | 0.2% | Mar 27, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce WooCommerce Stripe Payment Gateway.This issue affects Woo... |
| CVE-2023-39311 | HIGH | 8.8 | 0.2% | Mar 27, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in ThemeFusion Fusion Builder.This issue affects Fusion Builder: from n/... |
| CVE-2023-34020 | MEDIUM | 6.1 | 1.0% | Mar 27, 2024 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash.This issu... |
| CVE-2023-6400 | HIGH | 7.4 | 0.2% | Mar 27, 2024 | Incorrect Authorization vulnerability in OpenText™ ZENworks Configuration Management (ZCM) allows Unauthorized Use of De... |
| CVE-2023-6153 | CRITICAL | 9.8 | 0.7% | Mar 27, 2024 | Authentication Bypass by Primary Weakness vulnerability in TeoSOFT Software TeoBASE allows Authentication Bypass. This ... |
| CVE-2023-50961 | MEDIUM | 5.4 | 0.3% | Mar 27, 2024 | IBM QRadar SIEM 7.5 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary Jav... |
| CVE-2023-6173 | CRITICAL | 9.8 | 0.6% | Mar 27, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeoSOFT Software T... |
| CVE-2023-43768 | HIGH | 7.5 | 0.7% | Mar 27, 2024 | An issue was discovered in Couchbase Server 6.6.x through 7.2.0, before 7.1.5 and 7.2.1. Unauthenticated users may cause... |
| CVE-2023-25364 | MEDIUM | 6.1 | 0.3% | Mar 27, 2024 | Opswat Metadefender Core before 5.2.1 does not properly defend against potential HTML injection and XSS attacks. |
| CVE-2023-52228 | MEDIUM | 6.5 | 0.3% | Mar 27, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mark Kinchin Beds2... |
| CVE-2023-49815 | CRITICAL | 10 | 0.6% | Mar 27, 2024 | Unrestricted Upload of File with Dangerous Type vulnerability in WappPress Team WappPress.This issue affects WappPress: ... |
| CVE-2023-46052 | HIGH | 7.1 | 0.4% | Mar 27, 2024 | Sane 1.2.1 heap bounds overwrite in init_options() from backend/test.c via a long init_mode string in a configuration fi... |
| CVE-2023-46051 | LOW | 3.3 | 0.3% | Mar 27, 2024 | TeX Live 944e257 allows a NULL pointer dereference in texk/web2c/pdftexdir/tounicode.c. NOTE: this is disputed because i... |
| CVE-2023-46049 | MEDIUM | 5.3 | 0.7% | Mar 27, 2024 | LLVM 15.0.0 has a NULL pointer dereference in the parseOneMetadata() function via a crafted pdflatex.fmt file (or perhap... |
| CVE-2023-39306 | HIGH | 7.1 | 0.3% | Mar 27, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeFusion Fusion... |
| CVE-2023-31854 | — | — | 0.2% | Mar 27, 2024 | std::bad_alloc is mishandled in Precomp 0.4.8. NOTE: this is disputed because it should be categorized as a usability pr... |
| CVE-2023-31634 | CRITICAL | 9.8 | 0.9% | Mar 27, 2024 | In TeslaMate before 1.27.2, there is unauthorized access to port 4000 for remote viewing and operation of user data. Aft... |
| CVE-2023-29134 | HIGH | 8.6 | 0.6% | Mar 27, 2024 | An issue was discovered in the Cargo extension for MediaWiki through 1.39.3. There is mishandling of backticks to smartS... |
| CVE-2023-46048 | MEDIUM | 6.2 | 0.3% | Mar 27, 2024 | Tex Live 944e257 has a NULL pointer dereference in texk/web2c/pdftexdir/writet1.c. NOTE: this is disputed because it sho... |
| CVE-2023-46047 | HIGH | 7.3 | 0.4% | Mar 27, 2024 | An issue in Sane 1.2.1 allows a local attacker to execute arbitrary code via a crafted file to the sanei_configure_attac... |
| CVE-2023-46046 | MEDIUM | 5.5 | 0.3% | Mar 27, 2024 | An issue in MiniZinc before 2.8.0 allows a NULL pointer dereference via ti_expr in a crafted .mzn file. NOTE: this is di... |
| CVE-2023-45935 | MEDIUM | 4.2 | 0.2% | Mar 27, 2024 | Qt 6 through 6.6 was discovered to contain a NULL pointer dereference via the function QXcbConnection::initializeAllAtom... |
| CVE-2023-45925 | — | — | 0.3% | Mar 27, 2024 | GNU Midnight Commander 4.8.29-146-g299d9a2fb was discovered to contain a NULL pointer dereference via the function x_err... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now