2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-22086 | HIGH | 7.5 | 0.6% | Oct 17, 2023 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t... |
| CVE-2023-22085 | HIGH | 8.8 | 0.7% | Oct 17, 2023 | Vulnerability in the Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications (component: Opera)... |
| CVE-2023-22019 | HIGH | 7.5 | 0.5% | Oct 17, 2023 | Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web Listener). The supported v... |
| CVE-2023-37537 | HIGH | 7.8 | 0.2% | Oct 17, 2023 | An unquoted service path vulnerability in HCL AppScan Presence, deployed as a Windows service in HCL AppScan on Cloud (A... |
| CVE-2023-45907 | HIGH | 8.8 | 0.3% | Oct 17, 2023 | Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/variable/delet... |
| CVE-2023-45906 | HIGH | 8.8 | 0.3% | Oct 17, 2023 | Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/user/add. |
| CVE-2023-45905 | HIGH | 8.8 | 0.3% | Oct 17, 2023 | Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/variable/add. |
| CVE-2023-45904 | HIGH | 8.8 | 0.3% | Oct 17, 2023 | Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /variable/update. |
| CVE-2023-45903 | HIGH | 8.8 | 0.3% | Oct 17, 2023 | Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/label/delete. |
| CVE-2023-45902 | HIGH | 8.8 | 0.3% | Oct 17, 2023 | Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/attachment/del... |
| CVE-2023-45901 | HIGH | 8.8 | 0.3% | Oct 17, 2023 | Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin\/category\/add... |
| CVE-2023-43959 | HIGH | 8.8 | 1.6% | Oct 17, 2023 | An issue in YeaLinkSIP-T19P-E2 v.53.84.0.15 allows a remote privileged attacker to execute arbitrary code via a crafted ... |
| CVE-2023-20598 | HIGH | 7.8 | 0.5% | Oct 17, 2023 | An improper privilege management in the AMD Radeon™ Graphics driver may allow an authenticated attacker to craft an I... |
| CVE-2023-44824 | HIGH | 7.8 | 0.3% | Oct 17, 2023 | An issue in Expense Management System v.1.0 allows a local attacker to execute arbitrary code via a crafted file uploade... |
| CVE-2023-39902 | HIGH | 7.8 | 0.1% | Oct 17, 2023 | A software vulnerability has been identified in the U-Boot Secondary Program Loader (SPL) before 2023.07 on select NXP i... |
| CVE-2023-4399 | HIGH | 7.2 | 1.1% | Oct 17, 2023 | Grafana is an open-source platform for monitoring and observability. In Grafana Enterprise, Request security is a deny... |
| CVE-2023-41752 | HIGH | 7.5 | 1.2% | Oct 17, 2023 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Traffic Server.This issue affects Apa... |
| CVE-2023-39456 | HIGH | 7.5 | 53.5% | Oct 17, 2023 | Improper Input Validation vulnerability in Apache Traffic Server with malformed HTTP/2 frames.This issue affects Apache ... |
| CVE-2023-45375 | HIGH | 8.8 | 38.5% | Oct 17, 2023 | In the module "PireosPay" (pireospay) before version 1.7.10 from 01generator.com for PrestaShop, a guest can perform SQL... |
| CVE-2023-34210 | HIGH | 8.8 | 0.6% | Oct 17, 2023 | SQL Injection in create customer group function in EasyUse MailHunter Ultimate 2023 and earlier allow remote authenticat... |
| CVE-2023-34207 | HIGH | 8.8 | 0.6% | Oct 17, 2023 | Unrestricted upload of file with dangerous type vulnerability in create template function in EasyUse MailHunter Ultimate... |
| CVE-2023-4215 | HIGH | 7.5 | 0.5% | Oct 17, 2023 | Advantech WebAccess version 9.1.3 contains an exposure of sensitive information to an unauthorized actor vulnerability t... |
| CVE-2023-40373 | HIGH | 7.5 | 0.8% | Oct 17, 2023 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) is vulnerable to denial of service with a specially cr... |
| CVE-2023-40372 | HIGH | 7.5 | 0.8% | Oct 17, 2023 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 is vulnerable to denial of service with a special... |
| CVE-2023-40374 | HIGH | 7.5 | 0.8% | Oct 16, 2023 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 is vulnerable to denial of service with a special... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now