2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-23349 | LOW | 2.2 | 0.1% | Mar 22, 2024 | Kaspersky has fixed a security issue in Kaspersky Password Manager (KPM) for Windows that allowed a local user to recove... |
| CVE-2023-41099 | HIGH | 7.8 | 0.1% | Mar 22, 2024 | In the Windows installer in Atos Eviden CardOS API before 5.5.5.2811, Local Privilege Escalation can occur.(from a regul... |
| CVE-2023-42954 | MEDIUM | 4.9 | 0.4% | Mar 21, 2024 | A privilege escalation issue existed in FileMaker Server, potentially exposing sensitive information to front-end websit... |
| CVE-2023-49837 | MEDIUM | 6.5 | 0.4% | Mar 21, 2024 | Uncontrolled Resource Consumption vulnerability in David Artiss Code Embed.This issue affects Code Embed: from n/a throu... |
| CVE-2023-47715 | MEDIUM | 4.3 | 0.3% | Mar 21, 2024 | IBM Storage Protect Plus Server 10.1.0 through 10.1.16 could allow an authenticated user with read-only permissions to a... |
| CVE-2023-52620 | LOW | 2.5 | 0.3% | Mar 21, 2024 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: disallow timeout for anonymou... |
| CVE-2023-48903 | MEDIUM | 6.1 | 0.6% | Mar 21, 2024 | Stored Cross-Site Scripting (XSS) vulnerability in tramyardg autoexpress 1.3.0, allows remote unauthenticated attackers ... |
| CVE-2023-48902 | CRITICAL | 9.8 | 1.3% | Mar 21, 2024 | An issue was discovered in tramyardg autoexpress version 1.3.0, allows unauthenticated remote attackers to escalate priv... |
| CVE-2023-48901 | CRITICAL | 9.8 | 1.0% | Mar 21, 2024 | A SQL injection vulnerability in tramyardg Autoexpress version 1.3.0, allows remote unauthenticated attackers to execute... |
| CVE-2023-6500 | MEDIUM | 5.4 | 0.4% | Mar 21, 2024 | The Shariff Wrapper plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'shariff' shortco... |
| CVE-2023-49985 | MEDIUM | 6.5 | 0.5% | Mar 21, 2024 | A cross-site scripting (XSS) vulnerability in the component /management/class of School Fees Management System v1.0 allo... |
| CVE-2023-49984 | MEDIUM | 6.1 | 0.5% | Mar 21, 2024 | A cross-site scripting (XSS) vulnerability in the component /management/settings of School Fees Management System v1.0 a... |
| CVE-2023-49983 | MEDIUM | 6.8 | 0.6% | Mar 21, 2024 | A cross-site scripting (XSS) vulnerability in the component /management/class of School Fees Management System v1.0 allo... |
| CVE-2023-49982 | HIGH | 8.8 | 0.8% | Mar 21, 2024 | Broken access control in the component /admin/management/users of School Fees Management System v1.0 allows attackers to... |
| CVE-2023-49981 | HIGH | 7.5 | 0.7% | Mar 21, 2024 | A directory listing vulnerability in School Fees Management System v1.0 allows attackers to list directories and sensiti... |
| CVE-2023-49980 | HIGH | 7.5 | 0.7% | Mar 21, 2024 | A directory listing vulnerability in Best Student Result Management System v1.0 allows attackers to list directories and... |
| CVE-2023-49979 | HIGH | 7.5 | 0.7% | Mar 21, 2024 | A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive files... |
| CVE-2023-49978 | HIGH | 8.8 | 0.8% | Mar 21, 2024 | Incorrect access control in Customer Support System v1 allows non-administrator users to access administrative pages and... |
| CVE-2023-38825 | MEDIUM | 6.5 | 1.0% | Mar 21, 2024 | SQL injection vulnerability in Vanderbilt REDCap before v.13.8.0 allows a remote attacker to obtain sensitive informatio... |
| CVE-2023-35899 | CRITICAL | 9.8 | 0.6% | Mar 21, 2024 | IBM Cloud Pak for Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.... |
| CVE-2023-45177 | MEDIUM | 5.3 | 0.6% | Mar 20, 2024 | IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS and 9.3 CD is vulnerable to a denial-of-service attack due to an error within ... |
| CVE-2023-51445 | MEDIUM | 4.8 | 0.5% | Mar 20, 2024 | GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. A store... |
| CVE-2023-50967 | HIGH | 7.5 | 1.4% | Mar 20, 2024 | latchset jose through version 11 allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PB... |
| CVE-2023-51444 | HIGH | 7.2 | 1.9% | Mar 20, 2024 | GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. An arbi... |
| CVE-2023-41877 | HIGH | 7.2 | 0.8% | Mar 20, 2024 | GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. A path ... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now