2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-46182 | MEDIUM | 5.4 | 0.4% | Mar 15, 2024 | IBM Sterling Secure Proxy 6.0.3 and 6.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embe... |
| CVE-2023-46179 | MEDIUM | 4.3 | 0.3% | Mar 15, 2024 | IBM Sterling Secure Proxy 6.0.3 and 6.1.0 does not set the secure attribute on authorization tokens or session cookies. ... |
| CVE-2023-51525 | MEDIUM | 4.3 | 0.2% | Mar 15, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Veribo, Roland Murg WP Simple Booking Calendar.This issue affects WP ... |
| CVE-2023-50861 | HIGH | 8.8 | 0.2% | Mar 15, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in realmag777 HUSKY – Products Filter for WooCommerce (formerly WOOF).Th... |
| CVE-2023-6725 | MEDIUM | 5.5 | 0.2% | Mar 15, 2024 | An access-control flaw was found in the OpenStack Designate component where private configuration information including ... |
| CVE-2023-50677 | HIGH | 8.8 | 0.3% | Mar 14, 2024 | An issue in NETGEAR-DGND4000 v.1.1.00.15_1.00.15 allows a remote attacker to escalate privileges via the next_file param... |
| CVE-2023-42286 | CRITICAL | 9.8 | 1.0% | Mar 14, 2024 | There is a PHP file inclusion vulnerability in the template configuration of eyoucms v1.6.4, allowing attackers to execu... |
| CVE-2023-42938 | HIGH | 7.8 | 0.2% | Mar 14, 2024 | A logic issue was addressed with improved checks. This issue is fixed in iTunes 12.13.1 for Windows. A local attacker ma... |
| CVE-2023-43490 | MEDIUM | 5.3 | 0.2% | Mar 14, 2024 | Incorrect calculation in microcode keying mechanism for some Intel(R) Xeon(R) D Processors with Intel(R) SGX may allow a... |
| CVE-2023-39368 | MEDIUM | 6.5 | 0.8% | Mar 14, 2024 | Protection mechanism failure of bus lock regulator for some Intel(R) Processors may allow an unauthenticated user to pot... |
| CVE-2023-38575 | MEDIUM | 5.5 | 0.3% | Mar 14, 2024 | Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized... |
| CVE-2023-35191 | MEDIUM | 6.8 | 0.5% | Mar 14, 2024 | Uncontrolled resource consumption for some Intel(R) SPS firmware versions may allow a privileged user to potentially ena... |
| CVE-2023-32666 | HIGH | 7.2 | 0.2% | Mar 14, 2024 | On-chip debug and test interface with improper access control in some 4th Generation Intel(R) Xeon(R) Processors when us... |
| CVE-2023-32633 | MEDIUM | 6.7 | 0.2% | Mar 14, 2024 | Improper input validation in the Intel(R) CSME installer software before version 2328.5.5.0 may allow an authenticated u... |
| CVE-2023-32282 | HIGH | 7.2 | 0.1% | Mar 14, 2024 | Race condition in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalatio... |
| CVE-2023-28746 | MEDIUM | 6.5 | 0.5% | Mar 14, 2024 | Information exposure through microarchitectural state after transient execution from some register files for some Intel(... |
| CVE-2023-28389 | MEDIUM | 6.7 | 0.1% | Mar 14, 2024 | Incorrect default permissions in some Intel(R) CSME installer software before version 2328.5.5.0 may allow an authentica... |
| CVE-2023-27502 | LOW | 3.3 | 0.2% | Mar 14, 2024 | Insertion of sensitive information into log file for some Intel(R) Local Manageability Service software before version 2... |
| CVE-2023-22655 | MEDIUM | 6.1 | 0.2% | Mar 14, 2024 | Protection mechanism failure in some 3rd and 4th Generation Intel(R) Xeon(R) Processors when using Intel(R) SGX or Intel... |
| CVE-2023-50168 | HIGH | 7.7 | 0.4% | Mar 14, 2024 | Pega Platform from 6.x to 8.8.4 is affected by an XXE issue with PDF Generation. |
| CVE-2023-38536 | MEDIUM | 6.1 | 0.4% | Mar 13, 2024 | HTML injection in OpenText™ Exceed Turbo X affecting version 12.5.1. The vulnerability could result in Cross site script... |
| CVE-2023-38535 | CRITICAL | 9.8 | 0.3% | Mar 13, 2024 | Use of Hard-coded Cryptographic Key vulnerability in OpenText™ Exceed Turbo X affecting versions 12.5.1 and 12.5.2. The ... |
| CVE-2023-38534 | HIGH | 7.5 | 0.5% | Mar 13, 2024 | Improper authentication vulnerability in OpenText™ Exceed Turbo X affecting versions 12.5.0 and 12.5.1. The vulnerabilit... |
| CVE-2023-50726 | MEDIUM | 6.4 | 0.5% | Mar 13, 2024 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. "Local sync" is an Argo CD feature that allows... |
| CVE-2023-41505 | CRITICAL | 9.8 | 0.8% | Mar 13, 2024 | An arbitrary file upload vulnerability in the Add Student's Profile Picture function of Student Enrollment In PHP v1.0 a... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now