2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-52500 | MEDIUM | 5.5 | 0.2% | Mar 2, 2024 | In the Linux kernel, the following vulnerability has been resolved: scsi: pm80xx: Avoid leaking tags when processing OP... |
| CVE-2023-52499 | MEDIUM | 5.5 | 0.2% | Mar 2, 2024 | In the Linux kernel, the following vulnerability has been resolved: powerpc/47x: Fix 47x syscall return crash Eddie re... |
| CVE-2023-6326 | MEDIUM | 4.3 | 0.3% | Mar 2, 2024 | The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in all vers... |
| CVE-2023-49545 | HIGH | 7.5 | 0.8% | Mar 1, 2024 | A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive files... |
| CVE-2023-49544 | MEDIUM | 4.9 | 0.8% | Mar 1, 2024 | A local file inclusion (LFI) in Customer Support System v1 allows attackers to include internal PHP files and gain unaut... |
| CVE-2023-49543 | CRITICAL | 9.8 | 1.0% | Mar 1, 2024 | Incorrect access control in Book Store Management System v1 allows attackers to access unauthorized pages and execute ad... |
| CVE-2023-49540 | MEDIUM | 6.1 | 0.6% | Mar 1, 2024 | Book Store Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in /bsms_ci/index... |
| CVE-2023-49539 | MEDIUM | 6.1 | 0.6% | Mar 1, 2024 | Book Store Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in /bsms_ci/index... |
| CVE-2023-7244 | CRITICAL | 9.8 | 0.8% | Mar 1, 2024 | Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Zeek Plugin versions d78dda6 and prior are vuln... |
| CVE-2023-7243 | CRITICAL | 9.8 | 0.8% | Mar 1, 2024 | Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Zeek Plugin versions d78dda6 and prior are vul... |
| CVE-2023-7242 | HIGH | 8.2 | 0.5% | Mar 1, 2024 | Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Zeek Plugin versions d78dda6 and prior are vu... |
| CVE-2023-52558 | HIGH | 7.5 | 0.7% | Mar 1, 2024 | In OpenBSD 7.4 before errata 002 and OpenBSD 7.3 before errata 019, a network buffer that had to be split at certain len... |
| CVE-2023-52557 | HIGH | 7.5 | 0.6% | Mar 1, 2024 | In OpenBSD 7.3 before errata 016, npppd(8) could crash by a l2tp message which has an AVP (Attribute-Value Pair) with wr... |
| CVE-2023-52556 | MEDIUM | 6.2 | 0.1% | Mar 1, 2024 | In OpenBSD 7.4 before errata 009, a race condition between pf(4)'s processing of packets and expiration of packet states... |
| CVE-2023-50378 | MEDIUM | 6.1 | 1.2% | Mar 1, 2024 | Lack of proper input validation and constraint enforcement in Apache Ambari prior to 2.7.8 Impact : As it will be st... |
| CVE-2023-52497 | MEDIUM | 6.1 | 0.3% | Mar 1, 2024 | In the Linux kernel, the following vulnerability has been resolved: erofs: fix lz4 inplace decompression Currently ERO... |
| CVE-2023-46951 | MEDIUM | 6.1 | 0.5% | Mar 1, 2024 | Cross Site Scripting vulnerability in Contribsys Sidekiq v.6.5.8 allows a remote attacker to obtain sensitive informatio... |
| CVE-2023-46950 | MEDIUM | 6.1 | 0.6% | Mar 1, 2024 | Cross Site Scripting vulnerability in Contribsys Sidekiq v.6.5.8 allows a remote attacker to obtain sensitive informatio... |
| CVE-2023-48674 | MEDIUM | 4.9 | 0.5% | Mar 1, 2024 | Dell Platform BIOS contains an Improper Null Termination vulnerability. A high privilege user with network access to the... |
| CVE-2023-39254 | HIGH | 7.3 | 0.2% | Mar 1, 2024 | Dell Update Package (DUP), Versions prior to 4.9.10 contain an Uncontrolled Search Path vulnerability. A malicious user ... |
| CVE-2023-52555 | MEDIUM | 6.1 | 0.2% | Mar 1, 2024 | In mongo-express 1.0.2, /admin allows CSRF, as demonstrated by deletion of a Collection. |
| CVE-2023-50312 | MEDIUM | 6.5 | 0.6% | Mar 1, 2024 | IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.2 could provide weaker than expected security for outbo... |
| CVE-2023-47716 | HIGH | 8.8 | 0.4% | Mar 1, 2024 | IBM CP4BA - Filenet Content Manager Component 5.5.8.0, 5.5.10.0, and 5.5.11.0 could allow a user to gain the privileges ... |
| CVE-2023-38366 | MEDIUM | 5.3 | 0.8% | Mar 1, 2024 | IBM Filenet Content Manager Component 5.5.8.0, 5.5.10.0, and 5.5.11.0 could allow a remote attacker to traverse director... |
| CVE-2023-50324 | MEDIUM | 5.3 | 0.4% | Mar 1, 2024 | IBM Cognos Command Center 10.2.4.1 and 10.2.5 exposes details the X-AspNet-Version Response Header that could allow an a... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now