2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-51801 | CRITICAL | 9.8 | 1.2% | Feb 29, 2024 | SQL Injection vulnerability in the Simple Student Attendance System v.1.0 allows a remote attacker to execute arbitrary ... |
| CVE-2023-51800 | MEDIUM | 5.4 | 0.6% | Feb 29, 2024 | Cross Site Scripting (XSS) vulnerability in School Fees Management System v.1.0 allows a remote attacker to execute arbi... |
| CVE-2023-38367 | MEDIUM | 6.5 | 0.3% | Feb 29, 2024 | IBM Cloud Pak Foundational Services Identity Provider (idP) API (IBM Cloud Pak for Automation 18.0.0, 18.0.1, 18.0.2, 19... |
| CVE-2023-27545 | MEDIUM | 5.5 | 0.2% | Feb 29, 2024 | IBM Watson CloudPak for Data Data Stores information disclosure 4.6.0 allows web pages to be stored locally which can be... |
| CVE-2023-7207 | MEDIUM | 4.9 | 0.9% | Feb 29, 2024 | Debian's cpio contains a path traversal vulnerability. This issue was introduced by reverting CVE-2015-1197 patches whic... |
| CVE-2023-7110 | CRITICAL | 9.8 | 1.0% | Feb 29, 2024 | A vulnerability, which was classified as critical, has been found in code-projects Library Management System 2.0. This i... |
| CVE-2023-7109 | CRITICAL | 9.8 | 1.0% | Feb 29, 2024 | A vulnerability classified as critical was found in code-projects Library Management System 2.0. This vulnerability affe... |
| CVE-2023-7108 | MEDIUM | 6.1 | 0.8% | Feb 29, 2024 | A vulnerability classified as problematic has been found in code-projects E-Commerce Website 1.0. This affects an unknow... |
| CVE-2023-7107 | CRITICAL | 9.8 | 0.9% | Feb 29, 2024 | A vulnerability was found in code-projects E-Commerce Website 1.0. It has been rated as critical. Affected by this issue... |
| CVE-2023-7106 | HIGH | 8.8 | 0.8% | Feb 29, 2024 | A vulnerability was found in code-projects E-Commerce Website 1.0. It has been declared as critical. Affected by this vu... |
| CVE-2023-7105 | CRITICAL | 9.8 | 0.9% | Feb 29, 2024 | A vulnerability was found in code-projects E-Commerce Website 1.0. It has been classified as critical. Affected is an un... |
| CVE-2023-6923 | MEDIUM | 6.1 | 0.5% | Feb 29, 2024 | The Matomo Analytics – Ethical Stats. Powerful Insights. plugin for WordPress is vulnerable to Reflected Cross-Site Scri... |
| CVE-2023-6881 | CRITICAL | 9.8 | 0.4% | Feb 29, 2024 | Possible buffer overflow in is_mount_point |
| CVE-2023-6806 | MEDIUM | 5.4 | 0.4% | Feb 29, 2024 | The Starbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Job Settings user profile fields i... |
| CVE-2023-6565 | MEDIUM | 5.9 | 0.6% | Feb 29, 2024 | The InfiniteWP Client plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and in... |
| CVE-2023-6247 | MEDIUM | 6.5 | 0.8% | Feb 29, 2024 | The PKCS#7 parser in OpenVPN 3 Core Library versions through 3.8.3 did not properly validate the parsed data, which woul... |
| CVE-2023-51835 | MEDIUM | 6.8 | 7.3% | Feb 29, 2024 | An issue in TRENDnet TEW-822DRE v.1.03B02 allows a local attacker to execute arbitrary code via the parameters ipv4_ping... |
| CVE-2023-51779 | HIGH | 7 | 0.3% | Feb 29, 2024 | bt_sock_recvmsg in net/bluetooth/af_bluetooth.c in the Linux kernel through 6.6.8 has a use-after-free because of a bt_s... |
| CVE-2023-51775 | MEDIUM | 6.5 | 0.9% | Feb 29, 2024 | The jose4j component before 0.9.4 for Java allows attackers to cause a denial of service (CPU consumption) via a large p... |
| CVE-2023-51774 | HIGH | 8.4 | 0.2% | Feb 29, 2024 | The json-jwt (aka JSON::JWT) gem 1.16.3 for Ruby sometimes allows bypass of identity checks via a sign/encryption confus... |
| CVE-2023-51773 | CRITICAL | 9.1 | 1.1% | Feb 29, 2024 | BACnet Stack before 1.3.2 has a decode function APDU buffer over-read in bacapp_decode_application_data in bacapp.c. |
| CVE-2023-50658 | HIGH | 7.5 | 0.8% | Feb 29, 2024 | The jose2go component before 1.6.0 for Go allows attackers to cause a denial of service (CPU consumption) via a large p2... |
| CVE-2023-50437 | HIGH | 8.6 | 0.7% | Feb 29, 2024 | An issue was discovered in Couchbase Server before 7.2.x before 7.2.4. otpCookie is shown with full admin on pools/defau... |
| CVE-2023-50436 | MEDIUM | 5.3 | 0.2% | Feb 29, 2024 | An issue was discovered in Couchbase Server before 7.2.4. ns_server admin credentials are leaked in encoded form in the ... |
| CVE-2023-49932 | MEDIUM | 5.4 | 0.5% | Feb 29, 2024 | An issue was discovered in Couchbase Server before 7.2.4. An attacker can bypass SQL++ N1QL cURL host restrictions. |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now