2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-51370 | MEDIUM | 4.8 | 0.3% | Feb 12, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NinjaTeam WP Chat ... |
| CVE-2023-50875 | MEDIUM | 5.4 | 0.3% | Feb 12, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Automattic Sensei ... |
| CVE-2023-47526 | MEDIUM | 4.8 | 0.3% | Feb 12, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Chart Builder Team... |
| CVE-2023-52429 | MEDIUM | 5.5 | 0.2% | Feb 12, 2024 | dm_table_create in drivers/md/dm-table.c in the Linux kernel through 6.7.4 can attempt to (in alloc_targets) allocate mo... |
| CVE-2023-52428 | HIGH | 7.5 | 0.8% | Feb 11, 2024 | In Connect2id Nimbus JOSE+JWT before 9.37.2, an attacker can cause a denial of service (resource consumption) via a larg... |
| CVE-2023-52427 | HIGH | 7.5 | 0.6% | Feb 11, 2024 | In OpenDDS through 3.27, there is a segmentation fault for a DataWriter with a large value of resource_limits.max_sample... |
| CVE-2023-50957 | HIGH | 7.2 | 0.4% | Feb 10, 2024 | IBM Storage Defender - Resiliency Service 2.0 could allow a privileged user to perform unauthorized actions after obtain... |
| CVE-2023-51493 | MEDIUM | 5.4 | 0.3% | Feb 10, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Howard Ehrenberg C... |
| CVE-2023-51492 | MEDIUM | 5.4 | 0.3% | Feb 10, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in If So Plugin If-So... |
| CVE-2023-51488 | MEDIUM | 6.1 | 0.4% | Feb 10, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Automattic, Inc. C... |
| CVE-2023-51485 | MEDIUM | 5.4 | 0.3% | Feb 10, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Hosting Pay wit... |
| CVE-2023-51480 | MEDIUM | 5.4 | 0.3% | Feb 10, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in realmag777 Active ... |
| CVE-2023-51415 | MEDIUM | 5.4 | 0.3% | Feb 10, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GiveWP GiveWP – Do... |
| CVE-2023-51404 | MEDIUM | 5.4 | 0.3% | Feb 10, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MyAgilePrivacy My ... |
| CVE-2023-45698 | MEDIUM | 6.1 | 0.3% | Feb 10, 2024 | Sametime is impacted by lack of clickjacking protection in Outlook add-in. The application is not implementing appropria... |
| CVE-2023-45696 | HIGH | 7.5 | 0.4% | Feb 10, 2024 | Sametime is impacted by sensitive fields with autocomplete enabled in the Legacy web chat client. By default, this allow... |
| CVE-2023-28077 | MEDIUM | 4.4 | 0.2% | Feb 10, 2024 | Dell BSAFE SSL-J, versions prior to 6.5, and versions 7.0 and 7.1 contain a debug message revealing unnecessary informa... |
| CVE-2023-6935 | MEDIUM | 5.9 | 0.5% | Feb 9, 2024 | wolfSSL SP Math All RSA implementation is vulnerable to the Marvin Attack, new variation of a timing Bleichenbacher styl... |
| CVE-2023-45718 | HIGH | 7.5 | 0.4% | Feb 9, 2024 | Sametime is impacted by a failure to invalidate sessions. The application is setting sensitive cookie values in a persi... |
| CVE-2023-45716 | MEDIUM | 4.1 | 0.1% | Feb 9, 2024 | Sametime is impacted by sensitive information passed in URL. |
| CVE-2023-50349 | HIGH | 8.8 | 0.2% | Feb 9, 2024 | Sametime is impacted by a Cross Site Request Forgery (CSRF) vulnerability. Some REST APIs in the Sametime Proxy applica... |
| CVE-2023-50386 | HIGH | 8.8 | 83.8% | Feb 9, 2024 | Improper Control of Dynamically-Managed Code Resources, Unrestricted Upload of File with Dangerous Type, Inclusion of Fu... |
| CVE-2023-50298 | HIGH | 7.5 | 1.6% | Feb 9, 2024 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Solr.This issue affects Apache Solr: ... |
| CVE-2023-50292 | HIGH | 7.5 | 3.0% | Feb 9, 2024 | Incorrect Permission Assignment for Critical Resource, Improper Control of Dynamically-Managed Code Resources vulnerabil... |
| CVE-2023-50291 | HIGH | 7.5 | 3.3% | Feb 9, 2024 | Insufficiently Protected Credentials vulnerability in Apache Solr. This issue affects Apache Solr: from 6.0.0 through 8... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now