2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-6677 | CRITICAL | 9.8 | 0.5% | Feb 9, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Oduyo Financial Te... |
| CVE-2023-6724 | HIGH | 8.8 | 0.6% | Feb 9, 2024 | Authorization Bypass Through User-Controlled Key vulnerability in Software Engineering Consultancy Machine Equipment Lim... |
| CVE-2023-6716 | — | — | — | Feb 9, 2024 | Rejected reason: ** REJECT ** DO NOT USE THIS CVE RECORD. All references and descriptions in this record have been remov... |
| CVE-2023-50026 | CRITICAL | 9.8 | 0.6% | Feb 9, 2024 | SQL injection vulnerability in Presta Monster "Multi Accessories Pro" (hsmultiaccessoriespro) module for PrestaShop vers... |
| CVE-2023-46350 | CRITICAL | 9.8 | 0.6% | Feb 9, 2024 | SQL injection vulnerability in InnovaDeluxe "Manufacturer or supplier alphabetical search" (idxrmanufacturer) module for... |
| CVE-2023-39683 | MEDIUM | 6.1 | 0.5% | Feb 9, 2024 | Cross Site Scripting (XSS) vulnerability in EasyEmail v.4.12.2 and before allows a local attacker to execute arbitrary c... |
| CVE-2023-31506 | MEDIUM | 5.4 | 1.0% | Feb 9, 2024 | A cross-site scripting (XSS) vulnerability in Grav versions 1.7.44 and before, allows remote authenticated attackers to ... |
| CVE-2023-51761 | HIGH | 8.1 | 0.7% | Feb 9, 2024 | In Emerson Rosemount GC370XA, GC700XA, and GC1500XA products, an unauthenticated user with network access could bypass a... |
| CVE-2023-49716 | CRITICAL | 9.8 | 0.6% | Feb 9, 2024 | In Emerson Rosemount GC370XA, GC700XA, and GC1500XA products, an authenticated user with network access could run arbit... |
| CVE-2023-46687 | CRITICAL | 9.8 | 0.9% | Feb 9, 2024 | In Emerson Rosemount GC370XA, GC700XA, and GC1500XA products, an unauthenticated user with network access could execu... |
| CVE-2023-43609 | CRITICAL | 9.1 | 0.5% | Feb 9, 2024 | In Emerson Rosemount GC370XA, GC700XA, and GC1500XA products, an unauthenticated user with network access could obtain a... |
| CVE-2023-45191 | HIGH | 7.5 | 0.7% | Feb 9, 2024 | IBM Engineering Lifecycle Optimization 7.0.2 and 7.0.3 uses an inadequate account lockout setting that could allow a rem... |
| CVE-2023-45190 | MEDIUM | 6.1 | 0.3% | Feb 9, 2024 | IBM Engineering Lifecycle Optimization 7.0.2 and 7.0.3 is vulnerable to HTTP header injection, caused by improper valida... |
| CVE-2023-45187 | HIGH | 8.8 | 0.4% | Feb 9, 2024 | IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 does not invalidate session after logout which could... |
| CVE-2023-42016 | MEDIUM | 4.3 | 0.3% | Feb 9, 2024 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.8 and 6.1.0.0 through 6.1.2.3 does not set the secure... |
| CVE-2023-32341 | MEDIUM | 6.5 | 0.6% | Feb 9, 2024 | IBM Sterling B2B Integrator 6.0.0.0 through 6.0.3.8 and 6.1.0.0 through 6.1.2.3 could allow an authenticated user to cau... |
| CVE-2023-51630 | MEDIUM | 6.1 | 1.7% | Feb 8, 2024 | Paessler PRTG Network Monitor Cross-Site Scripting Authentication Bypass Vulnerability. This vulnerability allows remote... |
| CVE-2023-47132 | CRITICAL | 9.8 | 0.6% | Feb 8, 2024 | An issue discovered in N-able N-central before 2023.6 and earlier allows attackers to gain escalated privileges via API ... |
| CVE-2023-47131 | HIGH | 7.5 | 0.5% | Feb 8, 2024 | The N-able PassPortal extension before 3.29.2 for Chrome inserts sensitive information into a log file. |
| CVE-2023-40264 | MEDIUM | 4.3 | 0.5% | Feb 8, 2024 | An issue was discovered in Atos Unify OpenScape Voice Trace Manager V8 before V8 R0.9.11. It allows authenticated path t... |
| CVE-2023-40263 | HIGH | 8.8 | 1.2% | Feb 8, 2024 | An issue was discovered in Atos Unify OpenScape Voice Trace Manager V8 before V8 R0.9.11. It allows authenticated comman... |
| CVE-2023-40262 | MEDIUM | 6.1 | 0.3% | Feb 8, 2024 | An issue was discovered in Atos Unify OpenScape Voice Trace Manager V8 before V8 R0.9.11. It allows unauthenticated Stor... |
| CVE-2023-49101 | MEDIUM | 6.1 | 0.2% | Feb 8, 2024 | WebAdmin in Axigen 10.3.x before 10.3.3.61, 10.4.x before 10.4.24, and 10.5.x before 10.5.10 allows XSS attacks against ... |
| CVE-2023-40266 | CRITICAL | 9.8 | 0.7% | Feb 8, 2024 | An issue was discovered in Atos Unify OpenScape Xpressions WebAssistant V7 before V7R1 FR5 HF42 P911. It allows path tra... |
| CVE-2023-40265 | HIGH | 8.8 | 0.9% | Feb 8, 2024 | An issue was discovered in Atos Unify OpenScape Xpressions WebAssistant V7 before V7R1 FR5 HF42 P911. It allows authenti... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now