2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-27001 | HIGH | 8.8 | 0.9% | Feb 8, 2024 | An issue discovered in Egerie Risk Manager v4.0.5 allows attackers to bypass the signature mechanism and tamper with the... |
| CVE-2023-25365 | HIGH | 7.8 | 0.4% | Feb 8, 2024 | Cross Site Scripting vulnerability found in October CMS v.3.2.0 allows local attacker to execute arbitrary code via the ... |
| CVE-2023-50061 | CRITICAL | 9.8 | 0.6% | Feb 8, 2024 | PrestaShop Op'art Easy Redirect >= 1.3.8 and <= 1.3.12 is vulnerable to SQL Injection via Oparteasyredirect::hookActionD... |
| CVE-2023-42282 | CRITICAL | 9.8 | 1.6% | Feb 8, 2024 | The ip package before 1.1.9 for Node.js might allow SSRF because some IP addresses (such as 0x7f.1) are improperly categ... |
| CVE-2023-47020 | HIGH | 8.8 | 0.3% | Feb 8, 2024 | Multiple Cross-Site Request Forgery (CSRF) chaining in NCR Terminal Handler v.1.5.1 allows privileges to be escalated by... |
| CVE-2023-7169 | MEDIUM | 5.5 | 0.2% | Feb 8, 2024 | Authentication Bypass by Spoofing vulnerability in Snow Software Snow Inventory Agent on Windows allows Signature Spoof.... |
| CVE-2023-6564 | MEDIUM | 6.5 | 0.4% | Feb 8, 2024 | An issue has been discovered in GitLab EE Premium and Ultimate affecting versions 16.4.3, 16.5.3, and 16.6.1. In project... |
| CVE-2023-6519 | HIGH | 7.5 | 0.5% | Feb 8, 2024 | Exposure of Data Element to Wrong Session vulnerability in Mia Technology Inc. MİA-MED allows Read Sensitive Strings Wit... |
| CVE-2023-6518 | HIGH | 7.5 | 0.4% | Feb 8, 2024 | Plaintext Storage of a Password vulnerability in Mia Technology Inc. MİA-MED allows Read Sensitive Strings Within an Exe... |
| CVE-2023-6517 | HIGH | 7.5 | 0.5% | Feb 8, 2024 | Exposure of Sensitive Information Due to Incompatible Policies vulnerability in Mia Technology Inc. MİA-MED allows Colle... |
| CVE-2023-6515 | HIGH | 8.8 | 0.6% | Feb 8, 2024 | Authorization Bypass Through User-Controlled Key vulnerability in Mia Technology Inc. MİA-MED allows Authentication Abus... |
| CVE-2023-5665 | MEDIUM | 5.4 | 0.5% | Feb 8, 2024 | The Payment Forms for Paystack plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortc... |
| CVE-2023-47798 | MEDIUM | 4.6 | 0.3% | Feb 8, 2024 | Account lockout in Liferay Portal 7.2.0 through 7.3.0, and older unsupported versions, and Liferay DXP 7.2 before fix pa... |
| CVE-2023-48974 | CRITICAL | 9.6 | 3.0% | Feb 8, 2024 | Cross Site Scripting vulnerability in Axigen WebMail prior to 10.3.3.61 allows a remote attacker to escalate privileges ... |
| CVE-2023-6840 | MEDIUM | 6.7 | 0.6% | Feb 7, 2024 | An issue has been discovered in GitLab EE affecting all versions from 16.4 prior to 16.6.7, 16.7 prior to 16.7.5, and 16... |
| CVE-2023-6736 | MEDIUM | 6.5 | 0.6% | Feb 7, 2024 | An issue has been discovered in GitLab EE affecting all versions starting from 11.3 before 16.7.6, all versions starting... |
| CVE-2023-6536 | HIGH | 7.5 | 1.5% | Feb 7, 2024 | A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a se... |
| CVE-2023-6535 | HIGH | 7.5 | 1.5% | Feb 7, 2024 | A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a se... |
| CVE-2023-6356 | HIGH | 7.5 | 1.5% | Feb 7, 2024 | A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a se... |
| CVE-2023-38995 | CRITICAL | 9.8 | 0.8% | Feb 7, 2024 | An issue in SCHUHFRIED v.8.22.00 allows remote attacker to obtain the database password via crafted curl command. |
| CVE-2023-47700 | HIGH | 7.5 | 0.5% | Feb 7, 2024 | IBM SAN Volume Controller, IBM Storwize, IBM FlashSystem and IBM Storage Virtualize 8.6 products could allow a remote at... |
| CVE-2023-43017 | HIGH | 7.2 | 0.6% | Feb 7, 2024 | IBM Security Verify Access 10.0.0.0 through 10.0.6.1 could allow a privileged user to install a configuration file that ... |
| CVE-2023-38369 | HIGH | 7.5 | 0.5% | Feb 7, 2024 | IBM Security Access Manager Container 10.0.0.0 through 10.0.6.1 does not require that docker images should have strong p... |
| CVE-2023-32330 | CRITICAL | 9.8 | 0.9% | Feb 7, 2024 | IBM Security Verify Access 10.0.0.0 through 10.0.6.1 uses insecure calls that could allow an attacker on the network to ... |
| CVE-2023-32328 | CRITICAL | 9.8 | 0.6% | Feb 7, 2024 | IBM Security Verify Access 10.0.0.0 through 10.0.6.1 uses insecure protocols in some instances that could allow an attac... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now