2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-50327 | MEDIUM | 5.3 | 0.5% | Feb 2, 2024 | IBM PowerSC 1.3, 2.0, and 2.1 uses insecure HTTP methods which could allow a remote attacker to perform unauthorized fil... |
| CVE-2023-50326 | HIGH | 7.5 | 0.7% | Feb 2, 2024 | IBM PowerSC 1.3, 2.0, and 2.1 uses an inadequate account lockout setting that could allow a remote attacker to brute for... |
| CVE-2023-50939 | HIGH | 7.5 | 0.3% | Feb 2, 2024 | IBM PowerSC 1.3, 2.0, and 2.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt... |
| CVE-2023-6221 | MEDIUM | 6.5 | 0.6% | Feb 1, 2024 | The cloud provider MachineSense uses for integration and deployment for multiple MachineSense devices, such as the prog... |
| CVE-2023-49617 | CRITICAL | 9.1 | 0.8% | Feb 1, 2024 | The MachineSense application programmable interface (API) is improperly protected and can be accessed without authe... |
| CVE-2023-49610 | HIGH | 8.1 | 0.4% | Feb 1, 2024 | MachineSense FeverWarn Raspberry Pi-based devices lack input sanitization, which could allow an attacker on a... |
| CVE-2023-49115 | HIGH | 7.5 | 0.6% | Feb 1, 2024 | MachineSense devices use unauthenticated MQTT messaging to monitor devices and remote viewing of sensor data by u... |
| CVE-2023-47867 | HIGH | 8.8 | 0.4% | Feb 1, 2024 | MachineSense FeverWarn devices are configured as Wi-Fi hosts in a way that attackers within range could connect... |
| CVE-2023-46706 | CRITICAL | 9.8 | 0.7% | Feb 1, 2024 | Multiple MachineSense devices have credentials unable to be changed by the user or administrator. |
| CVE-2023-36496 | HIGH | 8.8 | 0.5% | Feb 1, 2024 | Delegated Admin Privilege virtual attribute provider plugin, when enabled, allows an authenticated user to elevate their... |
| CVE-2023-4472 | CRITICAL | 9.8 | 0.6% | Feb 1, 2024 | Objectplanet Opinio version 7.22 and prior uses a cryptographically weak pseudo-random number generator (PRNG) coupled t... |
| CVE-2023-47257 | HIGH | 8.1 | 1.0% | Feb 1, 2024 | ConnectWise ScreenConnect through 23.8.4 allows man-in-the-middle attackers to achieve remote code execution via crafted... |
| CVE-2023-47256 | MEDIUM | 5.5 | 0.4% | Feb 1, 2024 | ConnectWise ScreenConnect through 23.8.4 allows local users to connect to arbitrary relay servers via implicit trust of ... |
| CVE-2023-5841 | CRITICAL | 9.1 | 1.3% | Feb 1, 2024 | Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy S... |
| CVE-2023-51446 | HIGH | 8.1 | 0.9% | Feb 1, 2024 | GLPI is a Free Asset and IT Management Software package. When authentication is made against a LDAP, the authentication ... |
| CVE-2023-6078 | CRITICAL | 9.8 | 1.6% | Feb 1, 2024 | An OS Command Injection vulnerability exists in BIOVIA Materials Studio products from Release BIOVIA 2021 through Releas... |
| CVE-2023-51520 | MEDIUM | 5.4 | 0.3% | Feb 1, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPdevelop / Oplugi... |
| CVE-2023-51514 | MEDIUM | 5.4 | 0.3% | Feb 1, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codeboxr Team CBX ... |
| CVE-2023-51509 | MEDIUM | 6.1 | 0.4% | Feb 1, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Metagauss Registra... |
| CVE-2023-51506 | MEDIUM | 5.4 | 0.3% | Feb 1, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in realmag777 WPCS – ... |
| CVE-2023-52118 | MEDIUM | 5.4 | 0.3% | Feb 1, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Event Manager W... |
| CVE-2023-51695 | MEDIUM | 4.8 | 0.3% | Feb 1, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPEverest Everest ... |
| CVE-2023-51694 | MEDIUM | 5.4 | 0.3% | Feb 1, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Epiphyt Embed Priv... |
| CVE-2023-51693 | MEDIUM | 5.4 | 0.3% | Feb 1, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themify Icons allo... |
| CVE-2023-51691 | MEDIUM | 4.8 | 0.3% | Feb 1, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gVectors Team Comm... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now