2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-5124 | MEDIUM | 4.8 | 0.4% | Jan 29, 2024 | The Page Builder: Pagelayer WordPress plugin before 1.8.0 doesn't prevent attackers with administrator privileges from i... |
| CVE-2023-40548 | HIGH | 7.4 | 0.4% | Jan 29, 2024 | A buffer overflow was found in Shim in the 32-bit system. The overflow happens due to an addition operation involving a ... |
| CVE-2023-29055 | HIGH | 7.5 | 1.1% | Jan 29, 2024 | In Apache Kylin version 2.0.0 to 4.0.3, there is a Server Config web interface that displays the content of file 'kylin.... |
| CVE-2023-5378 | MEDIUM | 5.4 | 0.5% | Jan 29, 2024 | Improper Input Validation vulnerability in MegaBIP and already unsupported SmodBIP software allows for Stored XSS.This ... |
| CVE-2023-46838 | HIGH | 7.5 | 1.2% | Jan 29, 2024 | Transmit requests in Xen's virtual network protocol can consist of multiple parts. While not really useful, except for ... |
| CVE-2023-46050 | — | — | — | Jan 29, 2024 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2023-45932 | — | — | — | Jan 29, 2024 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2023-45921 | — | — | — | Jan 29, 2024 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2023-45916 | — | — | — | Jan 29, 2024 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2023-6200 | HIGH | 7.5 | 2.1% | Jan 28, 2024 | A race condition was found in the Linux Kernel. Under certain conditions, an unauthenticated attacker from an adjacent n... |
| CVE-2023-48202 | MEDIUM | 5.4 | 0.4% | Jan 27, 2024 | Cross-Site Scripting (XSS) vulnerability in Sunlight CMS 8.0.1 allows an authenticated low-privileged user to escalate p... |
| CVE-2023-48201 | MEDIUM | 5.4 | 0.5% | Jan 27, 2024 | Cross Site Scripting (XSS) vulnerability in Sunlight CMS v.8.0.1, allows remote authenticated attackers to execute arbit... |
| CVE-2023-6497 | MEDIUM | 4.8 | 0.3% | Jan 27, 2024 | The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the automatic r... |
| CVE-2023-52389 | CRITICAL | 9.8 | 0.9% | Jan 27, 2024 | UTF32Encoding.cpp in POCO has a Poco::UTF32Encoding integer overflow and resultant stack buffer overflow because Poco::U... |
| CVE-2023-6482 | MEDIUM | 5.2 | 0.1% | Jan 27, 2024 | Use of encryption key derived from static information in Synaptics Fingerprint Driver allows an attacker to set up a T... |
| CVE-2023-52187 | HIGH | 7.5 | 0.5% | Jan 27, 2024 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Thomas Maier Image Source Control Lite – Sho... |
| CVE-2023-6470 | — | — | — | Jan 26, 2024 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. |
| CVE-2023-29081 | MEDIUM | 5.5 | 0.1% | Jan 26, 2024 | A vulnerability has been reported in Suite Setups built with versions prior to InstallShield 2023 R2. This vulnerability... |
| CVE-2023-6291 | HIGH | 7.1 | 0.9% | Jan 26, 2024 | A flaw was found in the redirect_uri validation logic in Keycloak. This issue may allow a bypass of otherwise explicitly... |
| CVE-2023-6919 | HIGH | 7.5 | 0.6% | Jan 26, 2024 | Path Traversal: '/../filedir' vulnerability in Biges Safe Life Technologies Electronics Inc. VGuard allows Absolute Path... |
| CVE-2023-48129 | MEDIUM | 5.4 | 0.4% | Jan 26, 2024 | An issue in kimono-oldnew mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage ... |
| CVE-2023-48135 | MEDIUM | 5.4 | 0.4% | Jan 26, 2024 | An issue in mimasaka_farm mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage ... |
| CVE-2023-48133 | MEDIUM | 5.4 | 0.4% | Jan 26, 2024 | An issue in angel coffee mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage o... |
| CVE-2023-48132 | MEDIUM | 5.4 | 0.4% | Jan 26, 2024 | An issue in kosei entertainment esportsstudioLegends mini-app on Line v13.6.1 allows attackers to send crafted malicious... |
| CVE-2023-48131 | MEDIUM | 5.4 | 0.4% | Jan 26, 2024 | An issue in CHIGASAKI BAKERY mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leaka... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now