2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-2995 | MEDIUM | 4.8 | 0.4% | Sep 19, 2023 | The Leyka WordPress plugin before 3.30.4 does not sanitise and escape some of its settings, which could allow high privi... |
| CVE-2023-43566 | MEDIUM | 5.4 | 0.9% | Sep 19, 2023 | In JetBrains TeamCity before 2023.05.4 stored XSS was possible during nodes configuration |
| CVE-2023-42452 | MEDIUM | 5.4 | 0.4% | Sep 19, 2023 | Mastodon is a free, open-source social network server based on ActivityPub. In versions on the 4.x branch prior to versi... |
| CVE-2023-38353 | MEDIUM | 5.9 | 0.4% | Sep 19, 2023 | MiniTool Power Data Recovery version 11.6 and before contains an insecure in-app payment system that allows attackers to... |
| CVE-2023-4095 | MEDIUM | 5.3 | 0.4% | Sep 19, 2023 | User enumeration vulnerability in Arconte Áurea 1.5.0.0 version. The exploitation of this vulnerability could allow an a... |
| CVE-2023-4093 | MEDIUM | 6.1 | 0.3% | Sep 19, 2023 | Reflected and persistent XSS vulnerability in Arconte Áurea, in its 1.5.0.0 version. The exploitation of this vulnerabil... |
| CVE-2023-41834 | MEDIUM | 6.1 | 1.6% | Sep 19, 2023 | Improper Neutralization of CRLF Sequences in HTTP Headers in Apache Flink Stateful Functions 3.1.0, 3.1.1 and 3.2.0 allo... |
| CVE-2023-23957 | MEDIUM | 5.4 | 0.3% | Sep 19, 2023 | An authenticated user can see and modify the value for ‘next’ query parameter in Symantec Identity Portal 14.4 |
| CVE-2023-5054 | MEDIUM | 5.3 | 0.5% | Sep 19, 2023 | The Super Store Finder plugin for WordPress is vulnerable to unauthenticated arbitrary email creation and relay in versi... |
| CVE-2023-42399 | MEDIUM | 6.1 | 0.5% | Sep 19, 2023 | Cross Site Scripting vulnerability in xdsoft.net Jodit Editor v.4.0.0-beta.86 allows a remote attacker to obtain sensiti... |
| CVE-2023-5060 | MEDIUM | 6.1 | 0.6% | Sep 19, 2023 | Cross-site Scripting (XSS) - DOM in GitHub repository librenms/librenms prior to 23.9.1. |
| CVE-2023-41599 | MEDIUM | 5.3 | 11.2% | Sep 19, 2023 | An issue in the component /common/DownController.java of JFinalCMS v5.0.0 allows attackers to execute a directory traver... |
| CVE-2023-40788 | MEDIUM | 5.3 | 0.6% | Sep 19, 2023 | SpringBlade <=V3.6.0 is vulnerable to Incorrect Access Control due to incorrect configuration in the default gateway res... |
| CVE-2023-42446 | MEDIUM | 6.5 | 0.5% | Sep 18, 2023 | Pow is a authentication and user management solution for Phoenix and Plug-based apps. Starting in version 1.0.14 and pri... |
| CVE-2023-39056 | MEDIUM | 6.5 | 0.4% | Sep 18, 2023 | An information leak in Coffee-jumbo v13.6.1 allows attackers to obtain the channel access token and send crafted message... |
| CVE-2023-39049 | MEDIUM | 6.5 | 0.4% | Sep 18, 2023 | An information leak in youmart-tokunaga v13.6.1 allows attackers to obtain the channel access token and send crafted mes... |
| CVE-2023-39046 | MEDIUM | 6.5 | 0.4% | Sep 18, 2023 | An information leak in TonTon-Tei_waiting Line v13.6.1 allows attackers to obtain the channel access token and send craf... |
| CVE-2023-37611 | MEDIUM | 5.4 | 0.6% | Sep 18, 2023 | Cross Site Scripting (XSS) vulnerability in Neos CMS 8.3.3 allows a remote authenticated attacker to execute arbitrary c... |
| CVE-2023-42441 | MEDIUM | 5.3 | 0.4% | Sep 18, 2023 | Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine (EVM). Starting in version 0.2.9 and prior ... |
| CVE-2023-39058 | MEDIUM | 6.5 | 0.4% | Sep 18, 2023 | An information leak in THE_B_members card v13.6.1 allows attackers to obtain the channel access token and send crafted m... |
| CVE-2023-39043 | MEDIUM | 6.5 | 0.5% | Sep 18, 2023 | An information leak in YKC Tokushima_awayokocho Line v13.6.1 allows attackers to obtain the channel access token and sen... |
| CVE-2023-39040 | MEDIUM | 6.5 | 0.4% | Sep 18, 2023 | An information leak in Cheese Cafe Line v13.6.1 allows attackers to obtain the channel access token and send crafted mes... |
| CVE-2023-39039 | MEDIUM | 6.5 | 0.4% | Sep 18, 2023 | An information leak in Camp Style Project Line v13.6.1 allows attackers to obtain the channel access token and send craf... |
| CVE-2023-38582 | MEDIUM | 5.4 | 0.4% | Sep 18, 2023 | Persistent cross-site scripting (XSS) in the web application of MOD3GP-SY-120K allows an authenticated remote a... |
| CVE-2023-38255 | MEDIUM | 6.1 | 0.3% | Sep 18, 2023 | A potential attacker with or without (cookie theft) access to the device would be able to include malic... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now