2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-6029 | HIGH | 7.5 | 0.2% | Jan 15, 2024 | The EazyDocs WordPress plugin before 2.3.6 does not have authorization and CSRF checks when handling documents and does ... |
| CVE-2023-5905 | HIGH | 8.1 | 0.6% | Jan 15, 2024 | The DeMomentSomTres WordPress Export Posts With Images WordPress plugin through 20220825 does not check authorization of... |
| CVE-2023-50729 | CRITICAL | 9.8 | 0.6% | Jan 15, 2024 | Traccar is an open source GPS tracking system. Prior to 5.11, Traccar is affected by an unrestricted file upload vulnera... |
| CVE-2023-4925 | MEDIUM | 4.8 | 0.4% | Jan 15, 2024 | The Easy Forms for Mailchimp WordPress plugin through 6.8.10 does not sanitise and escape some of its settings, which co... |
| CVE-2023-4818 | HIGH | 7.6 | 0.7% | Jan 15, 2024 | PAX A920 device allows to downgrade bootloader due to a bug in its version check. The signature is correctly checked and... |
| CVE-2023-42137 | HIGH | 7.8 | 0.5% | Jan 15, 2024 | PAX Android based POS devices with PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier can allow for command executi... |
| CVE-2023-42136 | HIGH | 7.8 | 0.5% | Jan 15, 2024 | PAX Android based POS devices with PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier can allow the execution of ar... |
| CVE-2023-42135 | MEDIUM | 6.8 | 0.6% | Jan 15, 2024 | PAX A920Pro/A50 devices with PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier can allow local code execution via ... |
| CVE-2023-42134 | MEDIUM | 6.8 | 0.6% | Jan 15, 2024 | PAX Android based POS devices with PayDroid_8.1.0_Sagittarius_V11.1.45_20230314 or earlier can allow the signed partitio... |
| CVE-2023-5253 | HIGH | 7.5 | 0.5% | Jan 15, 2024 | A missing authentication check in the WebSocket channel used for the Check Point IoT integration in Nozomi Networks Guar... |
| CVE-2023-4001 | MEDIUM | 6.8 | 0.5% | Jan 15, 2024 | An authentication bypass flaw was found in GRUB due to the way that GRUB uses the UUID of a device to search for the con... |
| CVE-2023-46226 | CRITICAL | 9.8 | 1.9% | Jan 15, 2024 | Remote Code Execution vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 1.0.0 through 1.2.2. Users ar... |
| CVE-2023-6915 | MEDIUM | 5.5 | 0.3% | Jan 15, 2024 | A Null pointer dereference problem was found in ida_free in lib/idr.c in the Linux Kernel. This issue may allow an attac... |
| CVE-2023-50290 | MEDIUM | 6.5 | 68.7% | Jan 15, 2024 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Solr. The Solr Metrics API publishes ... |
| CVE-2023-46749 | MEDIUM | 6.5 | 1.2% | Jan 15, 2024 | Apache Shiro before 1.13.0 or 2.0.0-alpha-4, may be susceptible to a path traversal attack that results in an authentica... |
| CVE-2023-48383 | HIGH | 7.5 | 1.0% | Jan 15, 2024 | NetVision Information airPASS has a path traversal vulnerability within its parameter in a specific URL. An unauthen... |
| CVE-2023-52289 | HIGH | 7.5 | 0.7% | Jan 13, 2024 | An issue was discovered in the flaskcode package through 0.0.8 for Python. An unauthenticated directory traversal, explo... |
| CVE-2023-52288 | HIGH | 7.5 | 0.8% | Jan 13, 2024 | An issue was discovered in the flaskcode package through 0.0.8 for Python. An unauthenticated directory traversal, explo... |
| CVE-2023-51071 | MEDIUM | 6.5 | 0.5% | Jan 13, 2024 | An access control issue in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows unauthenticated attackers ... |
| CVE-2023-51070 | HIGH | 7.5 | 0.6% | Jan 13, 2024 | An access control issue in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows unauthenticated attackers ... |
| CVE-2023-51068 | MEDIUM | 5.4 | 0.4% | Jan 13, 2024 | An authenticated reflected cross-site scripting (XSS) vulnerability in QStar Archive Solutions Release RELEASE_3-0 Build... |
| CVE-2023-51067 | MEDIUM | 6.1 | 0.4% | Jan 13, 2024 | An unauthenticated reflected cross-site scripting (XSS) vulnerability in QStar Archive Solutions Release RELEASE_3-0 Bui... |
| CVE-2023-51066 | HIGH | 8.8 | 1.5% | Jan 13, 2024 | An authenticated remote code execution vulnerability in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allo... |
| CVE-2023-51065 | HIGH | 7.5 | 0.7% | Jan 13, 2024 | Incorrect access control in QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 allows unauthenticated attackers... |
| CVE-2023-51064 | MEDIUM | 6.1 | 0.4% | Jan 13, 2024 | QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 was discovered to contain a DOM Based reflected XSS vulnerab... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now