2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-50760 | HIGH | 8.8 | 1.2% | Jan 4, 2024 | Online Notice Board System v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'f' parameter of user/upda... |
| CVE-2023-3726 | MEDIUM | 6.9 | 0.5% | Jan 4, 2024 | OCSInventory allow stored email template with special characters that lead to a Stored cross-site Scripting. |
| CVE-2023-50753 | CRITICAL | 9.8 | 0.7% | Jan 4, 2024 | Online Notice Board System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'dd' parame... |
| CVE-2023-50752 | CRITICAL | 9.8 | 0.7% | Jan 4, 2024 | Online Notice Board System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'e' paramet... |
| CVE-2023-50743 | CRITICAL | 9.8 | 0.7% | Jan 4, 2024 | Online Notice Board System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'dd' parame... |
| CVE-2023-49666 | CRITICAL | 9.8 | 0.7% | Jan 4, 2024 | Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'custmer_details' par... |
| CVE-2023-49665 | CRITICAL | 9.8 | 0.7% | Jan 4, 2024 | Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'quantity[]' paramete... |
| CVE-2023-49658 | CRITICAL | 9.8 | 0.7% | Jan 4, 2024 | Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'bank_details' parame... |
| CVE-2023-49639 | CRITICAL | 9.8 | 0.7% | Jan 4, 2024 | Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'customer_details' pa... |
| CVE-2023-49633 | CRITICAL | 9.8 | 0.7% | Jan 4, 2024 | Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'buyer_address' param... |
| CVE-2023-49625 | CRITICAL | 9.8 | 0.7% | Jan 4, 2024 | Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' parameter of the... |
| CVE-2023-49624 | CRITICAL | 9.8 | 0.7% | Jan 4, 2024 | Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'cancelid' parameter ... |
| CVE-2023-49622 | CRITICAL | 9.8 | 0.7% | Jan 4, 2024 | Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'itemnameid' paramete... |
| CVE-2023-6992 | MEDIUM | 5.5 | 0.2% | Jan 4, 2024 | Cloudflare version of zlib library was found to be vulnerable to memory corruption issues affecting the deflation algori... |
| CVE-2023-7044 | MEDIUM | 5.4 | 0.4% | Jan 4, 2024 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress... |
| CVE-2023-6944 | MEDIUM | 5.7 | 0.6% | Jan 4, 2024 | A flaw was found in the Red Hat Developer Hub (RHDH). The catalog-import function leaks GitLab access tokens on the fron... |
| CVE-2023-50630 | MEDIUM | 6.1 | 0.5% | Jan 4, 2024 | Cross Site Scripting (XSS) vulnerability in xiweicheng TMS v.2.28.0 allows a remote attacker to execute arbitrary code v... |
| CVE-2023-50082 | HIGH | 7.5 | 0.6% | Jan 4, 2024 | Aoyun Technology pbootcms V3.1.2 is vulnerable to Incorrect Access Control, allows remote attackers to gain sensitive in... |
| CVE-2023-41784 | MEDIUM | 5.5 | 0.2% | Jan 4, 2024 | Permissions and Access Control Vulnerability in ZTE Red Magic 8 Pro |
| CVE-2023-52322 | MEDIUM | 6.1 | 0.4% | Jan 4, 2024 | ecrire/public/assembler.php in SPIP before 4.1.13 and 4.2.x before 4.2.7 allows XSS because input from _request() is not... |
| CVE-2023-29962 | MEDIUM | 6.5 | 0.7% | Jan 4, 2024 | S-CMS v5.0 was discovered to contain an arbitrary file read vulnerability. |
| CVE-2023-6738 | MEDIUM | 5.4 | 0.4% | Jan 4, 2024 | The Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress is vulnerable to Stored Cross-Site Scri... |
| CVE-2023-6733 | MEDIUM | 6.5 | 0.4% | Jan 4, 2024 | The WP-Members Membership Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up... |
| CVE-2023-6498 | MEDIUM | 4.8 | 0.3% | Jan 4, 2024 | The Complianz – GDPR/CCPA Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin set... |
| CVE-2023-5138 | MEDIUM | 6.8 | 0.3% | Jan 3, 2024 | Glitch detection is not enabled by default for the CortexM33 core in Silicon Labs secure vault high parts EFx32xG2xB, ex... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now