2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-53965 | HIGH | 7.8 | 0.2% | Dec 22, 2025 | SOUND4 Server Service 4.1.102 contains an unquoted service path vulnerability that allows local non-privileged users to ... |
| CVE-2023-53964 | CRITICAL | 9.8 | 0.9% | Dec 22, 2025 | SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an unauthenticated vulnerability in the /usr/cgi-bin/restorefactory.cgi endp... |
| CVE-2023-53963 | CRITICAL | 9.8 | 3.0% | Dec 22, 2025 | SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an unauthenticated OS command injection vulnerability that allows remote att... |
| CVE-2023-53962 | HIGH | 8.8 | 1.0% | Dec 22, 2025 | SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an unauthenticated directory traversal vulnerability that allows remote atta... |
| CVE-2023-53961 | MEDIUM | 5.1 | 0.2% | Dec 22, 2025 | SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains a cross-site request forgery vulnerability that allows attackers to perform ... |
| CVE-2023-53960 | CRITICAL | 9.8 | 0.7% | Dec 22, 2025 | SOUND4 IMPACT/FIRST/PULSE/Eco version 2.x contains an SQL injection vulnerability in the 'index.php' authentication mech... |
| CVE-2023-53955 | CRITICAL | 9.8 | 0.8% | Dec 22, 2025 | SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an insecure direct object reference vulnerability that allows attackers to b... |
| CVE-2023-47232 | MEDIUM | 4.3 | 0.2% | Dec 21, 2025 | Vulnerability in mojofywp WP Affiliate Disclosure wp-affiliate-disclosure.This issue affects WP Affiliate Disclosure: fr... |
| CVE-2023-25446 | HIGH | 7.7 | 0.3% | Dec 21, 2025 | Missing Authorization vulnerability in HappyFiles HappyFiles Pro happyfiles-pro allows Exploiting Incorrectly Configured... |
| CVE-2023-25445 | MEDIUM | 5.4 | 0.2% | Dec 21, 2025 | Missing Authorization vulnerability in HappyFiles HappyFiles Pro allows Exploiting Incorrectly Configured Access Control... |
| CVE-2023-25068 | MEDIUM | 4.3 | 0.2% | Dec 21, 2025 | Missing Authorization vulnerability in Mapro Collins Magazine Edge allows Exploiting Incorrectly Configured Access Contr... |
| CVE-2023-53959 | CRITICAL | 9.8 | 0.7% | Dec 19, 2025 | FileZilla Client 3.63.1 contains a DLL hijacking vulnerability that allows attackers to execute malicious code by placin... |
| CVE-2023-53958 | HIGH | 8.6 | 0.3% | Dec 19, 2025 | LDAP Tool Box Self Service Password 1.5.2 contains a password reset vulnerability that allows attackers to manipulate HT... |
| CVE-2023-53957 | HIGH | 8.8 | 0.6% | Dec 19, 2025 | Kimai 1.30.10 contains a SameSite cookie vulnerability that allows attackers to steal user session cookies through malic... |
| CVE-2023-53956 | HIGH | 8.8 | 0.7% | Dec 19, 2025 | Flatnux 2021-03.25 contains an authenticated file upload vulnerability that allows administrative users to upload arbitr... |
| CVE-2023-53954 | HIGH | 8.5 | 0.1% | Dec 19, 2025 | ActFax 10.10 contains an unquoted service path vulnerability that allows local attackers to potentially escalate privile... |
| CVE-2023-53953 | MEDIUM | 5.4 | 0.2% | Dec 19, 2025 | WebsiteBaker 2.13.3 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malic... |
| CVE-2023-53952 | HIGH | 8.8 | 1.0% | Dec 19, 2025 | Dotclear 2.25.3 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious P... |
| CVE-2023-53951 | CRITICAL | 9.8 | 0.3% | Dec 19, 2025 | Ever Gauzy v0.281.9 contains a JWT authentication vulnerability that allows attackers to exploit weak HMAC secret key im... |
| CVE-2023-53950 | CRITICAL | 9.8 | 0.6% | Dec 19, 2025 | InnovaStudio WYSIWYG Editor 5.4 contains an unrestricted file upload vulnerability that allows attackers to bypass file ... |
| CVE-2023-53949 | HIGH | 8.5 | 0.1% | Dec 19, 2025 | AspEmail 5.6.0.2 contains a binary permission vulnerability that allows local users to escalate privileges through the P... |
| CVE-2023-53948 | CRITICAL | 9.8 | 0.8% | Dec 19, 2025 | Lilac-Reloaded for Nagios 2.0.8 contains a remote code execution vulnerability in the autodiscovery feature that allows ... |
| CVE-2023-53947 | HIGH | 8.5 | 0.1% | Dec 19, 2025 | OCS Inventory NG 2.3.0.0 contains an unquoted service path vulnerability that allows local attackers to escalate privile... |
| CVE-2023-53946 | HIGH | 8.5 | 0.1% | Dec 19, 2025 | Arcsoft PhotoStudio 6.0.0.172 contains an unquoted service path vulnerability in the ArcSoft Exchange Service that allow... |
| CVE-2023-53945 | HIGH | 8.8 | 1.0% | Dec 19, 2025 | BrainyCP 1.0 contains an authenticated remote code execution vulnerability that allows logged-in users to inject arbitra... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now