2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-50578 | CRITICAL | 9.8 | 2.2% | Dec 30, 2023 | Mingsoft MCMS v5.2.9 was discovered to contain a SQL injection vulnerability via the categoryType parameter at /content/... |
| CVE-2023-50550 | MEDIUM | 5.4 | 0.3% | Dec 30, 2023 | layui up to v2.74 was discovered to contain a cross-site scripting (XSS) vulnerability via the data-content parameter. |
| CVE-2023-7175 | CRITICAL | 9.8 | 0.6% | Dec 30, 2023 | A vulnerability was found in Campcodes Online College Library System 1.0. It has been rated as critical. Affected by thi... |
| CVE-2023-7173 | MEDIUM | 5.4 | 1.5% | Dec 30, 2023 | A vulnerability, which was classified as problematic, was found in PHPGurukul Hospital Management System 1.0. This affec... |
| CVE-2023-7172 | HIGH | 7.2 | 1.5% | Dec 30, 2023 | A vulnerability, which was classified as critical, has been found in PHPGurukul Hospital Management System 1.0. Affected... |
| CVE-2023-52257 | MEDIUM | 6.1 | 0.4% | Dec 30, 2023 | LogoBee 0.2 allows updates.php?id= XSS. |
| CVE-2023-52252 | CRITICAL | 9.8 | 1.1% | Dec 30, 2023 | Unified Remote 3.13.0 allows remote attackers to execute arbitrary Lua code because of a wildcarded Access-Control-Allow... |
| CVE-2023-41544 | CRITICAL | 9.8 | 2.7% | Dec 30, 2023 | SSTI injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to execute arbitrary code via crafted ... |
| CVE-2023-38023 | MEDIUM | 5.5 | 0.2% | Dec 30, 2023 | An issue was discovered in SCONE Confidential Computing Platform before 5.8.0 for Intel SGX. Lack of pointer-alignment l... |
| CVE-2023-38022 | MEDIUM | 5.5 | 0.2% | Dec 30, 2023 | An issue was discovered in Fortanix EnclaveOS Confidential Computing Manager (CCM) Platform before 3.29 for Intel SGX. I... |
| CVE-2023-38021 | MEDIUM | 5.5 | 0.2% | Dec 30, 2023 | An issue was discovered in Fortanix EnclaveOS Confidential Computing Manager (CCM) Platform before 3.32 for Intel SGX. L... |
| CVE-2023-41543 | CRITICAL | 9.8 | 0.9% | Dec 30, 2023 | SQL injection vulnerability in jeecg-boot v3.5.3, allows remote attackers to escalate privileges and obtain sensitive in... |
| CVE-2023-41542 | CRITICAL | 9.8 | 0.9% | Dec 30, 2023 | SQL injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to escalate privileges and obtain sensi... |
| CVE-2023-50559 | MEDIUM | 5.5 | 0.2% | Dec 30, 2023 | An issue was discovered in XiangShan v2.1, allows local attackers to obtain sensitive information via the L1D cache. |
| CVE-2023-52240 | MEDIUM | 6.1 | 0.5% | Dec 29, 2023 | The Kantega SAML SSO OIDC Kerberos Single Sign-on apps before 6.20.0 for Atlassian products allow XSS if SAML POST Bindi... |
| CVE-2023-50071 | HIGH | 8.8 | 13.8% | Dec 29, 2023 | Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customer_support/ajax.php?acti... |
| CVE-2023-50070 | HIGH | 8.8 | 0.8% | Dec 29, 2023 | Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customer_support/ajax.php?acti... |
| CVE-2023-50069 | MEDIUM | 6.1 | 0.4% | Dec 29, 2023 | WireMock with GUI versions 3.2.0.0 through 3.0.4.0 are vulnerable to stored cross-site scripting (SXSS) through the reco... |
| CVE-2023-50035 | CRITICAL | 9.8 | 0.6% | Dec 29, 2023 | PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection on the Users login panel because of "password" parameter is dire... |
| CVE-2023-7171 | MEDIUM | 4.8 | 0.5% | Dec 29, 2023 | A vulnerability was found in Novel-Plus up to 4.2.0. It has been declared as problematic. Affected by this vulnerability... |
| CVE-2023-52139 | CRITICAL | 9.6 | 0.5% | Dec 29, 2023 | Misskey is an open source, decentralized social media platform. Third-party applications may be able to access some endp... |
| CVE-2023-52137 | HIGH | 8.8 | 2.6% | Dec 29, 2023 | The [`tj-actions/verify-changed-files`](https://github.com/tj-actions/verify-changed-files) action allows for command in... |
| CVE-2023-51663 | MEDIUM | 5.3 | 0.4% | Dec 29, 2023 | Hail is an open-source, general-purpose, Python-based data analysis tool with additional data types and methods for work... |
| CVE-2023-51688 | HIGH | 7.5 | 0.5% | Dec 29, 2023 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in impleCode eCommerce Product Catalog Plugin f... |
| CVE-2023-51687 | HIGH | 7.5 | 0.5% | Dec 29, 2023 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in impleCode Product Catalog Simple.This issue ... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now