2023 CVE Vulnerabilities

31,245 CVEs published in 2023.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2023-36881MEDIUM4.5Azure Apache Ambari Spoofing Vulnerability
CVE-2023-36877MEDIUM4.5Azure Apache Oozie Spoofing Vulnerability
CVE-2023-36869MEDIUM6.3Azure DevOps Server Spoofing Vulnerability
CVE-2023-36535MEDIUM6.5Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow an authenticated user to enable...
CVE-2023-35394MEDIUM4.6Azure HDInsight Jupyter Notebook Spoofing Vulnerability
CVE-2023-35393MEDIUM4.5Azure Apache Hive Spoofing Vulnerability
CVE-2023-35389MEDIUM6.5Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
CVE-2023-35384MEDIUM6.5Windows HTML Platforms Security Feature Bypass Vulnerability
CVE-2023-35377MEDIUM6.5Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVE-2023-35376MEDIUM6.5Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVE-2023-20589MEDIUM6.8 An attacker with specialized hardware and physical access to an impacted device may be able to perform a voltage fault ...
CVE-2023-20588MEDIUM5.5 A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidenti...
CVE-2023-20569MEDIUM4.7 A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction...
CVE-2023-20561MEDIUM5.5 Insufficient validation of the IOCTL (Input Output Control) input buffer in AMD μProf may allow an authenticated ...
CVE-2023-20556MEDIUM5.5 Insufficient validation of the IOCTL (Input Output Control) input buffer in AMD μProf may allow an authenticated us...
CVE-2023-38766MEDIUM5.4Cross Site Scripting (XSS) vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to execute arbitrary code via a c...
CVE-2023-38763MEDIUM6.5SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the FundRa...
CVE-2023-38761MEDIUM6.1Cross Site Scripting (XSS) vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to execute arbitrary code via a c...
CVE-2023-38758MEDIUM5.4Cross Site Scripting vulnerability in wger Project wger Workout Manager v.2.2.0a3 allows a remote attacker to gain privi...
CVE-2023-3653MEDIUM5.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Digital Ant E-Comm...
CVE-2023-3652MEDIUM6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Digital Ant E-Comm...
CVE-2023-36306MEDIUM6.1A Cross Site Scripting (XSS) vulnerability in Adiscon Aiscon LogAnalyzer through 4.1.13 allows a remote attacker to exec...
CVE-2023-36136MEDIUM6.5PHPJabbers Class Scheduling System 1.0 lacks encryption on the password when editing a user account (update user page) a...
CVE-2023-38384MEDIUM6.1Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Syntactics, Inc. EaSYNC plugin <= 1.3.7 versions.
CVE-2023-32292MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in GetButton Chat Button by GetButton.Io plugin <= 1.8.9....

Check if your code is affected by 2023 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now