2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-49119 | MEDIUM | 5.4 | 0.4% | Dec 26, 2023 | Stored cross-site scripting vulnerability via the img tags exists in GROWI versions prior to v6.0.0. If this vulnerabili... |
| CVE-2023-47215 | MEDIUM | 5.4 | 0.3% | Dec 26, 2023 | Stored cross-site scripting vulnerability which is exploiting a behavior of the XSS Filter exists in GROWI versions prio... |
| CVE-2023-46711 | MEDIUM | 4.6 | 0.2% | Dec 26, 2023 | VR-S1000 firmware Ver. 2.37 and earlier uses a hard-coded cryptographic key which may allow an attacker to analyze the p... |
| CVE-2023-46699 | MEDIUM | 4.3 | 0.2% | Dec 26, 2023 | Cross-site request forgery (CSRF) vulnerability exists in the User settings (/me) page of GROWI versions prior to v6.0.0... |
| CVE-2023-46681 | HIGH | 7.8 | 0.3% | Dec 26, 2023 | Improper neutralization of argument delimiters in a command ('Argument Injection') vulnerability in VR-S1000 firmware Ve... |
| CVE-2023-45741 | MEDIUM | 6.8 | 0.3% | Dec 26, 2023 | VR-S1000 firmware Ver. 2.37 and earlier allows an attacker with access to the product's web management page to execute a... |
| CVE-2023-45740 | MEDIUM | 5.4 | 0.3% | Dec 26, 2023 | Stored cross-site scripting vulnerability when processing profile images exists in GROWI versions prior to v4.1.3. If th... |
| CVE-2023-45737 | MEDIUM | 5.4 | 0.3% | Dec 26, 2023 | Stored cross-site scripting vulnerability exists in the App Settings (/admin/app) page and the Markdown Settings (/admin... |
| CVE-2023-42436 | MEDIUM | 5.4 | 0.3% | Dec 26, 2023 | Stored cross-site scripting vulnerability exists in the presentation feature of GROWI versions prior to v3.4.0. If this ... |
| CVE-2023-51654 | MEDIUM | 5.5 | 0.2% | Dec 26, 2023 | Improper link resolution before file access ('Link Following') issue exists in iPrint&Scan Desktop for Windows versions ... |
| CVE-2023-50297 | MEDIUM | 6.1 | 0.4% | Dec 26, 2023 | Open redirect vulnerability in PowerCMS (6 Series, 5 Series, and 4 Series) allows a remote unauthenticated attacker to r... |
| CVE-2023-49117 | MEDIUM | 5.4 | 0.3% | Dec 26, 2023 | PowerCMS (6 Series, 5 Series, and 4 Series) contains a stored cross-site scripting vulnerability. If this vulnerability ... |
| CVE-2023-28616 | HIGH | 7.5 | 0.3% | Dec 26, 2023 | An issue was discovered in Stormshield Network Security (SNS) before 4.3.17, 4.4.x through 4.6.x before 4.6.4, and 4.7.x... |
| CVE-2023-27150 | MEDIUM | 5.4 | 0.4% | Dec 26, 2023 | openCRX 5.2.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Name field after creation of ... |
| CVE-2023-7111 | CRITICAL | 9.8 | 0.6% | Dec 26, 2023 | A vulnerability, which was classified as critical, was found in code-projects Library Management System 2.0. Affected is... |
| CVE-2023-38321 | HIGH | 7.5 | 1.1% | Dec 25, 2023 | OpenNDS, as used in Sierra Wireless ALEOS before 4.17.0.12 and other products, allows remote attackers to cause a denial... |
| CVE-2023-49954 | CRITICAL | 9.8 | 2.2% | Dec 25, 2023 | The CRM Integration in 3CX before 18.0.9.23 and 20 before 20.0.0.1494 allows SQL Injection via a first name, search stri... |
| CVE-2023-49944 | MEDIUM | 6.7 | 0.2% | Dec 25, 2023 | The Challenge Response feature of BeyondTrust Privilege Management for Windows (PMfW) before 2023-07-14 allows local adm... |
| CVE-2023-49226 | HIGH | 7.2 | 3.4% | Dec 25, 2023 | An issue was discovered in Peplink Balance Two before 8.4.0. Command injection in the traceroute feature of the administ... |
| CVE-2023-48652 | MEDIUM | 4.3 | 0.2% | Dec 25, 2023 | Concrete CMS 9 before 9.2.3 is vulnerable to Cross Site Request Forgery (CSRF) via /ccm/system/dialogs/logs/delete_all/s... |
| CVE-2023-38826 | MEDIUM | 6.1 | 0.4% | Dec 25, 2023 | A Cross Site Scripting (XSS) vulnerability exists in Follet Learning Solutions Destiny through 20.0_1U. via the handlewp... |
| CVE-2023-36486 | HIGH | 7.2 | 0.9% | Dec 25, 2023 | The workflow-engine of ILIAS before 7.23 and 8 before 8.3 allows remote authenticated users to run arbitrary system comm... |
| CVE-2023-36485 | HIGH | 7.2 | 0.8% | Dec 25, 2023 | The workflow-engine of ILIAS before 7.23 and 8 before 8.3 allows remote authenticated users to run arbitrary system comm... |
| CVE-2023-31224 | CRITICAL | 9.8 | 0.6% | Dec 25, 2023 | There is broken access control during authentication in Jamf Pro Server before 10.46.1. |
| CVE-2023-47247 | MEDIUM | 4.3 | 0.3% | Dec 25, 2023 | In SysAid On-Premise before 23.3.34, there is an edge case in which an end user is able to delete a Knowledge Base artic... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now