2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-45122 | — | — | — | Dec 21, 2023 | Rejected reason: It is a duplicate. |
| CVE-2023-45121 | HIGH | 8.8 | 0.7% | Dec 21, 2023 | Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'desc' paramet... |
| CVE-2023-45120 | HIGH | 8.8 | 0.6% | Dec 21, 2023 | Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'qid' paramete... |
| CVE-2023-40058 | MEDIUM | 6.5 | 0.8% | Dec 21, 2023 | Sensitive data was added to our public-facing knowledgebase that, if exploited, could be used to access components of Ac... |
| CVE-2023-7036 | MEDIUM | 5.4 | 0.6% | Dec 21, 2023 | A vulnerability was found in automad up to 1.10.9. It has been classified as problematic. This affects the function uplo... |
| CVE-2023-51052 | CRITICAL | 9.8 | 0.5% | Dec 21, 2023 | S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the A_formauth parameter at /admin/ajax.php. |
| CVE-2023-51051 | CRITICAL | 9.8 | 0.5% | Dec 21, 2023 | S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the A_textauth parameter at /admin/ajax.php. |
| CVE-2023-51050 | CRITICAL | 9.8 | 0.5% | Dec 21, 2023 | S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the A_productauth parameter at /admin/ajax.php. |
| CVE-2023-51049 | CRITICAL | 9.8 | 0.5% | Dec 21, 2023 | S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the A_bbsauth parameter at /admin/ajax.php. |
| CVE-2023-51048 | CRITICAL | 9.8 | 0.5% | Dec 21, 2023 | S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the A_newsauth parameter at /admin/ajax.php. |
| CVE-2023-4256 | MEDIUM | 5.5 | 0.3% | Dec 21, 2023 | Within tcpreplay's tcprewrite, a double free vulnerability has been identified in the tcpedit_dlt_cleanup() function wit... |
| CVE-2023-4255 | MEDIUM | 5.5 | 0.3% | Dec 21, 2023 | An out-of-bounds write issue has been discovered in the backspace handling of the checkType() function in etc.c within t... |
| CVE-2023-45119 | HIGH | 8.8 | 0.7% | Dec 21, 2023 | Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'n' parameter ... |
| CVE-2023-45118 | HIGH | 8.8 | 0.7% | Dec 21, 2023 | Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'fdid' paramet... |
| CVE-2023-45117 | HIGH | 8.8 | 0.5% | Dec 21, 2023 | Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'eid' paramete... |
| CVE-2023-45116 | HIGH | 8.8 | 0.7% | Dec 21, 2023 | Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'demail' param... |
| CVE-2023-45115 | HIGH | 8.8 | 0.7% | Dec 21, 2023 | Online Examination System v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'ch' parameter... |
| CVE-2023-7047 | MEDIUM | 4.4 | 0.2% | Dec 21, 2023 | Inadequate validation of permissions when employing remote tools and macros via the context menu within Devolutions Re... |
| CVE-2023-7035 | MEDIUM | 5.4 | 0.6% | Dec 21, 2023 | A vulnerability was found in automad up to 1.10.9 and classified as problematic. Affected by this issue is some unknown ... |
| CVE-2023-51442 | HIGH | 8.6 | 0.7% | Dec 21, 2023 | Navidrome is an open source web-based music collection server and streamer. A security vulnerability has been identified... |
| CVE-2023-50828 | MEDIUM | 4.8 | 0.4% | Dec 21, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Vongries Ult... |
| CVE-2023-50827 | MEDIUM | 4.8 | 0.2% | Dec 21, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Accredible Accredi... |
| CVE-2023-50826 | MEDIUM | 4.8 | 0.4% | Dec 21, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Freshlight Lab Men... |
| CVE-2023-50825 | MEDIUM | 5.4 | 0.3% | Dec 21, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Terrier Tenacity i... |
| CVE-2023-50824 | MEDIUM | 5.4 | 0.3% | Dec 21, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brian Batt Insert ... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now