2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-53899 | CRITICAL | 9.8 | 0.6% | Dec 16, 2025 | PodcastGenerator 3.2.9 contains a blind server-side request forgery vulnerability that allows attackers to inject XML in... |
| CVE-2023-53898 | MEDIUM | 5.4 | 0.2% | Dec 16, 2025 | Rukovoditel 3.4.1 contains a stored cross-site scripting vulnerabilities that allow authenticated attackers to inject ma... |
| CVE-2023-53897 | MEDIUM | 5.4 | 0.2% | Dec 16, 2025 | Rukovoditel 3.4.1 contains multiple stored cross-site scripting vulnerabilities that allow authenticated attackers to in... |
| CVE-2023-53895 | CRITICAL | 9.8 | 0.6% | Dec 16, 2025 | PimpMyLog 1.7.14 contains an improper access control vulnerability that allows remote attackers to create admin accounts... |
| CVE-2023-53894 | CRITICAL | 9.8 | 0.6% | Dec 16, 2025 | phpfm 1.7.9 contains an authentication bypass vulnerability that allows attackers to log in by exploiting loose type com... |
| CVE-2023-53893 | MEDIUM | 6.5 | 0.2% | Dec 15, 2025 | Ateme TITAN File 3.9.12.4 contains an authenticated server-side request forgery vulnerability in the job callback URL pa... |
| CVE-2023-53892 | HIGH | 7.2 | 0.8% | Dec 15, 2025 | Blackcat CMS 1.4 contains a remote code execution vulnerability that allows authenticated administrators to upload malic... |
| CVE-2023-53891 | MEDIUM | 5.4 | 0.2% | Dec 15, 2025 | Blackcat CMS 1.4 contains a stored cross-site scripting vulnerability that allows authenticated users to inject maliciou... |
| CVE-2023-53890 | MEDIUM | 5.4 | 0.2% | Dec 15, 2025 | Perch CMS 3.2 contains a stored cross-site scripting vulnerability that allows authenticated users to upload malicious S... |
| CVE-2023-53889 | HIGH | 7.2 | 0.8% | Dec 15, 2025 | Perch CMS 3.2 contains a remote code execution vulnerability that allows authenticated administrators to upload arbitrar... |
| CVE-2023-53888 | HIGH | 8.8 | 0.8% | Dec 15, 2025 | Zomplog 3.9 contains a remote code execution vulnerability that allows authenticated attackers to inject and execute arb... |
| CVE-2023-53887 | MEDIUM | 5.4 | 0.2% | Dec 15, 2025 | Zomplog 3.9 contains a cross-site scripting vulnerability that allows authenticated users to inject malicious scripts wh... |
| CVE-2023-53886 | HIGH | 7.5 | 0.4% | Dec 15, 2025 | Xlight FTP Server 3.9.3.6 contains a stack buffer overflow vulnerability in the 'Execute Program' configuration that all... |
| CVE-2023-53885 | HIGH | 7.2 | 0.8% | Dec 15, 2025 | Webutler v3.2 contains a remote code execution vulnerability that allows authenticated administrators to upload PHP file... |
| CVE-2023-53884 | MEDIUM | 5.4 | 0.2% | Dec 15, 2025 | Webedition CMS v2.9.8.8 contains a stored cross-site scripting vulnerability that allows authenticated users to upload m... |
| CVE-2023-53883 | HIGH | 7.2 | 0.9% | Dec 15, 2025 | Webedition CMS v2.9.8.8 contains a remote code execution vulnerability that allows authenticated attackers to inject sys... |
| CVE-2023-53882 | MEDIUM | 5.1 | 0.3% | Dec 15, 2025 | JLex GuestBook 1.6.4 contains a reflected cross-site scripting vulnerability in the 'q' URL parameter that allows attack... |
| CVE-2023-53881 | HIGH | 8.1 | 0.3% | Dec 15, 2025 | ReyeeOS 1.204.1614 contains an unencrypted CWMP communication vulnerability that allows attackers to intercept and manip... |
| CVE-2023-53880 | MEDIUM | 4.8 | 0.3% | Dec 15, 2025 | Lucee 5.4.2.17 contains a reflected cross-site scripting vulnerability that allows authenticated attackers to inject mal... |
| CVE-2023-53879 | MEDIUM | 5.5 | 0.2% | Dec 15, 2025 | NVClient 5.0 contains a stack buffer overflow vulnerability in the user configuration contact field that allows attacker... |
| CVE-2023-53878 | MEDIUM | 6.9 | 0.3% | Dec 15, 2025 | Member Login Script 3.3 contains a client-side desynchronization vulnerability that allows attackers to manipulate HTTP ... |
| CVE-2023-53877 | CRITICAL | 9.8 | 0.4% | Dec 15, 2025 | Bus Reservation System 1.1 contains a SQL injection vulnerability in the pickup_id parameter that allows attackers to ma... |
| CVE-2023-53876 | MEDIUM | 5.4 | 0.2% | Dec 15, 2025 | Academy LMS 6.1 contains a file upload vulnerability that allows authenticated users to upload malicious SVG files with ... |
| CVE-2023-53875 | HIGH | 8.8 | 0.4% | Dec 15, 2025 | GOM Player 2.3.90.5360 contains a remote code execution vulnerability in its Internet Explorer component that allows att... |
| CVE-2023-53874 | CRITICAL | 9.8 | 0.4% | Dec 15, 2025 | GOM Player 2.3.90.5360 contains a buffer overflow vulnerability in the equalizer preset name input field that allows att... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now