2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-50475 | CRITICAL | 9.1 | 0.5% | Dec 21, 2023 | An issue was discovered in bcoin-org bcoin version 2.2.0, allows remote attackers to obtain sensitive information via we... |
| CVE-2023-50473 | MEDIUM | 5.4 | 0.4% | Dec 21, 2023 | Cross-Site Scripting (XSS) vulnerability in bill-ahmed qbit-matUI version 1.16.4, allows remote attackers to obtain sens... |
| CVE-2023-5989 | MEDIUM | 6.1 | 0.3% | Dec 21, 2023 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Uyumsoft Inform... |
| CVE-2023-5988 | MEDIUM | 6.1 | 0.3% | Dec 21, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Uyumsoft Informati... |
| CVE-2023-51655 | CRITICAL | 9.8 | 0.3% | Dec 21, 2023 | In JetBrains IntelliJ IDEA before 2023.3.2 code execution was possible in Untrusted Project mode via a malicious plugin ... |
| CVE-2023-50783 | MEDIUM | 6.5 | 1.4% | Dec 21, 2023 | Apache Airflow, versions before 2.8.0, is affected by a vulnerability that allows an authenticated user without the vari... |
| CVE-2023-49920 | MEDIUM | 6.5 | 1.0% | Dec 21, 2023 | Apache Airflow, version 2.7.0 through 2.7.3, has a vulnerability that allows an attacker to trigger a DAG in a GET reque... |
| CVE-2023-48291 | MEDIUM | 4.3 | 1.8% | Dec 21, 2023 | Apache Airflow, in versions prior to 2.8.0, contains a security vulnerability that allows an authenticated user with lim... |
| CVE-2023-47265 | MEDIUM | 5.4 | 1.3% | Dec 21, 2023 | Apache Airflow, versions 2.6.0 through 2.7.3 has a stored XSS vulnerability that allows a DAG author to add an unbounded... |
| CVE-2023-2585 | HIGH | 8.1 | 0.6% | Dec 21, 2023 | Keycloak's device authorization grant does not correctly validate the device code and client ID. An attacker client coul... |
| CVE-2023-7026 | MEDIUM | 6.5 | 0.6% | Dec 21, 2023 | A vulnerability was found in Lightxun IPTV Gateway up to 20231208. It has been rated as problematic. This issue affects ... |
| CVE-2023-7025 | HIGH | 7.8 | 0.2% | Dec 21, 2023 | A vulnerability was found in KylinSoft hedron-domain-hook up to 3.8.0.12-0k0.5. It has been declared as critical. This v... |
| CVE-2023-7023 | CRITICAL | 9.8 | 0.7% | Dec 21, 2023 | A vulnerability was found in Tongda OA 2017 up to 11.9. It has been rated as critical. Affected by this issue is some un... |
| CVE-2023-7022 | CRITICAL | 9.8 | 0.7% | Dec 21, 2023 | A vulnerability was found in Tongda OA 2017 up to 11.9. It has been declared as critical. Affected by this vulnerability... |
| CVE-2023-7021 | CRITICAL | 9.8 | 0.7% | Dec 21, 2023 | A vulnerability was found in Tongda OA 2017 up to 11.9. It has been classified as critical. Affected is an unknown funct... |
| CVE-2023-7020 | CRITICAL | 9.8 | 0.7% | Dec 21, 2023 | A vulnerability was found in Tongda OA 2017 up to 11.9 and classified as critical. This issue affects some unknown proce... |
| CVE-2023-45700 | MEDIUM | 5.4 | 0.3% | Dec 21, 2023 | HCL Launch is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web ... |
| CVE-2023-29487 | CRITICAL | 9.1 | 0.7% | Dec 21, 2023 | An issue was discovered in Heimdal Thor agent versions 3.4.2 and before on Windows and 2.6.9 and before on macOS, allows... |
| CVE-2023-29486 | CRITICAL | 9.8 | 1.0% | Dec 21, 2023 | An issue was discovered in Heimdal Thor agent versions 3.4.2 and before 3.7.0 on Windows, allows attackers to bypass USB... |
| CVE-2023-29485 | CRITICAL | 9.8 | 1.0% | Dec 21, 2023 | An issue was discovered in Heimdal Thor agent versions 3.4.2 and before on Windows and 2.6.9 and before on macOS, allows... |
| CVE-2023-28025 | MEDIUM | 4.8 | 0.3% | Dec 21, 2023 | Due to this vulnerability, the Master operator could potentially incorporate an SVG tag into HTML, leading to an alert p... |
| CVE-2023-51390 | HIGH | 7.5 | 0.3% | Dec 21, 2023 | journalpump is a daemon that takes log messages from journald and pumps them to a given output. A logging vulnerability ... |
| CVE-2023-49032 | CRITICAL | 9.8 | 1.2% | Dec 21, 2023 | An issue in LTB Self Service Password before v.1.5.4 allows a remote attacker to execute arbitrary code and obtain sensi... |
| CVE-2023-47093 | MEDIUM | 6.5 | 0.3% | Dec 21, 2023 | An issue was discovered in Stormshield Network Security (SNS) 4.0.0 through 4.3.21, 4.4.0 through 4.6.8, and 4.7.0. Send... |
| CVE-2023-46131 | HIGH | 7.5 | 0.7% | Dec 21, 2023 | Grails is a framework used to build web applications with the Groovy programming language. A specially crafted web reque... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now