2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-31874 | HIGH | 8.8 | 4.9% | May 29, 2023 | Yank Note (YN) 3.52.1 allows execution of arbitrary code when a crafted file is opened, e.g., via nodeRequire('child_pro... |
| CVE-2023-30570 | HIGH | 7.5 | 1.2% | May 29, 2023 | pluto in Libreswan before 4.11 allows a denial of service (responder SPI mishandling and daemon crash) via unauthenticat... |
| CVE-2023-30350 | HIGH | 8.8 | 5.3% | May 29, 2023 | FS S3900-24T4S devices allow authenticated attackers with guest access to escalate their privileges and reset the admin ... |
| CVE-2023-29380 | HIGH | 7.5 | 1.8% | May 29, 2023 | Warpinator before 1.6.0 allows remote file deletion via directory traversal in top_dir_basenames. |
| CVE-2023-32763 | HIGH | 7.5 | 1.3% | May 28, 2023 | An issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. When a SVG file wi... |
| CVE-2023-31873 | HIGH | 7.8 | 1.3% | May 28, 2023 | Gin 0.7.4 allows execution of arbitrary code when a crafted file is opened, e.g., via require('child_process'). |
| CVE-2023-33291 | HIGH | 7.4 | 0.9% | May 28, 2023 | In ebankIT 6, the public endpoints /public/token/Email/generate and /public/token/SMS/generate allow generation of OTP m... |
| CVE-2023-33926 | HIGH | 8.8 | 0.2% | May 28, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Supsystic Easy Google Maps plugin <= 1.11.7 versions. |
| CVE-2023-33316 | HIGH | 8.8 | 0.2% | May 28, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce WooCommerce Follow-Up Emails (AutomateWoo) plugin <= 4.9.... |
| CVE-2023-33313 | HIGH | 8.8 | 0.3% | May 28, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in ThemeinProgress WIP Custom Login plugin <= 1.2.9 versions. |
| CVE-2023-33931 | HIGH | 8.8 | 0.3% | May 28, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Ciprian Popescu YouTube Playlist Player plugin <= 4.6.4 versions. |
| CVE-2023-33315 | HIGH | 8.8 | 0.3% | May 28, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Stephen Darlington, Wandle Software Limited Smart App Banner plugin <... |
| CVE-2023-33314 | HIGH | 8.8 | 0.3% | May 28, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in realmag777 BEAR plugin <= 1.1.3.1 versions. |
| CVE-2023-33212 | HIGH | 8.8 | 0.3% | May 28, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Crocoblock JetFormBuilder — Dynamic Blocks Form Builder plugin <= 3.0... |
| CVE-2023-2950 | HIGH | 8.1 | 0.6% | May 28, 2023 | Improper Authorization in GitHub repository openemr/openemr prior to 7.0.1. |
| CVE-2023-2946 | HIGH | 8.1 | 0.5% | May 27, 2023 | Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1. |
| CVE-2023-2943 | HIGH | 8.8 | 0.6% | May 27, 2023 | Code Injection in GitHub repository openemr/openemr prior to 7.0.1. |
| CVE-2023-2942 | HIGH | 8.1 | 0.8% | May 27, 2023 | Improper Input Validation in GitHub repository openemr/openemr prior to 7.0.1. |
| CVE-2023-32695 | HIGH | 7.5 | 1.1% | May 27, 2023 | socket.io parser is a socket.io encoder and decoder written in JavaScript complying with version 5 of socket.io-protocol... |
| CVE-2023-2928 | HIGH | 8.8 | 51.4% | May 27, 2023 | A vulnerability was found in DedeCMS up to 5.7.106. It has been declared as critical. Affected by this vulnerability is ... |
| CVE-2023-26129 | HIGH | 7.8 | 1.0% | May 27, 2023 | All versions of the package bwm-ng are vulnerable to Command Injection due to improper input sanitization in the 'check'... |
| CVE-2023-26128 | HIGH | 7.8 | 1.2% | May 27, 2023 | All versions of the package keep-module-latest are vulnerable to Command Injection due to missing input sanitization or ... |
| CVE-2023-26127 | HIGH | 7.8 | 1.0% | May 27, 2023 | All versions of the package n158 are vulnerable to Command Injection due to improper input sanitization in the 'module.e... |
| CVE-2023-33192 | HIGH | 7.5 | 0.7% | May 27, 2023 | ntpd-rs is an NTP implementation written in Rust. ntpd-rs does not validate the length of NTS cookies in received NTP pa... |
| CVE-2023-32688 | HIGH | 7.5 | 0.9% | May 27, 2023 | parse-server-push-adapter is the official Push Notification adapter for Parse Server. The Parse Server Push Adapter can ... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now