2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-49183 | MEDIUM | 6.1 | 0.4% | Dec 15, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NextScripts NextSc... |
| CVE-2023-49182 | MEDIUM | 6.1 | 0.4% | Dec 15, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fabio Marzocca Lis... |
| CVE-2023-49181 | MEDIUM | 5.4 | 0.4% | Dec 15, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Event Manager W... |
| CVE-2023-49180 | MEDIUM | 4.8 | 0.4% | Dec 15, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ternstyle LLC Auto... |
| CVE-2023-49179 | MEDIUM | 5.4 | 0.4% | Dec 15, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in N.O.U.S. Open Usef... |
| CVE-2023-49178 | MEDIUM | 6.1 | 0.4% | Dec 15, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mr. Hdwplayer HDW ... |
| CVE-2023-49177 | MEDIUM | 6.1 | 0.4% | Dec 15, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Gilles Dumas which... |
| CVE-2023-49176 | MEDIUM | 6.1 | 0.4% | Dec 15, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodeRevolution WP ... |
| CVE-2023-49175 | MEDIUM | 5.4 | 0.4% | Dec 15, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kreativo Pro KP Fa... |
| CVE-2023-49174 | MEDIUM | 5.4 | 0.4% | Dec 15, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dFactory Responsiv... |
| CVE-2023-49170 | MEDIUM | 6.1 | 0.4% | Dec 15, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in captainform Forms ... |
| CVE-2023-49169 | MEDIUM | 5.4 | 0.4% | Dec 15, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in datafeedr.Com Ads ... |
| CVE-2023-50871 | MEDIUM | 4.3 | 0.4% | Dec 15, 2023 | In JetBrains YouTrack before 2023.3.22268 authorization check for inline comments inside thread replies was missed |
| CVE-2023-50870 | HIGH | 8.8 | 0.3% | Dec 15, 2023 | In JetBrains TeamCity before 2023.11.1 a CSRF on login was possible |
| CVE-2023-49165 | MEDIUM | 5.4 | 0.4% | Dec 15, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Real Big Plugins C... |
| CVE-2023-49160 | MEDIUM | 5.4 | 0.4% | Dec 15, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in formzu Inc. Formzu... |
| CVE-2023-48765 | MEDIUM | 5.4 | 0.4% | Dec 15, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Till Krüss Email A... |
| CVE-2023-46116 | HIGH | 8.8 | 1.3% | Dec 15, 2023 | Tutanota (Tuta Mail) is an encrypted email provider. Tutanota allows users to open links in emails in external applicati... |
| CVE-2023-49898 | HIGH | 7.2 | 2.3% | Dec 15, 2023 | In streampark, there is a project module that integrates Maven's compilation capability. However, there is no check on t... |
| CVE-2023-30867 | MEDIUM | 4.9 | 0.9% | Dec 15, 2023 | In the Streampark platform, when users log in to the system and use certain features, some pages provide a name-based fu... |
| CVE-2023-33222 | CRITICAL | 9.8 | 1.3% | Dec 15, 2023 | When handling contactless cards, usage of a specific function to get additional information from the card which... |
| CVE-2023-33221 | CRITICAL | 9.8 | 1.0% | Dec 15, 2023 | When reading DesFire keys, the function that reads the card isn't properly checking the boundaries when copying... |
| CVE-2023-33220 | CRITICAL | 9.8 | 1.1% | Dec 15, 2023 | During the retrofit validation process, the firmware doesn't properly check the boundaries while copying some att... |
| CVE-2023-33219 | CRITICAL | 9.8 | 1.1% | Dec 15, 2023 | The handler of the retrofit validation command doesn't properly check the boundaries when performing certain valida... |
| CVE-2023-33218 | CRITICAL | 9.8 | 1.1% | Dec 15, 2023 | The Parameter Zone Read and Parameter Zone Write command handlers allow performing a Stack buffer overflow. This cou... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now