2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-48388 | CRITICAL | 9.8 | 0.9% | Dec 15, 2023 | Multisuns EasyLog web+ has a vulnerability of using hard-coded credentials. An remote attacker can exploit this vulnerab... |
| CVE-2023-48387 | HIGH | 8.8 | 1.0% | Dec 15, 2023 | TAIWAN-CA(TWCA) JCICSecurityTool fails to check the source website and access locations when executing multiple Registr... |
| CVE-2023-48384 | CRITICAL | 9.8 | 1.1% | Dec 15, 2023 | ArmorX Global Technology Corporation ArmorX Spam has insufficient validation for user input within a special function. A... |
| CVE-2023-48382 | MEDIUM | 6.5 | 0.6% | Dec 15, 2023 | Softnext Mail SQR Expert is an email management platform, it has a Local File Inclusion (LFI) vulnerability in a mail de... |
| CVE-2023-48381 | MEDIUM | 6.5 | 0.6% | Dec 15, 2023 | Softnext Mail SQR Expert is an email management platform, it has a Local File Inclusion (LFI) vulnerability in a special... |
| CVE-2023-48380 | HIGH | 8 | 0.7% | Dec 15, 2023 | Softnext Mail SQR Expert is an email management platform, it has insufficient filtering for a special character within a... |
| CVE-2023-46279 | CRITICAL | 9.8 | 1.7% | Dec 15, 2023 | Deserialization of Untrusted Data vulnerability in Apache Dubbo.This issue only affects Apache Dubbo 3.1.5. Users are r... |
| CVE-2023-29234 | CRITICAL | 9.8 | 7.4% | Dec 15, 2023 | A deserialization vulnerability existed when decode a malicious package.This issue affects Apache Dubbo: from 3.1.0 thro... |
| CVE-2023-6827 | HIGH | 8.8 | 1.3% | Dec 15, 2023 | The Essential Real Estate plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type val... |
| CVE-2023-6826 | HIGH | 7.2 | 1.3% | Dec 15, 2023 | The E2Pdf plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation on the '... |
| CVE-2023-48379 | MEDIUM | 5.3 | 0.6% | Dec 15, 2023 | Softnext Mail SQR Expert is an email management platform, it has inadequate filtering for a specific URL parameter withi... |
| CVE-2023-48378 | HIGH | 7.5 | 1.3% | Dec 15, 2023 | Softnext Mail SQR Expert has a path traversal vulnerability within its parameter in a specific URL. An unauthenticated r... |
| CVE-2023-48376 | CRITICAL | 9.8 | 1.0% | Dec 15, 2023 | SmartStar Software CWS is a web-based integration platform, its file uploading function does not restrict upload of file... |
| CVE-2023-48375 | HIGH | 8.8 | 0.7% | Dec 15, 2023 | SmartStar Software CWS is a web-based integration platform, it has a vulnerability of missing authorization and users ar... |
| CVE-2023-48374 | MEDIUM | 6.5 | 0.6% | Dec 15, 2023 | SmartStar Software CWS is a web-base integration platform, it has a vulnerability of using a hard-coded for a specific a... |
| CVE-2023-48373 | HIGH | 7.5 | 1.3% | Dec 15, 2023 | ITPison OMICARD EDM has a path traversal vulnerability within its parameter “FileName” in a specific function. An unauth... |
| CVE-2023-48372 | CRITICAL | 9.8 | 1.1% | Dec 15, 2023 | ITPison OMICARD EDM 's SMS-related function has insufficient validation for user input. An unauthenticated remote attack... |
| CVE-2023-48371 | CRITICAL | 9.8 | 1.0% | Dec 15, 2023 | ITPison OMICARD EDM’s file uploading function does not restrict upload of file with dangerous type. An unauthenticated r... |
| CVE-2023-50715 | MEDIUM | 4.3 | 0.9% | Dec 15, 2023 | Home Assistant is open source home automation software. Prior to version 2023.12.3, the login page discloses all active ... |
| CVE-2023-6832 | MEDIUM | 4.3 | 0.5% | Dec 15, 2023 | Business Logic Errors in GitHub repository microweber/microweber prior to 2.0. |
| CVE-2023-6831 | HIGH | 8.1 | 3.3% | Dec 15, 2023 | Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2. |
| CVE-2023-48050 | CRITICAL | 9.8 | 0.8% | Dec 15, 2023 | SQL injection vulnerability in Cams Biometrics Zkteco, eSSL, Cams Biometrics Integration Module with HR Attendance (aka ... |
| CVE-2023-42183 | MEDIUM | 5.3 | 0.6% | Dec 15, 2023 | lockss-daemon (aka Classic LOCKSS Daemon) before 1.77.3 performs post-Unicode normalization, which may allow bypass of i... |
| CVE-2023-40954 | CRITICAL | 9.8 | 0.9% | Dec 15, 2023 | A SQL injection vulnerability in Grzegorz Marczynski Dynamic Progress Bar (aka web_progress) v. 11.0 through 11.0.2, v12... |
| CVE-2023-36878 | MEDIUM | 4.3 | 0.9% | Dec 15, 2023 | Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now