2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-41151 | HIGH | 7.5 | 0.7% | Dec 14, 2023 | An uncaught exception issue discovered in Softing OPC UA C++ SDK before 6.30 for Windows operating system may cause the ... |
| CVE-2023-6563 | HIGH | 7.7 | 1.2% | Dec 14, 2023 | An unconstrained memory consumption vulnerability was discovered in Keycloak. It can be triggered in environments which ... |
| CVE-2023-50710 | MEDIUM | 4.3 | 0.6% | Dec 14, 2023 | Hono is a web framework written in TypeScript. Prior to version 3.11.7, clients may override named path parameter values... |
| CVE-2023-50269 | HIGH | 7.5 | 57.6% | Dec 14, 2023 | Squid is a caching proxy for the Web. Due to an Uncontrolled Recursion bug in versions 2.6 through 2.7.STABLE9, versions... |
| CVE-2023-49157 | MEDIUM | 4.8 | 0.4% | Dec 14, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Andreas Münch Mult... |
| CVE-2023-49152 | MEDIUM | 5.4 | 0.4% | Dec 14, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Labs64 Credit Trac... |
| CVE-2023-49151 | MEDIUM | 5.4 | 0.4% | Dec 14, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Simple Calendar Si... |
| CVE-2023-5769 | MEDIUM | 6.1 | 0.4% | Dec 14, 2023 | A vulnerability exists in the webserver that affects the RTU500 series product versions listed below. A malicious act... |
| CVE-2023-49860 | MEDIUM | 5.4 | 0.4% | Dec 14, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs WP Project ... |
| CVE-2023-49842 | MEDIUM | 4.8 | 0.4% | Dec 14, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpexpertsio Rocket... |
| CVE-2023-49150 | MEDIUM | 5.4 | 0.4% | Dec 14, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CurrencyRate.Today... |
| CVE-2023-49149 | MEDIUM | 5.4 | 0.4% | Dec 14, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CurrencyRate.Today... |
| CVE-2023-48780 | MEDIUM | 5.4 | 0.4% | Dec 14, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EnigmaWeb WP Catal... |
| CVE-2023-48771 | MEDIUM | 6.1 | 0.4% | Dec 14, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bruno "Aesqe" Babi... |
| CVE-2023-48770 | MEDIUM | 5.4 | 0.4% | Dec 14, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nima Saberi Aparat... |
| CVE-2023-48767 | MEDIUM | 6.1 | 0.4% | Dec 14, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Raghu Goriya MyTub... |
| CVE-2023-48756 | MEDIUM | 6.1 | 0.4% | Dec 14, 2023 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetBloc... |
| CVE-2023-48671 | HIGH | 7.5 | 0.8% | Dec 14, 2023 | Dell vApp Manager, versions prior to 9.2.4.x contain an information disclosure vulnerability. A remote attacker could p... |
| CVE-2023-47261 | CRITICAL | 9.8 | 1.5% | Dec 14, 2023 | Dokmee ECM 7.4.6 allows remote code execution because the response to a GettingStarted/SaveSQLConnectionAsync /#/getting... |
| CVE-2023-42801 | HIGH | 7.6 | 0.8% | Dec 14, 2023 | Moonlight-common-c contains the core GameStream client code shared between Moonlight clients. Moonlight-common-c is vuln... |
| CVE-2023-42800 | HIGH | 8.8 | 1.7% | Dec 14, 2023 | Moonlight-common-c contains the core GameStream client code shared between Moonlight clients. Moonlight-common-c is vuln... |
| CVE-2023-42799 | HIGH | 8.8 | 1.7% | Dec 14, 2023 | Moonlight-common-c contains the core GameStream client code shared between Moonlight clients. Moonlight-common-c is vuln... |
| CVE-2023-6595 | MEDIUM | 5.3 | 0.8% | Dec 14, 2023 | In WhatsUp Gold versions released before 2023.1, an API endpoint was found to be missing an authentication mechanism. It... |
| CVE-2023-6368 | MEDIUM | 5.3 | 0.6% | Dec 14, 2023 | In WhatsUp Gold versions released before 2023.1, an API endpoint was found to be missing an authentication mechanism. It... |
| CVE-2023-6367 | MEDIUM | 5.4 | 0.5% | Dec 14, 2023 | In WhatsUp Gold versions released before 2023.1, a stored cross-site scripting (XSS) vulnerability has been identified.... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now